The tenant runner (assembly-economics 2521955) refuses any web-fetcher other
than 0.2.0. Instead of defaulting to a moving ~/web-fetcher checkout, the
approach now uses an explicit WEB_FETCHER_PATH/ASSEMBLY_WEB_FETCHER_PATH or
keeps a shallow clone of tag v0.2.0 under ~/.cache/rein-aharness/ and refuses
it if HEAD is not exactly at the tag. Each run passes --cache to a fresh temp
directory outside the checkout; its path is reported in the hub detail.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 193986@bnt-lap001
Assistant-Session: 585bfbea-320e-47b3-8c0e-bc1513a53307
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 358047@bnt-lap001
Assistant-Session: fad68125-297a-449d-bfa7-cf9cdd49ca1d
Owner-approved rebuild of the corrected runtime from the same pinned inputs
as ee3d0a53 (not retained). Digest differs only by embedded build-source
paths. bwrap startup smoke passed (sandbox 28df7a1d); not installed on
railiance01 (still b6e4e8a4) or admitted. T07 stays wait.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 358047@bnt-lap001
Assistant-Session: fad68125-297a-449d-bfa7-cf9cdd49ca1d
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
- Record the owner's three-attempt / observed-usage decision (a93619a9
resolved) in docs/decisions.
- T07 retry waits on memo acceptance and attended host steps; WP-0008 is
blocked (T05/T06 are owner decisions for other repos).
- WP-0003-T04: rein-aharness owns the publisher per decision c6f23433;
scope planned in the task, not a new workplan.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
The fixture's origin commit touches only WORK-RECORDS.md, which the global
repo-manager hook rejects as generated-only; bypass hooks for that fixture
commit. Both tests had failed on every hooked workstation.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
Completes c7dceee. owner renew accepts settlement and max_runs and writes
policies via as_dict, so unset terms stay out of the file and digest.
Tests cover metered request settlement, reported-cost floor, unfinished
holds, the 6efa9436 reconciliation shape, overrun freeze, and three
attempts within EUR 10 with the fourth refused.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
owner renew validates a settled ledger, builds the new spend policy from an
envelope file of changed fields only, retires the old ledger by rename,
initializes a fresh one at the same path and rewrites the policy and
owner.json pins. Dry run by default; prints the Secrets Engine file pins.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
metered-once --rehearse runs the admitted runtime's launchers (and claude
--version when the build declares it) inside bwrap: runtime read-only at
the mount path, no network, cleared environment, no credentials, no claim.
Fails on the deleted-build-interpreter trampoline that failed run 6efa9436;
the corrected runtime ee3d0a53 passes.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
Updated by fix-consistency on 2026-10-13:
- workplan status: ready → active
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
AGENTS.md named HARNESS-WP- as the prefix, but the hub's canonical prefix
for this repo is REINAH-WP- (fix-consistency C-26). Hub ids are kept so
the existing record is updated, not duplicated. Also fixes the README link
to the renamed REINAH-WP-0002 file.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
Free host rehearsal, evidence-backed release of unused holds, and a
one-command owner renewal; multi-attempt envelopes, image shipping and
per-envelope approvals recorded as decisions.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
The artifact transfer now accepts a repository grant v2. It still imports
exactly one commit, refuses any changed path outside
publish_scope.path_prefixes, never pushes, and records published: false
for Activity Core's publisher (hub decision 1c9817ee).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
Parses Activity Core's publish-capable grant: remote, branch, path
prefixes inside allowed_paths, fast-forward only. Grant id matches
activity-core 83e6446 byte for byte (test vector); v1 ids are unchanged.
Evidence adds remote, branch and fast_forward_only without raw paths.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
Green commit tools plus WebFetch through the sandbox proxy, for the FI
research brief Glas profile. No push, no arbitrary shell, no credentials;
granted paths stay enforced by the repository grant acceptance policy.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 269692@bnt-lap001
Assistant-Session: 8077e68a-0985-4b41-898c-2dc602b0d6be
Executes activity-core assembly-checkpoint-* runs: fast-forward the
assembly-economics checkout, run its deterministic checkpoints/run_checkpoint.py
(data via web-fetcher, optional llm-connect assessment), commit only
checkpoints/, push fast-forward (rebase once, never force; publish grant
limited to checkpoints/), post assembly_checkpoint. Out-of-window fires are
no-ops (checkpoints/schedule.md is authoritative). Selected by label
'assembly-checkpoint'. Founder-approved 2026-10-12.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1494246@bnt-lap001
Assistant-Session: caf6de6f-f9e4-47ce-a584-49baa271fa4b
Updated by fix-consistency on 2026-10-08:
- update .custodian-brief.md for rein-aharness
Assistant: grok
Assistant-Session: 01a11b05-37d4-7390-b2df-72297bb7ce1f
Updated by fix-consistency on 2026-10-08:
- update .custodian-brief.md for rein-aharness
Assistant: grok
Assistant-Session: 01a11b05-37d4-7390-b2df-72297bb7ce1f
Admission of the protected runtime still does not deploy or start a paid request. T05 stays wait on the unanswered activity-core lease expiry and a live tariff.
Assistant: grok
Assistant-Session: 01a11b05-37d4-7390-b2df-72297bb7ce1f
Updated by fix-consistency on 2026-10-05:
- update .custodian-brief.md for rein-aharness
Assistant: grok
Assistant-Session: 01a10938-ab49-7280-877a-c06f64c06ddd
The founder resolved e642c8e2 for the existing user systemd service.
T05 still waits on activity-core recovery, rate, and queue evidence.
Assistant: grok
Assistant-Session: 01a10938-ab49-7280-877a-c06f64c06ddd
Updated by fix-consistency on 2026-10-05:
- update .custodian-brief.md for rein-aharness
Assistant: grok
Assistant-Session: 01a10938-ab49-7280-877a-c06f64c06ddd
Updated by fix-consistency on 2026-09-24:
- update .custodian-brief.md for rein-aharness
Assistant: grok
Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f
