Repository navigation
Conversation
Add strict role policy planning, immutable digests, unverified observation shaping, hard-off adapter, 93 offline tests, qualification handoff, and CI. No runtime, provider, payment, publication, or production activation.
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
|
|
||
| test('adapter is hard-off regardless of flags, booleans or supplied client', async () => { | ||
| let calls = 0; | ||
| const adapter = new OpenShellScaffoldAdapter({ enabled: true, client: { create() { calls++; } } }); |
Verification at final scaffold headCurrent head:
Nine files changed in this PR: eight new scaffold/CI files plus the parent README discovery link. No existing implementation was removed. This remains a draft, unmerged, source-only preparation PR. No OpenShell SDK/gateway runtime, generated-type conformance, real image, containment, provisioning, resource enforcement, live role execution, or production qualification is claimed. |
September 29 dependency-status updateThe earlier final-head note said broader checks were still running. Their inspected results are now: OpenShell targeted workflow passed, CodeQL passed, and Related governed harness-evolution preparation is now in #436, with the Codex implementation owner task at rhein1/fable5-codex#24 . It treats this OpenShell scaffold as optional and unqualified, not as already installed isolation. No branch merge, production activation or financial authority follows from that linkage. The new #436 run also failed in the MCP package step; its inspected log identifies an |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
Prepare Agoragentic to use OpenShell as an execution-isolation layer under its existing authority controls. This source-only scaffold validates bounded requests, compiles immutable policy/plan proposals, and projects caller-reported observations without upgrading them to verified receipts.
Cartographer can propose exact-host/path HTTPS GET/HEAD access. Emissary and Steward remain network-denied. Create-time proposals require Landlock, non-root identity and explicit inspected-network enforcement; the fixture command is /bin/true. Invocation always refuses until a real qualified host adapter is supplied. Deadline/resource fields are requirements, not enforced runtime limits.
Upstream is OpenShell v0.1.2 at 6648bd0c290efbc41ba131ee9831ee45cd431f94. The offline CLI, fixture, provenance lock and CODEX_HANDOFF.md document qualification and role-by-role integration. Follow-up lifecycle reconciliation is in #447; private platform work remains tracked in rhein1/agent-marketplace#1896.
Current head e84e0f9 includes the shared CI repairs from #446: compatible dependency fixes, the Windows audit launcher and the freshly reviewed unpublished MatrAIx inventory hold. These prerequisites do not add another PR's feature implementation. Local scaffold tests pass 93/93; machine-surface/count checks, n8n's clean audit and its eight tests pass. Hosted checks on e84e0f9: 52 successful, 0 pending, 0 failed at this update. Required independent approval remains outstanding.
Separate local qualification has built the exact pinned SDK and typechecked the create specification. No live gateway, effective-policy, resource-limit, denial, cancellation or cleanup proof exists. This PR neither connects production role workers nor grants credentials, spend, custody, publication or deployment authority.
The shared hosted MCP repair updates its actual lock and embedded fast-uri implementation to 3.1.8, refreshes ip-address to 10.7.3, and regenerates integrity records and notices. A regression now rejects a lock that disagrees with the advertised, installed and attested dependency. All 16 hosted artifact tests, source/artifact verification, packaging and zero-vulnerability audits pass locally. The bundle remains private and publication-disabled.