Repository navigation
Conversation
…entation packet Add dependency-free offline contracts, synthetic replay, inert upstream Domain adapter, source pins, 36 tests, cross-platform CI, and staged Codex work order. No model execution, provider activation, installed-skill promotion, or deployment.
| @@ -0,0 +1,325 @@ | |||
| import copy | |||
| import hashlib | |||
|
|
||
| ROOT = Path(__file__).resolve().parents[1] | ||
| sys.path.insert(0, str(ROOT)) | ||
| from domain.contract import ContractError, compile_packet, data, digest, history_proposal, replay |
Final implementation handoff and verified checksCodex owner task: rhein1/fable5-codex#24 Head remains Passing
Merge blocker: MCP dependency audit
Failure evidence: https://github.com/rhein1/agoragentic-integrations/actions/runs/36540438800/job/109314291315 Codex should verify the dependency path and compatible remediation in a separately scoped change, rerun the package audit/tests/packed-install checks, and then run the entire validation pipeline. Do not suppress the audit or assume later checks passed: schema, integration counts, rename-preflight and other downstream steps were skipped after this failure. This comment is not a claim that the dependency's application-level exploitability has been assessed. The source-only preparation is ready for Codex to continue through issue #24, but this draft PR is not merge-ready. No live search, paid model run, installed Fable mutation, authenticated Memory ingestion, qualified OpenShell runtime, promotion, release or deployment was performed. |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: c5c10ab455
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Add the source-only Agoragentic RRSI Domain adapter for Fable-5/Codex harness improvement. Strict experiment packets bind source, evaluator, model, policy, edit and budget identities. Synthetic replay keeps a fixed denominator, preserves missing/unknown cost, rejects duplicated evidence and blocks safety violations. The actual upstream Domain ABI is pinned to google-research/rrsi@be50316.
Run/smoke/acceptance remain fail-closed. History artifacts are proposals, not Memory writes, installed changes or promotion authority. Worktrees are not treated as execution isolation. The implementation work order remains agent-os/harness-evolution/rrsi/CODEX_IMPLEMENTATION.md; follow-up host-accounting and reviewed-Memory contracts are in #448, with source/evaluator work in rhein1/fable5-codex#26.
Current head 557a66f includes #446's shared dependency, Windows audit and reviewed inventory-hold repairs. Local validation against the exact upstream source passes 36/36 tests with zero skips. Machine-surface/count checks, n8n's clean audit and its eight tests also pass. Hosted checks on 557a66f: 52 successful, 0 pending, 0 failed at this update. Required independent approval remains outstanding.
This prepares source interfaces; it does not run RRSI search, call paid models, install Fable, ingest user Memory, activate OpenShell or promote a candidate. Actual host authority/accounting, representative private evaluation, isolated trials and owner-bound promotion/rollback remain separate qualification work.
The shared hosted MCP repair updates its actual lock and embedded fast-uri implementation to 3.1.8, refreshes ip-address to 10.7.3, and regenerates integrity records and notices. A regression now rejects a lock that disagrees with the advertised, installed and attested dependency. All 16 hosted artifact tests, source/artifact verification, packaging and zero-vulnerability audits pass locally. The bundle remains private and publication-disabled.