Repository navigation
Wave 1 hardening: mechanisms, six-mode doctrine v0.2, CI, full audit pass - #1
Merged
Merged
Conversation
…de doctrine sync Session 1 of the hardening program (OzReceipt-OzSkillTreeHardening): - README rewritten problem-first for the cold senior engineer: verifiable 60-second quickstart, overhead honesty table, skeptic FAQ, zero usage claims - CI: plain pull_request trigger, contents:read, zero secrets, npm test - DCO sign-off + doctrine amendment rule (doctrine + its test, same commit) - registry/stable-surfaces.json + check-stable-surfaces.mjs: modes, commands, skills, schemas, and count claims now machine-guarded in npm test - Mode doctrine synced to v0.2 six-mode (adds standard+ and deep-lite with counter budgets); published contract is bands/triggers/budgets only - Receipts boundary: receipts/ gitignored except fixtures; field-receipts/ ships empty by design with an honest intake template Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Signed-off-by: Nate Roberts <nate@cipherlab.ai>
…continuity, evals Session 2 mechanisms — closing the write-but-never-read and discipline-not-enforcement gaps: - Negative-memory retrieval gate mandatory at /oz-start on all three surfaces; 'searched, no hits' is valid evidence, a missing block is a halt - context-fingerprint.mjs: repo/branch/HEAD/dirty/lockfile/PM capture, human block + --json; ambiguous lockfiles warn with nonzero exit - Truth-state proof contracts: per-state evidence spec in wiki + additive truth_state_proof/context_fingerprint/negative_memory_retrieval schema fields - Session continuity: append-only failure inbox with mandatory /oz-result drain, checkpoints, and receipt-scoped /oz-handoff briefs (close/park/crash) - Leak scanner: gitignored local-extension hook so private literal patterns never enter the public denylist; local pre-push layer documented mandatory - Structural eval harness v0 (honest scope: structural, not semantic) + size-ratchet budgets on all always-load surfaces; wired into npm test - npm test green end-to-end: 57 structural assertions, 136 files leak-scanned Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Signed-off-by: Nate Roberts <nate@cipherlab.ai>
…ry mechanics, full coherence sweep Robust probing audit (99 findings, 13 agents) — every break, leak, and drift patched; 17 A/A+ upgrades implemented: BREAKS - validate-schemas.mjs now validates examples AGAINST the schema files (required keys, enums, additionalProperties) instead of a drifted shadow key-list that let schema-invalid fixtures pass CI; modes and counter-budget bands come from registry/stable-surfaces.json (single source of truth) - npm files whitelist ships registry/, tests/, field-receipts/ — the published tarball now passes its own npm test (verified via pack self-test) - .gitignore receipts boundary anchored (/receipts/*) so case-folding can never swallow wiki/Receipts/, with a contents-exclusion form so the fixtures re-include actually fires (verified with git check-ignore) - leak scanner: broken local extension now fails loud (only ERR_MODULE_NOT_FOUND is swallowed); local extension exempt from self-scan; yml/yaml + LICENSE now scanned - context-fingerprint: package-lock.json maps to npm (was 'package'); ambiguous-lockfile warning + exit 2 now fire in --json mode too LEAKS - private literal patterns moved out of the public scanner into the gitignored local extension; public file carries generic categories only - internal codenames scrubbed from wiki Decision-Log/Roadmap and the public-release checklist (generic wording, gates preserved) DRIFT/COHERENCE - retrieval gate + fingerprint + proof contracts + inbox drain now appear in every flow surface (protocol, skill-flow, architecture-map, Protocol-Flow, OzSkillTree-Map, receipt-memory) - countermap budget doc re-cut to six-mode v0.2 bands; all example budgets re-baselined into their bands (budget = ceiling); flagship example now models the full v0.2 receipt shape honestly (searched:true, hits:[]) - 3 fixtures gained schema-required truth_state + domain_stack; 'parked' status corrected to 'blocked'; commands_run now support the verification - receipts boundary stated consistently (Receipts-Index, Receipts/README, receipt-memory storage section) - listings synced: oz-handoff + session-continuity + registry + budgets in every index; RELEASE pre-push reflects the 5-check npm test - schemas: oz-result gains failure_inbox_drain + truth_state_proof; ozreceipt gains template fields, shaped proof contracts, fingerprint shape, private classification vocabulary; wiki templates carry the new sections - CI gains a DCO enforcement job for PRs; CoC gains an email-free report path - structural evals extended to 65 assertions incl. budget-doc mode coverage and a validator-reads-registry guard Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Signed-off-by: Nate Roberts <nate@cipherlab.ai>
…ADME rewrite Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Signed-off-by: Nate Roberts <nate@cipherlab.ai>
Maiden CI run caught its own bug: refs/pull/N/merge is auto-generated and unsigned by construction. Range now ends at the PR head sha and skips merge commits per DCO convention. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Signed-off-by: Nate Roberts <nate@cipherlab.ai>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this is
Three commits taking the protocol from doctrine-rich/mechanism-poor to machine-enforced:
standard+,deep-lite) · receipts boundary + empty-by-design field-receipts containerVerification
npm testgreen end-to-end locally: 16 schemas + 25 fixtures (schema-derived), 84 docs link-checked, leak scan, stable surfaces intact, 65 structural evals. Tarball self-test passes. All commits DCO-signed.This PR is also the first CI execution on runners — test + dco jobs prove themselves here.
🤖 Generated with Claude Code