feat(runner): a role runs through the command-line harness the operator chose (itd-2609201916056194) - #767

Merged

REPPL merged 18 commits into

mainfrom

feat/runner-loop

Sep 30, 2026

Commits on Sep 30, 2026

feat(runner): run a delegated role through a command-line harness, core only
REPPL
committed
2081c0c
refactor(runner): drop an unused helper and cut a validator's detail on a rune boundary
REPPL
committed
45377da
merge: bring main into runner2
REPPL
committed
ae0cdb0
fix(runner): admit a runner's model by the allowlist alone, after main's ruling H9
REPPL
committed
0e328d9
feat(build): start a routed role through its command-line runner from the loop
REPPL
committed
6ce51f2
feat(build): route a role through its runner from build and implement step
REPPL
committed
45cdd1a
refactor(build): unexport the loop's advance now that the step drives
REPPL
committed
1419266
docs(specs): record the runner's loop wiring and capture its owed live proof
REPPL
committed
294f940
fix(runner): refuse a harness binary inside the run's checkout, not only the worktree
REPPL
committed
386b1de
fix(runner): bound the harness-reported model and refuse a harness others can write
REPPL
committed
70d4949
chore: resolve iss-2609301557141123 and iss-2609301557191251 — harness model bounded, writable harness refused
REPPL
committed
6a005a2
Merge origin/main into feat/runner-loop
REPPL
committed
978b849
fix(runner): admit a harness only the administrator group can write
REPPL
committed
ef28cee
docs(brief): the build chapter says where the record names a runner
REPPL
committed
c35d281
docs(build): only the claude runner grants the role's tools unasked
REPPL
committed
1d6b26e
feat(runner): close the runner's spec and ship itd-2609201916056194
REPPL
committed
10079f0
fix(runner): pass the delimiter and hermetic-git detectors
REPPL
committed
6c6f97c
fix(runner): admit only darwin's admin group, never gid 0
REPPL
committed
fe297bf

Navigation Menu

feat(runner): a role runs through the command-line harness the operator chose (itd-2609201916056194) - #767

feat(runner): a role runs through the command-line harness the operator chose (itd-2609201916056194)#767
REPPL merged 18 commits into
mainfrom
feat/runner-loop

Commits on Sep 30, 2026

feat(runner): run a delegated role through a command-line harness, core only

refactor(runner): drop an unused helper and cut a validator's detail on a rune boundary

merge: bring main into runner2

fix(runner): admit a runner's model by the allowlist alone, after main's ruling H9

feat(build): start a routed role through its command-line runner from the loop

feat(build): route a role through its runner from build and implement step

refactor(build): unexport the loop's advance now that the step drives

docs(specs): record the runner's loop wiring and capture its owed live proof

fix(runner): refuse a harness binary inside the run's checkout, not only the worktree

fix(runner): bound the harness-reported model and refuse a harness others can write

chore: resolve iss-2609301557141123 and iss-2609301557191251 — harness model bounded, writable harness refused

Merge origin/main into feat/runner-loop

fix(runner): admit a harness only the administrator group can write

docs(brief): the build chapter says where the record names a runner

docs(build): only the claude runner grants the role's tools unasked

feat(runner): close the runner's spec and ship itd-2609201916056194

fix(runner): pass the delimiter and hermetic-git detectors

fix(runner): admit only darwin's admin group, never gid 0