docs(soul): design recipe placeholders backed by vault capability classes #237

Closed

clawdie wants to merge 2 commits from clawdie/docs/layered-soul-recipe into main AGit

pull from: clawdie/docs/layered-soul-recipe

merge into: clawdie:main

clawdie:main

clawdie:feat/sysctl-posture-oxy-hydration-0.15.1

Conversation 0 Commits 2 Files changed 11 +849

clawdie commented 2026-10-29 22:11:07 +01:00

Owner

Copy link

Add a design note and a spec-check pack for turning layered-soul guardrails
into Agent Vault placeholders.

• docs/plans/SOUL-RECIPE-PLACEHOLDERS.md: five placeholder classes, the
  guardrail->class table, an additive clawdie.layered-soul.v1 recipe schema
  (requires/provides, ph./cap./gen. ids, registry membership), the vault
  report shape with redaction rules, and the class-aware decision table
• scripts/soul-recipe/replay.py + testdata: vocabulary, 12-row matrix A,
  30-row class-aware matrix B, five recipe fixtures, a mutant-table negative
  control, and a sentinel proving a blocked recipe never invokes install()
• Jev triage recorded honestly: the five-way taxonomy question collapsed to
  one label and was unstable across runs (confidence 0.19-0.57), so it is
  treated as no evidence; the class-aware matrix agreed on write-only
  requirements (0.83/0.88) and was overruled on circular custody, where the
  deterministic table wins (refuse, not blocked)

Design only: no live vault, Tarsnap, jail, or ZFS operation. The replayer is a
spec check, not production binding.

Gates: ci-checks.sh PASS; check-okf.sh --changed clean; wiki-lint --strict 583
PASS; leak-guard clean; replay PASS.

Add a design note and a spec-check pack for turning layered-soul guardrails into Agent Vault placeholders. - docs/plans/SOUL-RECIPE-PLACEHOLDERS.md: five placeholder classes, the guardrail->class table, an additive clawdie.layered-soul.v1 recipe schema (requires/provides, ph./cap./gen. ids, registry membership), the vault report shape with redaction rules, and the class-aware decision table - scripts/soul-recipe/replay.py + testdata: vocabulary, 12-row matrix A, 30-row class-aware matrix B, five recipe fixtures, a mutant-table negative control, and a sentinel proving a blocked recipe never invokes install() - Jev triage recorded honestly: the five-way taxonomy question collapsed to one label and was unstable across runs (confidence 0.19-0.57), so it is treated as no evidence; the class-aware matrix agreed on write-only requirements (0.83/0.88) and was overruled on circular custody, where the deterministic table wins (refuse, not blocked) Design only: no live vault, Tarsnap, jail, or ZFS operation. The replayer is a spec check, not production binding. Gates: ci-checks.sh PASS; check-okf.sh --changed clean; wiki-lint --strict 583 PASS; leak-guard clean; replay PASS.

clawdie added 1 commit 2026-10-29 22:11:07 +01:00

docs(soul): design recipe placeholders backed by vault capability classes ... e0fd0757a0

Add a design note and a spec-check pack for turning layered-soul guardrails
into Agent Vault placeholders.

- docs/plans/SOUL-RECIPE-PLACEHOLDERS.md: five placeholder classes, the
  guardrail->class table, an additive clawdie.layered-soul.v1 recipe schema
  (requires/provides, ph./cap./gen. ids, registry membership), the vault
  report shape with redaction rules, and the class-aware decision table
- scripts/soul-recipe/replay.py + testdata: vocabulary, 12-row matrix A,
  30-row class-aware matrix B, five recipe fixtures, a mutant-table negative
  control, and a sentinel proving a blocked recipe never invokes install()
- Jev triage recorded honestly: the five-way taxonomy question collapsed to
  one label and was unstable across runs (confidence 0.19-0.57), so it is
  treated as no evidence; the class-aware matrix agreed on write-only
  requirements (0.83/0.88) and was overruled on circular custody, where the
  deterministic table wins (refuse, not blocked)

Design only: no live vault, Tarsnap, jail, or ZFS operation. The replayer is a
spec check, not production binding.

Gates: ci-checks.sh PASS; check-okf.sh --changed clean; wiki-lint --strict 583
PASS; leak-guard clean; replay PASS.

clawdie added 1 commit 2026-10-29 22:34:40 +01:00

docs(soul): simplify the recipe to api_placeholders only ... 5d77f6e33c

Drop the gen.* / cap.* id machinery. A soul recipe declares credentials, not
host topology: mesh identity, dataset properties, lockfiles and runtime config
belong to Phase 1 host bootstrap, not to soul metadata.

- schema: one additive key, api_placeholders (name -> http_inject | read_decrypt
  | write_only), max 16, no values or refs
- keep the class because a single TARSNAP_* name cannot express that a write-only
  backup key cannot restore; without it readiness is wrong in the unsafe direction
- matrix A stays as import-time analysis (vault / host_bootstrap / archive /
  operator / hard_refuse) but only vault rows become recipe entries
- matrix B unchanged: state x requirement class x level, refuse on circular custody
- record two corrections: Tarsnap restore is smoke-tested with a fake key, not
  proven; and an empty vault does not mean no network, because jail PF egress is broad

Gates: ci-checks PASS; check-okf --changed clean; wiki-lint --strict 583 PASS;
leak-guard clean; replay PASS (12 A rows, 30 B rows, mutant + sentinel).

clawdie closed this pull request 2026-10-31 21:02:38 +01:00

All checks were successful

Hide checks

CI / markdown (pull_request) Successful in 10s

Details

CI / packaging (pull_request) Successful in 2s

Details

CI / python-tests (pull_request) Successful in 22s

Details

CI / mcp-cross-language (pull_request) Successful in 26s

Details

CI / go (pull_request) Successful in 45s

Details

leak-guard / guard (pull_request) Successful in 11s

Details

Pull request closed

Please reopen this pull request to perform a merge.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

clawdie/colibri!237

No description provided.