@adaptic/maestro 1.0.0

package/scripts/disclosure_boundaries.py

@@ -0,0 +1,562 @@
+#!/usr/bin/env python3
+"""Disclosure Boundary Generator — Layer 1 module.
+
+Generates dynamic disclosure boundary guidance for a given recipient by:
+  1. Loading the recipient's user profile from memory/profiles/users/{slug}.yaml
+  2. Loading recent provenance records from memory/provenance/index.jsonl
+  3. Cross-referencing provenance against the recipient's information_boundaries
+  4. Returning a structured dict with clearance summary, active conflicts,
+     recent sensitive context, and excluded domains active
+
+Usage (CLI):
+  python3 scripts/disclosure_boundaries.py --recipient shayan-kargarian
+  python3 scripts/disclosure_boundaries.py --recipient mehran-granfar --hours 24
+
+Exit codes:
+  0 = always (profile not found prints to stderr and exits 0)
+
+Output: JSON to stdout.
+
+Created: 2026-04-05 — Task 5, Layer 1 information barrier system
+"""
+
+import argparse
+import json
+import os
+import re
+import sys
+from datetime import datetime, timezone, timedelta
+from pathlib import Path
+
+# ─── Paths ───────────────────────────────────────────────────────────────────
+SCRIPT_DIR = Path(__file__).resolve().parent
+REPO_ROOT = SCRIPT_DIR.parent
+USER_PROFILES_DIR = REPO_ROOT / "memory" / "profiles" / "users"
+PROVENANCE_INDEX = REPO_ROOT / "memory" / "provenance" / "index.jsonl"
+
+
+# ─── YAML Parser ─────────────────────────────────────────────────────────────
+# Custom minimal YAML parser — no PyYAML dependency (consistent with repo pattern).
+# Handles: top-level scalars, nested mappings, inline lists [a, b, c],
+# multi-line lists (- item), lists of mappings (- key: val / key2: val2),
+# folded block strings (>), and quoted strings.
+
+def _parse_yaml(text: str) -> dict:
+    """Parse a YAML text string into a Python dict.
+
+    Tries PyYAML first (if available), falls back to the custom parser.
+    """
+    try:
+        import yaml as _yaml
+        return _yaml.safe_load(text) or {}
+    except ImportError:
+        pass
+
+    lines = text.split('\n')
+    result, _ = _parse_block(lines, 0, 0)
+    return result if isinstance(result, dict) else {}
+
+
+def _next_content(lines, start):
+    """Return (indent, index) for the next non-blank, non-comment line."""
+    i = start
+    while i < len(lines):
+        s = lines[i].lstrip()
+        if s and not s.startswith('#'):
+            return len(lines[i]) - len(lines[i].lstrip()), i
+        i += 1
+    return None, None
+
+
+def _parse_block(lines, start, base_indent):
+    """Parse a YAML mapping block. Returns (dict, next_index)."""
+    result = {}
+    i = start
+    while i < len(lines):
+        raw = lines[i]
+        stripped = raw.lstrip()
+
+        if not stripped or stripped.startswith('#'):
+            i += 1
+            continue
+
+        indent = len(raw) - len(raw.lstrip())
+
+        if indent < base_indent and i > start:
+            break
+        if indent > base_indent and i > start:
+            break
+
+        # List item encountered at mapping level — caller handles as value
+        if stripped.startswith('- '):
+            if not result:
+                lst, i = _parse_list(lines, i, indent)
+                return lst, i
+            break
+
+        if ':' in stripped and not stripped.startswith('-'):
+            colon_pos = stripped.index(':')
+            key = stripped[:colon_pos].strip()
+            rest = stripped[colon_pos + 1:].strip()
+
+            # Inline list: key: [a, b, c]
+            if rest.startswith('['):
+                result[key] = _parse_inline_list(rest)
+                i += 1
+                continue
+
+            # Folded/literal block scalar (> or |)
+            if rest in ('>', '|', '>-', '|-', '>+', '|+'):
+                value, i = _parse_block_scalar(lines, i + 1, indent)
+                result[key] = value
+                continue
+
+            if rest:
+                result[key] = _yaml_scalar(rest)
+                i += 1
+            else:
+                # Block value — peek to find child indent
+                child_indent, child_idx = _next_content(lines, i + 1)
+                if child_indent is not None and child_indent > indent:
+                    child_stripped = lines[child_idx].lstrip()
+                    if child_stripped.startswith('- '):
+                        value, i = _parse_list(lines, child_idx, child_indent)
+                    elif child_stripped.startswith('['):
+                        # inline list as sole content on next line
+                        value = _parse_inline_list(child_stripped)
+                        i = child_idx + 1
+                    else:
+                        value, i = _parse_block(lines, child_idx, child_indent)
+                    result[key] = value
+                else:
+                    result[key] = None
+                    i += 1
+        else:
+            i += 1
+
+    return result, i
+
+
+def _parse_list(lines, start, base_indent):
+    """Parse a YAML sequence block. Returns (list, next_index)."""
+    result = []
+    i = start
+    while i < len(lines):
+        raw = lines[i]
+        stripped = raw.lstrip()
+
+        if not stripped or stripped.startswith('#'):
+            i += 1
+            continue
+
+        indent = len(raw) - len(raw.lstrip())
+        if indent < base_indent:
+            break
+        if indent > base_indent:
+            break
+
+        if not stripped.startswith('- '):
+            # Not a list item — we're done
+            break
+
+        item_content = stripped[2:].strip()
+
+        # Inline list item: - [a, b, c]
+        if item_content.startswith('['):
+            result.append(_parse_inline_list(item_content))
+            i += 1
+            continue
+
+        # Folded block under a list item
+        if item_content in ('>', '|', '>-', '|-', '>+', '|+'):
+            value, i = _parse_block_scalar(lines, i + 1, indent)
+            result.append(value)
+            continue
+
+        # Mapping-style list item: - key: value
+        if ':' in item_content and not item_content.startswith('"') and not item_content.startswith("'"):
+            colon_pos = item_content.index(':')
+            k = item_content[:colon_pos].strip()
+            v = item_content[colon_pos + 1:].strip()
+            item_dict = {k: _parse_inline_list(v) if v.startswith('[') else (_yaml_scalar(v) if v else None)}
+
+            # Continuation keys at deeper indent
+            child_indent, child_idx = _next_content(lines, i + 1)
+            if child_indent is not None and child_indent > indent:
+                child_stripped = lines[child_idx].lstrip()
+                if child_stripped.startswith('- '):
+                    # nested list under dict key — unusual but handle gracefully
+                    i += 1
+                else:
+                    extra, i = _parse_block(lines, child_idx, child_indent)
+                    if isinstance(extra, dict):
+                        item_dict.update(extra)
+            else:
+                i += 1
+
+            result.append(item_dict)
+        else:
+            result.append(_yaml_scalar(item_content))
+            i += 1
+
+    return result, i
+
+
+def _parse_block_scalar(lines, start, owner_indent):
+    """Parse a folded/literal block scalar (lines after > or |).
+
+    Returns (string, next_index).
+    """
+    parts = []
+    i = start
+    while i < len(lines):
+        raw = lines[i]
+        stripped = raw.lstrip()
+        if not stripped:
+            i += 1
+            continue
+        indent = len(raw) - len(raw.lstrip())
+        if indent <= owner_indent:
+            break
+        parts.append(stripped)
+        i += 1
+    return ' '.join(parts), i
+
+
+def _parse_inline_list(text: str):
+    """Parse an inline YAML list like [a, b, c] or ["x", "y"].
+
+    Returns a Python list.
+    """
+    text = text.strip()
+    if not (text.startswith('[') and text.endswith(']')):
+        return [_yaml_scalar(text)] if text else []
+    inner = text[1:-1].strip()
+    if not inner:
+        return []
+    # Split on commas not inside quotes
+    items = []
+    current = ''
+    in_quote = None
+    for ch in inner:
+        if ch in ('"', "'") and in_quote is None:
+            in_quote = ch
+        elif ch == in_quote:
+            in_quote = None
+        elif ch == ',' and in_quote is None:
+            items.append(_yaml_scalar(current.strip()))
+            current = ''
+            continue
+        current += ch
+    if current.strip():
+        items.append(_yaml_scalar(current.strip()))
+    return items
+
+
+def _yaml_scalar(text: str):
+    """Convert a YAML scalar string to an appropriate Python type."""
+    if text is None:
+        return None
+    text = text.strip()
+    if not text:
+        return None
+    # Quoted strings
+    if (text.startswith('"') and text.endswith('"')) or \
+       (text.startswith("'") and text.endswith("'")):
+        return text[1:-1]
+    # Strip inline comments
+    for sep in ('  #', '\t#'):
+        if sep in text:
+            text = text[:text.index(sep)].strip()
+    # Boolean
+    if text.lower() in ('true', 'yes'):
+        return True
+    if text.lower() in ('false', 'no'):
+        return False
+    # Null
+    if text.lower() in ('null', '~'):
+        return None
+    # Integer
+    try:
+        return int(text)
+    except ValueError:
+        pass
+    # Float
+    try:
+        return float(text)
+    except ValueError:
+        pass
+    return text
+
+
+# ─── Profile Loading ──────────────────────────────────────────────────────────
+
+def load_profile(slug: str) -> dict | None:
+    """Load and parse a user profile YAML. Returns None if not found."""
+    path = USER_PROFILES_DIR / f"{slug}.yaml"
+    if not path.exists():
+        return None
+    text = path.read_text(encoding='utf-8')
+    return _parse_yaml(text)
+
+
+# ─── Provenance Loading ───────────────────────────────────────────────────────
+
+def load_recent_provenance(hours: int = 48) -> list[dict]:
+    """Load provenance records within the last *hours* hours.
+
+    Returns list of dicts. Empty list if file absent or empty.
+    """
+    if not PROVENANCE_INDEX.exists():
+        return []
+
+    cutoff = datetime.now(tz=timezone.utc) - timedelta(hours=hours)
+    records = []
+
+    with PROVENANCE_INDEX.open(encoding='utf-8') as f:
+        for line in f:
+            line = line.strip()
+            if not line:
+                continue
+            try:
+                rec = json.loads(line)
+            except json.JSONDecodeError:
+                continue
+
+            ts_raw = rec.get('timestamp', '')
+            try:
+                # Handle ISO 8601 with or without Z suffix
+                ts_str = ts_raw.replace('Z', '+00:00')
+                ts = datetime.fromisoformat(ts_str)
+                if ts.tzinfo is None:
+                    ts = ts.replace(tzinfo=timezone.utc)
+            except (ValueError, AttributeError):
+                # Unparseable timestamp — include conservatively
+                records.append(rec)
+                continue
+
+            if ts >= cutoff:
+                records.append(rec)
+
+    return records
+
+
+# ─── Cross-Reference Logic ────────────────────────────────────────────────────
+
+def _cross_reference(recipient_slug: str, boundaries: dict, records: list[dict]) -> list[dict]:
+    """Flag provenance records that may expose sensitive information to the recipient.
+
+    A record is flagged when BOTH:
+      (a) recipient is NOT in the record's participants list
+      (b) the record's matter matches one of the recipient's conflicts
+          OR the record's context_domain is in the recipient's excluded_domains
+
+    Returns list of warning dicts with keys: source, warning.
+    """
+    conflicts = boundaries.get('conflicts') or []
+    excluded_domains = boundaries.get('excluded_domains') or []
+
+    # Build sets for fast lookup
+    conflict_matters = set()
+    for c in conflicts:
+        if isinstance(c, dict):
+            m = c.get('matter')
+            if m:
+                conflict_matters.add(str(m).lower())
+        elif isinstance(c, str):
+            conflict_matters.add(c.lower())
+
+    excluded_set = {str(d).lower() for d in excluded_domains if d}
+
+    flagged = []
+    for rec in records:
+        participants = [str(p).lower() for p in (rec.get('participants') or [])]
+        if recipient_slug.lower() in participants:
+            # Recipient is already a participant — no disclosure risk from this record
+            continue
+
+        matter = str(rec.get('matter') or '').lower()
+        domain = str(rec.get('context_domain') or '').lower()
+        source_id = rec.get('source_id', 'unknown')
+        sensitivity = rec.get('sensitivity_signals') or []
+
+        reasons = []
+        if matter and matter in conflict_matters:
+            # Find the nature note for this conflict
+            nature = ''
+            for c in conflicts:
+                if isinstance(c, dict) and str(c.get('matter', '')).lower() == matter:
+                    nature = c.get('nature', '')
+                    break
+            reasons.append(
+                f"matter '{rec.get('matter')}' is a declared conflict"
+                + (f" ({nature})" if nature else "")
+            )
+
+        if domain and domain in excluded_set:
+            reasons.append(f"context domain '{rec.get('context_domain')}' is in excluded domains")
+
+        if not reasons:
+            continue
+
+        # Build participant name list for the source description
+        participant_names = rec.get('participants') or []
+        source_desc = source_id
+        if participant_names:
+            source_desc += f" (participants: {', '.join(str(p) for p in participant_names)})"
+
+        warning_parts = [
+            f"Recipient {recipient_slug!r} is NOT a participant.",
+            *[f"Warning: {r}." for r in reasons],
+        ]
+        if sensitivity:
+            warning_parts.append(f"Sensitivity signals: {', '.join(str(s) for s in sensitivity)}.")
+
+        flagged.append({
+            "source": source_desc,
+            "warning": " ".join(warning_parts),
+        })
+
+    return flagged
+
+
+# ─── Clearance Summary Builder ────────────────────────────────────────────────
+
+def _build_clearance_summary(profile: dict, boundaries: dict) -> str:
+    """Build a natural-language clearance summary from profile fields."""
+    name = profile.get('name') or profile.get('preferred_name') or 'Unknown'
+    role = profile.get('role') or ''
+    org = profile.get('organisation') or ''
+    relationship = profile.get('relationship_to_adaptic') or ''
+    domains_of_interest = boundaries.get('domains_of_interest') or []
+    excluded_domains = boundaries.get('excluded_domains') or []
+    conflicts = boundaries.get('conflicts') or []
+    party_to_matters = boundaries.get('party_to_matters') or []
+
+    # Unrestricted access shortcut
+    if domains_of_interest == ['*']:
+        return (
+            f"{name} has unrestricted access — all information domains are permitted. "
+            f"Role: {role}. Organisation: {org}."
+        ).strip()
+
+    parts = [f"Clearance summary for {name}."]
+    if role:
+        parts.append(f"Role: {role}.")
+    if org:
+        parts.append(f"Organisation: {org}.")
+    if relationship:
+        parts.append(f"Relationship to Adaptic: {relationship}.")
+
+    if domains_of_interest:
+        parts.append(f"Permitted domains: {', '.join(str(d) for d in domains_of_interest)}.")
+    else:
+        parts.append("No permitted domains declared (default deny).")
+
+    if excluded_domains:
+        parts.append(f"Excluded domains ({len(excluded_domains)}): {', '.join(str(d) for d in excluded_domains)}.")
+
+    if party_to_matters:
+        matters_str = ', '.join(str(m) for m in party_to_matters)
+        parts.append(f"Party to matters: {matters_str}.")
+
+    if conflicts:
+        conflict_strs = []
+        for c in conflicts:
+            if isinstance(c, dict):
+                m = c.get('matter', '')
+                n = c.get('nature', '')
+                conflict_strs.append(f"{m} ({n})" if n else str(m))
+            else:
+                conflict_strs.append(str(c))
+        parts.append(f"Active conflicts ({len(conflicts)}): {'; '.join(conflict_strs)}.")
+
+    return ' '.join(parts)
+
+
+# ─── Main Entry Point ─────────────────────────────────────────────────────────
+
+def generate_disclosure_boundaries(
+    recipient_slug: str,
+    recent_context_hours: int = 48,
+) -> dict | None:
+    """Generate disclosure boundary guidance for *recipient_slug*.
+
+    Returns a dict with keys:
+      - recipient_clearance_summary (str)
+      - active_conflicts (list)
+      - recent_sensitive_context (list of {source, warning} dicts)
+      - excluded_domains_active (list)
+
+    Returns None if no profile is found for the slug.
+    """
+    profile = load_profile(recipient_slug)
+    if profile is None:
+        return None
+
+    boundaries = profile.get('information_boundaries') or {}
+    domains_of_interest = boundaries.get('domains_of_interest') or []
+
+    # Unrestricted recipient — skip provenance cross-reference
+    if domains_of_interest == ['*']:
+        return {
+            "recipient_clearance_summary": _build_clearance_summary(profile, boundaries),
+            "active_conflicts": [],
+            "recent_sensitive_context": [],
+            "excluded_domains_active": [],
+        }
+
+    conflicts = boundaries.get('conflicts') or []
+    excluded_domains = boundaries.get('excluded_domains') or []
+
+    # Load and cross-reference recent provenance
+    recent_records = load_recent_provenance(hours=recent_context_hours)
+    sensitive_context = _cross_reference(recipient_slug, boundaries, recent_records)
+
+    return {
+        "recipient_clearance_summary": _build_clearance_summary(profile, boundaries),
+        "active_conflicts": [
+            {
+                "matter": c.get('matter') if isinstance(c, dict) else str(c),
+                "nature": c.get('nature', '') if isinstance(c, dict) else '',
+            }
+            for c in conflicts
+        ],
+        "recent_sensitive_context": sensitive_context,
+        "excluded_domains_active": list(excluded_domains),
+    }
+
+
+# ─── CLI ──────────────────────────────────────────────────────────────────────
+
+def main():
+    parser = argparse.ArgumentParser(
+        description="Generate disclosure boundary guidance for a recipient."
+    )
+    parser.add_argument(
+        '--recipient',
+        required=True,
+        help="Recipient slug (e.g. shayan-kargarian)",
+    )
+    parser.add_argument(
+        '--hours',
+        type=int,
+        default=48,
+        help="Lookback window in hours for provenance records (default: 48)",
+    )
+    args = parser.parse_args()
+
+    result = generate_disclosure_boundaries(args.recipient, recent_context_hours=args.hours)
+    if result is None:
+        print(
+            f"No profile found for recipient: {args.recipient!r}",
+            file=sys.stderr,
+        )
+        sys.exit(0)
+
+    print(json.dumps(result, indent=2))
+    sys.exit(0)
+
+
+if __name__ == '__main__':
+    main()

package/scripts/email-signature-mehran.html

@@ -0,0 +1,52 @@
+<div dir="ltr">
+  <h2 style="color:rgb(0,0,0);vertical-align:baseline;outline:0px;padding:0px;margin:0px 0px 5px;border:0px;line-height:18px;letter-spacing:0.2pt;text-transform:capitalize">
+    <font size="2"><br>Mehran Granfar<br></font>
+    <span style="font-weight:normal"><font face="arial, sans-serif" size="2">Chief Executive Officer</font></span>
+  </h2>
+  <h2 style="color:rgb(0,0,0);vertical-align:baseline;outline:0px;padding:0px;margin:0px 0px 5px;border:0px;line-height:18px;letter-spacing:0.2pt;text-transform:capitalize">
+    <div style="color:rgb(34,34,34);font-size:small;font-weight:400;letter-spacing:normal;text-transform:none"><font size="2"><br></font></div>
+    <div style="color:rgb(34,34,34);font-size:small;font-weight:400;letter-spacing:normal;text-transform:none">
+      <img width="141" height="42" src="https://ci3.googleusercontent.com/mail-sig/AIorK4xNDnPN6a0MjSHV5urb9g11u2CzHIzwdJbwN21quGjzQFdbOdegCq1Wp6lq3NCqsARbi-ooqPfE9E1D" style="margin-right:0px"><br>
+    </div>
+  </h2>
+  <h2 style="color:rgb(34,34,34);vertical-align:baseline;outline:0px;padding:0px;margin:0px 0px 5px;border:0px;line-height:18px">
+    <font face="arial, sans-serif" size="1">
+      <span style="font-weight:normal">
+        <span style="color:rgb(0,0,0);letter-spacing:0.2pt;text-transform:capitalize">
+          <br><a href="tel:+971585291799" style="color:rgb(85,85,85);text-transform:none;font-style:inherit;vertical-align:baseline;outline:0px;padding:0px;margin:0px;border:0px" target="_blank">+971 58 529 1799</a>
+        </span>
+        <span style="letter-spacing:0.2pt;text-transform:capitalize"><font color="#999999">(UAE)</font></span>
+        <span style="color:rgb(0,0,0);letter-spacing:0.2pt;text-transform:capitalize"> <br></span>
+      </span>
+    </font>
+  </h2>
+  <h2 style="vertical-align:baseline;outline:0px;padding:0px;margin:0px 0px 5px;border:0px;line-height:18px">
+    <font color="#555555" face="arial, sans-serif" size="1"><span style="font-weight:400;letter-spacing:0.266667px"><u>+1 646 696 5474</u></span></font>
+    <font face="arial, sans-serif" size="1">
+      <span style="color:rgb(0,0,0);font-weight:normal;letter-spacing:0.2pt;text-transform:capitalize"> </span>
+      <span style="color:rgb(34,34,34);font-weight:normal;letter-spacing:0.2pt;text-transform:capitalize"><font color="#999999">(USA)</font></span>
+      <br>
+      <font color="#000000"><span style="font-weight:400;letter-spacing:0.266667px;text-transform:capitalize"><br>Level 1, Innovation One, Dubai International Financial Centre, Dubai, UAE</span></font>
+    </font>
+  </h2>
+  <h2 style="color:rgb(0,0,0);vertical-align:baseline;outline:0px;padding:0px;margin:0px 0px 5px;border:0px;line-height:18px;letter-spacing:0.2pt;text-transform:capitalize">
+    <div style="color:rgb(34,34,34);font-size:small;font-weight:400;letter-spacing:normal;text-transform:none;line-height:20px"></div>
+    <div style="color:rgb(34,34,34);font-weight:400;letter-spacing:normal;text-transform:none;font-size:12.8px">
+      <div dir="ltr">
+        <div dir="ltr">
+          <div dir="ltr">
+            <div style="font-size:small">
+              <font face="arial, sans-serif"><span style="color:rgb(153,153,153);font-size:x-small">_________________________________________</span><br></font>
+            </div>
+          </div>
+          <div dir="ltr">
+            <div style="font-size:small"><font size="1" color="#999999" face="arial, sans-serif"><br></font></div>
+            <div style="font-size:small">
+              <font size="1" color="#999999"><font face="arial, sans-serif">This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this email. Please notify the sender immediately by email if you have received this email by mistake and delete this email from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing, or taking any action in reliance on the contents of this information is strictly prohibited.</font></font>
+            </div>
+          </div>
+        </div>
+      </div>
+    </div>
+  </h2>
+</div>

package/scripts/email-signature.html

@@ -0,0 +1,44 @@
+<div
+  style="
+    font-family: Arial, Helvetica, sans-serif;
+    font-size: 13px;
+    color: #333;
+  "
+>
+  <p style="margin: 0; font-weight: bold; font-size: 14px">Sophie Nguyen</p>
+  <p style="margin: 0; color: #666">Chief of Staff</p>
+  <br />
+  <a href="https://adaptic.ai"
+    ><img
+      src="https://adaptic.ai/logo.png"
+      alt="Adaptic"
+      width="120"
+      style="display: block; margin: 8px 0"
+  /></a>
+  <br />
+  <p style="margin: 0; font-size: 12px">sophie@adaptic.ai</p>
+  <br />
+  <p style="margin: 0; font-size: 12px">
+    Level 1, Innovation One, Dubai International Financial Centre, Dubai, UAE
+  </p>
+  <p
+    style="
+      margin: 16px 0 0 0;
+      border-top: 1px solid #ccc;
+      padding-top: 8px;
+      font-size: 10px;
+      color: #999;
+    "
+  >
+    This email and any files transmitted with it are confidential and intended
+    solely for the use of the individual or entity to whom they are addressed.
+    If you have received this email in error please notify the sender. This
+    message contains confidential information and is intended only for the
+    individual named. If you are not the named addressee you should not
+    disseminate, distribute or copy this email. Please notify the sender
+    immediately by email if you have received this email by mistake and delete
+    this email from your system. If you are not the intended recipient you are
+    notified that disclosing, copying, distributing, or taking any action in
+    reliance on the contents of this information is strictly prohibited.
+  </p>
+</div>