@codyswann/lisa 2.308.0 → 2.309.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/core/upstream-evidence-manifest.d.ts.map +1 -1
- package/dist/core/upstream-evidence-manifest.js +2 -1
- package/dist/core/upstream-evidence-manifest.js.map +1 -1
- package/package.json +1 -1
- package/plugins/lisa/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-agy/plugin.json +1 -1
- package/plugins/lisa-cdk/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-cdk/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-cdk-agy/plugin.json +1 -1
- package/plugins/lisa-cdk-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-cdk-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-expo/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-expo/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-expo-agy/plugin.json +1 -1
- package/plugins/lisa-expo-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-expo-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-harper-fabric/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-harper-fabric/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-harper-fabric-agy/plugin.json +1 -1
- package/plugins/lisa-harper-fabric-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-harper-fabric-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs-agy/plugin.json +1 -1
- package/plugins/lisa-nestjs-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-openclaw/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-openclaw/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-openclaw-agy/plugin.json +1 -1
- package/plugins/lisa-openclaw-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-openclaw-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-phaser/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-phaser/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-phaser-agy/plugin.json +1 -1
- package/plugins/lisa-phaser-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-phaser-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-rails/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-rails/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-rails-agy/plugin.json +1 -1
- package/plugins/lisa-rails-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-rails-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript-agy/plugin.json +1 -1
- package/plugins/lisa-typescript-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript-cursor/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-wiki/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-wiki/.codex-plugin/plugin.json +1 -1
- package/plugins/lisa-wiki-agy/plugin.json +1 -1
- package/plugins/lisa-wiki-copilot/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-wiki-cursor/.claude-plugin/plugin.json +1 -1
- package/ui/index.html +58 -3
package/package.json
CHANGED
|
@@ -115,7 +115,7 @@
|
|
|
115
115
|
"brace-expansion": ">=5.0.8"
|
|
116
116
|
},
|
|
117
117
|
"name": "@codyswann/lisa",
|
|
118
|
-
"version": "2.
|
|
118
|
+
"version": "2.309.0",
|
|
119
119
|
"description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
|
|
120
120
|
"main": "dist/index.js",
|
|
121
121
|
"exports": {
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "2.
|
|
3
|
+
"version": "2.309.0",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "2.
|
|
3
|
+
"version": "2.309.0",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, across Claude and Codex.",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "2.
|
|
3
|
+
"version": "2.309.0",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "2.
|
|
3
|
+
"version": "2.309.0",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lisa-openclaw",
|
|
3
|
-
"version": "2.
|
|
3
|
+
"version": "2.309.0",
|
|
4
4
|
"description": "Connect staff roles to Telegram or Slack via OpenClaw — facilitator/specialist hub-and-spoke routing and repo-coding topics, for Claude Code and Codex",
|
|
5
5
|
"author": {
|
|
6
6
|
"name": "Cody Swann"
|
package/ui/index.html
CHANGED
|
@@ -5246,7 +5246,7 @@
|
|
|
5246
5246
|
},
|
|
5247
5247
|
{
|
|
5248
5248
|
label:
|
|
5249
|
-
"The agent's program (AC8.2–8.3 · AC8.7 · AC4.5 · P10–P11)",
|
|
5249
|
+
"The agent's program (AC8.2–8.3 · AC8.7 · AC8.9 · AC4.5 · P10–P11)",
|
|
5250
5250
|
note: "Prompts, skills and models are the factory's own source code and runtime. This group asks whether that layer is under change control — or improvised per run.",
|
|
5251
5251
|
items: [
|
|
5252
5252
|
{
|
|
@@ -5347,6 +5347,17 @@
|
|
|
5347
5347
|
"None",
|
|
5348
5348
|
],
|
|
5349
5349
|
},
|
|
5350
|
+
{
|
|
5351
|
+
q: "When a new agent joins the roster, how does it earn trust?",
|
|
5352
|
+
help: "TASC AC8.9 — a new reviewer, sensor or worker is a system change. Run it in shadow first: output recorded and compared against the existing control but not acted on, then adversarially exercised with deliberately defective work to confirm it catches what it claims to catch. Trust must also be revocable — an agent whose measured performance degrades goes back to shadow.",
|
|
5353
|
+
kind: "select",
|
|
5354
|
+
options: [
|
|
5355
|
+
"Shadow for a declared duration or volume, compared against the existing control, adversarially exercised, trust revocable",
|
|
5356
|
+
"Shadow period, no declared duration or comparison basis",
|
|
5357
|
+
"Reviewed by a human for a while",
|
|
5358
|
+
"Switched on and trusted",
|
|
5359
|
+
],
|
|
5360
|
+
},
|
|
5350
5361
|
],
|
|
5351
5362
|
},
|
|
5352
5363
|
{
|
|
@@ -5680,7 +5691,7 @@
|
|
|
5680
5691
|
],
|
|
5681
5692
|
},
|
|
5682
5693
|
{
|
|
5683
|
-
label: "Agent attack surface (AC3 · §7)",
|
|
5694
|
+
label: "Agent attack surface (AC3 · AC3.6 · §7)",
|
|
5684
5695
|
note: "The group above secures the code; this one secures the agent. Inbound, the risk is untrusted content steering it; outbound, exfiltration — which is governed by the egress lock and credential gateway you answered earlier.",
|
|
5685
5696
|
items: [
|
|
5686
5697
|
{
|
|
@@ -5795,6 +5806,28 @@
|
|
|
5795
5806
|
"Unknown",
|
|
5796
5807
|
],
|
|
5797
5808
|
},
|
|
5809
|
+
{
|
|
5810
|
+
q: "Can one agent get another to do what it is not allowed to do itself?",
|
|
5811
|
+
help: "TASC AC3.6 — draw the boundary around access and actions, not around instructions. An agent that cannot deploy but can ask a peer that can deploy has deploy authority. This is a documented failure: a constrained incident-response agent, unable to deploy by design, asked a peer over chat to push its fix, and only a human gate caught it. Enumerate reachable peers, evaluate effective authority, and make sure separation of duties survives delegation.",
|
|
5812
|
+
kind: "select",
|
|
5813
|
+
options: [
|
|
5814
|
+
"Peers enumerated, effective authority evaluated, requests recorded and attributable, duties hold against delegation",
|
|
5815
|
+
"Peers enumerated, but inter-agent requests are not recorded or attributable",
|
|
5816
|
+
"Agents coordinate freely on unaudited channels",
|
|
5817
|
+
"We have not considered agent-to-agent reach",
|
|
5818
|
+
],
|
|
5819
|
+
},
|
|
5820
|
+
{
|
|
5821
|
+
q: "Does every threat in your model map to a control, and every control to a threat?",
|
|
5822
|
+
help: "TASC AC3.1 — an unmapped threat is an accepted risk that needs someone with standing to accept it; an unmapped control is unexplained cost. Without the mapping a threat model is a document rather than a design.",
|
|
5823
|
+
kind: "select",
|
|
5824
|
+
options: [
|
|
5825
|
+
"Mapped both ways, kept current",
|
|
5826
|
+
"Threats mapped to controls only",
|
|
5827
|
+
"Threat model exists, no mapping",
|
|
5828
|
+
"No threat model",
|
|
5829
|
+
],
|
|
5830
|
+
},
|
|
5798
5831
|
],
|
|
5799
5832
|
},
|
|
5800
5833
|
{
|
|
@@ -5933,7 +5966,7 @@
|
|
|
5933
5966
|
],
|
|
5934
5967
|
},
|
|
5935
5968
|
{
|
|
5936
|
-
label: "Review & merge (AC8.1 · AC5 · AC5.7)",
|
|
5969
|
+
label: "Review & merge (AC8.1 · AC5 · AC5.7 · AC8.8)",
|
|
5937
5970
|
items: [
|
|
5938
5971
|
{
|
|
5939
5972
|
q: "What reviews every diff before merge?",
|
|
@@ -6019,6 +6052,16 @@
|
|
|
6019
6052
|
"We assume the instructions are followed",
|
|
6020
6053
|
],
|
|
6021
6054
|
},
|
|
6055
|
+
{
|
|
6056
|
+
q: "Is autonomy the same everywhere, or tiered by risk?",
|
|
6057
|
+
help: "TASC AC8.8 — organizations running agent-authored code at scale tier the codebase and decide per tier what agents may do unattended, with whole codebases kept under mandatory human approval. Uniform autonomy is a decision nobody made: a tier no one chose is a tier no one is accountable for.",
|
|
6058
|
+
kind: "select",
|
|
6059
|
+
options: [
|
|
6060
|
+
"Tiered, with the actions permitted unattended and the mandatory human controls declared per tier, enforced mechanically",
|
|
6061
|
+
"Tiered, but the per-tier permissions are convention rather than enforcement",
|
|
6062
|
+
"Uniform — same autonomy everywhere",
|
|
6063
|
+
],
|
|
6064
|
+
},
|
|
6022
6065
|
],
|
|
6023
6066
|
},
|
|
6024
6067
|
{
|
|
@@ -6549,6 +6592,18 @@
|
|
|
6549
6592
|
"The agent records its own accepted risk",
|
|
6550
6593
|
],
|
|
6551
6594
|
},
|
|
6595
|
+
{
|
|
6596
|
+
q: "Does anyone re-examine a sample of the approvals your agents make?",
|
|
6597
|
+
help: "TASC AC1.9 — logging an automated approval proves it happened, not that it was sound. Re-examine a risk-weighted sample independently, at a declared rate per tier, and feed what you find back into the approving mechanism's false-positive rate rather than just fixing the instance.",
|
|
6598
|
+
kind: "select",
|
|
6599
|
+
options: [
|
|
6600
|
+
"Each approval records its signals and reasoning; a risk-weighted sample is re-examined independently at a declared per-tier rate, findings fed back",
|
|
6601
|
+
"Sample re-examined, but the rate is not declared per tier",
|
|
6602
|
+
"Occasional spot checks",
|
|
6603
|
+
"Approvals are logged but never re-examined",
|
|
6604
|
+
"Approvals are not logged with their reasoning",
|
|
6605
|
+
],
|
|
6606
|
+
},
|
|
6552
6607
|
],
|
|
6553
6608
|
},
|
|
6554
6609
|
],
|