approval-md 0.2.0 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (235) hide show
  1. package/README.md +63 -24
  2. package/SPEC.md +57 -11
  3. package/dist/src/channels/contract.d.ts +34 -1
  4. package/dist/src/channels/contract.js +200 -7
  5. package/dist/src/channels/contract.js.map +1 -1
  6. package/dist/src/channels/telegram.d.ts +123 -11
  7. package/dist/src/channels/telegram.js +218 -23
  8. package/dist/src/channels/telegram.js.map +1 -1
  9. package/dist/src/channels/web.d.ts +9 -0
  10. package/dist/src/channels/web.js +17 -0
  11. package/dist/src/channels/web.js.map +1 -1
  12. package/dist/src/cli/amend.js +214 -30
  13. package/dist/src/cli/amend.js.map +1 -1
  14. package/dist/src/cli/attest.d.ts +9 -0
  15. package/dist/src/cli/attest.js +134 -7
  16. package/dist/src/cli/attest.js.map +1 -1
  17. package/dist/src/cli/channel-telegram.d.ts +99 -26
  18. package/dist/src/cli/channel-telegram.js +311 -13
  19. package/dist/src/cli/channel-telegram.js.map +1 -1
  20. package/dist/src/cli/channel.d.ts +9 -0
  21. package/dist/src/cli/channel.js +9 -0
  22. package/dist/src/cli/channel.js.map +1 -1
  23. package/dist/src/cli/codex-bridge.d.ts +819 -0
  24. package/dist/src/cli/codex-bridge.js +1607 -0
  25. package/dist/src/cli/codex-bridge.js.map +1 -0
  26. package/dist/src/cli/codex.d.ts +1 -1
  27. package/dist/src/cli/codex.js +304 -7
  28. package/dist/src/cli/codex.js.map +1 -1
  29. package/dist/src/cli/daemon.js +4 -1
  30. package/dist/src/cli/daemon.js.map +1 -1
  31. package/dist/src/cli/doctor.js +467 -12
  32. package/dist/src/cli/doctor.js.map +1 -1
  33. package/dist/src/cli/execute.js +25 -2
  34. package/dist/src/cli/execute.js.map +1 -1
  35. package/dist/src/cli/help.d.ts +6 -2
  36. package/dist/src/cli/help.js +165 -60
  37. package/dist/src/cli/help.js.map +1 -1
  38. package/dist/src/cli/hook-codex.d.ts +49 -1
  39. package/dist/src/cli/hook-codex.js +60 -1
  40. package/dist/src/cli/hook-codex.js.map +1 -1
  41. package/dist/src/cli/hook.d.ts +459 -3
  42. package/dist/src/cli/hook.js +1062 -114
  43. package/dist/src/cli/hook.js.map +1 -1
  44. package/dist/src/cli/import.js +1 -1
  45. package/dist/src/cli/import.js.map +1 -1
  46. package/dist/src/cli/main.js +5 -3
  47. package/dist/src/cli/main.js.map +1 -1
  48. package/dist/src/cli/policy-apply.d.ts +195 -0
  49. package/dist/src/cli/policy-apply.js +573 -0
  50. package/dist/src/cli/policy-apply.js.map +1 -0
  51. package/dist/src/cli/policy.js +14 -1
  52. package/dist/src/cli/policy.js.map +1 -1
  53. package/dist/src/cli/preflight.d.ts +151 -13
  54. package/dist/src/cli/preflight.js +398 -41
  55. package/dist/src/cli/preflight.js.map +1 -1
  56. package/dist/src/cli/sandbox.js +17 -1
  57. package/dist/src/cli/sandbox.js.map +1 -1
  58. package/dist/src/cli/scaffold.d.ts +1 -1
  59. package/dist/src/cli/scaffold.js +1 -1
  60. package/dist/src/cli/setup-channel.d.ts +9 -0
  61. package/dist/src/cli/setup-channel.js +28 -1
  62. package/dist/src/cli/setup-channel.js.map +1 -1
  63. package/dist/src/cli/setup-common.d.ts +3 -1
  64. package/dist/src/cli/setup-common.js +3 -2
  65. package/dist/src/cli/setup-common.js.map +1 -1
  66. package/dist/src/cli/setup.d.ts +2 -0
  67. package/dist/src/cli/setup.js +94 -2
  68. package/dist/src/cli/setup.js.map +1 -1
  69. package/dist/src/cli/up.js +115 -51
  70. package/dist/src/cli/up.js.map +1 -1
  71. package/dist/src/cli/values.js +3 -4
  72. package/dist/src/cli/values.js.map +1 -1
  73. package/dist/src/cli/verb-registry.js +174 -9
  74. package/dist/src/cli/verb-registry.js.map +1 -1
  75. package/dist/src/cli/wordmark.d.ts +2 -2
  76. package/dist/src/cli/wordmark.js +2 -2
  77. package/dist/src/codex/broker.d.ts +229 -0
  78. package/dist/src/codex/broker.js +548 -0
  79. package/dist/src/codex/broker.js.map +1 -0
  80. package/dist/src/codex/runner.d.ts +178 -0
  81. package/dist/src/codex/runner.js +231 -0
  82. package/dist/src/codex/runner.js.map +1 -0
  83. package/dist/src/codex/serve.d.ts +56 -0
  84. package/dist/src/codex/serve.js +98 -0
  85. package/dist/src/codex/serve.js.map +1 -0
  86. package/dist/src/codex/workspace-commit.d.ts +219 -0
  87. package/dist/src/codex/workspace-commit.js +549 -0
  88. package/dist/src/codex/workspace-commit.js.map +1 -0
  89. package/dist/src/core/advance-cycle.d.ts +51 -0
  90. package/dist/src/core/advance-cycle.js +66 -2
  91. package/dist/src/core/advance-cycle.js.map +1 -1
  92. package/dist/src/core/agents-md.d.ts +20 -18
  93. package/dist/src/core/agents-md.js +33 -31
  94. package/dist/src/core/agents-md.js.map +1 -1
  95. package/dist/src/core/attest.d.ts +215 -0
  96. package/dist/src/core/attest.js +317 -7
  97. package/dist/src/core/attest.js.map +1 -1
  98. package/dist/src/core/audit.d.ts +18 -0
  99. package/dist/src/core/audit.js +13 -0
  100. package/dist/src/core/audit.js.map +1 -1
  101. package/dist/src/core/channel-owner.d.ts +213 -0
  102. package/dist/src/core/channel-owner.js +358 -0
  103. package/dist/src/core/channel-owner.js.map +1 -0
  104. package/dist/src/core/command-class.d.ts +154 -0
  105. package/dist/src/core/command-class.js +673 -20
  106. package/dist/src/core/command-class.js.map +1 -1
  107. package/dist/src/core/commit-guard.d.ts +272 -0
  108. package/dist/src/core/commit-guard.js +424 -0
  109. package/dist/src/core/commit-guard.js.map +1 -0
  110. package/dist/src/core/daemon-actor.d.ts +45 -0
  111. package/dist/src/core/daemon-actor.js +54 -0
  112. package/dist/src/core/daemon-actor.js.map +1 -0
  113. package/dist/src/core/dark-session.d.ts +109 -8
  114. package/dist/src/core/dark-session.js +266 -82
  115. package/dist/src/core/dark-session.js.map +1 -1
  116. package/dist/src/core/decision-refusal.d.ts +23 -2
  117. package/dist/src/core/decision-refusal.js +24 -2
  118. package/dist/src/core/decision-refusal.js.map +1 -1
  119. package/dist/src/core/env-file.d.ts +5 -0
  120. package/dist/src/core/env-file.js +60 -1
  121. package/dist/src/core/env-file.js.map +1 -1
  122. package/dist/src/core/execute.d.ts +15 -2
  123. package/dist/src/core/execute.js +15 -2
  124. package/dist/src/core/execute.js.map +1 -1
  125. package/dist/src/core/gate.d.ts +86 -1
  126. package/dist/src/core/gate.js +81 -1
  127. package/dist/src/core/gate.js.map +1 -1
  128. package/dist/src/core/gesture-refusal.d.ts +166 -0
  129. package/dist/src/core/gesture-refusal.js +188 -0
  130. package/dist/src/core/gesture-refusal.js.map +1 -0
  131. package/dist/src/core/harness-version.d.ts +1 -1
  132. package/dist/src/core/harness-version.js +3 -1
  133. package/dist/src/core/harness-version.js.map +1 -1
  134. package/dist/src/core/instance.d.ts +59 -2
  135. package/dist/src/core/instance.js +113 -0
  136. package/dist/src/core/instance.js.map +1 -1
  137. package/dist/src/core/log.d.ts +39 -1
  138. package/dist/src/core/log.js.map +1 -1
  139. package/dist/src/core/policy-explain.d.ts +10 -0
  140. package/dist/src/core/policy-explain.js +32 -0
  141. package/dist/src/core/policy-explain.js.map +1 -1
  142. package/dist/src/core/policy-load.d.ts +41 -1
  143. package/dist/src/core/policy-load.js +21 -3
  144. package/dist/src/core/policy-load.js.map +1 -1
  145. package/dist/src/core/policy-match.d.ts +43 -0
  146. package/dist/src/core/policy-match.js +52 -0
  147. package/dist/src/core/policy-match.js.map +1 -1
  148. package/dist/src/core/policy-proposal.d.ts +52 -0
  149. package/dist/src/core/policy-proposal.js +102 -2
  150. package/dist/src/core/policy-proposal.js.map +1 -1
  151. package/dist/src/core/protected-path-guard.d.ts +117 -4
  152. package/dist/src/core/protected-path-guard.js +362 -48
  153. package/dist/src/core/protected-path-guard.js.map +1 -1
  154. package/dist/src/core/question-preempted.d.ts +141 -0
  155. package/dist/src/core/question-preempted.js +152 -0
  156. package/dist/src/core/question-preempted.js.map +1 -0
  157. package/dist/src/core/read-scope.d.ts +172 -0
  158. package/dist/src/core/read-scope.js +252 -0
  159. package/dist/src/core/read-scope.js.map +1 -0
  160. package/dist/src/core/sandbox.d.ts +81 -0
  161. package/dist/src/core/sandbox.js +190 -1
  162. package/dist/src/core/sandbox.js.map +1 -1
  163. package/dist/src/core/sender-identity.d.ts +476 -0
  164. package/dist/src/core/sender-identity.js +572 -0
  165. package/dist/src/core/sender-identity.js.map +1 -0
  166. package/dist/src/core/shlex.d.ts +102 -0
  167. package/dist/src/core/shlex.js +159 -0
  168. package/dist/src/core/shlex.js.map +1 -0
  169. package/dist/src/core/values.d.ts +18 -8
  170. package/dist/src/core/values.js +36 -1
  171. package/dist/src/core/values.js.map +1 -1
  172. package/dist/src/daemon/advance.d.ts +10 -0
  173. package/dist/src/daemon/advance.js +25 -4
  174. package/dist/src/daemon/advance.js.map +1 -1
  175. package/dist/src/daemon/daemon.js +9 -0
  176. package/dist/src/daemon/daemon.js.map +1 -1
  177. package/dist/src/daemon/git-evidence.d.ts +2 -2
  178. package/dist/src/daemon/git-evidence.js +1 -1
  179. package/dist/src/mcp/server.js +8 -0
  180. package/dist/src/mcp/server.js.map +1 -1
  181. package/docs/cli-reference.md +932 -32
  182. package/docs/codex-enforced-session.md +75 -2
  183. package/docs/codex-workspace-broker.md +118 -0
  184. package/package.json +3 -1
  185. package/schema/event.schema.json +538 -9
  186. package/schema/fixtures/event/invalid/approval-granted-sender-hashed-false.json +20 -0
  187. package/schema/fixtures/event/invalid/approval-granted-sender-hashed-raw-id.json +20 -0
  188. package/schema/fixtures/event/invalid/audit-gesture-refused-human-actor.json +16 -0
  189. package/schema/fixtures/event/invalid/audit-gesture-refused-no-actor-no-sender.json +15 -0
  190. package/schema/fixtures/event/invalid/audit-gesture-refused-unknown-gesture.json +16 -0
  191. package/schema/fixtures/event/invalid/audit-question-preempted-agent-actor.json +16 -0
  192. package/schema/fixtures/event/invalid/audit-question-preempted-no-question-id.json +16 -0
  193. package/schema/fixtures/event/invalid/audit-question-preempted-unknown-source.json +15 -0
  194. package/schema/fixtures/event/invalid/gate-path-signed-off-absolute-path.json +14 -0
  195. package/schema/fixtures/event/invalid/gate-path-signed-off-agent-actor.json +14 -0
  196. package/schema/fixtures/event/invalid/gate-path-signed-off-missing-path.json +13 -0
  197. package/schema/fixtures/event/valid/approval-granted-sender-hashed.json +20 -0
  198. package/schema/fixtures/event/valid/audit-gesture-refused-review-note.json +21 -0
  199. package/schema/fixtures/event/valid/audit-gesture-refused-sender-key-unavailable.json +19 -0
  200. package/schema/fixtures/event/valid/audit-gesture-refused.json +19 -0
  201. package/schema/fixtures/event/valid/audit-question-preempted-no-verdict.json +16 -0
  202. package/schema/fixtures/event/valid/audit-question-preempted.json +20 -0
  203. package/schema/fixtures/event/valid/gate-path-signed-off.json +14 -0
  204. package/schema/fixtures/event/valid/harness-kind-claude-code.json +23 -0
  205. package/schema/fixtures/event/valid/harness-kind-codex.json +23 -0
  206. package/schema/fixtures/event/valid/harness-kind-cursor.json +23 -0
  207. package/schema/fixtures/event/valid/harness-kind-grok.json +23 -0
  208. package/schema/fixtures/event/valid/harness-kind-muse.json +23 -0
  209. package/schema/fixtures/policy/invalid/senders-half-keyed.json +20 -0
  210. package/schema/fixtures/policy/valid/canonical.json +1 -1
  211. package/schema/fixtures/policy/valid/senders-keyed.json +24 -0
  212. package/schema/fixtures/policy-md/valid/canonical.md +1 -1
  213. package/schema/fixtures/policy-md/valid/with-values.md +5 -7
  214. package/schema/fixtures/values/invalid/class-shaped.json +1 -1
  215. package/schema/fixtures/values/invalid/duplicate-entry.json +1 -1
  216. package/schema/fixtures/values/invalid/non-string-item.json +1 -1
  217. package/schema/fixtures/values/invalid/over-cap.json +1 -1
  218. package/schema/fixtures/values/invalid/unknown-key.json +1 -1
  219. package/schema/fixtures/values/invalid/version-float.json +1 -0
  220. package/schema/fixtures/values/invalid/version-integer.json +1 -0
  221. package/schema/fixtures/values/invalid/version-wrong-string.json +1 -0
  222. package/schema/fixtures/values/valid/empty-lists.json +2 -3
  223. package/schema/fixtures/values/valid/full.json +5 -7
  224. package/schema/fixtures/values/valid/minimal.json +1 -1
  225. package/schema/fixtures/values-md/invalid/schema-invalid.md +5 -3
  226. package/schema/fixtures/values-md/invalid/two-blocks.md +3 -3
  227. package/schema/fixtures/values-md/invalid/unterminated.md +2 -2
  228. package/schema/fixtures/values-md/invalid/version-1.md +69 -0
  229. package/schema/fixtures/values-md/invalid/version-unquoted.md +64 -0
  230. package/schema/fixtures/values-md/invalid/yaml-error.md +2 -2
  231. package/schema/fixtures/values-md/valid/absent.md +1 -1
  232. package/schema/fixtures/values-md/valid/with-values.md +5 -7
  233. package/schema/policy.schema.json +54 -2
  234. package/schema/values.schema.json +7 -11
  235. package/schema/fixtures/values/invalid/version-string.json +0 -1
@@ -0,0 +1,20 @@
1
+ {
2
+ "seq": 94,
3
+ "ts": "2026-09-19T21:20:03Z",
4
+ "event": "approval.granted",
5
+ "task": "task-370",
6
+ "action_key": "task-370:chaser:2026-09-19",
7
+ "actor": "human:carter",
8
+ "channel": "telegram",
9
+ "payload": {
10
+ "sender": {
11
+ "channel": "telegram",
12
+ "id": "5551234567",
13
+ "hashed": false
14
+ },
15
+ "sender_source": "policy"
16
+ },
17
+ "alg": "sha256/jcs",
18
+ "prev": "4341a44ad46ed5c25a601f296530e5cbab7d3bfb6a3119f77a83c327ab5b54d5",
19
+ "hash": "bcd21fd125d9c85cc4b4eb1ff519448989c72c0fd70305cbb06b821d04926686"
20
+ }
@@ -0,0 +1,20 @@
1
+ {
2
+ "seq": 93,
3
+ "ts": "2026-09-19T21:18:55Z",
4
+ "event": "approval.granted",
5
+ "task": "task-370",
6
+ "action_key": "task-370:chaser:2026-09-19",
7
+ "actor": "human:carter",
8
+ "channel": "telegram",
9
+ "payload": {
10
+ "sender": {
11
+ "channel": "telegram",
12
+ "id": "5551234567",
13
+ "hashed": true
14
+ },
15
+ "sender_source": "policy"
16
+ },
17
+ "alg": "sha256/jcs",
18
+ "prev": "4341a44ad46ed5c25a601f296530e5cbab7d3bfb6a3119f77a83c327ab5b54d5",
19
+ "hash": "bcd21fd125d9c85cc4b4eb1ff519448989c72c0fd70305cbb06b821d04926686"
20
+ }
@@ -0,0 +1,16 @@
1
+ {
2
+ "seq": 74,
3
+ "ts": "2026-09-17T19:02:11Z",
4
+ "event": "audit.gesture_refused",
5
+ "actor": "human:carter",
6
+ "channel": "telegram",
7
+ "payload": {
8
+ "actor": "human:carter",
9
+ "gesture": "checkpoint-signature",
10
+ "code": "sender-unmapped",
11
+ "message": "a record of a refusal authored by either party to it is a record neither party can be held to"
12
+ },
13
+ "alg": "sha256/jcs",
14
+ "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
15
+ "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
16
+ }
@@ -0,0 +1,15 @@
1
+ {
2
+ "seq": 74,
3
+ "ts": "2026-09-17T19:02:11Z",
4
+ "event": "audit.gesture_refused",
5
+ "actor": "system:gate",
6
+ "channel": "telegram",
7
+ "payload": {
8
+ "gesture": "review",
9
+ "code": "sender-unmapped",
10
+ "message": "a record naming neither the person nor the account it could not name says nothing about who spent the attention"
11
+ },
12
+ "alg": "sha256/jcs",
13
+ "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
14
+ "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
15
+ }
@@ -0,0 +1,16 @@
1
+ {
2
+ "seq": 74,
3
+ "ts": "2026-09-17T19:02:11Z",
4
+ "event": "audit.gesture_refused",
5
+ "actor": "system:gate",
6
+ "channel": "telegram",
7
+ "payload": {
8
+ "actor": "human:carter",
9
+ "gesture": "policy-attestation",
10
+ "code": "sender-unmapped",
11
+ "message": "an attestation tap is a decision and is recorded as one; the gesture vocabulary is closed"
12
+ },
13
+ "alg": "sha256/jcs",
14
+ "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
15
+ "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
16
+ }
@@ -0,0 +1,16 @@
1
+ {
2
+ "seq": 91,
3
+ "ts": "2026-09-19T16:20:44Z",
4
+ "event": "audit.question_preempted",
5
+ "actor": "agent:codex",
6
+ "payload": {
7
+ "source": "codex-auto-reviewer",
8
+ "question": {
9
+ "id": "item_01H9"
10
+ },
11
+ "detail": "a record of an event authored by either party to it is a record neither party can be held to"
12
+ },
13
+ "alg": "sha256/jcs",
14
+ "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
15
+ "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
16
+ }
@@ -0,0 +1,16 @@
1
+ {
2
+ "seq": 91,
3
+ "ts": "2026-09-19T16:20:44Z",
4
+ "event": "audit.question_preempted",
5
+ "actor": "system:gate",
6
+ "payload": {
7
+ "source": "codex-auto-reviewer",
8
+ "question": {
9
+ "method": "item/autoApprovalReview/completed"
10
+ },
11
+ "verdict": "approve"
12
+ },
13
+ "alg": "sha256/jcs",
14
+ "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
15
+ "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
16
+ }
@@ -0,0 +1,15 @@
1
+ {
2
+ "seq": 91,
3
+ "ts": "2026-09-19T16:20:44Z",
4
+ "event": "audit.question_preempted",
5
+ "actor": "system:gate",
6
+ "payload": {
7
+ "source": "some-other-reviewer",
8
+ "question": {
9
+ "id": "item_01H9"
10
+ }
11
+ },
12
+ "alg": "sha256/jcs",
13
+ "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
14
+ "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
15
+ }
@@ -0,0 +1,14 @@
1
+ {
2
+ "seq": 61,
3
+ "ts": "2026-09-16T11:42:19Z",
4
+ "event": "gate.path.signed_off",
5
+ "actor": "human:carter",
6
+ "channel": "cli",
7
+ "payload": {
8
+ "path": "/Users/carter/dev/approval-md/SPEC.md",
9
+ "sha256": "b83a1e6f45c90d27ea1b3f8c5027d4196be0a73c85f21d604ca97e3b18d520af"
10
+ },
11
+ "alg": "sha256/jcs",
12
+ "prev": "2c9a41f8e07d5b6139fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e70f",
13
+ "hash": "9d41b7ca2e08f536c1a94db7e230f85b6417cd90a2f35e8b1c76d0492ab3f158"
14
+ }
@@ -0,0 +1,14 @@
1
+ {
2
+ "seq": 61,
3
+ "ts": "2026-09-16T11:42:19Z",
4
+ "event": "gate.path.signed_off",
5
+ "actor": "agent:claude-code",
6
+ "channel": "cli",
7
+ "payload": {
8
+ "path": "SPEC.md",
9
+ "sha256": "b83a1e6f45c90d27ea1b3f8c5027d4196be0a73c85f21d604ca97e3b18d520af"
10
+ },
11
+ "alg": "sha256/jcs",
12
+ "prev": "2c9a41f8e07d5b6139fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e70f",
13
+ "hash": "9d41b7ca2e08f536c1a94db7e230f85b6417cd90a2f35e8b1c76d0492ab3f158"
14
+ }
@@ -0,0 +1,13 @@
1
+ {
2
+ "seq": 61,
3
+ "ts": "2026-09-16T11:42:19Z",
4
+ "event": "gate.path.signed_off",
5
+ "actor": "human:carter",
6
+ "channel": "cli",
7
+ "payload": {
8
+ "sha256": "b83a1e6f45c90d27ea1b3f8c5027d4196be0a73c85f21d604ca97e3b18d520af"
9
+ },
10
+ "alg": "sha256/jcs",
11
+ "prev": "2c9a41f8e07d5b6139fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e70f",
12
+ "hash": "9d41b7ca2e08f536c1a94db7e230f85b6417cd90a2f35e8b1c76d0492ab3f158"
13
+ }
@@ -0,0 +1,20 @@
1
+ {
2
+ "seq": 91,
3
+ "ts": "2026-09-19T21:14:08Z",
4
+ "event": "approval.granted",
5
+ "task": "task-370",
6
+ "action_key": "task-370:chaser:2026-09-19",
7
+ "actor": "human:carter",
8
+ "channel": "telegram",
9
+ "payload": {
10
+ "sender": {
11
+ "channel": "telegram",
12
+ "id": "hmac-sha256:3f2a9c11b4d7e6085a1c2f9d8e7b6a5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a",
13
+ "hashed": true
14
+ },
15
+ "sender_source": "policy"
16
+ },
17
+ "alg": "sha256/jcs",
18
+ "prev": "4341a44ad46ed5c25a601f296530e5cbab7d3bfb6a3119f77a83c327ab5b54d5",
19
+ "hash": "bcd21fd125d9c85cc4b4eb1ff519448989c72c0fd70305cbb06b821d04926686"
20
+ }
@@ -0,0 +1,21 @@
1
+ {
2
+ "seq": 75,
3
+ "ts": "2026-09-17T19:04:38Z",
4
+ "event": "audit.gesture_refused",
5
+ "actor": "system:gate",
6
+ "channel": "telegram",
7
+ "payload": {
8
+ "actor": "human:carter",
9
+ "gesture": "review-note",
10
+ "code": "policy-not-attested",
11
+ "sender": {
12
+ "channel": "telegram",
13
+ "id": "5559876543"
14
+ },
15
+ "sender_source": "policy",
16
+ "message": "the policy file has changed since it was attested at seq 44607; the sender mapping it declares is not in force, so nothing was recorded"
17
+ },
18
+ "alg": "sha256/jcs",
19
+ "prev": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f",
20
+ "hash": "8b40e27c5f1a936d04e8b2c6a1d3f5079e2b4c6d8a0f2e4160a8c2e406283bda"
21
+ }
@@ -0,0 +1,19 @@
1
+ {
2
+ "seq": 92,
3
+ "ts": "2026-09-19T21:16:40Z",
4
+ "event": "audit.gesture_refused",
5
+ "actor": "system:gate",
6
+ "channel": "telegram",
7
+ "payload": {
8
+ "gesture": "checkpoint-signature",
9
+ "code": "sender-key-unavailable",
10
+ "sender": {
11
+ "channel": "telegram",
12
+ "id": "5551234567"
13
+ },
14
+ "message": "the attested policy maps telegram senders in the keyed form and APPROVAL_SENDER_KEY is unset or empty in this process, so no account on this channel can be resolved and nothing was signed"
15
+ },
16
+ "alg": "sha256/jcs",
17
+ "prev": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f",
18
+ "hash": "9d4f1b73e0a6c58217f3b9d0e6a4c2815f7b3d9e1a0c6f48273b5d9e0a6c4f81"
19
+ }
@@ -0,0 +1,19 @@
1
+ {
2
+ "seq": 74,
3
+ "ts": "2026-09-17T19:02:11Z",
4
+ "event": "audit.gesture_refused",
5
+ "actor": "system:gate",
6
+ "channel": "telegram",
7
+ "payload": {
8
+ "gesture": "checkpoint-signature",
9
+ "code": "sender-unmapped",
10
+ "sender": {
11
+ "channel": "telegram",
12
+ "id": "5551234567"
13
+ },
14
+ "message": "the attested policy maps no approver to telegram sender 5551234567, so this checkpoint was not signed and nothing was appended to the chain"
15
+ },
16
+ "alg": "sha256/jcs",
17
+ "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
18
+ "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
19
+ }
@@ -0,0 +1,16 @@
1
+ {
2
+ "seq": 92,
3
+ "ts": "2026-09-19T16:20:45Z",
4
+ "event": "audit.question_preempted",
5
+ "actor": "system:gate",
6
+ "payload": {
7
+ "source": "codex-auto-reviewer",
8
+ "question": {
9
+ "id": "item_01HA",
10
+ "method": "item/autoApprovalReview/started"
11
+ }
12
+ },
13
+ "alg": "sha256/jcs",
14
+ "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
15
+ "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
16
+ }
@@ -0,0 +1,20 @@
1
+ {
2
+ "seq": 91,
3
+ "ts": "2026-09-19T16:20:44Z",
4
+ "event": "audit.question_preempted",
5
+ "actor": "system:gate",
6
+ "payload": {
7
+ "source": "codex-auto-reviewer",
8
+ "question": {
9
+ "id": "item_01H9",
10
+ "method": "item/autoApprovalReview/completed",
11
+ "thread": "thread_7f2",
12
+ "turn": "turn_3"
13
+ },
14
+ "verdict": "approve",
15
+ "detail": "approval codex bridge stopped the session under bridge-auto-reviewer-active"
16
+ },
17
+ "alg": "sha256/jcs",
18
+ "prev": "7f625051c176f2f260a1f7e25c9a933717ebb49917a8788ac25ae7a4614ebb30",
19
+ "hash": "2e9b7c1a4d6f08213b5c7e9a0d2f416385a7c9e1b3d5f70921a3c5e7092b4d6f"
20
+ }
@@ -0,0 +1,14 @@
1
+ {
2
+ "seq": 61,
3
+ "ts": "2026-09-16T11:42:19Z",
4
+ "event": "gate.path.signed_off",
5
+ "actor": "human:carter",
6
+ "channel": "cli",
7
+ "payload": {
8
+ "path": "SPEC.md",
9
+ "sha256": "b83a1e6f45c90d27ea1b3f8c5027d4196be0a73c85f21d604ca97e3b18d520af"
10
+ },
11
+ "alg": "sha256/jcs",
12
+ "prev": "2c9a41f8e07d5b6139fbc84a2e0d97c31556a08bf4e2913d7ca60b85f9d3e70f",
13
+ "hash": "9d41b7ca2e08f536c1a94db7e230f85b6417cd90a2f35e8b1c76d0492ab3f158"
14
+ }
@@ -0,0 +1,23 @@
1
+ {
2
+ "seq": 51,
3
+ "ts": "2026-09-19T08:14:02Z",
4
+ "event": "task.registered",
5
+ "task": "hook:claude-sess-1:toolu-11",
6
+ "actor": "agent:claude-code",
7
+ "payload": {
8
+ "state": "proposed",
9
+ "actions": [
10
+ {
11
+ "class": "deps.add",
12
+ "summary": "npm install --save-dev oxlint",
13
+ "idempotency_key": "hook:claude-sess-1:toolu-11:deps.add",
14
+ "payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
15
+ }
16
+ ],
17
+ "harness": "claude-code",
18
+ "harness_version": "2.0.14 (Claude Code)"
19
+ },
20
+ "alg": "sha256/jcs",
21
+ "prev": "b1cbb27b12bd811a9d197f5fb1c494c191040271901214286f0c10bc84820173",
22
+ "hash": "129eaa2bad261af1367f963979287653173eba8adce9961f09f08970f38d838f"
23
+ }
@@ -0,0 +1,23 @@
1
+ {
2
+ "seq": 53,
3
+ "ts": "2026-09-19T08:16:27Z",
4
+ "event": "task.registered",
5
+ "task": "hook:codex-sess-1:toolu-13",
6
+ "actor": "agent:codex",
7
+ "payload": {
8
+ "state": "proposed",
9
+ "actions": [
10
+ {
11
+ "class": "deps.add",
12
+ "summary": "npm install --save-dev oxlint",
13
+ "idempotency_key": "hook:codex-sess-1:toolu-13:deps.add",
14
+ "payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
15
+ }
16
+ ],
17
+ "harness": "codex",
18
+ "harness_version": "codex-cli 0.155.0"
19
+ },
20
+ "alg": "sha256/jcs",
21
+ "prev": "2f7c4ab1d0e58936b47c0f1a85d2e6b390c47f1825ad9603be7cd41f5029a8b7",
22
+ "hash": "83b5e1097cd264af3b0e7195c84fd6a201e73bc94f58026dae1f7c3b950de846"
23
+ }
@@ -0,0 +1,23 @@
1
+ {
2
+ "seq": 52,
3
+ "ts": "2026-09-19T08:15:11Z",
4
+ "event": "task.registered",
5
+ "task": "hook:cursor-sess-1:toolu-12",
6
+ "actor": "agent:cursor",
7
+ "payload": {
8
+ "state": "proposed",
9
+ "actions": [
10
+ {
11
+ "class": "deps.add",
12
+ "summary": "npm install --save-dev oxlint",
13
+ "idempotency_key": "hook:cursor-sess-1:toolu-12:deps.add",
14
+ "payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
15
+ }
16
+ ],
17
+ "harness": "cursor",
18
+ "harness_version": "cursor-agent 2026.08.19"
19
+ },
20
+ "alg": "sha256/jcs",
21
+ "prev": "129eaa2bad261af1367f963979287653173eba8adce9961f09f08970f38d838f",
22
+ "hash": "2f7c4ab1d0e58936b47c0f1a85d2e6b390c47f1825ad9603be7cd41f5029a8b7"
23
+ }
@@ -0,0 +1,23 @@
1
+ {
2
+ "seq": 54,
3
+ "ts": "2026-09-19T08:17:44Z",
4
+ "event": "task.registered",
5
+ "task": "hook:grok-sess-1:toolu-14",
6
+ "actor": "agent:grok",
7
+ "payload": {
8
+ "state": "proposed",
9
+ "actions": [
10
+ {
11
+ "class": "deps.add",
12
+ "summary": "npm install --save-dev oxlint",
13
+ "idempotency_key": "hook:grok-sess-1:toolu-14:deps.add",
14
+ "payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
15
+ }
16
+ ],
17
+ "harness": "grok",
18
+ "harness_version": "grok 0.4.2"
19
+ },
20
+ "alg": "sha256/jcs",
21
+ "prev": "83b5e1097cd264af3b0e7195c84fd6a201e73bc94f58026dae1f7c3b950de846",
22
+ "hash": "c6410d97b28e53fa0716d8c4b93e250fa8d17c6b4093e5ad21fc80b7e5943d1a"
23
+ }
@@ -0,0 +1,23 @@
1
+ {
2
+ "seq": 55,
3
+ "ts": "2026-09-19T08:18:59Z",
4
+ "event": "task.registered",
5
+ "task": "hook:muse-sess-1:toolu-15",
6
+ "actor": "agent:muse",
7
+ "payload": {
8
+ "state": "proposed",
9
+ "actions": [
10
+ {
11
+ "class": "deps.add",
12
+ "summary": "npm install --save-dev oxlint",
13
+ "idempotency_key": "hook:muse-sess-1:toolu-15:deps.add",
14
+ "payload_hash": "4d0a9c2b7e5f13860ad4c9b217e3f508cc61a7d2394b8e05f7ca61d3b8092e4f"
15
+ }
16
+ ],
17
+ "harness": "muse",
18
+ "harness_version": "muse-bin-1.3.0-R3233.1"
19
+ },
20
+ "alg": "sha256/jcs",
21
+ "prev": "c6410d97b28e53fa0716d8c4b93e250fa8d17c6b4093e5ad21fc80b7e5943d1a",
22
+ "hash": "7d925ec380b14fa6c05e971b3d4287ac6fb015e93c2a480df6b1e7c05a83942f"
23
+ }
@@ -0,0 +1,20 @@
1
+ {
2
+ "version": "0.1",
3
+ "defaults": {
4
+ "autonomy": "manual",
5
+ "channel": "telegram",
6
+ "approval_ttl": "30m",
7
+ "on_expiry": "reject"
8
+ },
9
+ "approvers": {
10
+ "carter": {
11
+ "channels": ["telegram"],
12
+ "senders": {
13
+ "telegram": "sha256:3f2a9c11b4d7e6085a1c2f9d8e7b6a5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a"
14
+ }
15
+ }
16
+ },
17
+ "classes": {
18
+ "communicate.email.external": { "autonomy": "manual" }
19
+ }
20
+ }
@@ -14,7 +14,7 @@
14
14
  "classes": {
15
15
  "read.*": { "autonomy": "autonomous" },
16
16
  "files.write.workspace": { "autonomy": "autonomous" },
17
- "calendar.write.own": { "autonomy": "supervised" },
17
+ "calendar.write.own": { "autonomy": "supervised-retro" },
18
18
  "communicate.email.draft": { "autonomy": "autonomous" },
19
19
  "communicate.email.external": {
20
20
  "autonomy": "manual",
@@ -0,0 +1,24 @@
1
+ {
2
+ "version": "0.1",
3
+ "defaults": {
4
+ "autonomy": "manual",
5
+ "channel": "telegram",
6
+ "approval_ttl": "30m",
7
+ "on_expiry": "reject"
8
+ },
9
+ "approvers": {
10
+ "carter": {
11
+ "channels": ["telegram", "cli"],
12
+ "senders": {
13
+ "telegram": "hmac-sha256:3f2a9c11b4d7e6085a1c2f9d8e7b6a5c4d3e2f1a0b9c8d7e6f5a4b3c2d1e0f9a"
14
+ }
15
+ },
16
+ "dana": {
17
+ "channels": ["telegram"],
18
+ "senders": { "telegram": "5551234567" }
19
+ }
20
+ },
21
+ "classes": {
22
+ "communicate.email.external": { "autonomy": "manual" }
23
+ }
24
+ }
@@ -19,7 +19,7 @@ approvers:
19
19
  classes:
20
20
  read.*: { autonomy: autonomous }
21
21
  files.write.workspace: { autonomy: autonomous }
22
- calendar.write.own: { autonomy: supervised }
22
+ calendar.write.own: { autonomy: supervised-retro }
23
23
  communicate.email.draft: { autonomy: autonomous }
24
24
  communicate.email.external:
25
25
  autonomy: manual
@@ -19,7 +19,7 @@ approvers:
19
19
  classes:
20
20
  read.*: { autonomy: autonomous }
21
21
  files.write.workspace: { autonomy: autonomous }
22
- calendar.write.own: { autonomy: supervised }
22
+ calendar.write.own: { autonomy: supervised-retro }
23
23
  communicate.email.draft: { autonomy: autonomous }
24
24
  communicate.email.external:
25
25
  autonomy: manual
@@ -55,7 +55,7 @@ The block below is guidance, never policy. Nothing in it grants anything, and
55
55
  no part of the runtime reads it to decide.
56
56
 
57
57
  ```yaml approval-values
58
- version: 1
58
+ version: "0.2"
59
59
 
60
60
  love:
61
61
  - seeing the real change, not a description of it
@@ -64,16 +64,14 @@ love:
64
64
  like:
65
65
  - success reported first, caveats after
66
66
  - small reviewable commits
67
+ - honest opinions on the work, including when you think a task is wrong
68
+ - a journal entry of about five points per milestone
67
69
 
68
70
  dislike:
69
71
  - prose where a command would do
70
72
  - being asked to approve something I cannot see
71
73
 
72
- wants:
73
- - honest opinions on the work, including when you think a task is wrong
74
- - a journal entry of about five points per milestone
75
-
76
- responds: "Usually within the hour on the phone; a bare 'ok' means yes and is not curtness."
74
+ communication: "Usually within the hour on the phone; a bare 'ok' means yes and is not curtness."
77
75
  ```
78
76
 
79
77
  Prose again after the block, ignored by both readers.
@@ -1,5 +1,5 @@
1
1
  {
2
- "version": 1,
2
+ "version": "0.2",
3
3
  "like": ["small reviewable commits"],
4
4
  "classes": {
5
5
  "message.send": {
@@ -1,4 +1,4 @@
1
1
  {
2
- "version": 1,
2
+ "version": "0.2",
3
3
  "dislike": ["prose where a command would do", "prose where a command would do"]
4
4
  }
@@ -1,4 +1,4 @@
1
1
  {
2
- "version": 1,
2
+ "version": "0.2",
3
3
  "love": ["a runbook I can paste into a terminal", 7]
4
4
  }
@@ -1,5 +1,5 @@
1
1
  {
2
- "version": 1,
2
+ "version": "0.2",
3
3
  "like": [
4
4
  "preference 01",
5
5
  "preference 02",
@@ -1,5 +1,5 @@
1
1
  {
2
- "version": 1,
2
+ "version": "0.2",
3
3
  "like": ["small reviewable commits"],
4
4
  "priority": 3
5
5
  }
@@ -0,0 +1 @@
1
+ { "version": 0.2 }
@@ -0,0 +1 @@
1
+ { "version": 1 }
@@ -0,0 +1 @@
1
+ { "version": "0.1" }
@@ -1,7 +1,6 @@
1
1
  {
2
- "version": 1,
2
+ "version": "0.2",
3
3
  "love": [],
4
4
  "like": [],
5
- "dislike": [],
6
- "wants": []
5
+ "dislike": []
7
6
  }
@@ -1,20 +1,18 @@
1
1
  {
2
- "version": 1,
2
+ "version": "0.2",
3
3
  "love": [
4
4
  "seeing the real change, not a description of it",
5
5
  "a runbook I can paste into a terminal"
6
6
  ],
7
7
  "like": [
8
8
  "success reported first, caveats after",
9
- "small reviewable commits"
9
+ "small reviewable commits",
10
+ "honest opinions on the work, including when you think a task is wrong",
11
+ "a journal entry of about five points per milestone"
10
12
  ],
11
13
  "dislike": [
12
14
  "prose where a command would do",
13
15
  "being asked to approve something I cannot see"
14
16
  ],
15
- "wants": [
16
- "honest opinions on the work, including when you think a task is wrong",
17
- "a journal entry of about five points per milestone"
18
- ],
19
- "responds": "Usually within the hour on the phone; a bare 'ok' means yes and is not curtness."
17
+ "communication": "Usually within the hour on the phone; a bare 'ok' means yes and is not curtness."
20
18
  }