patchwork-os 0.2.0-beta.13.canary.306 → 0.2.0-beta.13.canary.307

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "patchwork-os",
3
- "version": "0.2.0-beta.13.canary.306",
3
+ "version": "0.2.0-beta.13.canary.307",
4
4
  "description": "Your personal AI runtime, local-first. Patchwork OS gives any AI model a consistent set of tools, YAML recipes, a delegation policy with approval queue, and a durable trace memory — all on your machine, all under your policy.",
5
5
  "type": "module",
6
6
  "main": "dist/index.js",
@@ -1,6 +1,6 @@
1
1
  # Dependency-upkeep worker — top-right beachhead. The classic low-blast,
2
2
  # continuous, verifiable job to land first (the wedge): watch for outdated /
3
- # vulnerable deps and open a bump PR. A human still merges → ceiling held at L3.
3
+ # vulnerable deps and open a bump PR.
4
4
  id: dependency-upkeep-worker
5
5
  name: Dependency Upkeep Worker
6
6
  sector: engineering
@@ -12,7 +12,15 @@ owns:
12
12
  - deps-read # auditDependencies / getSecurityAdvisories — read-only
13
13
  - vcs-local # gitCommit / gitCheckout on a branch — reversible
14
14
  - vcs-remote # githubCreatePR — compensable + brand-exposed
15
- autonomyCeiling: 3 # opening PRs autonomously is fine; merging stays human (policy)
15
+ # Opening a PR (vcs-remote) is compensable — but there is NO outcome grader for
16
+ # PRs yet (OutcomeStore is issue-URL-keyed only), so a bump PR nobody reviews
17
+ # would fold good:true past the 24h durability window: the same trust-by-neglect
18
+ # the issue-class fix (#1064) closed, surviving on the PR path. Cap below the
19
+ # compensable auto-allow rung (L2) so PR-opening stays human-approved regardless
20
+ # of earned level — mirroring test-guardian's `issue` cap. Raise to 3 (open PRs
21
+ # autonomously, merging still human) once a PR-outcome grader exists (merged/
22
+ # closed-state detection feeding the OutcomeStore).
23
+ autonomyCeiling: 1
16
24
  competence:
17
25
  mean: 0.8
18
26
  strength: 4