[Darkroom4364]

Target

• Issue or feature branch targets dev
• Promotion branch targets main from dev

Validation

• go test ./... in server/
• cargo test --locked in agent/
• node docs/schemas/validate-examples.js
• Foxguard was not run locally; CI remains the security scan source
• Documentation was updated for the module contract and roadmap

Notes

• Adds a closed, compile-time module registry and capability-aware task dispatch.
• Ships the self-scoped, read-only agent.capability_inventory.v1 evidence module.
• Adds durable module arguments/evidence, catalog discovery, schemas, and lifecycle coverage.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 388c645a-0029-448d-8b6b-3850227ae0e9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/phase4-module-sdk

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[Darkroom4364]

Blocked — human architecture/safety review

The existing typed registry and schema checks are positive, but insufficient to promote this as a defensive module SDK. Please resolve before merge:

1. Establish a defensible scope boundary: generic shell tasking remains active, so this is not a closed-world safety control.
2. Make safety, approval, and evidence semantics durable, auditable, and actually enforced—not request metadata alone.
3. Make the inventory collector match its minimal read-only evidence contract with a meaningful execution bound.
4. Add migration/restart coverage and policy-negative tests.

No further capability promotion should proceed while these conditions remain unresolved.