diff --git a/AGENTS.md b/AGENTS.md index 1de6a20..d180b2a 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -2,7 +2,7 @@ Read the English editorial reference `docs/design.md`, the design revisions it links (currently `docs/design-revision-1.md` and `docs/design-revision-2.md`), the immutable approval `docs/design.ko.md`, `docs/contracts.md`, and `milestones.json` before changing a contract or milestone boundary. The historical approval preserves the decisions of its time; the editorial reference and its revisions are the current baseline; contracts describe implemented behavior only. The user's current instructions take precedence over this file. -- CS-RG implementation is suspended: pending the CS-RG integration-boundary revalidation, do not implement any CS-RG unit (CSRG-C00, CSRG-C03 and CSRG-C09 in particular) or design revision 1's CodeSpace execution-ownership choices. No replacement architecture has been approved. *Current state, 2026-10-11:* the owner directed CS-RG implementation as units U1–U6 in CodeSpace on 2026-10-02, outside this suspension: each unit starts only on the owner's direction, after the previous one is merged and verified. U1, its hardening, U2, U3, U4 and U5 are merged, U6 has not started, and the suspension still applies to the CSRG-C units. +- CS-RG implementation is suspended: pending the CS-RG integration-boundary revalidation, do not implement any CS-RG unit (CSRG-C00, CSRG-C03 and CSRG-C09 in particular) or design revision 1's CodeSpace execution-ownership choices. No replacement architecture has been approved. *Current state, 2026-10-12:* the owner directed CS-RG implementation as units U1–U6 in CodeSpace on 2026-10-02, outside this suspension: each unit starts only on the owner's direction, after the previous one is merged and verified. U1, its hardening, U2, U3, U4 and U5 are merged, U6 is active, and the suspension still applies to the CSRG-C units. - Keep CodeSpace/Codex types, process ownership, PTY and output management outside this repository's authority core. - External implementations, Codex included, enter DevGuard only through a declared adapter or binding with a reviewed, immutable pin, justified by what it replaces and by how its cost is contained ([design revision 2](docs/design-revision-2.md)). The authority core and the generic client contract carry no CodeSpace or Codex product types. `scripts/validate.py` still rejects every `codex-` and `codespace-` package; only the reviewed PR that adds the first real adapter component changes that gate, together with tests of its boundary. Adapted or patched upstream code records its provenance and divergence. - Keep reservation, planned policy, applied evidence, and successful user executable startup distinct. diff --git a/docs/ko/planning/README.md b/docs/ko/planning/README.md index 1557ee6..f0bd88b 100644 --- a/docs/ko/planning/README.md +++ b/docs/ko/planning/README.md @@ -23,7 +23,7 @@ ## 마일스톤과 우선 경로 -> **상태:** 설계 개정 1의 실행 소유권 선택을 포함한 CS-RG는 CS-RG 통합 경계 재검증이 끝날 때까지 구현 지시로서 효력이 중지되며, 어떤 CS-RG 단위도 시작할 수 없습니다. CS-RG 계획의 표기를 참고하십시오. *2026-10-11 현재 상태:* 소유자는 2026-10-02에 이 효력 중지와 별도로 CS-RG 구현을 CodeSpace의 U1–U6 단위로 지시했습니다. U1과 그 보강, U2, U3, U4, U5는 병합되었고 U6은 시작하지 않았습니다. 이 계획의 단위는 여전히 효력이 중지된 채 시작하지 않았습니다. +> **상태:** 설계 개정 1의 실행 소유권 선택을 포함한 CS-RG는 CS-RG 통합 경계 재검증이 끝날 때까지 구현 지시로서 효력이 중지되며, 어떤 CS-RG 단위도 시작할 수 없습니다. CS-RG 계획의 표기를 참고하십시오. *2026-10-12 현재 상태:* 소유자는 2026-10-02에 이 효력 중지와 별도로 CS-RG 구현을 CodeSpace의 U1–U6 단위로 지시했습니다. U1과 그 보강, U2, U3, U4, U5는 병합되었고 U6이 진행 중입니다. 이 계획의 단위는 여전히 효력이 중지된 채 시작하지 않았습니다. ```mermaid flowchart LR diff --git a/docs/ko/planning/milestones/CS-RG.md b/docs/ko/planning/milestones/CS-RG.md index 0ccbe59..00326c8 100644 --- a/docs/ko/planning/milestones/CS-RG.md +++ b/docs/ko/planning/milestones/CS-RG.md @@ -2,7 +2,7 @@ > **상태: 구현 지시로서 효력 중지.** 이 계획의 작업 단위, 특히 CSRG-C00·CSRG-C03·CSRG-C09와 이들이 전제한 CodeSpace 소유 관리형 실행 전송은 구현하지 않습니다. 다른 단위는 모두 CSRG-C00에 의존하므로 어떤 CS-RG 단위도 시작할 수 없습니다. CodeSpace 통합 계획에 대해 소유자가 지시한 검토인 CS-RG 통합 경계 재검증(작업 단위가 아닙니다)이 끝날 때까지 적용됩니다. 대체 구조는 승인되지 않았으며, 소유자가 재검증 결과를 검토한 뒤 결정합니다. 이 표기는 지시의 효력만 중지하며 어떤 안전 요구도 완화하지 않습니다. 아래 내용은 이력 추적을 위해 바꾸지 않고 남깁니다. > -> *2026-10-12 현재 상태:* 소유자는 2026-10-02에 이 효력 중지와 별도로 CS-RG 구현을 CodeSpace의 U1–U6 단위로 지시했으며, 이 효력 중지는 이 계획의 단위에 계속 적용됩니다. U1과 그 보강, U2, U3, U4, U5는 병합·검증되었고 U6은 시작하지 않았습니다. 2026-10-12부터 관리 PTY 실행도 관리 pipe 실행처럼 회수 전에 관찰하며, 고정된 Codex에 얹은 기록된 패치를 씁니다(novelKR/CodeSpace#93과 novelKR/CodeSpace#95, CodeSpace main `181a020`). 이는 2026-10-11 소유자의 선택입니다. 그 전까지 U5는 PTY 실행을 Codex가 회수한 뒤에만 관찰했습니다. 원장은 CS-RG를 `in-progress`, qualification `not-run`으로 기록합니다. 아래의 기준 상태는 시작하지 않은 이 계획의 단위에 대한 것입니다. +> *2026-10-12 현재 상태:* 소유자는 2026-10-02에 이 효력 중지와 별도로 CS-RG 구현을 CodeSpace의 U1–U6 단위로 지시했으며, 이 효력 중지는 이 계획의 단위에 계속 적용됩니다. U1과 그 보강, U2, U3, U4, U5는 병합·검증되었고 U6이 진행 중인 단위입니다. 2026-10-12부터 관리 PTY 실행도 관리 pipe 실행처럼 회수 전에 관찰하며, 고정된 Codex에 얹은 기록된 패치를 씁니다(novelKR/CodeSpace#93과 novelKR/CodeSpace#95, CodeSpace main `181a020`). 이는 2026-10-11 소유자의 선택입니다. 그 전까지 U5는 PTY 실행을 Codex가 회수한 뒤에만 관찰했습니다. 원장은 CS-RG를 `in-progress`, qualification `not-run`으로 기록합니다. 아래의 기준 상태는 시작하지 않은 이 계획의 단위에 대한 것입니다. 소유 저장소: CodeSpace. 상태: `not-started` / `not-run`. 진입: DG1-C12의 검증된 macOS 조합과 설계 개정 1의 CodeSpace 대응 문서 CSP-D04의 전달([PR 전달](../pr-delivery.md)). DG1-C12는 완료되었고, macOS qualification을 마친 release `0.1.0-5daee5d-b3fa569e`가 pin 후보다. 계약 검토·adapter 초안은 앞서 준비할 수 있지만 일상 `required` 소비 자격을 앞당기지 않는다. 완료: CSRG-C09의 backend 결정 뒤 남은 head에서 고정 client·artifact·wire 조합이 기존 권한/승인/workspace/PTY 계약과 관제 SLO를 함께 통과. diff --git a/docs/milestones.md b/docs/milestones.md index 6573464..8ec1aaf 100644 --- a/docs/milestones.md +++ b/docs/milestones.md @@ -8,7 +8,7 @@ The [detailed planning index](planning/README.md) owns the 48 proposed commit un |---|---|---| | DG-0 | Independent repository, approved design, resource and compatibility contracts, durable state transitions, fake-backend fault tests, reproducible 1.95.0 validation | Implemented; use the exact-source qualification report for validation status | | DG-1 | Real macOS host probes, daemon and CLI, launch gate, Cargo/generic adapters, parent-budget candidate tests, safe service update/repair, three measured SLO runs per target backend | Implemented: C01 configuration/storage, C02 authenticated foreground transport, C03 native boot/process/pressure evidence, C04 cooperative policy/scope evidence, C05 fenced launch helper, C06 reconciliation, C07 command-line owner, C08 Cargo adapters, C09 installation as the current user's LaunchAgent, C10 parent leases with candidate authorities, C11 upgrade and repair and C12 the SLO qualification harness. The macOS SLO is qualified for release `0.1.0-5daee5d-b3fa569e` on the measured host and policy; Linux is not qualified | -| CS-RG | Execution-boundary fitness (C00), full-SHA consumer pin, a common execution supervisor with pre-spawn slots and one reaper, PrepareExec/ExecPrepared, approval preservation, bounded control/data lanes, output and replay, InProcess/UDS and pipe/PTY parity, the legacy-backend decision (C09) and upstream regression qualification of the resulting head | In progress, not qualified: implemented in CodeSpace as the owner-directed units U1–U6 (2026-10-02), outside the suspended C-series plan. U1, its hardening, U2, U3, U4 and U5 are merged and verified (CodeSpace #82, #83, #84, #88, #90, #92); U6 has not started | +| CS-RG | Execution-boundary fitness (C00), full-SHA consumer pin, a common execution supervisor with pre-spawn slots and one reaper, PrepareExec/ExecPrepared, approval preservation, bounded control/data lanes, output and replay, InProcess/UDS and pipe/PTY parity, the legacy-backend decision (C09) and upstream regression qualification of the resulting head | In progress, not qualified: implemented in CodeSpace as the owner-directed units U1–U6 (2026-10-02), outside the suspended C-series plan. U1, its hardening, U2, U3, U4 and U5 are merged and verified (CodeSpace #82, #83, #84, #88, #90, #92); U6 is the active unit | | P1-RECOVERY | Opt-in Gateway restart/reconnection while an independent Runner retains processes and I/O; reconcile workspace, approvals and DevGuard leases | Not started; depends on CS-RG; InProcess and Runner-loss I/O restoration excluded | | DG-LINUX | Actual Linux controller, ancestor capacity, complete sandbox/proxy scope, control protection and reclaim evidence | Not started; required for product completion | | DG-CACHE | Registered-root lease/reclaim exclusion, protected artifacts/evidence, interrupted trash sweep and measured physical recovery | Not started; not a P1 prerequisite | @@ -16,7 +16,7 @@ The [detailed planning index](planning/README.md) owns the 48 proposed commit un > **CS-RG status: suspended as an implementation directive.** Pending the CS-RG integration-boundary revalidation, no CS-RG unit may start; no replacement architecture has been approved. See the notice in the [CS-RG plan](planning/milestones/CS-RG.md). > -> *Current state, 2026-10-11:* on 2026-10-02 the owner directed CS-RG implementation as units U1–U6 in CodeSpace, outside this suspension, which still applies to the plan's CSRG-C00–C09 units. U1, its hardening, U2, U3, U4 and U5 are merged and verified, and U6 has not started. CS-RG is not qualified. +> *Current state, 2026-10-12:* on 2026-10-02 the owner directed CS-RG implementation as units U1–U6 in CodeSpace, outside this suspension, which still applies to the plan's CSRG-C00–C09 units. U1, its hardening, U2, U3, U4 and U5 are merged and verified, and U6 is the active unit. CS-RG is not qualified. DG-0's SQLite and fake-backend tests do not qualify a running resource governor. The `devguardd` bootstrap/path/check commands and foreground `serve` with authenticated status and native C03 host evidence are available. With native evidence the service opens registration over the wire, fenced launch through `devguard-launch` and reconciliation. The `devguard` command-line owner (C07) runs commands through that service, with Cargo adapters (C08). A packaged release can be installed as the current user's LaunchAgent (C09), a candidate build verified under a parent lease with `devguard test-candidate` (C10), and the installed release upgraded or repaired with `devguard upgrade` and `devguard repair` (C11). The SLO protocol measures the installed release with `scripts/measure.py` (C12). CodeSpace resources settings and Runner wire changes remain future work; see [operations](operations.md). The approved design's examples must not be represented as currently runnable commands. diff --git a/docs/planning/README.md b/docs/planning/README.md index f7c81d6..7602ee3 100644 --- a/docs/planning/README.md +++ b/docs/planning/README.md @@ -22,7 +22,7 @@ The contract baseline is DG-0: accounting, persistence and fake-backend tests. D ## Dependencies -> **Status:** CS-RG, including design revision 1's execution-ownership choices, is suspended as an implementation directive while the CS-RG integration-boundary revalidation is pending; no CS-RG unit may start. See the notice in the CS-RG plan. *Current state, 2026-10-11:* the owner directed CS-RG implementation as units U1–U6 in CodeSpace on 2026-10-02, outside this suspension; U1, its hardening, U2, U3, U4 and U5 are merged, and U6 has not started. This plan's units remain suspended and not started. +> **Status:** CS-RG, including design revision 1's execution-ownership choices, is suspended as an implementation directive while the CS-RG integration-boundary revalidation is pending; no CS-RG unit may start. See the notice in the CS-RG plan. *Current state, 2026-10-12:* the owner directed CS-RG implementation as units U1–U6 in CodeSpace on 2026-10-02, outside this suspension; U1, its hardening, U2, U3, U4 and U5 are merged, and U6 is active. This plan's units remain suspended and not started. ```mermaid flowchart LR diff --git a/docs/planning/milestones/CS-RG.md b/docs/planning/milestones/CS-RG.md index c240f51..8ab0b1e 100644 --- a/docs/planning/milestones/CS-RG.md +++ b/docs/planning/milestones/CS-RG.md @@ -2,7 +2,7 @@ > **Status: suspended as an implementation directive.** This plan's work units, in particular CSRG-C00, CSRG-C03 and CSRG-C09 and the CodeSpace-owned managed execution transport they assume, must not be implemented. Every other unit depends on CSRG-C00, so no CS-RG unit may start. This is pending the CS-RG integration-boundary revalidation, an owner-directed review of the CodeSpace integration plan; it is not a work unit. No replacement architecture has been approved; the owner decides after reviewing its results. This notice suspends directives only and relaxes no safety requirement. The text below is retained unchanged for historical traceability. > -> *Current state, 2026-10-12:* on 2026-10-02 the owner directed CS-RG implementation as units U1–U6 in CodeSpace, outside this suspension, which still applies to this plan's units. U1, its hardening, U2, U3, U4 and U5 are merged and verified, and U6 has not started. Since 2026-10-12, governed PTY executions are observed before the reap, as governed pipe executions are, through a recorded patch on the pinned Codex (novelKR/CodeSpace#93 and novelKR/CodeSpace#95, CodeSpace main `181a020`), as the owner chose on 2026-10-11. Until then U5 observed PTY executions only after Codex reaped them. The ledger records CS-RG as `in-progress`, qualification `not-run`. The baseline status below is that of this plan's units, which have not started. +> *Current state, 2026-10-12:* on 2026-10-02 the owner directed CS-RG implementation as units U1–U6 in CodeSpace, outside this suspension, which still applies to this plan's units. U1, its hardening, U2, U3, U4 and U5 are merged and verified, and U6 is the active unit. Since 2026-10-12, governed PTY executions are observed before the reap, as governed pipe executions are, through a recorded patch on the pinned Codex (novelKR/CodeSpace#93 and novelKR/CodeSpace#95, CodeSpace main `181a020`), as the owner chose on 2026-10-11. Until then U5 observed PTY executions only after Codex reaped them. The ledger records CS-RG as `in-progress`, qualification `not-run`. The baseline status below is that of this plan's units, which have not started. Owner: CodeSpace. Baseline implementation: `not-started`; qualification: `not-run`. Entry: DG1-C12, which is complete, and delivery of CSP-D04, the CodeSpace counterpart documentation of design revision 1 ([PR delivery](../pr-delivery.md)); release `0.1.0-5daee5d-b3fa569e` is macOS-qualified and is the pin candidate. Completion: Qualify the pinned client/artifact/wire combination on the head left by the CSRG-C09 backend decision, while preserving authorization, approvals, workspace and PTY contracts. Preparation may precede qualification, but required runtime adoption may not. diff --git a/docs/translations.json b/docs/translations.json index 5c9edec..9197212 100644 --- a/docs/translations.json +++ b/docs/translations.json @@ -28,8 +28,8 @@ "id": "planning-readme", "source": "docs/planning/README.md", "translation": "docs/ko/planning/README.md", - "reviewed_source_sha256": "64319e080e72fa359fb96d1e39af5a4633b5eecfb665659f5a4a8a106d218d30", - "reviewed_translation_sha256": "7cbb09bee9ac2f5bd3700e20ddad9fcf9565b4126c5747f43f13c2649bd930a4" + "reviewed_source_sha256": "5ae20eb9f6ad702fa41bb3885cba1c6ea01f2d55d612cc0b97388d4ff9b14fe8", + "reviewed_translation_sha256": "d002f8bdabe99376b40d4668674a255f29b399818c4073a9362cd932025a1ed9" }, { "id": "planning-codespace-integration", @@ -56,8 +56,8 @@ "id": "planning-milestones-cs-rg", "source": "docs/planning/milestones/CS-RG.md", "translation": "docs/ko/planning/milestones/CS-RG.md", - "reviewed_source_sha256": "d3a395328fa8f98df395104604552d80ea5ad36dde033af42c80eccc501f75ed", - "reviewed_translation_sha256": "9d9b15c1232175bd1d16a4a5aa33e25c0f847f0487ca16a1bcbfb47da16f2c2d" + "reviewed_source_sha256": "0c4af70d5fb9552144e4e196735726ffaf5c3aad11b17fa6c2a40db68dc6ea03", + "reviewed_translation_sha256": "87b3dd90b6184c497e039b27f93065162cd97b3f64e79324de1c08fdcb1f97f7" }, { "id": "planning-milestones-dg-0", diff --git a/milestones.json b/milestones.json index 445c1d6..9920874 100644 --- a/milestones.json +++ b/milestones.json @@ -7,7 +7,7 @@ "milestones": [ {"id": "DG-0", "owner": "DevGuard", "requires": [], "design_status": "accepted", "implementation_status": "implemented", "qualification": "report-required", "report_command": "python3 scripts/validate.py", "planning_document": "docs/planning/milestones/DG-0.md"}, {"id": "DG-1", "owner": "DevGuard", "requires": ["DG-0"], "design_status": "accepted", "implementation_status": "implemented", "qualification": "macos-qualified", "qualified_release": "0.1.0-5daee5d-b3fa569e", "planning_document": "docs/planning/milestones/DG-1.md"}, - {"id": "CS-RG", "owner": "CodeSpace", "requires": ["DG-1"], "design_status": "accepted", "implementation_status": "in-progress", "qualification": "not-run", "planning_document": "docs/planning/milestones/CS-RG.md", "units": {"directed": "2026-10-02", "as_of": "2026-10-11", "CSRG-U1": "merged-verified", "CSRG-U1-hardening": "merged-verified", "CSRG-U2": "merged-verified", "CSRG-U3": "merged-verified", "CSRG-U4": "merged-verified", "CSRG-U5": "merged-verified", "CSRG-U6": "not-started"}}, + {"id": "CS-RG", "owner": "CodeSpace", "requires": ["DG-1"], "design_status": "accepted", "implementation_status": "in-progress", "qualification": "not-run", "planning_document": "docs/planning/milestones/CS-RG.md", "units": {"directed": "2026-10-02", "as_of": "2026-10-12", "CSRG-U1": "merged-verified", "CSRG-U1-hardening": "merged-verified", "CSRG-U2": "merged-verified", "CSRG-U3": "merged-verified", "CSRG-U4": "merged-verified", "CSRG-U5": "merged-verified", "CSRG-U6": "active"}}, {"id": "P1-RECOVERY", "owner": "CodeSpace", "requires": ["CS-RG"], "design_status": "accepted", "implementation_status": "not-started", "qualification": "not-run", "planning_document": "docs/planning/milestones/P1-RECOVERY.md"}, {"id": "DG-LINUX", "owner": "DevGuard + CodeSpace", "requires": ["CS-RG"], "design_status": "accepted", "implementation_status": "not-started", "qualification": "not-run", "required_for_product_completion": true, "planning_document": "docs/planning/milestones/DG-LINUX.md"}, {"id": "DG-CACHE", "owner": "DevGuard", "requires": ["DG-1"], "design_status": "accepted", "implementation_status": "not-started", "qualification": "not-run", "planning_document": "docs/planning/milestones/DG-CACHE.md"},