Repository navigation
Public ultracode: deterministic multi-agent workflow engine (+ phase-8 receipts/verifier) - #1
Merged
Merged
Conversation
…fier Adds two clean-room modules and a release-safety gate. receipts_bus: authenticated receipt index over SQLite (WAL, default autocheckpoint). Two hashes over the canonical body — receipt_sha256 (integrity) and a keyed receipt_hmac (authenticity), kept separate so a sha256-valid but unsigned envelope is authentic=False and rejected in enforce mode. Closed kind/actor/verdict enums validated at write time. Failed reads raise BusUnavailable, never []. resolve/binds implement the claim-binding rule (cited / verify-command with scope+freshness / task_ref; command/manual/repair/route_health never complete; verifier binds only on claim_sha256 match; weak evidence -> ledger-weak). Hash-chained gate_audit with append/verify/get. CLI: receipts list|show|verify|why|attest. verifier: refute-first verification with injected run_check and judge (no network, no host commands by default). Engine re-check wins when a verify command is declared; otherwise a refute-first judge that defaults to refuted on insufficient evidence; neither channel -> refuted. Emits a kind=verifier receipt stamped with claim_sha256; a refuted verdict is non-acceptable so it cannot satisfy a gate. Verifier wraps it with an escalation budget (per-session/per-window caps + dedup). leakgate: scans the whole tree + commit message against a base64 denylist decoded at runtime (tests/private_strings.txt), case-insensitive except a whole-word case-sensitive collision token, path-separator-normalised, no whitelist. Exposed as agent-ultra-leakgate and wired into CI. Also renames the optional memory adapter to external_memory (ExternalMemoryHooks) and reworks the worker-layer leakage test to consume the shared base64 denylist, removing host-specific identifiers from the tree. Offline test suites for all three (FakeClient/injected fakes). doctor and demo exercise both new modules. Full suite: 126 passed. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Port the multi-agent workflow pattern into the public kit as `ultracode`: scripts (META + async run(wf)) fan work across bounded agents via wf.agent/parallel/pipeline under hard budgets, with a replayable journal, per-agent artifacts, a checksummed receipt, and a terminal-safe status card. - engine reuses the kit's RoutePool / OpenAIChatClient / MockUltracodeClient / CommandBroker; stdlib core, offline keyless --mock route - CLI: `agent-ultra ultracode run|list|status|resume` - bundled examples: smoke (fan-out + pipeline), review (finders -> skeptic votes -> synthesis) - resume replays completed calls from the journal (0 model calls unchanged) - receipt checksum: a hand-edited receipt fails verify_receipt() - status card is plain ASCII unless stdout is a proven interactive UTF terminal; rendering never crashes the run - doctor + demo now cover ultracode (demo ends "DEMO PASSED") - docs/ultracode.md: one-command install, doctor, demo, first run, troubleshooting - 14 offline tests; full suite 140 passed; leak gate clean Proves the pattern: multi-agent fan-out -> journal -> resume -> receipt -> status. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Adds ultracode (
agent_ultra.ultracode) — a deterministic multi-agent workflow engine proving the pattern fan-out -> journal -> resume -> receipt -> status — plus the phase-8 receipts-bus/verifier work already on this branch.ultracode
META+async def run(wf)withwf.agent(one model call, optional JSON-Schema validation + feedback retries),wf.parallel(barrier),wf.pipeline(no barrier), hardwf.budgetceilings (HOLD on exhaustion), broker-gatedwf.run_check(CRITIC mode).verify_receipt()rejects hand-edited receipts.agent-ultra ultracode run|list|status|resumewith--mock(offline, keyless).smoke,review(finders -> skeptic votes -> synthesis).doctor+demonow cover it; friend-ready guide atdocs/ultracode.md.Proof (local, from a clean home)
DEMO PASSEDcalls_spent: 0🤖 Generated with Claude Code