From e16e5509524d559aab244088d1f3dbbddf2b4e1d Mon Sep 17 00:00:00 2001 From: Natoshi-moto Date: Fri, 24 Jul 2026 05:21:29 +0100 Subject: [PATCH 1/4] housekeeping: add Lab and Sandbox evidence pack --- .../HOUSEKEEPING_2026_07/BASELINE_REPORT.md | 58 +++++ .../HOUSEKEEPING_2026_07/BRANCH_INVENTORY.md | 167 ++++++++++++++ .../HOUSEKEEPING_2026_07/HANDOFF_ANY_AI.md | 25 +++ .../HOUSEKEEPING_RECEIPT.json | 205 ++++++++++++++++++ .../OPERATOR_DECISION_CARDS.md | 135 ++++++++++++ .../PR_ADJUDICATION_MATRIX.md | 38 ++++ .../VERIFICATION_REPORT.md | 71 ++++++ 7 files changed, 699 insertions(+) create mode 100644 operations/housekeeping/HOUSEKEEPING_2026_07/BASELINE_REPORT.md create mode 100644 operations/housekeeping/HOUSEKEEPING_2026_07/BRANCH_INVENTORY.md create mode 100644 operations/housekeeping/HOUSEKEEPING_2026_07/HANDOFF_ANY_AI.md create mode 100644 operations/housekeeping/HOUSEKEEPING_2026_07/HOUSEKEEPING_RECEIPT.json create mode 100644 operations/housekeeping/HOUSEKEEPING_2026_07/OPERATOR_DECISION_CARDS.md create mode 100644 operations/housekeeping/HOUSEKEEPING_2026_07/PR_ADJUDICATION_MATRIX.md create mode 100644 operations/housekeeping/HOUSEKEEPING_2026_07/VERIFICATION_REPORT.md diff --git a/operations/housekeeping/HOUSEKEEPING_2026_07/BASELINE_REPORT.md b/operations/housekeeping/HOUSEKEEPING_2026_07/BASELINE_REPORT.md new file mode 100644 index 0000000..133bff6 --- /dev/null +++ b/operations/housekeeping/HOUSEKEEPING_2026_07/BASELINE_REPORT.md @@ -0,0 +1,58 @@ +# Housekeeping baseline report — 2026-07 + +status_authority: NONE + +## Scope and safety posture + +This is an evidence report for a conservative housekeeping operation over Natoshi-moto/Lab and Natoshi-moto/Experimental-Sandbox. No accepted state was rewritten. No frozen snapshot, tag, receipt, manifest, hash, STATUS.json, NEXUS.json, constitution file, branch-protection setting, PR state, branch, or tag was changed. + +The operator's Lab checkout was dirty before work began with exactly two untracked files: NEXUS_CODEX_HANDOFF__BUILDER__TSK-LABOPS-CTRL-001.md and verify_spine_candidate.sh. I did not reset, stash, clean, overwrite, or execute work against that checkout. A separate worktree was created from the cached origin/main tip for this housekeeping branch. + +## Exact baselines + +- Lab default branch: main +- Lab starting commit: 50377abe84493a3f2c672c04cc689e5f94546f88 +- Experimental-Sandbox default branch: main +- Experimental-Sandbox starting commit: e88520ec6a0bf5bcff09f8d99b961e71afaaebc6 +- Housekeeping branch: codex/housekeeping-controller-001, local only, based on Lab starting commit +- Latest accepted Lab merge at baseline: PR #114, merge commit 50377abe84493a3f2c672c04cc689e5f94546f88 +- Prior accepted infrastructure merge: PR #115, merge commit 05223aaa09f0ea89c0e54afc672b2a2452d36335 + +## Repository and authentication observations + +Both repositories are public and default to main according to the connected GitHub app. The app reports administrator access and no auto-merge permission. Local gh authentication is invalid for Natoshi-moto; gh auth status returned an invalid token. A read-only fetch was attempted in both local clones and failed with DNS/network exit 128. GitHub PR, repository, commit and branch facts below therefore come from the connector plus cached refs. + +Branch protection and rulesets were not accessible: local gh API calls failed because the host could not be resolved, and the connected app exposes repository metadata but not protection/ruleset details. Those settings are UNABLE_TO_VERIFY and must not be treated as absent or present. + +## Open PR inventory + +Lab currently has 30 open PRs: #14, #22, #23, #24, #40, #42, #43, #44, #45, #46, #47, #49, #60, #61, #62, #78, #93, #94, #95, #97, #98, #99, #100, #101, #107, #108, #109, #110, #111, #112, and #113. The requested housekeeping set is adjudicated in PR_ADJUDICATION_MATRIX.md; older open work is retained as open proposals in the branch inventory and is not silently closed. + +Experimental-Sandbox currently has two open PRs: #2 and #3. PR #1 is merged into Sandbox main and is part of accepted Sandbox state, not Lab state. + +## Verification commands and outcomes + +Lab isolated worktree: + +- ./nexus doctor — exit 0, PASS. +- python3 -m unittest discover -s tests -v — exit 1; 190 tests ran, 9 failures and 2 errors. The failures/errors are caused by missing @noble/ed25519 when R013/R015/R016 independent Node verifiers run. +- ./nexus verify — exit 2; same missing @noble/ed25519 dependency. +- python3 -m unittest tests.test_control_plane -v — exit 0. +- git diff --check — exit 0. + +Sandbox origin/main worktree: + +- bash scripts/verify.sh — exit 0, router PASS and experimental-sandbox PASS. +- node --check assistant/app/app.js — exit 0. +- jq empty assistant/router/routes.json reports/CHANNELS.json — exit 0. +- git diff --check — exit 0. + +These are baseline results, not proof of correctness or safety. No dependency was installed and no failing test was repaired. + +## Known warnings and non-claims + +- Full Lab verification is blocked by the missing Node dependency; do not call Lab green. +- GitHub checks for inspected PR heads returned an empty status-context list through the connector; CI pass/fail is UNABLE_TO_VERIFY. +- Protection/ruleset differences are UNABLE_TO_VERIFY. +- Public visibility means draft branches and PRs may expose content; drafts are not automatically safe. +- No open PR is accepted state. Merge is not correctness proof. diff --git a/operations/housekeeping/HOUSEKEEPING_2026_07/BRANCH_INVENTORY.md b/operations/housekeeping/HOUSEKEEPING_2026_07/BRANCH_INVENTORY.md new file mode 100644 index 0000000..05b81f1 --- /dev/null +++ b/operations/housekeeping/HOUSEKEEPING_2026_07/BRANCH_INVENTORY.md @@ -0,0 +1,167 @@ +# Branch inventory — July 2026 + +status_authority: NONE + +This inventory uses the locally cached remote-tracking refs, whose Lab and Sandbox main tips match the GitHub connector baseline. A network fetch was attempted and failed with DNS exit 128, so every row is dated from the cached ref and must be rechecked before any deletion. No branch was deleted. + +Ahead/behind means relative to the cached origin/main. Unique files is the changed-file count in the three-dot comparison. A zero does not by itself prove a branch is disposable; the action column also requires PR ancestry/state review. + +| Repository | Branch | Latest SHA | Last commit | Associated PR | Ahead/behind | Unique files | Evidence risk | Suggested action | +|---|---|---|---|---|---:|---:|---|---| +| Lab | agent/ctrl-001-control-plane-reconciliation | d2571c28be35a4ade9862ccc06d3cc519753823a | 2026-07-20T06:21:11+01:00 | #25 closed, merged | behind 169, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | agent/experimental-sandbox-promotion-gate | 11a18175537da067bf693d0ea9d777beaf1b0158 | 2026-07-23T18:21:35+01:00 | #110 open | behind 8, ahead 1 | 6 | Potential loss: 1 unique commit(s), 6 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | agent/r012-bounded-work-exchange | f28dc07bf1433bb22e4d992a7f523503387ea445 | 2026-07-13T11:08:13+01:00 | #12 closed, merged | behind 234, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | agent/r012-r013-promotion-closeout | e05c19dbe29bd9f4bb16746b19e92b0c4162dedf | 2026-07-13T14:10:01+01:00 | #15 closed, merged | behind 225, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | agent/r013-pcx-conserved-claim | 616f41ff8fb5b3b217e2287107e9718a8a0ea3bb | 2026-07-13T14:02:52+01:00 | #13 closed, merged | behind 232, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | agent/r014-pcx-durable-replay | 4c82ca8a5aea683fbe500fa0f73108e21bcf67e6 | 2026-07-13T15:00:09+01:00 | #16 closed, merged | behind 223, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | agent/r014-pcx-durable-settlement | b62fef7f267e6d3822b730d3a785fbd75d3c7c44 | 2026-07-13T13:52:08+01:00 | #14 open | behind 233, ahead 1 | 32 | Potential loss: 1 unique commit(s), 32 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | agent/r014-promotion-closeout | d0368261dbc44b9586d14c490c39f0661d6ceda5 | 2026-07-13T15:03:47+01:00 | #17 closed, merged | behind 221, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | agent/r015-pcx-independent-durability-verifier-model | 8558bfb5d74299f6be33b0a785eb16c9b6fa097b | 2026-07-13T16:28:12+01:00 | #18 closed, merged | behind 220, ahead 1 | 29 | Potential loss: 1 unique commit(s), 29 changed file(s) | ARCHIVE_BEFORE_DELETE | +| Lab | agent/r015-promotion-closeout | 3ffcb08309518895affc33d318d962dc14e17709 | 2026-07-13T16:38:55+01:00 | #19 closed, merged | behind 219, ahead 1 | 4 | Potential loss: 1 unique commit(s), 4 changed file(s) | ARCHIVE_BEFORE_DELETE | +| Lab | agent/r016-pcx-integrated-custody-gate | 75343b7f00d4ab38a11086180193b8fd26ccd435 | 2026-07-13T17:57:11+01:00 | #20 closed, merged | behind 178, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | agent/r016-promotion-closeout | 7cdd67c9a984d8016fd1d712d210f99f4b7c30e9 | 2026-07-14T06:38:56+01:00 | #21 closed, merged | behind 173, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | agent/r017-replication-fork-evidence | b8dca0e9be40dedd4f1ba6930ad34caec0167076 | 2026-07-14T07:52:33+01:00 | #22 open | behind 172, ahead 16 | 10 | Potential loss: 16 unique commit(s), 10 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | agent/r018-pq-hybrid-admission | 78dde8674c3e65c709f9075c3bb647d2a0b2e2d1 | 2026-07-15T07:43:19+01:00 | #23 open | behind 172, ahead 50 | 32 | Potential loss: 50 unique commit(s), 32 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | audit/ingest-r002-claude-results | 8739042253ace1c1c144b5a3a4fd790548c061a9 | 2026-07-12T23:54:28+01:00 | #2 closed, merged | behind 314, ahead 2 | 8 | Potential loss: 2 unique commit(s), 8 changed file(s) | ARCHIVE_BEFORE_DELETE | +| Lab | chatgpt/r008-r010-foundation-closeout | 63ee998a0dc7fc9939bea1a03e5944064d3ab163 | 2026-07-13T02:10:19+01:00 | #9 closed, merged | behind 276, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | chatgpt/r011-hard-vertical-slice | 18478e8d608c9e195b5bd4b0fc50d0c8085860f7 | 2026-07-13T06:52:58+01:00 | #10 closed, merged | behind 258, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | chatgpt/r011-promotion-closeout | f671a03447da36a8089367f6c6f78b15950d1989 | 2026-07-13T07:07:22+01:00 | #11 closed, merged | behind 253, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | claude/agent-resources-skills-draft-001 | a4496c95899854956521648783412ccc5638002f | 2026-07-22T11:26:14+01:00 | #94 open | behind 35, ahead 1 | 7 | Potential loss: 1 unique commit(s), 7 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | claude/beneficial-genesis-design-001 | 15df1623eddfaae60d612dd4218759840dabc8a1 | 2026-07-20T20:46:09+01:00 | #27 closed, merged | behind 159, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | claude/bgen-econ-redteam-001 | de5dcd728b9f99966a0fb5b9f37340bf1b830188 | 2026-07-21T12:58:34+01:00 | #35 closed, merged | behind 145, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | claude/external-web-audit-001 | a9255f42fccd506d9f9d417dc7d8f4a08ce9c3a6 | 2026-07-22T17:39:51+01:00 | #95 open | behind 35, ahead 1 | 1 | Potential loss: 1 unique commit(s), 1 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | claude/full-history-review-001 | 5be784b21987e221be44e01168ed19929d69bdad | 2026-07-21T17:58:43+01:00 | #53 closed, merged | behind 135, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | claude/loom-first-proper-chat-001 | 0fcbc5dba4d83e1164e65d3cff2b2cc572af1d98 | 2026-07-22T19:50:59+01:00 | #99 open | behind 35, ahead 1 | 2 | Potential loss: 1 unique commit(s), 2 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | claude/loom-test-c4-001 | ec095332271fae5dd02813e1ecd4ef77bbf5cc0e | 2026-07-22T20:03:28+01:00 | none found | behind 35, ahead 8 | 25 | Potential loss: 8 unique commit(s), 25 changed file(s) | ARCHIVE_BEFORE_DELETE | +| Lab | claude/loom-test-c5-001 | 9e50fd2e5b2a01427927439393149aef081ff5b7 | 2026-07-22T16:20:28+01:00 | none found | behind 35, ahead 1 | 4 | Potential loss: 1 unique commit(s), 4 changed file(s) | ARCHIVE_BEFORE_DELETE | +| Lab | claude/loom-v0-1-park-001 | b6d0a45b1d42a96e9771c7c93f5a0dcf70a8e968 | 2026-07-22T11:03:07+01:00 | #93 open | behind 35, ahead 1 | 2 | Potential loss: 1 unique commit(s), 2 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | claude/noted-adversary-block-001 | 654ca6db234ebc46ea63b9f8e9427fc2feea0322 | 2026-07-22T01:47:03+01:00 | #61 open | behind 97, ahead 1 | 8 | Potential loss: 1 unique commit(s), 8 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | claude/pub-build-plan-roadmap-001 | 1d2d6267200420dd26613f96b47ea73013f7019b | 2026-07-22T20:03:38+01:00 | #100 open | behind 29, ahead 1 | 2 | Potential loss: 1 unique commit(s), 2 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | claude/pub-noted-frontend-privacy-assault-001 | 964ba1482206aa204f6f51f5922d1d1f2a43bb76 | 2026-07-23T20:06:04+01:00 | #113 open | behind 8, ahead 3 | 28 | Potential loss: 3 unique commit(s), 28 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | claude/r005-retest-20260713 | 69ce3c120cfc1c11f45d711a573e184f92675798 | 2026-07-13T01:03:04+01:00 | #7 closed, merged | behind 310, ahead 1 | 1 | Potential loss: 1 unique commit(s), 1 changed file(s) | ARCHIVE_BEFORE_DELETE | +| Lab | claude/r007-remaining-adjudication | 10f8d19855167b2009cdd4bbc0ca032f5e5a4b23 | 2026-07-13T01:59:19+01:00 | #8 closed, merged | behind 296, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | claude/r017-gitbraid-proposal | adbbb9b02849372fb1123cddc30beec4182a723c | 2026-07-22T02:18:05+01:00 | #62 open | behind 97, ahead 1 | 6 | Potential loss: 1 unique commit(s), 6 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | claude/recovery-workspace-001 | 85532f488441f1edcf60a09e6b80a0c1c8aaf4bc | 2026-07-22T18:33:11+01:00 | #97 open | behind 35, ahead 1 | 20 | Potential loss: 1 unique commit(s), 20 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | claude/reddit-test-anchor-001 | ccf12c4fc24bd4283a023547362aa9c7b4a3bbf8 | 2026-07-23T07:52:52+01:00 | none found | behind 35, ahead 3 | 5 | Potential loss: 3 unique commit(s), 5 changed file(s) | ARCHIVE_BEFORE_DELETE | +| Lab | claude/sync-operator-disclosure-001 | be24201b18b990eee99a243b77291b88b7a246dd | 2026-07-22T19:18:48+01:00 | #98 open | behind 32, ahead 1 | 4 | Potential loss: 1 unique commit(s), 4 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | codex/adversarial-audit-recent-break-001 | 0af8e114ae76eca7a5e7107402b5ca5f3677ebb4 | 2026-07-22T06:35:48+01:00 | #78 open | behind 64, ahead 1 | 1 | Potential loss: 1 unique commit(s), 1 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | codex/beneficial-genesis-diff-repair-002 | 53966a8b45a42b120b265b0549f77dc0d98ea779 | 2026-07-20T20:45:37+01:00 | #30 closed, merged | behind 160, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | codex/bgen-dev-culture-challenge-001 | 20a9a68ae185f28e32d2942fe18fd300b7047494 | 2026-07-21T17:02:43+01:00 | #49 open | behind 142, ahead 1 | 3 | Potential loss: 1 unique commit(s), 3 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | codex/bgen-mechanism-audit-001 | d9a0d722b6848e2370aa88988b765723a182ab37 | 2026-07-21T15:42:25+01:00 | #44 open | behind 142, ahead 2 | 18 | Potential loss: 2 unique commit(s), 18 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | codex/bgen-r1-retest-001 | bcb60f0cfc1ddd51e81bd4ec36c8d89d1c6bc271 | 2026-07-21T17:43:47+01:00 | #52 closed, merged | behind 139, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | codex/bgen-technical-audit-001 | bdfee655d34fe9ff4740786cb2e865933a464367 | 2026-07-21T14:46:19+01:00 | #42 open | behind 142, ahead 2 | 6 | Potential loss: 2 unique commit(s), 6 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | codex/noted-ods-1-p0-complete | febaaaaa6896eb9d16785eb6636b62d29fefc560 | 2026-07-21T23:30:06+01:00 | #57 closed, merged | behind 111, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | codex/noted-phase-2-agent-prompt | 91f834ed9777bbe72846674f79850cab0c20cf65 | 2026-07-22T00:27:23+01:00 | #58 closed, merged | behind 104, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | dependabot/github_actions/actions/checkout-7.0.0 | 395f86063e52b07175ca37ff36f95361a379bb93 | 2026-07-12T22:04:27Z | none found | behind 314, ahead 1 | 1 | Potential loss: 1 unique commit(s), 1 changed file(s) | ARCHIVE_BEFORE_DELETE | +| Lab | docs/open-gate-v0-claim | f720c0e6795f630943acb5347e675824cf323b1d | 2026-07-15T17:49:49+01:00 | #24 open | behind 172, ahead 2 | 23 | Potential loss: 2 unique commit(s), 23 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | fable/bgen-dev-culture-memo-001 | 9c5146b487a5ccda9bdbe40a3a6988489456634f | 2026-07-21T16:54:18+01:00 | #47 open | behind 142, ahead 1 | 2 | Potential loss: 1 unique commit(s), 2 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | fable/bgen-epistemic-audit-001 | 22a236d4c2973395594050e49a61890c097be62b | 2026-07-21T13:48:00+01:00 | #40 open | behind 142, ahead 4 | 21 | Potential loss: 4 unique commit(s), 21 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | fable/bgen-integration-tribunal-001 | 542f68da02b662a8a60df76c80a9132989e51a1d | 2026-07-21T16:49:13+01:00 | #46 open | behind 142, ahead 2 | 19 | Potential loss: 2 unique commit(s), 19 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | fable/break-test-rigor-review-001 | 666bbeecb62f1922b60380d7468ba138e8c053f7 | 2026-07-22T04:14:33+01:00 | #70 closed, merged | behind 82, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | fable/commons-foundation-001 | eec314e842615338368e6ff2e54bb6038858e944 | 2026-07-23T17:24:13+01:00 | #107 open | behind 35, ahead 1 | 6 | Potential loss: 1 unique commit(s), 6 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | fable/handoffs-operator-and-helper-001 | 4cb8bd4d89a6a0a58056ba79581cc2eca8a994c7 | 2026-07-23T16:14:06+01:00 | #103 closed, merged | behind 34, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | fable/language-and-operating-standard-001 | 9e84ab31d7e729930e8c78d1551084c439463d0e | 2026-07-23T17:07:00+01:00 | #105 closed, merged | behind 34, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | fable/learning-record-20260723 | 9f8202a1ed67e174b93a3e8723b348d4665cde27 | 2026-07-23T17:24:16+01:00 | #109 open | behind 35, ahead 1 | 1 | Potential loss: 1 unique commit(s), 1 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | fable/operating-framework-and-record-001 | 1204db48aeea9097f2c724cb4a58d8f35b07133f | 2026-07-23T17:24:14+01:00 | #108 open | behind 35, ahead 1 | 1 | Potential loss: 1 unique commit(s), 1 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | fable/prerelease-ai-draft-redteam-001 | 5bc289b74e19a54f8e7d7d83041ce220860e4a83 | 2026-07-23T15:46:59+01:00 | none found | behind 35, ahead 9 | 31 | Potential loss: 9 unique commit(s), 31 changed file(s) | ARCHIVE_BEFORE_DELETE | +| Lab | fable/publish-unsealed-truth-audit-001 | 70816af5da05aaee731809290745639319bfa495 | 2026-07-23T15:57:32+01:00 | #102 closed, merged | behind 34, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | fable/toddler-proof-safety-kit-001 | b0cd80181c7c6ca966568eb4751bc8adacfd3fc9 | 2026-07-23T16:19:17+01:00 | #104 closed, merged | behind 34, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | fix/r003-secret-scan-env-coverage | 02c527af4bcc1bdb8e3eda1d2b1c09e63c89469e | 2026-07-13T00:29:54+01:00 | #3 closed, merged | behind 314, ahead 2 | 2 | Potential loss: 2 unique commit(s), 2 changed file(s) | ARCHIVE_BEFORE_DELETE | +| Lab | fix/r004-audit-integrity-scan-transparency | d4e704e67d9c699761905b1c17ee380fbe48cf96 | 2026-07-13T00:37:41+01:00 | #4 closed, merged | behind 312, ahead 6 | 6 | Potential loss: 6 unique commit(s), 6 changed file(s) | ARCHIVE_BEFORE_DELETE | +| Lab | fix/r006-bind-snapshot-payload-to-git-tree | 61f8996480780d3045f02a059dabf225ad3b5cb0 | 2026-07-13T01:14:42+01:00 | #6 closed, merged | behind 310, ahead 4 | 4 | Potential loss: 4 unique commit(s), 4 changed file(s) | ARCHIVE_BEFORE_DELETE | +| Lab | fix/visibility-policy-reconciliation | f5c4f4e7f5f449e41e89937299d57982e864e857 | 2026-07-21T21:30:07+01:00 | #54 closed, merged | behind 120, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | grok/agent-resources-round-publication-001 | 8f2824dc238e4774970ce46325f6eb62f305c1d6 | 2026-07-23T17:12:23+01:00 | #96 closed, merged | behind 19, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | grok/backup-tip-e6f5324-001 | 2b421685a098a625e6648edb6b4848704c3fc21b | 2026-07-22T09:22:07+01:00 | #90 closed, merged | behind 41, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | grok/beneficial-genesis-breaker-repro-001 | 54bca3f827ab062dda0a5888590ebda924a673f5 | 2026-07-20T18:35:36+01:00 | #29 closed | behind 166, ahead 1 | 26 | Potential loss: 1 unique commit(s), 26 changed file(s) | ARCHIVE_BEFORE_DELETE | +| Lab | grok/beneficial-genesis-diff-retest-002 | 8b475a4799e6e716a3dfed5cd4a16b08ccefa3c9 | 2026-07-20T20:42:42+01:00 | #32 closed, merged | behind 161, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | grok/bgen-econ-breaker-001 | 65fe9b20b2decf44746581d7ad9d71921bcda2dc | 2026-07-21T11:32:56+01:00 | #37 closed, merged | behind 154, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | grok/bgen-econ-retest-003 | 2ce668856812938d71047ccff1a77716402bda14 | 2026-07-21T12:54:14+01:00 | #39 closed, merged | behind 146, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | grok/bgen-mechanism-audit-001 | 81499ae895d63940d9ba973a0a1b9c98469ea36f | 2026-07-21T15:47:08+01:00 | #45 open | behind 142, ahead 4 | 40 | Potential loss: 4 unique commit(s), 40 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | grok/bgen-r1-synthesis-001 | a591167a4046ef73762c78080a27898450b0f1e4 | 2026-07-21T17:37:47+01:00 | #50 closed, merged | behind 140, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | grok/bgen-technical-audit-001 | 6075fdca74b104168d67d648ac136b96ed47f525 | 2026-07-21T15:23:41+01:00 | #43 open | behind 142, ahead 4 | 29 | Potential loss: 4 unique commit(s), 29 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | grok/break-session-1-receipt | d9157a673fccdf133eedfc5daad6d9b0290c1dbc | 2026-07-22T03:42:34+01:00 | #68 closed | behind 89, ahead 1 | 3 | Potential loss: 1 unique commit(s), 3 changed file(s) | ARCHIVE_BEFORE_DELETE | +| Lab | grok/comms-research-clearance-001 | 980db924f811bfd7225f4397cddd6a74ddff4140 | 2026-07-22T09:28:20+01:00 | #91 closed, merged | behind 39, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | grok/de-stale-t06-after-pr66 | d3e43c2daa0373c98ebfe132f796fe0e0430a40f | 2026-07-22T04:56:45+01:00 | #72 closed, merged | behind 75, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | grok/emergency-operator-clarification-001 | f8cde8d72ab1bc534055ba59cad6b174aa67d57c | 2026-07-22T07:06:34+01:00 | #80 closed, merged | behind 61, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | grok/emergency-stop-audit-001 | d5dd515f61958142a7fc0ac167d6b4bf78154554 | 2026-07-22T06:59:51+01:00 | #79 closed, merged | behind 63, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | grok/full-spectrum-vision-pack-001 | bbbc7e90f4e8d836193f00806a41ebbb36769909 | 2026-07-23T17:46:26+01:00 | #101 open | behind 35, ahead 8 | 74 | Potential loss: 8 unique commit(s), 74 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | grok/hygiene-control-plane-backup-reconcile-001 | 123ab857c81a15ef9e9a5691fa3b169f540cb81b | 2026-07-22T09:16:19+01:00 | #89 closed, merged | behind 43, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | grok/noted-membrane-hardening-001 | a910bee2e45755085c54f922fafd30e0f4e8846f | 2026-07-22T01:05:40+01:00 | #60 open | behind 97, ahead 1 | 10 | Potential loss: 1 unique commit(s), 10 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | grok/post-audit-unseal-and-control-plane-001 | 72aabf7fdad2c1cb8b4a207e6273a6624b080421 | 2026-07-22T08:18:12+01:00 | #86 closed, merged | behind 49, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | grok/remove-accidental-fetch-head | e6b177b34f83767fb985318277de4540ee879189 | 2026-07-22T08:18:28+01:00 | #87 closed, merged | behind 47, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | grok/reorient-sync-backup-001 | fb00f1ecaa527e0404418b41124397ab206c38ed | 2026-07-22T08:29:57+01:00 | #88 closed, merged | behind 45, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | grok/session-close-t0-001 | 3fcff145fe5db4d4afa9b79497baad9edfd6b793 | 2026-07-22T09:37:30+01:00 | #92 closed, merged | behind 37, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | grok/truth-audit-seal-and-prep-001 | c7499e120b8ad83e565bc3ac77bb4ffc80d3b620 | 2026-07-22T07:31:54+01:00 | #81 closed, merged | behind 59, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | grok/whoopsie-log-001 | 2961ecf33b18ac0f312287a60dec8a3455f94e21 | 2026-07-22T04:54:38+01:00 | #71 closed, merged | behind 77, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | lab/operator-public-board-001 | 709dca4aa97f26648997053e6f2a72ac69040d0b | 2026-07-23T17:21:26+01:00 | #106 closed, merged | behind 9, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | main | 50377abe84493a3f2c672c04cc689e5f94546f88 | 2026-07-23T21:56:50+01:00 | none found | behind 0, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | KEEP_ACTIVE | +| Lab | play/operator-abuse-sandbox | 7389e4c973f69144ad5436455f571405541a0d5d | 2026-07-23T17:09:15+01:00 | none found | behind 20, ahead 2 | 1 | Potential loss: 2 unique commit(s), 1 changed file(s) | ARCHIVE_BEFORE_DELETE | +| Lab | remove-board-moved-to-sandbox | 47578a86e41267a2aa41c523b3b4297bd6d3becb | 2026-07-23T19:09:52+01:00 | #111 open | behind 8, ahead 1 | 10 | Potential loss: 1 unique commit(s), 10 changed file(s) | KEEP_FOR_OPEN_PR | +| Lab | seat/break-session-2-card-04 | 7fedceb341625dd9a3b62acd15cb8df984e7a626 | 2026-07-22T05:18:40+01:00 | #73 closed, merged | behind 73, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | seat/break-session-2-card-06-07 | 2a16c4cdd68ffc9b1b6c597f53e935f6632b13c4 | 2026-07-22T05:49:40+01:00 | #75 closed, merged | behind 69, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | seat/break-session-2-card-08-09 | 47e81179f87cb7fc3005008d10cfbbe38860a565 | 2026-07-22T05:55:50+01:00 | #76 closed, merged | behind 67, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | seat/break-session-2-card-11 | 9c87e18806360a54fc51642173406c3067441ba1 | 2026-07-22T06:03:43+01:00 | #77 closed, merged | behind 65, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | seat/break-session-2-card-13 | 07b1fb92850b723fcfdd54dfccf47b1f415a6d2d | 2026-07-22T05:33:27+01:00 | #74 closed, merged | behind 71, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | seat/emergency-truth-audit-grok-001 | 3a1419844488f6e3bf492dbbd9c54e52b963ab5f | 2026-07-22T07:34:39+01:00 | #82 closed, merged | behind 57, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | SAFE_DELETE_CANDIDATE | +| Lab | state/r005-audit-retest-adjudication | c44051efbd1c638220f692017eb6e67826058c17 | 2026-07-13T00:40:41+01:00 | #5 closed, merged | behind 311, ahead 10 | 10 | Potential loss: 10 unique commit(s), 10 changed file(s) | ARCHIVE_BEFORE_DELETE | +| Sandbox | add-operator-board | 6c41888c2ed363cab9fa866a29aaa758b43069f7 | 2026-07-23T19:08:52+01:00 | #2 open | behind 0, ahead 1 | 11 | Potential loss: 1 unique commit(s), 11 changed file(s) | KEEP_FOR_OPEN_PR | +| Sandbox | agent/mithub-adjacent-assistant | 83042b3d8beb407d611e4b37ddfdfa2190ce5541 | 2026-07-23T18:33:30+01:00 | #1 closed, merged | behind 1, ahead 1 | 29 | Potential loss: 1 unique commit(s), 29 changed file(s) | ARCHIVE_BEFORE_DELETE | +| Sandbox | main | e88520ec6a0bf5bcff09f8d99b961e71afaaebc6 | 2026-07-23T18:35:11+01:00 | none found | behind 0, ahead 0 | 0 | No unique commits/files vs main; confirm remote before deletion | KEEP_ACTIVE | +| Sandbox | sandbox/experiment/hermes-prototype | 7943dcc089905d0d86ca0ef6a24ad5a3782e2d45 | 2026-07-23T23:45:04+01:00 | #3 open | behind 0, ahead 7 | 7 | Potential loss: 7 unique commit(s), 7 changed file(s) | KEEP_FOR_OPEN_PR | +| Sandbox | sandbox/thought/pcx-noted-review-proposal | 20ceb0b718b556b2da0aa96f19e26ee8f1f193d5 | 2026-07-23T18:51:22+01:00 | none found | behind 0, ahead 1 | 2 | Potential loss: 1 unique commit(s), 2 changed file(s) | ARCHIVE_BEFORE_DELETE | + +## Deletion candidates (not executed) + +The following branches satisfied the conservative local test: associated PR is merged, branch tip is an ancestor of cached main, and the three-dot comparison reports zero changed files. They remain only candidates until a fresh ref fetch, final SHA check, and operator authorization: + +- Lab agent/ctrl-001-control-plane-reconciliation +- Lab agent/r012-bounded-work-exchange +- Lab agent/r012-r013-promotion-closeout +- Lab agent/r013-pcx-conserved-claim +- Lab agent/r014-pcx-durable-replay +- Lab agent/r014-promotion-closeout +- Lab agent/r016-pcx-integrated-custody-gate +- Lab agent/r016-promotion-closeout +- Lab chatgpt/r008-r010-foundation-closeout +- Lab chatgpt/r011-hard-vertical-slice +- Lab chatgpt/r011-promotion-closeout +- Lab claude/beneficial-genesis-design-001 +- Lab claude/bgen-econ-redteam-001 +- Lab claude/full-history-review-001 +- Lab claude/r007-remaining-adjudication +- Lab codex/beneficial-genesis-diff-repair-002 +- Lab codex/bgen-r1-retest-001 +- Lab codex/noted-ods-1-p0-complete +- Lab codex/noted-phase-2-agent-prompt +- Lab fable/break-test-rigor-review-001 +- Lab fable/handoffs-operator-and-helper-001 +- Lab fable/language-and-operating-standard-001 +- Lab fable/publish-unsealed-truth-audit-001 +- Lab fable/toddler-proof-safety-kit-001 +- Lab fix/visibility-policy-reconciliation +- Lab grok/agent-resources-round-publication-001 +- Lab grok/backup-tip-e6f5324-001 +- Lab grok/beneficial-genesis-diff-retest-002 +- Lab grok/bgen-econ-breaker-001 +- Lab grok/bgen-econ-retest-003 +- Lab grok/bgen-r1-synthesis-001 +- Lab grok/comms-research-clearance-001 +- Lab grok/de-stale-t06-after-pr66 +- Lab grok/emergency-operator-clarification-001 +- Lab grok/emergency-stop-audit-001 +- Lab grok/hygiene-control-plane-backup-reconcile-001 +- Lab grok/post-audit-unseal-and-control-plane-001 +- Lab grok/remove-accidental-fetch-head +- Lab grok/reorient-sync-backup-001 +- Lab grok/session-close-t0-001 +- Lab grok/truth-audit-seal-and-prep-001 +- Lab grok/whoopsie-log-001 +- Lab lab/operator-public-board-001 +- Lab seat/break-session-2-card-04 +- Lab seat/break-session-2-card-06-07 +- Lab seat/break-session-2-card-08-09 +- Lab seat/break-session-2-card-11 +- Lab seat/break-session-2-card-13 +- Lab seat/emergency-truth-audit-grok-001 + +Branches marked ARCHIVE_BEFORE_DELETE or UNKNOWN_DO_NOT_TOUCH may contain unique evidence or lack enough provenance. Keep them until separately adjudicated. Open-PR branches remain KEEP_FOR_OPEN_PR regardless of apparent overlap. diff --git a/operations/housekeeping/HOUSEKEEPING_2026_07/HANDOFF_ANY_AI.md b/operations/housekeeping/HOUSEKEEPING_2026_07/HANDOFF_ANY_AI.md new file mode 100644 index 0000000..8a1bab1 --- /dev/null +++ b/operations/housekeeping/HOUSEKEEPING_2026_07/HANDOFF_ANY_AI.md @@ -0,0 +1,25 @@ +# Housekeeping handoff — any AI + +status_authority: NONE + +This folder is a proposal/report pack on local branch codex/housekeeping-controller-001. Lab main remains canonical accepted working state; Experimental-Sandbox main remains public, reversible and noncanonical. Nothing in this pack promotes Sandbox material. + +Read in order: + +1. BASELINE_REPORT.md — exact commits, dirty-worktree protection and tests. +2. PR_ADJUDICATION_MATRIX.md — relevant PR facts and dispositions. +3. VERIFICATION_REPORT.md — blockers, negative cases and Hermes claim classification. +4. OPERATOR_DECISION_CARDS.md — one phrase per consequential action. +5. BRANCH_INVENTORY.md — no deletion was performed. +6. HOUSEKEEPING_RECEIPT.json — machine-readable receipt. + +Safe continuation rules: + +- Do not merge, close, delete, push, publish, alter settings, install Hermes, or execute experimental agents unless the operator uses the exact card phrase. +- Re-fetch before any remote mutation. The current local gh token is invalid and the network fetch was blocked during this round. +- Keep status_authority: NONE in all housekeeping analysis. +- Do not edit frozen snapshots, historical audit targets, signed receipts, manifests, hashes or tags. +- Passing tests are not proof. Same-account AI agreement is not independent corroboration. +- Drafts may be public and difficult to retract; no draft is automatically safe. + +The recommended eventual path is: Sandbox board merge, Lab pointer merge, repair/review promotion gate, close superseded #113 if authorized, then decide #109 privacy separately. Hermes is first post-housekeeping experiment only after its documentation says clearly that the design is uninstalled/unverified and the operator separately authorizes experimentation. diff --git a/operations/housekeeping/HOUSEKEEPING_2026_07/HOUSEKEEPING_RECEIPT.json b/operations/housekeeping/HOUSEKEEPING_2026_07/HOUSEKEEPING_RECEIPT.json new file mode 100644 index 0000000..13df1d8 --- /dev/null +++ b/operations/housekeeping/HOUSEKEEPING_2026_07/HOUSEKEEPING_RECEIPT.json @@ -0,0 +1,205 @@ +{ + "operation_id": "HOUSEKEEPING_2026_07", + "repository": [ + "Natoshi-moto/Lab", + "Natoshi-moto/Experimental-Sandbox" + ], + "starting_lab_commit": "50377abe84493a3f2c672c04cc689e5f94546f88", + "starting_sandbox_commit": "e88520ec6a0bf5bcff09f8d99b961e71afaaebc6", + "housekeeping_branch": "codex/housekeeping-controller-001", + "files_added_or_changed": [ + "operations/housekeeping/HOUSEKEEPING_2026_07/BASELINE_REPORT.md", + "operations/housekeeping/HOUSEKEEPING_2026_07/PR_ADJUDICATION_MATRIX.md", + "operations/housekeeping/HOUSEKEEPING_2026_07/BRANCH_INVENTORY.md", + "operations/housekeeping/HOUSEKEEPING_2026_07/VERIFICATION_REPORT.md", + "operations/housekeeping/HOUSEKEEPING_2026_07/OPERATOR_DECISION_CARDS.md", + "operations/housekeeping/HOUSEKEEPING_2026_07/HOUSEKEEPING_RECEIPT.json", + "operations/housekeeping/HOUSEKEEPING_2026_07/HANDOFF_ANY_AI.md" + ], + "commands_run": [ + "git status --short --branch", + "git remote -v", + "git fetch --no-tags origin (Lab and Experimental-Sandbox; exit 128, DNS/network unavailable)", + "gh auth status (invalid local token)", + "./nexus doctor (exit 0)", + "python3 -m unittest discover -s tests -v (exit 1; 190 tests, 9 failures, 2 errors)", + "./nexus verify (exit 2; missing @noble/ed25519)", + "python3 -m unittest tests.test_control_plane -v (exit 0)", + "bash scripts/verify.sh (Sandbox exit 0)", + "node --check assistant/app/app.js (Sandbox exit 0)", + "jq empty assistant/router/routes.json reports/CHANNELS.json (Sandbox exit 0)", + "git diff --check (exit 0 before report edits)", + "connector PR/repository/commit/branch reads", + "isolated promotion-origin negative-case simulation", + "git diff --check after report creation (exit 0)", + "added-file trailing-whitespace scan (no matches)", + "explicit added-file secret-pattern scan (no matches)", + "explicit added-file local-path scan (no matches)", + "frozen-path diff check (no matches)" + ], + "test_results": { + "lab_doctor": "PASS", + "lab_full_unittest": "BLOCKED: 190 ran; 9 failures, 2 errors due missing @noble/ed25519", + "lab_verify": "BLOCKED: exit 2 due missing @noble/ed25519", + "lab_control_plane": "PASS", + "sandbox_router_verify": "PASS", + "sandbox_node_check": "PASS", + "sandbox_json_parse": "PASS", + "diff_check": "PASS after report creation", + "added_file_trailing_whitespace": "PASS", + "added_file_secret_scan": "PASS: no matches", + "added_file_local_path_scan": "PASS: no matches", + "frozen_path_check": "PASS: no frozen paths changed" + }, + "prs_inspected": { + "lab": [ + 101, + 107, + 108, + 109, + 110, + 111, + 112, + 113, + 114, + 115 + ], + "sandbox": [ + 1, + 2, + 3 + ], + "open_lab_pr_count": 30, + "open_sandbox_pr_count": 2 + }, + "branches_inspected": [ + "Lab:agent/ctrl-001-control-plane-reconciliation", + "Lab:agent/experimental-sandbox-promotion-gate", + "Lab:agent/r012-bounded-work-exchange", + "Lab:agent/r012-r013-promotion-closeout", + "Lab:agent/r013-pcx-conserved-claim", + "Lab:agent/r014-pcx-durable-replay", + "Lab:agent/r014-pcx-durable-settlement", + "Lab:agent/r014-promotion-closeout", + "Lab:agent/r015-pcx-independent-durability-verifier-model", + "Lab:agent/r015-promotion-closeout", + "Lab:agent/r016-pcx-integrated-custody-gate", + "Lab:agent/r016-promotion-closeout", + "Lab:agent/r017-replication-fork-evidence", + "Lab:agent/r018-pq-hybrid-admission", + "Lab:audit/ingest-r002-claude-results", + "Lab:chatgpt/r008-r010-foundation-closeout", + "Lab:chatgpt/r011-hard-vertical-slice", + "Lab:chatgpt/r011-promotion-closeout", + "Lab:claude/agent-resources-skills-draft-001", + "Lab:claude/beneficial-genesis-design-001", + "Lab:claude/bgen-econ-redteam-001", + "Lab:claude/external-web-audit-001", + "Lab:claude/full-history-review-001", + "Lab:claude/loom-first-proper-chat-001", + "Lab:claude/loom-test-c4-001", + "Lab:claude/loom-test-c5-001", + "Lab:claude/loom-v0-1-park-001", + "Lab:claude/noted-adversary-block-001", + "Lab:claude/pub-build-plan-roadmap-001", + "Lab:claude/pub-noted-frontend-privacy-assault-001", + "Lab:claude/r005-retest-20260713", + "Lab:claude/r007-remaining-adjudication", + "Lab:claude/r017-gitbraid-proposal", + "Lab:claude/recovery-workspace-001", + "Lab:claude/reddit-test-anchor-001", + "Lab:claude/sync-operator-disclosure-001", + "Lab:codex/adversarial-audit-recent-break-001", + "Lab:codex/beneficial-genesis-diff-repair-002", + "Lab:codex/bgen-dev-culture-challenge-001", + "Lab:codex/bgen-mechanism-audit-001", + "Lab:codex/bgen-r1-retest-001", + "Lab:codex/bgen-technical-audit-001", + "Lab:codex/noted-ods-1-p0-complete", + "Lab:codex/noted-phase-2-agent-prompt", + "Lab:dependabot/github_actions/actions/checkout-7.0.0", + "Lab:docs/open-gate-v0-claim", + "Lab:fable/bgen-dev-culture-memo-001", + "Lab:fable/bgen-epistemic-audit-001", + "Lab:fable/bgen-integration-tribunal-001", + "Lab:fable/break-test-rigor-review-001", + "Lab:fable/commons-foundation-001", + "Lab:fable/handoffs-operator-and-helper-001", + "Lab:fable/language-and-operating-standard-001", + "Lab:fable/learning-record-20260723", + "Lab:fable/operating-framework-and-record-001", + "Lab:fable/prerelease-ai-draft-redteam-001", + "Lab:fable/publish-unsealed-truth-audit-001", + "Lab:fable/toddler-proof-safety-kit-001", + "Lab:fix/r003-secret-scan-env-coverage", + "Lab:fix/r004-audit-integrity-scan-transparency", + "Lab:fix/r006-bind-snapshot-payload-to-git-tree", + "Lab:fix/visibility-policy-reconciliation", + "Lab:grok/agent-resources-round-publication-001", + "Lab:grok/backup-tip-e6f5324-001", + "Lab:grok/beneficial-genesis-breaker-repro-001", + "Lab:grok/beneficial-genesis-diff-retest-002", + "Lab:grok/bgen-econ-breaker-001", + "Lab:grok/bgen-econ-retest-003", + "Lab:grok/bgen-mechanism-audit-001", + "Lab:grok/bgen-r1-synthesis-001", + "Lab:grok/bgen-technical-audit-001", + "Lab:grok/break-session-1-receipt", + "Lab:grok/comms-research-clearance-001", + "Lab:grok/de-stale-t06-after-pr66", + "Lab:grok/emergency-operator-clarification-001", + "Lab:grok/emergency-stop-audit-001", + "Lab:grok/full-spectrum-vision-pack-001", + "Lab:grok/hygiene-control-plane-backup-reconcile-001", + "Lab:grok/noted-membrane-hardening-001", + "Lab:grok/post-audit-unseal-and-control-plane-001", + "Lab:grok/remove-accidental-fetch-head", + "Lab:grok/reorient-sync-backup-001", + "Lab:grok/session-close-t0-001", + "Lab:grok/truth-audit-seal-and-prep-001", + "Lab:grok/whoopsie-log-001", + "Lab:lab/operator-public-board-001", + "Lab:main", + "Lab:play/operator-abuse-sandbox", + "Lab:remove-board-moved-to-sandbox", + "Lab:seat/break-session-2-card-04", + "Lab:seat/break-session-2-card-06-07", + "Lab:seat/break-session-2-card-08-09", + "Lab:seat/break-session-2-card-11", + "Lab:seat/break-session-2-card-13", + "Lab:seat/emergency-truth-audit-grok-001", + "Lab:state/r005-audit-retest-adjudication", + "Sandbox:add-operator-board", + "Sandbox:agent/mithub-adjacent-assistant", + "Sandbox:main", + "Sandbox:sandbox/experiment/hermes-prototype", + "Sandbox:sandbox/thought/pcx-noted-review-proposal" + ], + "mutations_performed": [ + "Created local isolated worktree and branch codex/housekeeping-controller-001 from Lab origin/main cache", + "Added housekeeping reports only on the local housekeeping branch" + ], + "mutations_deliberately_not_performed": [ + "No merge", + "No PR close", + "No branch or tag deletion", + "No direct push to main", + "No branch-protection or ruleset change", + "No release or visibility change", + "No history rewrite", + "No Sandbox-to-Lab promotion", + "No Hermes install or execution", + "No secrets/provider configuration change" + ], + "known_limitations": [ + "Remote fetch blocked by DNS/network", + "Local gh token invalid", + "Branch protection/rulesets UNABLE_TO_VERIFY", + "PR checks returned no status contexts through connector", + "Lab verification dependency absent in clean worktree", + "Hermes docs internally contradictory and not executed", + "Branch inventory based on cached refs and requires fresh fetch before deletion" + ], + "final_recommendation": "Keep Lab unchanged except through small, separately authorized merges. Make Experimental-Sandbox the live board/play area only through the two explicit board approvals. Keep #110 blocked until repaired. Close #113 only with authorization; park broad proposals; keep #109 behind a privacy decision; keep Hermes as a documented, uninstalled design candidate until a separate experiment card.", + "status_authority": "NONE" +} diff --git a/operations/housekeeping/HOUSEKEEPING_2026_07/OPERATOR_DECISION_CARDS.md b/operations/housekeeping/HOUSEKEEPING_2026_07/OPERATOR_DECISION_CARDS.md new file mode 100644 index 0000000..e8b7706 --- /dev/null +++ b/operations/housekeeping/HOUSEKEEPING_2026_07/OPERATOR_DECISION_CARDS.md @@ -0,0 +1,135 @@ +# Operator decision cards — July 2026 + +status_authority: NONE + +These cards are separate approvals. A vague “looks good” authorizes none of them. + +## Card 1 — Sandbox board merge + +Action: merge Experimental-Sandbox PR #2, head 6c41888c2ed363cab9fa866a29aaa758b43069f7, into Sandbox main. + +What changes: the Sandbox main branch gains the public board scaffold and two thought entries. + +What does not change: Lab main, Lab PRs, Lab credentials, frozen snapshots, tags, and branch settings remain untouched. No Sandbox content becomes canonical. + +Public or irreversible effects: the board and entries become public on Sandbox main; GitHub history records the merge and copies may persist even after a revert. + +Evidence: PR #2 changed 11 files; Sandbox main verification passes; no obvious secret pattern was found in the inspected content. + +Remaining uncertainty: remote branch-protection settings and every claim inside the board thought entry are UNABLE_TO_VERIFY; final merge SHA is unknown until GitHub performs it. + +Exact authorization phrase: AUTHORIZE SANDBOX BOARD MERGE + +Continuation prompt: “Merge only Experimental-Sandbox PR #2 into Sandbox main. Re-check the resulting SHA and public-content scan. Do not touch Lab.” + +## Card 2 — Lab board pointer merge + +Action: merge Lab PR #111, head 47578a86e41267a2aa41c523b3b4297bd6d3becb, after Card 1 is complete. + +What changes: Lab board scaffold files are replaced by a pointer to the live Sandbox board. + +What does not change: Lab STATUS, NEXUS, constitution, snapshots, tags, receipts, and accepted product code remain untouched; no Sandbox content is copied into Lab. + +Public or irreversible effects: the old Lab board paths become pointer content on public main; the merge is recorded and the old bytes remain in Git history. + +Evidence: PR #111 changes only 10 board files; its head resolves; it overlaps Sandbox #2 as intended. + +Remaining uncertainty: branch protections and post-Card-1 mergeability are UNABLE_TO_VERIFY; the PR was based on an older main and must be rechecked. + +Exact authorization phrase: AUTHORIZE LAB BOARD POINTER MERGE + +Continuation prompt: “After confirming Sandbox PR #2 is merged, re-check Lab PR #111 against current main, then merge only PR #111. Do not close or delete anything.” + +## Card 3 — Promotion gate repair and eventual merge + +Action: repair Lab PR #110 so it fails closed, then consider merging the corrected head. + +What changes: the workflow and accompanying promotion contract would require complete provenance/authority/scope/evidence/operator metadata and prevent automatic promotion claims. + +What does not change: no Sandbox content is promoted automatically; no credentials are granted; no frozen target or status authority changes. + +Public or irreversible effects: a merged workflow becomes part of Lab's public control plane and may gate future PRs; mistakes could block or misclassify future work. + +Evidence: current head checks only origin/SHA/tag equality and misses required fields and immutability. + +Remaining uncertainty: exact remote protection and all repository workflows are not fully verified; repair scope needs a fresh diff. + +Exact authorization phrase: AUTHORIZE PROMOTION GATE MERGE + +Continuation prompt: “Prepare and run the negative-test repair for Lab PR #110. Show me a new decision card for the corrected head; do not merge until I say AUTHORIZE PROMOTION GATE MERGE.” + +## Card 4 — Close superseded PR #113 + +Action: close Lab PR #113 as partly superseded by merged PR #114. + +What changes: PR #113's open state becomes closed; its branch and commits remain unless separately deleted. + +What does not change: no files, commits, tags, or accepted state are deleted or rewritten. The three unique publication files remain available on the branch. + +Public or irreversible effects: the PR conversation state changes publicly and closing may affect workflow/index views; reopening is possible, but not all external copies can be retracted. + +Evidence: 15 of 18 changed paths are already in current main through #114; three publication/index files are unique and flagged sensitive. + +Remaining uncertainty: whether the operator wants those three unique publication files published later. + +Exact authorization phrase: AUTHORIZE CLOSE PR 113 AS SUPERSEDED + +Continuation prompt: “Close only Lab PR #113 with the prepared supersession comment. Do not delete its branch.” + +## Card 5 — Corrected owner gate merge + +Action: apply the minimal wording correction to PR #112 and, only after review, merge the corrected PR. + +What changes: policy text distinguishes non-accepted state from public exposure and lists all outward/irreversible actions. + +What does not change: constitution, STATUS authority, canonical snapshots, and merge authorization rules remain higher authority. + +Public or irreversible effects: the policy becomes public Lab process guidance and may shape later agent/operator decisions. + +Evidence: current PR #112 explicitly says drafts are always safe; this is false under a public repository and the requested invariants. + +Remaining uncertainty: exact wording accepted by the operator and whether GitHub reports the corrected PR mergeable/check state. + +Exact authorization phrase: AUTHORIZE OWNER GATE MERGE AFTER CORRECTION + +Continuation prompt: “Review the minimal corrected PR #112 diff. Do not merge until I say AUTHORIZE OWNER GATE MERGE AFTER CORRECTION.” + +## Card 6 — Personal learning record + +Action: merge Lab PR #109, which contains a personal learning record. + +What changes: one personal-content document becomes accepted Lab main content. + +What does not change: no other PR or file is merged; no status or snapshot changes are implied. + +Public or irreversible effects: personal material is already on a public branch/PR and would become part of accepted main; copies may persist. + +Evidence: PR body explicitly identifies personal content and says it is held for an explicit operator nod. + +Remaining uncertainty: I have not reproduced or quoted the personal content; only the minimum privacy fact is recorded. + +Exact authorization phrase: AUTHORIZE MERGE PR 109 PERSONAL LEARNING RECORD + +Continuation prompt: “If and only if I say AUTHORIZE MERGE PR 109 PERSONAL LEARNING RECORD, re-open the privacy review and merge only PR #109.” + +## Card 7 — Branch deletion candidates + +Action: delete only the branches listed as SAFE_DELETE_CANDIDATE in BRANCH_INVENTORY.md, after a fresh ref/ancestry check. + +What changes: selected remote branch refs are deleted. + +What does not change: commits reachable from main, tags, PR conversations, files, Lab/Sandbox main, and all branches not listed remain untouched. + +Public or irreversible effects: branch names and direct reachability disappear; commits may remain reachable from merges/PRs but deletion is not fully reversible without another ref. + +Evidence: each listed candidate had a merged PR, tip ancestor of cached main, and zero unique files in the cached three-dot comparison. + +Remaining uncertainty: the fetch was blocked, so the remote must be rechecked immediately before deletion; never use this card based only on the cached inventory. + +Exact authorization phrase: AUTHORIZE DELETE MERGED BRANCHES LISTED IN CARD 7 + +Continuation prompt: “Fresh-fetch both repositories. Show the exact candidate list and current SHAs again. Delete only the branches I explicitly confirm from that refreshed list.” + +## Not an authorization card: Hermes + +Hermes remains the first post-housekeeping experiment candidate, but this operation did not install or execute it. Any future install, API-key configuration, model pull, terminal-control integration, or external write needs a new plain-language card after PR #3 documentation is corrected. diff --git a/operations/housekeeping/HOUSEKEEPING_2026_07/PR_ADJUDICATION_MATRIX.md b/operations/housekeeping/HOUSEKEEPING_2026_07/PR_ADJUDICATION_MATRIX.md new file mode 100644 index 0000000..7acea71 --- /dev/null +++ b/operations/housekeeping/HOUSEKEEPING_2026_07/PR_ADJUDICATION_MATRIX.md @@ -0,0 +1,38 @@ +# Open PR adjudication matrix — July 2026 + +status_authority: NONE + +Checks below are direct GitHub connector observations plus changed-file lists. The connector returned no status contexts for these heads, so every checks result is UNABLE_TO_VERIFY. A PR's stated tests are quoted as proposal evidence, not accepted proof. All PRs remain proposals unless already marked merged. + +| Repo / PR | State, draft | Base → head / head SHA | Created; updated | Mergeable | Changed files | Unique purpose and overlap | Sensitive/personal risk; supersession | Disposition | Required operator decision | +|---|---|---|---|---|---|---|---|---|---| +| Lab #110 | OPEN, draft | main → agent/experimental-sandbox-promotion-gate / 11a18175537da067bf693d0ea9d777beaf1b0158 | 2026-07-23 17:21:58Z; 17:21:58Z | true | .github/PULL_REQUEST_TEMPLATE.md; .github/workflows/promotion-origin.yml; AGENTS.md; board/README.md; lab/README.md; operations/process/EXPERIMENTAL_SANDBOX_PROMOTION.md | Promotion-origin declaration and Sandbox boundary docs. Overlaps current AGENTS/board/lab docs but not accepted state. | No obvious secret in patch; workflow is read-only. Does not enforce all declared metadata or immutability. | BLOCKED | Repair and adversarially retest before any merge authorization. | +| Lab #111 | OPEN | main → remove-board-moved-to-sandbox / 47578a86e41267a2aa41c523b3b4297bd6d3becb | 2026-07-23 18:10:03Z; 18:10:03Z | true | board/INBOX.md; board/INDEX.md; board/README.md; board/TEMPLATE.md; six board subdirectory .gitkeep files | Removes the empty Lab firehose content and leaves a pointer. Overlaps Sandbox #2, which ports the board. | Public board text only; no obvious secret or personal data. Live protection difference UNABLE_TO_VERIFY. | MERGE_CANDIDATE | Only after Sandbox #2 is intentionally merged, board content/privacy is confirmed, and the operator authorizes this exact Lab merge. | +| Lab #112 | OPEN | main → safety/owner-plain-language-gate / 837d54d7e38a9aeaa0c12599e49277f2de7ebe5f | 2026-07-23 18:44:03Z; 18:44:03Z | false | AGENTS.md; CLAUDE.md; README_START_HERE.md; operations/process/OWNER_PLAIN_LANGUAGE_GATE.md | Adds a plain-language gate. It falsely says drafts are always safe and only the go word changes the record; this conflicts with public-branch exposure and external effects. It does not outrank constitution/STATUS. | Public policy text; no obvious secret. Needs wording correction, not broad redesign. | REDUCE_AND_REPLACE | Authorize a minimal correction and review the corrected PR; do not merge current head. | +| Lab #113 | OPEN | remove-board-moved-to-sandbox → claude/pub-noted-frontend-privacy-assault-001 / 964ba1482206aa204f6f51f5922d1d1f2a43bb76 | 2026-07-23 19:10:14Z; 19:10:14Z | true | 15 files already landed via #114; three publication/index files are unique: communications/publications/INDEX.md, communications/publications/epistemic/INDEX.md, communications/publications/rounds/NOTED/2026-07-23_claude_frontend-privacy-assault.md | Large Noted privacy publication stack. #114 landed the vault, short index, handoffs, and proposal evidence from the same work; current main already contains those 15 files. | Unique round publication describes privacy/credential handling and model/operator context; sensitive/publication review required before any reuse. | CLOSE_AS_SUPERSEDED | Authorize closing #113 as partly superseded, with the exact comment in the decision cards. Do not delete its branch. | +| Lab #101 | OPEN, draft | main → grok/full-spectrum-vision-pack-001 / bbbc7e90f4e8d836193f00806a41ebbb36769909 | 2026-07-23 05:11:37Z; 16:46:33Z | true | 74 files under operations/proposals/FULL_SPECTRUM_VISION_001 plus workflow | Broad vision, product, research and portal pack. No accepted overlap changes the recommendation. | Public proposal; broad scope and many outward-facing claims. | PARK_AS_PROPOSAL | No merge; decompose only under a new bounded task. | +| Lab #107 | OPEN | main → fable/commons-foundation-001 / eec314e842615338368e6ff2e54bb6038858e944 | 2026-07-23 16:24:34Z; 16:24:34Z | true | six THE_COMMONS files including Python primitive and tests | New commons principles/authorship primitive. It is a dedicated design and threat-review subject, not housekeeping. | Code and licence/rights language need dedicated review; no obvious secret found in listed files. | PARK_AS_PROPOSAL | No merge; request dedicated design/threat review later. | +| Lab #108 | OPEN | main → fable/operating-framework-and-record-001 / 1204db48aeea9097f2c724cb4a58d8f35b07133f | 2026-07-23 16:24:35Z; 16:24:35Z | true | operations/roles/OUTSIDE_ADVERSARY_ADVISOR.md | Standing advisor role. Must reconcile with existing seat/persona machinery. | Public role prose; no obvious secret. Same-account agreement is not independence. | PARK_AS_PROPOSAL | No merge; reconcile role model first. | +| Lab #109 | OPEN | main → fable/learning-record-20260723 / 9f8202a1ed67e174b93a3e8723b348d4665cde27 | 2026-07-23 16:24:37Z; 16:24:37Z | true | operations/learning-records/2026-07-23_HOW_A_NONCODER_REASONED_TO_THE_COMMONS.md | One public learning record. No code overlap. | Explicit personal-content risk; do not quote or copy it here. | NEEDS_OPERATOR_PRIVACY_DECISION | Operator must decide whether public merge is still wanted; no action is safe to infer from the prior push. | +| Lab #114 | MERGED | main → claude/spine-proof-vault-surgical-001 / 011a460be73c71efab9f9c62a3c78ee0dc1f9894 | 2026-07-23 20:21:59Z; 21:00:18Z | false | 15 files | Accepted merge at current Lab main; used only as the supersession comparator for #113. | Already public and accepted; no new action. | — merged; no disposition | None; do not rewrite its evidence. | +| Lab #115 | MERGED | main → claude/honest-merge-authorization-gate-001 / 67f6c7f71502b202e3efe49b8d0c36955cef6acf | 2026-07-23 20:36:56Z; 21:00:18Z | false | five files | Accepted operator authorization mechanism; confirms merge remains human-authorized, not independent review. | Already public and accepted; no new action. | — merged; no disposition | None; do not change branch protection under this operation. | +| Sandbox #2 | OPEN | main → add-operator-board / 6c41888c2ed363cab9fa866a29aaa758b43069f7 | 2026-07-23 18:09:06Z; 18:09:06Z | true | board scaffold plus two thought entries, 11 files | Candidate live board in Sandbox; companion to Lab #111. No automatic Lab path. | Public board content; no obvious secret, but branch-protection and privacy claims inside the thought entry are not independently verified here. | MERGE_CANDIDATE | Authorize only this Sandbox merge after a final public-content review. | +| Sandbox #1 | MERGED | main → agent/mithub-adjacent-assistant / 83042b3d8beb407d611e4b37ddfdfa2190ce5541 | 2026-07-23 17:33:57Z; 17:35:13Z | false | 29 files | Mithub router now on Sandbox main. No Lab overlap or write path found in the verified tree. | Public code; no obvious credentials; verification passed locally. | — merged; no disposition | None; keep as Sandbox entry point. | +| Sandbox #3 | OPEN | main → sandbox/experiment/hermes-prototype / 7943dcc089905d0d86ca0ef6a24ad5a3782e2d45 | 2026-07-23 19:42:26Z; 22:45:06Z | true | seven Hermes documentation files | Design/verification pack only by scope, but its own files contradict each other about whether anything was installed and working. | High consequence: install scripts, API keys, terminal control, provider and licence claims. Do not install or execute. | BLOCKED | Keep as proposal only; correct documentation claims on the PR branch after primary-source review, then ask separately before any experiment. | + +## Exact PR #113 file classification + +- ALREADY_LANDED: 15 files shared with merged PR #114, including the vault, WHY_NOT_TO_TRUST index, proposal evidence and handoffs. +- UNIQUE_AND_POTENTIALLY_VALUABLE: communications/publications/INDEX.md; communications/publications/epistemic/INDEX.md; communications/publications/rounds/NOTED/2026-07-23_claude_frontend-privacy-assault.md. +- SENSITIVE_REVIEW_REQUIRED: all three unique publication files because they describe privacy/credential handling and operator/model context. +- DUPLICATE: the 15 shared files relative to current main. +- STALE: none of the three unique files is landed in current main as verified by the #113/#114 filename comparison. +- DEPENDENT_ON_OBSOLETE_LINEAGE: the PR base is remove-board-moved-to-sandbox, but the three unique files are publication additions and do not need that base technically; no replacement branch is created because purpose is not yet authorized. + +### Draft close comment for #113 + +> Closing this proposal as partly superseded by merged PR #114. The vault, short distrust index, emergency evidence, handoffs and proposal status files are already present on current main through #114. The remaining publication/index files are unique, but they contain public privacy findings and operator/model context that need a separate publication decision. No unique material is being silently erased: the branch and its commit remain available, and a new minimal publication-only branch can be created later if the operator explicitly wants those three files reviewed. + +## Additional open Lab PRs outside the named housekeeping set + +The baseline lists #14, #22, #23, #24, #40, #42, #43, #44, #45, #46, #47, #49, #60, #61, #62, #78, #93, #94, #95, #97, #98, #99 and #100. They remain untouched. They are not silently assumed safe, merged, stale, or disposable. diff --git a/operations/housekeeping/HOUSEKEEPING_2026_07/VERIFICATION_REPORT.md b/operations/housekeeping/HOUSEKEEPING_2026_07/VERIFICATION_REPORT.md new file mode 100644 index 0000000..d6d4574 --- /dev/null +++ b/operations/housekeeping/HOUSEKEEPING_2026_07/VERIFICATION_REPORT.md @@ -0,0 +1,71 @@ +# Verification report — housekeeping controller + +status_authority: NONE + +## Repository-prescribed verification + +See BASELINE_REPORT.md for the full command/exit record. The decisive limitation is pre-existing Lab dependency absence: @noble/ed25519 is not installed in the isolated worktree, causing 11 R013/R015/R016 tests to fail or error and causing ./nexus verify to exit 2. Sandbox main passes its documented checks. No dependency installation or test repair was attempted. + +## PR #110 adversarial review + +The proposed workflow has read-only contents permission and no merge or status mutation step. It checks a Change-Origin line, a 40-character Sandbox-Commit, a Sandbox-Tag, and current git ls-remote equality. It does not fail closed on missing authority, allowed scope, evidence class, explicit non-claims, operator decision, canonical-status claims, or test-as-proof claims. It does not prove tags are immutable, distinguish annotated tag object SHA from peeled commit SHA, verify the package commit is the inspected tree, or prevent a branch from changing after package creation when the declared tag remains unchanged. Bot PRs are explicitly exempted by inferred origin. Documentation is not enforcement. + +Negative-case results from isolated shell simulation of the extracted checks: + +- Missing origin: rejected. +- Missing Sandbox commit/tag for Sandbox-origin path: rejected. +- Wrong SHA or tag resolving elsewhere: rejected when the live resolution differs. +- Missing authority: accepted by the current workflow — defect. +- Canonical-status claim in otherwise valid LAB_INTERNAL body: accepted — defect. +- Test result presented as proof: no check exists — defect. +- Attempted automatic Lab write: workflow token is contents: read, but the repository-wide absence of every other write path is UNABLE_TO_VERIFY. +- Sandbox branch changed after package creation: branch identity is not checked; only current tag resolution is checked — defect. + +Verdict: BLOCKED, repairable. Do not merge #110. A repair must require all declared metadata, use immutable commit identity and explicit operator decision, fail closed, and retain no Sandbox-held Lab credential or automatic merge/status path. + +## Board move review + +Sandbox #2 contains one live board candidate and public thought entries. Lab #111 removes the old board files and leaves a pointer. Safe order is: first operator-authorized Sandbox #2 merge; re-check the resulting Sandbox main and public content; then operator-authorized Lab #111 merge. Expected result is one live board in Sandbox and one historical pointer in Lab. No exact merge SHA can be predicted before GitHub performs the merge. Rollback is a new revert PR in the affected repository, not force-push or history rewrite. Branch-protection differences are UNABLE_TO_VERIFY; no automatic Lab write path was found in Sandbox code, but remote settings remain unresolved. + +## PR #112 gate review + +The PR correctly says it does not outrank STATUS.json or the constitution and covers merge, approve, publish, push to main, delete and hard-to-reverse actions. It is unsafe as written because it says drafts are always safe and says only the go word changes the record. Public branches/PRs can expose sensitive data, trigger checks or external systems, and be difficult to retract. It also omits release, repository-setting changes, visibility changes, branch/tag deletion, external posting, secret/credential changes and irreversible migrations. Minimal correction required; no current-head merge recommendation. + +## PR #8? No — no unrelated PR was changed + +The requested privacy-stack comparison is #113 versus merged #114. No existing evidence was rewritten. + +## Hermes PR #3 claim classification + +No Hermes installer, binary, API key, model pull, terminal multiplexer, or agent was installed or executed by this operation. + +| Material claim | Classification | Reason | +|---|---|---| +| Official repository is NousResearch/hermes-agent | VERIFIED_FROM_PRIMARY_SOURCE, as a repo link and official README claim; not installed | Official repository README is available and identifies the project. | +| Hermes licence MIT | VERIFIED_FROM_PRIMARY_SOURCE | Official GitHub README currently states MIT; keep source link in PR. | +| Herdr licence Apache-2.0 | INCORRECT_OR_STALE | Current official Herdr README says AGPL-3.0-or-later plus commercial licensing, not Apache-2.0. | +| Hermes install source/domain | VERIFIED_FROM_PRIMARY_SOURCE for the official repo's linked installer; installer safety itself UNVERIFIED | The PR documentation says the installer was read, but this operation did not fetch or execute it. | +| DeepSeek base URL and current model names | VERIFIED_FROM_PRIMARY_SOURCE | Current DeepSeek docs list https://api.deepseek.com and deepseek-v4-flash/deepseek-v4-pro; legacy names retire at 2026-07-24 15:59 UTC. Re-check before any future run. | +| Ollama OpenAI compatibility | VERIFIED_FROM_PRIMARY_SOURCE | Ollama documents /v1 compatibility, but this operation did not contact a local Ollama server. | +| DeepSeek + Ollama dual-provider config in Hermes | PROPOSED_ARCHITECTURE | Documentation indicates provider slots, but no install/config smoke test was run here. | +| Herdr identity, integration and exact detection registry | INCORRECT_OR_STALE / UNVERIFIED | PR text reports an installed binary and a no-Grok registry; current official README lists Grok CLI support, while the PR's own files disagree. | +| Claude Code and Codex alongside Hermes | PROPOSED_ARCHITECTURE | The composition is plausible and documented, not verified in this operation. | +| xAI/Grok tooling identity | UNVERIFIED_EXPECTATION | VERIFY_FIRST explicitly leaves the xAI tool unresolved; no exact binary/source is bound. | +| Desktop/browser/terminal-control claims | SEARCH_SUMMARY_ONLY / PROPOSED_ARCHITECTURE | Herdr is a terminal multiplexer; desktop/browser control and integrations are not verified here. | +| Security/isolation claims | UNVERIFIED_EXPECTATION | Read-only/no-credential claims are docs and proposed boundaries, not a security audit. | +| Results file says installed and working | TRANSCRIPT_ONLY / INCORRECT_OR_STALE relative to the PR's README/WHITEPAPER | The branch internally contradicts itself: README/RESULTS/HANDOFF say installed, while WHITEPAPER says proposal-only and BUILD_PLAN says pending. The operation deliberately did not resolve this by executing anything. | + +Required prominent statement for PR #3: + +> Design candidate. Nothing installed. Nothing operationally verified. + +The current PR does not consistently carry that statement because README and RESULTS assert installation/operation. Keep PR #3 blocked until documentation is corrected on the PR branch and primary-source citations are stable. Do not merge. + +## Final safety checks completed after report creation + +- git diff --check — exit 0; added-file trailing-whitespace scan found no matches. +- ./nexus doctor — exit 0; expected WORKTREE_DIRTY warning because this report pack is untracked. +- Repository secret-pattern scan — PASS; no private-key/token/password patterns found in added files. +- Explicit local-path scan — no /home/anon, /tmp, file:// or token-like paths found in added files. +- Frozen-path diff check — no snapshots/, constitution/, STATUS.json, NEXUS.json, operations/receipts/, operations/merge_authorizations/ or hash files changed. +- No PR merged or closed, no branch/tag deleted, no settings changed, no direct push performed — confirmed by connector/local status. From 76db2ebcaab3d901f04ec91f76aff196454cfbb1 Mon Sep 17 00:00:00 2001 From: Natoshi-moto Date: Fri, 24 Jul 2026 05:22:47 +0100 Subject: [PATCH 2/4] housekeeping: record draft PR handoff --- .../housekeeping/HOUSEKEEPING_2026_07/BASELINE_REPORT.md | 2 +- .../housekeeping/HOUSEKEEPING_2026_07/HANDOFF_ANY_AI.md | 2 +- .../HOUSEKEEPING_2026_07/HOUSEKEEPING_RECEIPT.json | 5 ++++- 3 files changed, 6 insertions(+), 3 deletions(-) diff --git a/operations/housekeeping/HOUSEKEEPING_2026_07/BASELINE_REPORT.md b/operations/housekeeping/HOUSEKEEPING_2026_07/BASELINE_REPORT.md index 133bff6..c368145 100644 --- a/operations/housekeeping/HOUSEKEEPING_2026_07/BASELINE_REPORT.md +++ b/operations/housekeeping/HOUSEKEEPING_2026_07/BASELINE_REPORT.md @@ -14,7 +14,7 @@ The operator's Lab checkout was dirty before work began with exactly two untrack - Lab starting commit: 50377abe84493a3f2c672c04cc689e5f94546f88 - Experimental-Sandbox default branch: main - Experimental-Sandbox starting commit: e88520ec6a0bf5bcff09f8d99b961e71afaaebc6 -- Housekeeping branch: codex/housekeeping-controller-001, local only, based on Lab starting commit +- Housekeeping branch: codex/housekeeping-controller-001, based on Lab starting commit; pushed only as a proposal branch for draft PR #116 - Latest accepted Lab merge at baseline: PR #114, merge commit 50377abe84493a3f2c672c04cc689e5f94546f88 - Prior accepted infrastructure merge: PR #115, merge commit 05223aaa09f0ea89c0e54afc672b2a2452d36335 diff --git a/operations/housekeeping/HOUSEKEEPING_2026_07/HANDOFF_ANY_AI.md b/operations/housekeeping/HOUSEKEEPING_2026_07/HANDOFF_ANY_AI.md index 8a1bab1..867ed5c 100644 --- a/operations/housekeeping/HOUSEKEEPING_2026_07/HANDOFF_ANY_AI.md +++ b/operations/housekeeping/HOUSEKEEPING_2026_07/HANDOFF_ANY_AI.md @@ -2,7 +2,7 @@ status_authority: NONE -This folder is a proposal/report pack on local branch codex/housekeeping-controller-001. Lab main remains canonical accepted working state; Experimental-Sandbox main remains public, reversible and noncanonical. Nothing in this pack promotes Sandbox material. +This folder is a proposal/report pack on branch codex/housekeeping-controller-001, published only through draft Lab PR #116. Lab main remains canonical accepted working state; Experimental-Sandbox main remains public, reversible and noncanonical. Nothing in this pack promotes Sandbox material. Read in order: diff --git a/operations/housekeeping/HOUSEKEEPING_2026_07/HOUSEKEEPING_RECEIPT.json b/operations/housekeeping/HOUSEKEEPING_2026_07/HOUSEKEEPING_RECEIPT.json index 13df1d8..63f1524 100644 --- a/operations/housekeeping/HOUSEKEEPING_2026_07/HOUSEKEEPING_RECEIPT.json +++ b/operations/housekeeping/HOUSEKEEPING_2026_07/HOUSEKEEPING_RECEIPT.json @@ -69,6 +69,7 @@ 2, 3 ], + "housekeeping_draft_pr": 116, "open_lab_pr_count": 30, "open_sandbox_pr_count": 2 }, @@ -177,7 +178,9 @@ ], "mutations_performed": [ "Created local isolated worktree and branch codex/housekeeping-controller-001 from Lab origin/main cache", - "Added housekeeping reports only on the local housekeeping branch" + "Added housekeeping reports only on the housekeeping branch", + "Pushed codex/housekeeping-controller-001 to Lab", + "Opened draft Lab PR #116; it remains unmerged" ], "mutations_deliberately_not_performed": [ "No merge", From 0a5c6b63538738e438cce5508d0de59567ebd08c Mon Sep 17 00:00:00 2001 From: Natoshi-moto Date: Fri, 24 Jul 2026 05:25:57 +0100 Subject: [PATCH 3/4] housekeeping: correct PR count and gate authorization --- .../HOUSEKEEPING_2026_07/BASELINE_REPORT.md | 2 +- .../HOUSEKEEPING_2026_07/HOUSEKEEPING_RECEIPT.json | 2 +- .../HOUSEKEEPING_2026_07/OPERATOR_DECISION_CARDS.md | 12 +++++++++--- 3 files changed, 11 insertions(+), 5 deletions(-) diff --git a/operations/housekeeping/HOUSEKEEPING_2026_07/BASELINE_REPORT.md b/operations/housekeeping/HOUSEKEEPING_2026_07/BASELINE_REPORT.md index c368145..c84323d 100644 --- a/operations/housekeeping/HOUSEKEEPING_2026_07/BASELINE_REPORT.md +++ b/operations/housekeeping/HOUSEKEEPING_2026_07/BASELINE_REPORT.md @@ -26,7 +26,7 @@ Branch protection and rulesets were not accessible: local gh API calls failed be ## Open PR inventory -Lab currently has 30 open PRs: #14, #22, #23, #24, #40, #42, #43, #44, #45, #46, #47, #49, #60, #61, #62, #78, #93, #94, #95, #97, #98, #99, #100, #101, #107, #108, #109, #110, #111, #112, and #113. The requested housekeeping set is adjudicated in PR_ADJUDICATION_MATRIX.md; older open work is retained as open proposals in the branch inventory and is not silently closed. +Lab currently has 31 open PRs: #14, #22, #23, #24, #40, #42, #43, #44, #45, #46, #47, #49, #60, #61, #62, #78, #93, #94, #95, #97, #98, #99, #100, #101, #107, #108, #109, #110, #111, #112, and #113. The requested housekeeping set is adjudicated in PR_ADJUDICATION_MATRIX.md; older open work is retained as open proposals in the branch inventory and is not silently closed. Experimental-Sandbox currently has two open PRs: #2 and #3. PR #1 is merged into Sandbox main and is part of accepted Sandbox state, not Lab state. diff --git a/operations/housekeeping/HOUSEKEEPING_2026_07/HOUSEKEEPING_RECEIPT.json b/operations/housekeeping/HOUSEKEEPING_2026_07/HOUSEKEEPING_RECEIPT.json index 63f1524..1ee81a1 100644 --- a/operations/housekeeping/HOUSEKEEPING_2026_07/HOUSEKEEPING_RECEIPT.json +++ b/operations/housekeeping/HOUSEKEEPING_2026_07/HOUSEKEEPING_RECEIPT.json @@ -70,7 +70,7 @@ 3 ], "housekeeping_draft_pr": 116, - "open_lab_pr_count": 30, + "open_lab_pr_count": 31, "open_sandbox_pr_count": 2 }, "branches_inspected": [ diff --git a/operations/housekeeping/HOUSEKEEPING_2026_07/OPERATOR_DECISION_CARDS.md b/operations/housekeeping/HOUSEKEEPING_2026_07/OPERATOR_DECISION_CARDS.md index e8b7706..b6dec60 100644 --- a/operations/housekeeping/HOUSEKEEPING_2026_07/OPERATOR_DECISION_CARDS.md +++ b/operations/housekeeping/HOUSEKEEPING_2026_07/OPERATOR_DECISION_CARDS.md @@ -42,7 +42,7 @@ Continuation prompt: “After confirming Sandbox PR #2 is merged, re-check Lab P ## Card 3 — Promotion gate repair and eventual merge -Action: repair Lab PR #110 so it fails closed, then consider merging the corrected head. +Action: authorize preparation and execution of a repair to Lab PR #110 so it fails closed. This card authorizes repair work only; it does not authorize a merge. What changes: the workflow and accompanying promotion contract would require complete provenance/authority/scope/evidence/operator metadata and prevent automatic promotion claims. @@ -54,9 +54,15 @@ Evidence: current head checks only origin/SHA/tag equality and misses required f Remaining uncertainty: exact remote protection and all repository workflows are not fully verified; repair scope needs a fresh diff. -Exact authorization phrase: AUTHORIZE PROMOTION GATE MERGE +Exact authorization phrase: AUTHORIZE PROMOTION GATE REPAIR -Continuation prompt: “Prepare and run the negative-test repair for Lab PR #110. Show me a new decision card for the corrected head; do not merge until I say AUTHORIZE PROMOTION GATE MERGE.” +Continuation prompt: “Prepare and run the negative-test repair for Lab PR #110. This authorization covers repair work only; do not merge. After adversarial retesting, show a separate merge decision card bound to the repaired PR’s exact full 40-character head SHA.” + +## Future placeholder — repaired promotion-gate merge + +This is not an authorization and is not executable now. After repair and adversarial retesting, any merge requires a new decision card that names the repaired PR’s exact full 40-character head SHA, records the retest results, and states what remains uncertain. + +Future authorization phrase format: AUTHORIZE REPAIRED PROMOTION GATE MERGE FOR SHA ## Card 4 — Close superseded PR #113 From 788c82daacb9b85c12d6a743c195c2991e703311 Mon Sep 17 00:00:00 2001 From: Natoshi-moto Date: Fri, 24 Jul 2026 18:25:11 +0100 Subject: [PATCH 4/4] Add operator merge authorization for PR #116 --- operations/merge_authorizations/PR-116.json | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 operations/merge_authorizations/PR-116.json diff --git a/operations/merge_authorizations/PR-116.json b/operations/merge_authorizations/PR-116.json new file mode 100644 index 0000000..233a694 --- /dev/null +++ b/operations/merge_authorizations/PR-116.json @@ -0,0 +1,14 @@ +{ + "schema": "nexus.merge-authorization/v1", + "pr_number": 116, + "authorized_head_sha": "a86a9ad25058f808f1c59a4fb94c19ba7c63bc78", + "authorized_by": "operator (GitHub: Natoshi-moto)", + "authorized_at_utc": "2026-07-24T17:28:00Z", + "statement": "Operator authorized merging this housekeeping evidence report (documentation only, no code) as historical record of the analysis that guided this session's cleanup pass, same category as previously merged #78 and #46. This authorizes merging exactly this commit (updated to current main to satisfy the up-to-date-before-merge rule; verified zero conflicts).", + "status_authority": "OPERATOR_EXPLICIT", + "non_claims": [ + "This is not independent review.", + "This authorization covers only the exact head SHA recorded above; a new commit requires a new file.", + "This does not certify the PR's content is correct, safe, or complete — only that the operator explicitly reviewed a plain-language summary and approved merging this exact commit." + ] +}