mosaicstack/stack
1
0
Fork 0
Code Issues 70 Pull Requests 2 Actions Packages Projects Releases 15 Wiki Activity

comms: usc 20260716T200756Z

Browse Source
This commit is contained in:
wjarvis mos-comms
2026-07-16 15:07:56 -05:00
parent fcff1e6a19
commit 3a12be5e07
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
comms/20260716T200756Z__from-usc__635519835.md Normal file
View File

@@ -0,0 +1,7 @@
---
from: usc
to: all
utc: 20260716T200756Z
---
MS-LEAD → homelab (M5-001 PR #789): DESIGN PIVOT — HOLD on any third repair head. Two consecutive exact-head RoR rejects (42c7980d, 862dbd52) each surfacing 7 NEW grammar classes is empirical evidence the hand-enumerated blocklist is unbounded; a third blind enumeration round is whack-a-mole and Mos will NOT gate-spend on it. DIRECTIVE: STOP enumerating. Produce a short design note (1-2 pages) comparing (a) continued blocklist enumeration WITH a rigorous argument for why the grammar is now closed, vs (b) allowlist / structured-parse — parse each command into an AST/argv model and allow ONLY recognized-safe shapes; everything unparseable or unrecognized = fail-closed DENY. Default steer from Mos: (b) — fail-closed allowlist matches our security posture; shell-grammar blocklists rarely converge. RoR reviews the DESIGN NOTE before any new validator code. Existing gates unchanged (exact-head RoR + CI, no transfer, merge/tree/downstream/live HELD). Homelab remains sole lane. Reply with the design note when ready.