feat(foundation): offline synthetic scope/permission inspector (FI-FILBERT-8 APPROVED r6)
Rocko-authored, Filbert-reviewed inspector (r6 manifest a4a44930...) with full review/build/verdict evidence under docs/plans/reviews. 43/0 selftests, oracle zero-disagreement, foundation checker PASS. Owner A9 acceptance recorded separately.
This commit is contained in:
+340
@@ -0,0 +1,340 @@
|
||||
{
|
||||
"bundleVersion": 1,
|
||||
"kind": "foundation-inspector-bundle",
|
||||
"simulation": true,
|
||||
"records": [
|
||||
"é",
|
||||
{
|
||||
"extra": "é"
|
||||
}
|
||||
],
|
||||
"registries": [
|
||||
{
|
||||
"registry": "harness",
|
||||
"id": "pi",
|
||||
"revision": 1,
|
||||
"digest": "sha256:8aa2effaf9d24d2ca259b3a05308e7b4b5e4a4b29c0ff413d6afaed86df2a66f"
|
||||
},
|
||||
{
|
||||
"registry": "settings",
|
||||
"id": "default",
|
||||
"revision": 1,
|
||||
"digest": "sha256:001d451fc4a22514e7a68dd0d3433c71ea06a28f7176f725caf03f260edcc443"
|
||||
},
|
||||
{
|
||||
"registry": "context-content",
|
||||
"id": "soul",
|
||||
"revision": 1,
|
||||
"digest": "sha256:be5d80f476bd3a522f0a44d3f23b7c26a888969065247740fbedaaf61c4d2abb"
|
||||
},
|
||||
{
|
||||
"registry": "agent-policy",
|
||||
"id": "ap-full",
|
||||
"revision": 1,
|
||||
"digest": "sha256:d701c4337ae1e2a1dd55719e353ffeffce217734fcf91ecf4c2043ebe041dbaf",
|
||||
"content": {
|
||||
"restrictions": {
|
||||
"operations": [
|
||||
"work.read",
|
||||
"file.read",
|
||||
"file.change",
|
||||
"command.execute",
|
||||
"work.propose",
|
||||
"task.create",
|
||||
"assignment.change",
|
||||
"result.submit",
|
||||
"task.accept",
|
||||
"registration.manage",
|
||||
"conversation.read",
|
||||
"conversation.observe",
|
||||
"execution.launch",
|
||||
"execution.control",
|
||||
"execution.transfer",
|
||||
"workspace.retire",
|
||||
"workspace.reopen",
|
||||
"message.send",
|
||||
"audit.read",
|
||||
"project.create",
|
||||
"project.change",
|
||||
"workspace.create",
|
||||
"workspace.change",
|
||||
"mission.create",
|
||||
"mission.change",
|
||||
"mission.accept",
|
||||
"task.change",
|
||||
"decision.issue",
|
||||
"session.adopt"
|
||||
],
|
||||
"readPaths": [
|
||||
{
|
||||
"root": "workspace",
|
||||
"path": null
|
||||
}
|
||||
],
|
||||
"writePaths": [
|
||||
{
|
||||
"root": "workspace",
|
||||
"path": null
|
||||
}
|
||||
],
|
||||
"network": "none",
|
||||
"endpointRefs": []
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"registry": "agent-policy",
|
||||
"id": "ap-reader",
|
||||
"revision": 1,
|
||||
"digest": "sha256:0bc44e14fd8354a8a85be879306a54881da7a0cb4d3dcf1f88bc4bc08a40dc9c",
|
||||
"content": {
|
||||
"restrictions": {
|
||||
"operations": [
|
||||
"work.read",
|
||||
"file.read"
|
||||
],
|
||||
"readPaths": [
|
||||
{
|
||||
"root": "workspace",
|
||||
"path": null
|
||||
}
|
||||
],
|
||||
"writePaths": [],
|
||||
"network": "none",
|
||||
"endpointRefs": []
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"registry": "scope-role",
|
||||
"id": "role-reader",
|
||||
"revision": 1,
|
||||
"digest": "sha256:0bc44e14fd8354a8a85be879306a54881da7a0cb4d3dcf1f88bc4bc08a40dc9c",
|
||||
"content": {
|
||||
"restrictions": {
|
||||
"operations": [
|
||||
"work.read",
|
||||
"file.read"
|
||||
],
|
||||
"readPaths": [
|
||||
{
|
||||
"root": "workspace",
|
||||
"path": null
|
||||
}
|
||||
],
|
||||
"writePaths": [],
|
||||
"network": "none",
|
||||
"endpointRefs": []
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"registry": "scope-role",
|
||||
"id": "role-writer",
|
||||
"revision": 1,
|
||||
"digest": "sha256:46dc2ba5c333b097992432d18d99c578be4841ba36cee31e88b8bf989605f707",
|
||||
"content": {
|
||||
"restrictions": {
|
||||
"operations": [
|
||||
"work.read",
|
||||
"file.read",
|
||||
"file.change"
|
||||
],
|
||||
"readPaths": [
|
||||
{
|
||||
"root": "workspace",
|
||||
"path": null
|
||||
}
|
||||
],
|
||||
"writePaths": [
|
||||
{
|
||||
"root": "workspace",
|
||||
"path": "src"
|
||||
}
|
||||
],
|
||||
"network": "none",
|
||||
"endpointRefs": []
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"registry": "scope-role",
|
||||
"id": "role-manager",
|
||||
"revision": 1,
|
||||
"digest": "sha256:fb223bac11cd593a11a1d22528d92d699410082583ddcaa31ce28f7104b3fa98",
|
||||
"content": {
|
||||
"restrictions": {
|
||||
"operations": [
|
||||
"work.read",
|
||||
"file.read",
|
||||
"file.change",
|
||||
"assignment.change"
|
||||
],
|
||||
"readPaths": [
|
||||
{
|
||||
"root": "workspace",
|
||||
"path": null
|
||||
}
|
||||
],
|
||||
"writePaths": [
|
||||
{
|
||||
"root": "workspace",
|
||||
"path": null
|
||||
}
|
||||
],
|
||||
"network": "none",
|
||||
"endpointRefs": []
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"registry": "project-policy",
|
||||
"id": "pp-p1",
|
||||
"revision": 1,
|
||||
"digest": "sha256:d701c4337ae1e2a1dd55719e353ffeffce217734fcf91ecf4c2043ebe041dbaf",
|
||||
"content": {
|
||||
"restrictions": {
|
||||
"operations": [
|
||||
"work.read",
|
||||
"file.read",
|
||||
"file.change",
|
||||
"command.execute",
|
||||
"work.propose",
|
||||
"task.create",
|
||||
"assignment.change",
|
||||
"result.submit",
|
||||
"task.accept",
|
||||
"registration.manage",
|
||||
"conversation.read",
|
||||
"conversation.observe",
|
||||
"execution.launch",
|
||||
"execution.control",
|
||||
"execution.transfer",
|
||||
"workspace.retire",
|
||||
"workspace.reopen",
|
||||
"message.send",
|
||||
"audit.read",
|
||||
"project.create",
|
||||
"project.change",
|
||||
"workspace.create",
|
||||
"workspace.change",
|
||||
"mission.create",
|
||||
"mission.change",
|
||||
"mission.accept",
|
||||
"task.change",
|
||||
"decision.issue",
|
||||
"session.adopt"
|
||||
],
|
||||
"readPaths": [
|
||||
{
|
||||
"root": "workspace",
|
||||
"path": null
|
||||
}
|
||||
],
|
||||
"writePaths": [
|
||||
{
|
||||
"root": "workspace",
|
||||
"path": null
|
||||
}
|
||||
],
|
||||
"network": "none",
|
||||
"endpointRefs": []
|
||||
}
|
||||
}
|
||||
},
|
||||
{
|
||||
"registry": "project-policy",
|
||||
"id": "pp-p2",
|
||||
"revision": 1,
|
||||
"digest": "sha256:d701c4337ae1e2a1dd55719e353ffeffce217734fcf91ecf4c2043ebe041dbaf",
|
||||
"content": {
|
||||
"restrictions": {
|
||||
"operations": [
|
||||
"work.read",
|
||||
"file.read",
|
||||
"file.change",
|
||||
"command.execute",
|
||||
"work.propose",
|
||||
"task.create",
|
||||
"assignment.change",
|
||||
"result.submit",
|
||||
"task.accept",
|
||||
"registration.manage",
|
||||
"conversation.read",
|
||||
"conversation.observe",
|
||||
"execution.launch",
|
||||
"execution.control",
|
||||
"execution.transfer",
|
||||
"workspace.retire",
|
||||
"workspace.reopen",
|
||||
"message.send",
|
||||
"audit.read",
|
||||
"project.create",
|
||||
"project.change",
|
||||
"workspace.create",
|
||||
"workspace.change",
|
||||
"mission.create",
|
||||
"mission.change",
|
||||
"mission.accept",
|
||||
"task.change",
|
||||
"decision.issue",
|
||||
"session.adopt"
|
||||
],
|
||||
"readPaths": [
|
||||
{
|
||||
"root": "workspace",
|
||||
"path": null
|
||||
}
|
||||
],
|
||||
"writePaths": [
|
||||
{
|
||||
"root": "workspace",
|
||||
"path": null
|
||||
}
|
||||
],
|
||||
"network": "none",
|
||||
"endpointRefs": []
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"artifacts": [
|
||||
{
|
||||
"runId": "run-1",
|
||||
"artifactId": "art-1",
|
||||
"digest": "sha256:69f0a6e9ecd96c48985cac660674ab2fe6e445958be73cd80994f1db7f7020ae"
|
||||
},
|
||||
{
|
||||
"runId": "run-1",
|
||||
"artifactId": "art-2",
|
||||
"digest": "sha256:e652dbde6f9fc53da7db06f459581496ac7e95e920e5c2d86c16805f15e68c96"
|
||||
}
|
||||
],
|
||||
"authorizations": [
|
||||
"00000000-0000-4000-8000-000000000001"
|
||||
],
|
||||
"selection": {
|
||||
"agentId": "agent-a",
|
||||
"projectId": "p1",
|
||||
"workspaceId": "w1",
|
||||
"assignmentRef": {
|
||||
"kind": "assignment",
|
||||
"id": "asg-a-w1",
|
||||
"scope": {
|
||||
"kind": "workspace",
|
||||
"projectId": "p1",
|
||||
"workspaceId": "w1"
|
||||
},
|
||||
"revision": 1
|
||||
},
|
||||
"execution": {
|
||||
"kind": "unrestricted-simulation"
|
||||
}
|
||||
},
|
||||
"operation": {
|
||||
"name": "work.read",
|
||||
"target": null
|
||||
},
|
||||
"proposal": null,
|
||||
"delegationInputs": []
|
||||
}
|
||||
Reference in New Issue
Block a user