mosaicstack/stack
1
0
Fork 0
Code Issues 81 Pull Requests 1 Actions Packages Projects Releases 15 Wiki Activity

WI-0: R4 Gate0 runtime-evidence probe — BUILD-ADMISSION GATE (do FIRST) #827

New Issue
Open
opened 2026-07-17 23:54:31 +00:00 by jason.woltje · 0 comments
jason.woltje commented 2026-07-17 23:54:31 +00:00
Owner
Copy Link

R4 Gate0 is the BUILD-ADMISSION gate — this WI runs FIRST and NO feature WI (WI-1..WI-7) is admitted until every probe here produces POSITIVE RUNTIME EVIDENCE (not a design assertion). A FAILED Gate0 item RETURNS the design to planner review — it is NOT waived by the GO.

Structure like gitwatch: a runtime-evidence probe pack. Probes (BUILD-BRIEF §5 / SPEC-v5 §Precision + Gate0):

  1. Launcher exec/parent topology + supported-hook ancestry (D1); broker authenticates the launcher chain and REJECTS sibling-substitution.
  2. Pi lifecycle: last-position invariant (last-or-closed); per-tool nonce → tool-call-id map (D5).
  3. Same-PID runtime_generation bump on reload/resume/fork REVOKES the prior lease (D4).
  4. Broker socket authenticity posture (protected / distinct-principal); SO_PEERCRED returns the true (pid, starttime).
  5. Source-invalidation fail-closed (missing / oversize / hash-mismatch fragment → NO promotion).
  6. Claude additionalContext + Pi context inject ATOMICALLY (A-v5-1) — the T27 transport assumption; verify, or CLASS the gap as T-C.

Deliverable: a Gate0 evidence pack (captured runtime output per probe) + verdict per item. Any FAIL → escalate to planner, do NOT paper over.

Authority (build AGAINST these, do not re-derive): BUILD-BRIEF 89fdbc27, SPEC-v5 a6d07ade, RATIFICATION bac58319, sol red-team 3da326a4. Coder MUST re-verify sha256 before build. Target: framework-native packages/mosaic/ in mosaicstack/stack (NOT jarvis-brain, NOT ~/.config/mosaic/ directly). M1 = Claude + Pi only.

Review discipline: red-first TDD; author≠reviewer; no self-merge; exact-head RoR (reviewed-SHA=merged-SHA); closes #<this>; full 40-char head; never edit tests to pass / never force-merge red / never --no-verify. Mos merges after review + green suite + (for security surfaces) Opus-SECREV.

**R4 Gate0 is the BUILD-ADMISSION gate — this WI runs FIRST and NO feature WI (WI-1..WI-7) is admitted until every probe here produces POSITIVE RUNTIME EVIDENCE (not a design assertion). A FAILED Gate0 item RETURNS the design to planner review — it is NOT waived by the GO.** Structure like gitwatch: a runtime-evidence probe pack. Probes (BUILD-BRIEF §5 / SPEC-v5 §Precision + Gate0): 1. Launcher `exec`/parent topology + supported-hook ancestry (D1); broker authenticates the launcher chain and REJECTS sibling-substitution. 2. Pi lifecycle: last-position invariant (last-or-closed); per-tool nonce → tool-call-id map (D5). 3. Same-PID `runtime_generation` bump on reload/resume/fork REVOKES the prior lease (D4). 4. Broker socket authenticity posture (protected / distinct-principal); `SO_PEERCRED` returns the true `(pid, starttime)`. 5. Source-invalidation fail-closed (missing / oversize / hash-mismatch fragment → NO promotion). 6. Claude `additionalContext` + Pi `context` inject ATOMICALLY (A-v5-1) — the T27 transport assumption; verify, or CLASS the gap as T-C. **Deliverable:** a Gate0 evidence pack (captured runtime output per probe) + verdict per item. Any FAIL → escalate to planner, do NOT paper over. **Authority (build AGAINST these, do not re-derive):** BUILD-BRIEF `89fdbc27`, SPEC-v5 `a6d07ade`, RATIFICATION `bac58319`, sol red-team `3da326a4`. Coder MUST re-verify sha256 before build. Target: framework-native `packages/mosaic/` in `mosaicstack/stack` (NOT jarvis-brain, NOT `~/.config/mosaic/` directly). M1 = Claude + Pi only. **Review discipline:** red-first TDD; author≠reviewer; no self-merge; exact-head RoR (reviewed-SHA=merged-SHA); `closes #<this>`; full 40-char head; never edit tests to pass / never force-merge red / never `--no-verify`. **Mos merges** after review + green suite + (for security surfaces) Opus-SECREV.
jason.woltje changed title from __scope probe (delete me) to WI-0: R4 Gate0 runtime-evidence probe — BUILD-ADMISSION GATE (do FIRST) 2026-07-17 23:55:06 +00:00
jason.woltje added this to the Compaction-Refresh Mechanism (M1: Claude+Pi) milestone 2026-07-17 23:55:06 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
fleet-enhancement
Fleet-wide reliability/speed/cost improvements surfaced by the nightly enhance pass
No Label
Milestone
No items
No Milestone Compaction-Refresh Mechanism (M1: Claude+Pi)
Projects
Clear projects
No project
Assignees
Clear assignees
jason.woltje
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mosaicstack/stack#827
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?