feat(tess): add Mos coordination boundary #735

2026-07-13T11:25:53Z

jason.woltje commented

2026-07-13 11:25:53 +00:00

Summary

add transport-neutral handoff / observe / result Mos coordination contract and deterministic native in-process adapter
enforce configured requester/target identity, server-derived actor/tenant scope, target/correlation drift detection, and scoped idempotent handoffs in the gateway
add contract/boundary denial coverage and Tess architecture, contract, verification, and scratchpad documentation

Constraints

no Mos consumer or fleet/tmux transport added
no changes to apps/gateway/src/commands/command-authorization.service.ts

Verification

TURBO_FORCE=true pnpm typecheck
TURBO_FORCE=true pnpm lint
TURBO_FORCE=true pnpm format:check
TURBO_FORCE=true pnpm test (42 tasks; 0 cached)
Codex security review: no findings

Closes #710

## Summary - add transport-neutral `handoff` / `observe` / `result` Mos coordination contract and deterministic native in-process adapter - enforce configured requester/target identity, server-derived actor/tenant scope, target/correlation drift detection, and scoped idempotent handoffs in the gateway - add contract/boundary denial coverage and Tess architecture, contract, verification, and scratchpad documentation ## Constraints - no Mos consumer or fleet/tmux transport added - no changes to `apps/gateway/src/commands/command-authorization.service.ts` ## Verification - `TURBO_FORCE=true pnpm typecheck` - `TURBO_FORCE=true pnpm lint` - `TURBO_FORCE=true pnpm format:check` - `TURBO_FORCE=true pnpm test` (42 tasks; 0 cached) - Codex security review: no findings Closes #710

jason.woltje added 1 commit 2026-07-13 11:25:54 +00:00

feat(tess): add Mos coordination boundary

ci/woodpecker/pr/ci Pipeline was successful

Details

7936e15d3a

jason.woltje commented

2026-07-13 11:31:41 +00:00

VERIFIED APPROVE reviewer-of-record [W-jarvis:reviewer-gpt5.5] head 7936e15d3a

Findings: MosCoordinationPort exposes only handoff / observe / result; no dispatch/assign/review/merge/cancel verbs are present in the exported coordination port. Gateway scope derives actor/tenant/requester from trusted runtime context/config, uses divergent Nova→Conductor identities, and fail-closed tests cover unconfigured requester, self-delegation, target drift, cross-tenant observe/result, and public-contract verb absence.
Transport is the native in-process InMemoryMosCoordinationPort with no fleet/tmux dependency or Mos-side consumer; contract remains transport-neutral. command-authorization.service.ts is byte-identical to origin/main (hash a9f829e7ecec721c6c585fe0da56fb5d6a6441e9), no live creds found, and no source hardcoded Tess agent identity introduced. CI pipeline 1752 is currently running/pending; merge on green.

Marker: ROR-735-APPROVE-7936e15d

VERIFIED APPROVE reviewer-of-record [W-jarvis:reviewer-gpt5.5] head 7936e15d3ae137c91c88efdab4bb09b863a2195d Findings: `MosCoordinationPort` exposes only `handoff` / `observe` / `result`; no dispatch/assign/review/merge/cancel verbs are present in the exported coordination port. Gateway scope derives actor/tenant/requester from trusted runtime context/config, uses divergent Nova→Conductor identities, and fail-closed tests cover unconfigured requester, self-delegation, target drift, cross-tenant observe/result, and public-contract verb absence. Transport is the native in-process `InMemoryMosCoordinationPort` with no fleet/tmux dependency or Mos-side consumer; contract remains transport-neutral. `command-authorization.service.ts` is byte-identical to `origin/main` (hash `a9f829e7ecec721c6c585fe0da56fb5d6a6441e9`), no live creds found, and no source hardcoded Tess agent identity introduced. CI pipeline `1752` is currently running/pending; merge on green. Marker: ROR-735-APPROVE-7936e15d

jason.woltje added 1 commit 2026-07-13 11:33:29 +00:00

docs(tess): record M4 verification

ci/woodpecker/pr/ci Pipeline was successful

Details

5022911f84

jason.woltje referenced this issue from a commit

2026-07-13 11:33:47 +00:00

chore(tess): M4-002 MERGED (9e5b9188, opt-a accepted) done; M4-001 #735 MERGEABLE — CI 1752 green + non-author ROR 17032 at 7936e15d (native in-process, Mos merges)

jason.woltje referenced this issue from a commit

2026-07-13 11:45:00 +00:00

chore(tess): M4-001 #735 head moved 7936e15d->5022911f (doc-only) — ROR 17032 invalidated, CI 1754 green, re-ROR routed; NOT mergeable until fresh ROR

jason.woltje commented

2026-07-13 11:45:45 +00:00

VERIFIED APPROVE reviewer-of-record [W-jarvis:reviewer-gpt5.5] head 5022911f84

Fast re-ROR after head move: 5022911f84dd7ac30f40df31a53f6cd31a51728f is a direct child of the previously reviewed 7936e15d3ae137c91c88efdab4bb09b863a2195d; the only two-dot delta is docs/scratchpads/tess-m4-001-mos-coordination.md (3-line scratchpad doc change), so the approved code/test content is unchanged.
Prior M4-001 findings still hold: handoff/observe/result-only contract, trusted config/context-derived identity, fail-closed self/drift/cross-tenant coverage, native in-process adapter, byte-identical command authorization digest, no live creds/no hardcoded Tess identity. CI pipeline 1754 is green; Mos merges on green.

Marker: ROR-735-APPROVE-5022911f

VERIFIED APPROVE reviewer-of-record [W-jarvis:reviewer-gpt5.5] head 5022911f84dd7ac30f40df31a53f6cd31a51728f Fast re-ROR after head move: `5022911f84dd7ac30f40df31a53f6cd31a51728f` is a direct child of the previously reviewed `7936e15d3ae137c91c88efdab4bb09b863a2195d`; the only two-dot delta is `docs/scratchpads/tess-m4-001-mos-coordination.md` (3-line scratchpad doc change), so the approved code/test content is unchanged. Prior M4-001 findings still hold: handoff/observe/result-only contract, trusted config/context-derived identity, fail-closed self/drift/cross-tenant coverage, native in-process adapter, byte-identical command authorization digest, no live creds/no hardcoded Tess identity. CI pipeline `1754` is green; Mos merges on green. Marker: ROR-735-APPROVE-5022911f

jason.woltje referenced this issue from a commit

2026-07-13 11:46:43 +00:00

chore(tess): M4-001 #735 RE-MERGEABLE — fresh non-author ROR 17036 at 5022911f + CI 1754 green (Mos merges, native in-process)

jason.woltje merged commit 76325ca3f2 into main

2026-07-13 11:59:17 +00:00

jason.woltje referenced this issue from a commit

2026-07-13 11:59:18 +00:00

feat(tess): add Mos coordination boundary (#735)

jason.woltje deleted branch feat/tess-mos-coordination

2026-07-13 11:59:18 +00:00

Sign in to join this conversation.