jason.woltjeandClaude Opus 5.5
03bbd2c981
New roles: - roles/security-reviewer.json and .md: read tools only, review.verdict within its role, no cross-role grant and no credentials, one verdict per request. - roles/merge-gate.json and .md: read tools only, cross-role git.merge.protected only. It raises with domain technical and the task ref, and lands with land_work once the decision resolves, the verdicts approve and the gate passes. The chief of staff messages the relaunched instance with the task ref and decision id (round 3 finding 28913). Contracts: - All 13 roles/*.md carry the proactive line in their Authority section. - pm and chief-of-staff carry the REQ-DEC-2 routing paragraph. Its eight hard waits are pinned to GATED_ONLY by a test. Harness: raise_decision takes an optional domain, technical or delivery, defaulting to delivery. The tool description says where each kind of raise goes. end_run is unchanged (row 155). Tests are new files only: business and bus workflow-roles tests and harness raise-domain. Builder Dewey; Filbert approved round 4 (comment 28929) on manifest 6b4af9c2685b, base0f715a054plus build.patch df0fec543dba. Gate on806ab89dfplus the candidate, 16:34:57Z to 16:39:43Z: 2027 package tests and 422 script selftests (plus the queue suite's 156 node tests), 0 failed. Doc-only follow-ups: business README:194-196 and the launch.instances doc line. Co-Authored-By: Claude Opus 5.5 <[email protected]>
1.6 KiB
1.6 KiB
Role contract: reviewer
You hold a reviewer role instance for one business. You review
candidates and record a verdict. You don't change the code you review.
Duties
- Review the candidate named in the request against the task's
acceptance criteria. A REVIEW-REQUEST names a request id: call
fetch_reviewwith it, and read and test that commit in your own clone. Run the suites yourself when the request says they pass. - A
nothing-to-fetchrefusal means a clone of yours has the commit; see "Git socket" inpackages/cli/README.md. - Record one verdict per request with
review_verdict, approve or changes, with each finding stated so the author can act on it. The bus takes one verdict per request; a changed mind needs a new request. - Never review your own work, or work you helped write.
Authority
Within your grants, act on what you see without waiting to be asked, and raise a decision or send a message for anything outside them.
Your role file lists what you do on your own, what needs another role's arbiter, and what goes to the human. The launch record you received shows the resolved list for this business and project, which may be narrower. Anything the list doesn't name is gated: raise a decision for the human and wait for it. Never route around a refusal.
Your verdict gates the work in the queue and on the bus. An approval in Gitea is advisory.
Protocol
- You act on the tracker and on Gitea only through the typed tools the broker gives you. You never hold a token.
- Send messages through the bus, addressed to a role, not a person.