docs: bounded harness feasibility and owned-session proof direction (#47) #66

Merged
kilo merged 2 commits from issue-47-harness-feasibility into develop 2026-10-05 14:40:13 +00:00
Member

Scope

Refs #47. Publish bounded research/contract reception, not new runtime behavior or harness adoption. Owner selected Owned Sessions and explicitly resumed the stopped invocation: dedicated Kernel-owned sessions/processes, read-only UI observation and honest controller-exit limitations; independent supervision/IDE handoff remain deferred and unproved.

Acceptance Evidence

  • Exact source/version/file/license/access matrix for ACP first, Kilo CLI/ACP/native surfaces, Codex, Claude Python SDK and ZCode; unknown rights/capabilities remain explicit. Correct the historical ZCode root-license observation to Apache-2.0 at the pinned revision.
  • Runtime start/observe/candidate/cancel/reconcile mappings and permission/executor/lost reply/handle/descendant/IDE/cold-review gaps.
  • Executed inference-free installed Codex 0.159.3 help/schema probes, binary checksum and synthetic refusal/recovery checks, not native lifecycle reception.
  • Distinct gateway verdict: direct Responses/Messages ingress unsupported at pinned Router source; Chat Completions conditional, no API/translator invented.
  • Separately authorized live proof plan with owned disposable subjects, failure markers, original-envelope recovery and no shared-server kill/session takeover.
  • Reuse ladder, maintenance/migration limits and downstream reception prerequisites, not full G01/G04/G10 closure or product GO.

Frozen Objects

Base: e5f30c9cef
HEAD: f59f021ea4

Validation

  • uv run --locked pytest tests/test_codex_runtime.py tests/test_codex_stdio.py: 47 passed.
  • make check: PASS, 977 tests and 32 subtests; formatting/lint/types/import boundary/secrets/whitespace passed.
  • make package-check: PASS, reproducible wheel/sdist and isolated installed CLI replay/export.
  • No dependency/tooling changes; audit not required.

Research evidence: #47 (comment). No live model/session/gateway operation, installation, private state/credentials, external mutation, release or deployment. Independent frozen whole-PR review pending; this PR itself grants no authority.

## Scope Refs #47. Publish bounded research/contract reception, not new runtime behavior or harness adoption. Owner selected Owned Sessions and explicitly resumed the stopped invocation: dedicated Kernel-owned sessions/processes, read-only UI observation and honest controller-exit limitations; independent supervision/IDE handoff remain deferred and unproved. ## Acceptance Evidence - Exact source/version/file/license/access matrix for ACP first, Kilo CLI/ACP/native surfaces, Codex, Claude Python SDK and ZCode; unknown rights/capabilities remain explicit. Correct the historical ZCode root-license observation to Apache-2.0 at the pinned revision. - Runtime start/observe/candidate/cancel/reconcile mappings and permission/executor/lost reply/handle/descendant/IDE/cold-review gaps. - Executed inference-free installed Codex 0.159.3 help/schema probes, binary checksum and synthetic refusal/recovery checks, not native lifecycle reception. - Distinct gateway verdict: direct Responses/Messages ingress unsupported at pinned Router source; Chat Completions conditional, no API/translator invented. - Separately authorized live proof plan with owned disposable subjects, failure markers, original-envelope recovery and no shared-server kill/session takeover. - Reuse ladder, maintenance/migration limits and downstream reception prerequisites, not full G01/G04/G10 closure or product GO. ## Frozen Objects Base: e5f30c9cef89e9991c12cae924093cf95d87d75b HEAD: f59f021ea457510d72d2429ce5795b9e0d07a63f ## Validation - `uv run --locked pytest tests/test_codex_runtime.py tests/test_codex_stdio.py`: 47 passed. - `make check`: PASS, 977 tests and 32 subtests; formatting/lint/types/import boundary/secrets/whitespace passed. - `make package-check`: PASS, reproducible wheel/sdist and isolated installed CLI replay/export. - No dependency/tooling changes; audit not required. Research evidence: https://forgejo.creatidy.com/Creatidy/creatidy-kernel/issues/47#issuecomment-14697. No live model/session/gateway operation, installation, private state/credentials, external mutation, release or deployment. Independent frozen whole-PR review pending; this PR itself grants no authority.
docs: record bounded harness feasibility and owned-session direction (#47)
All checks were successful
ci / check (pull_request) Successful in 1m9s
f59f021ea4
Author
Member

READY_FOR_OWNER_MERGE

Invocation kernel-loop-20261005T102040Z; issue #47. Latest explicit owner continuation authorizes review-environment remediation/independent alternate tool path but does not authorize merge.

Fresh independent whole-PR review ordinal 2/10 (native task ses_ef3d1acb0ffeo82XzpbBZsJXMC) returned APPROVE, findings [], for exact HEAD f59f021ea457510d72d2429ce5795b9e0d07a63f, base/merge base e5f30c9cef89e9991c12cae924093cf95d87d75b. Ordinal 1 COMMENT is retained unchanged; counter is 2/10, not reset.

The reviewer independently fetched the exact pinned official ACP/Kilo/Codex/Claude/ZCode sources and Router 6c337a400b4cdc28ded543d2ae8ccf3749d79cb7, verified material evidence/rights limitations, Owned Sessions direction, control/backend separation, reuse and downstream boundaries. Installed Codex checksum/version/help/schema were independently reproduced with synthetic HOME/TMPDIR and env -i, without model/session execution.

Review blockers were resolved through an ephemeral image exported solely from frozen tracked Git material. Docker image sha256:d7c2d0b94ed04f23976cd7a3857e9ddadf0823d12a5602a395e16c6bcfa5494c had locked uv Python3.12 tooling, uid10001 and explicit env -i entrypoint. Its staged tree exactly matched frozen HEAD tree 26e75b0bc1ae84c1afbc5d7ee883f6cb7b071fd0. Validation ran with --network none --cap-drop ALL --security-opt no-new-privileges, no host bind mounts, synthetic HOME/TMPDIR and fresh owned Docker volume for supported native test storage. No host secrets/environment/HOME or Docker socket were exposed to test processes; no tests edited, skipped or weakened.

Independently executed:

  • make check: PASS, 977 tests + 32 subtests; locked tooling/format/lint/types/import boundary/secrets/whitespace PASS.
  • make package-check: PASS, sdist rebuild, isolated wheel install and installed CLI replay/export.
  • Focused Codex Runtime/stdio suite: 47 tests PASS.
  • Actual full frozen PR whitespace/currentness/cleanliness PASS.

Final MCP/Git checks confirm exact reviewed head/base, clean owner checkout, #47 open/unlabelled and #66 open/unmerged targeting develop. Canonical CI #2216 succeeded on exact HEAD: https://forgejo.creatidy.com/Creatidy/creatidy-kernel/actions/runs/86.

No new commit/remediation required. Own disposable Docker containers/volumes/image were removed; excluded invocation ledger preserves both reviews. No merge or issue closure. Approval is for the bounded research result only, not harness adoption/live readiness/G01/G04/G10 closure or product GO. This update supersedes the earlier pending-review/environment-blocked status.

## READY_FOR_OWNER_MERGE Invocation `kernel-loop-20261005T102040Z`; issue #47. Latest explicit owner continuation authorizes review-environment remediation/independent alternate tool path but **does not authorize merge**. Fresh independent whole-PR review **ordinal 2/10** (native task `ses_ef3d1acb0ffeo82XzpbBZsJXMC`) returned **APPROVE**, findings `[]`, for exact HEAD `f59f021ea457510d72d2429ce5795b9e0d07a63f`, base/merge base `e5f30c9cef89e9991c12cae924093cf95d87d75b`. Ordinal 1 COMMENT is retained unchanged; counter is 2/10, not reset. The reviewer independently fetched the exact pinned official ACP/Kilo/Codex/Claude/ZCode sources and Router `6c337a400b4cdc28ded543d2ae8ccf3749d79cb7`, verified material evidence/rights limitations, Owned Sessions direction, control/backend separation, reuse and downstream boundaries. Installed Codex checksum/version/help/schema were independently reproduced with synthetic HOME/TMPDIR and `env -i`, without model/session execution. Review blockers were resolved through an ephemeral image exported solely from frozen tracked Git material. Docker image `sha256:d7c2d0b94ed04f23976cd7a3857e9ddadf0823d12a5602a395e16c6bcfa5494c` had locked uv Python3.12 tooling, uid10001 and explicit `env -i` entrypoint. Its staged tree exactly matched frozen HEAD tree `26e75b0bc1ae84c1afbc5d7ee883f6cb7b071fd0`. Validation ran with `--network none --cap-drop ALL --security-opt no-new-privileges`, no host bind mounts, synthetic HOME/TMPDIR and fresh owned Docker volume for supported native test storage. No host secrets/environment/HOME or Docker socket were exposed to test processes; no tests edited, skipped or weakened. Independently executed: - `make check`: PASS, 977 tests + 32 subtests; locked tooling/format/lint/types/import boundary/secrets/whitespace PASS. - `make package-check`: PASS, sdist rebuild, isolated wheel install and installed CLI replay/export. - Focused Codex Runtime/stdio suite: 47 tests PASS. - Actual full frozen PR whitespace/currentness/cleanliness PASS. Final MCP/Git checks confirm exact reviewed head/base, clean owner checkout, #47 open/unlabelled and #66 open/unmerged targeting develop. Canonical CI #2216 succeeded on exact HEAD: https://forgejo.creatidy.com/Creatidy/creatidy-kernel/actions/runs/86. No new commit/remediation required. Own disposable Docker containers/volumes/image were removed; excluded invocation ledger preserves both reviews. No merge or issue closure. Approval is for the bounded research result only, not harness adoption/live readiness/G01/G04/G10 closure or product GO. This update supersedes the earlier pending-review/environment-blocked status.
Merge branch 'develop' into issue-47-harness-feasibility
All checks were successful
ci / check (pull_request) Successful in 1m8s
f9976c1af9
kilo merged commit 5048c5cef9 into develop 2026-10-05 14:40:13 +00:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Creatidy/creatidy-kernel!66
No description provided.