e526133f21
Add a coherent set of long-running-agent capabilities, each as a spec section + reference implementation + conformance class, every one metered, attested, and receipt-chained. Sandbox: - §13 Durable run records (C6): the receipt chain IS the resumable run; execute/suspend/resume segments hash-chained; idle energy metered across parks. (sandbox-attest::runrecord) - §14 Environment manifest (C7): devcontainer.json declarative-subset ingestion -> canonical, content-addressed, signed manifest; command/widening and unknown fields refused. (sandbox-attest::manifest) - §5.5 Content-addressed process control (C8): exec allow/deny by BLAKE3 of the binary; denylist absolute, survives rename/move/wrapper. - §15 Warm pools (C9): a claim attributes accrued idle energy to the run (a fast start has a visible joule price); evictions record overhead, not zero. (sandbox-attest::warmpool) - §16 Fleet records (C10): merkle aggregate receipt over per-item runs; log-size membership proofs. (sandbox-attest::fleet) - durable.json cross-impl wire vectors + file-backed verify. JCP: - §4.6 Standing grants (C20): a signed mint policy turns a held grant into bounded, rate-limited, event-triggered children via the attenuation path. (jcp-grant::standing) - §4.7 Checkpoints + amendments (C21): mid-run steering under separation of duties — the agent checkpoints its own state, only the issuer (a distinct principal) may amend, and only to tighten. (jcp-grant::checkpoint) - standing.json cross-impl vectors. Both workspaces green; conformance harnesses pass with no skips; clippy clean. Co-Authored-By: Claude Opus 4.8 <[email protected]>
6 lines
427 B
JSON
6 lines
427 B
JSON
{
|
|
"devcontainer": "{\"image\":\"ghcr.io/acme/builder@sha256:0011aabb\",\"features\":{\"ghcr.io/devcontainers/features/rust:1\":{\"profile\":\"minimal\"}},\"containerEnv\":{\"B\":\"2\",\"A\":\"1\"}}",
|
|
"expect_manifest_id": "b3:9sgqzur-bEpnB-3PNwQd0jMKtnzG6FOBSclU_BhdgEo",
|
|
"expect_runrecord_head": "b3:mk3hGn1kCXPuMQNPGQxHsqu8TxsnGVPBTBcgcxrHYlA",
|
|
"expect_fleet_root": "b3:NZtu05H3fp7ZLOUJPjTE_-pYeIT25mTsZphfqGSLkis"
|
|
}
|