Add a coherent set of long-running-agent capabilities, each as a spec
section + reference implementation + conformance class, every one metered,
attested, and receipt-chained.
Sandbox:
- §13 Durable run records (C6): the receipt chain IS the resumable run;
execute/suspend/resume segments hash-chained; idle energy metered across
parks. (sandbox-attest::runrecord)
- §14 Environment manifest (C7): devcontainer.json declarative-subset
ingestion -> canonical, content-addressed, signed manifest;
command/widening and unknown fields refused. (sandbox-attest::manifest)
- §5.5 Content-addressed process control (C8): exec allow/deny by BLAKE3 of
the binary; denylist absolute, survives rename/move/wrapper.
- §15 Warm pools (C9): a claim attributes accrued idle energy to the run
(a fast start has a visible joule price); evictions record overhead, not
zero. (sandbox-attest::warmpool)
- §16 Fleet records (C10): merkle aggregate receipt over per-item runs;
log-size membership proofs. (sandbox-attest::fleet)
- durable.json cross-impl wire vectors + file-backed verify.
JCP:
- §4.6 Standing grants (C20): a signed mint policy turns a held grant into
bounded, rate-limited, event-triggered children via the attenuation path.
(jcp-grant::standing)
- §4.7 Checkpoints + amendments (C21): mid-run steering under separation of
duties — the agent checkpoints its own state, only the issuer (a distinct
principal) may amend, and only to tighten. (jcp-grant::checkpoint)
- standing.json cross-impl vectors.
Both workspaces green; conformance harnesses pass with no skips; clippy clean.
Co-Authored-By: Claude Opus 4.8 <[email protected]>
e526133f21