Skip to content

Enable capability checking policies in desktop Workbench - #136

Merged
DamianReeves merged 2 commits into
mainfrom
DamianReeves/desktop-capability-policies
Oct 18, 2026
Merged

DamianReeves merged 2 commits into
mainfrom
DamianReeves/desktop-capability-policies

Conversation

@DamianReeves

Copy link
Copy Markdown
Member

Desktop users can choose "As code executes" for supported public Scheme functions while retaining the default "Whole model before running" policy. The packaged host negotiates exact native 0.2.0-draft.2; each accepted execution captures its policy, evaluator, session authority, selected boundary and inputs through the actual isolated worker. JSON and Ion inputs use the same path.

The functional core validates the accepted plan before state changes. Closed contract/runtime states, validated plan identities, once-only worker claims, replay checks and pre-submission page limits preserve execution ownership through cancellation, navigation and reload. Native response size is reserved before acceptance. Frozen strict mappings remain supported independently; HTTP policy adoption is the next task.

Publish production MCK20–22 adapters and portable MoonBit qualification tasks against the independent shared fixtures in finos/morphir#1061.

Validation:

  • Full mise run check, required lint/format/validation, TypeScript checks and 139 Node tests pass.
  • All 34 MCK14–22 lanes pass, with 817 fixed cases and 3,228 independently checked observations. New MCK20–22 account for 162 cases and 556 observations across ten lanes.
  • Actual native worker/bridge acceptance, client authority and immutable policy regressions pass.
  • Packaged macOS Apple Silicon Proton verifies strict defaults, permissive JSON/Ion, captured selection, reached-operation failures, cancellation and navigation/reload.
  • Real OS folder selection verifies native workspace grants, Ion text/binary and legacy JSON inspection, and byte-exact original checkpoint downloads. Native save-dialog behavior and other desktop platforms are not claimed by that local check.
  • Local HTML checkbox plans pass offline layout checks in both themes at 390, 768 and 1440 pixels.

Beads: morphir-etg2.16.5. Shared protocol PR should land first. Connected HTTP checking policies remain morphir-etg2.16.6.

Bind the exact native mapping to its page session and capture policy through the owner, rich snapshot and isolated worker. Reserve the accepted reply before publication and validate typed outcomes before committing client evidence.
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 18, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-18T04:36:52.680600Z 85c7d73 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@DamianReeves
DamianReeves merged commit 0339126 into main Oct 18, 2026
56 checks passed
@DamianReeves
DamianReeves deleted the DamianReeves/desktop-capability-policies branch October 18, 2026 05:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant