Skip to content

Add exact native capability checking policy contracts - #1061

Merged
DamianReeves merged 1 commit into
mainfrom
DamianReeves/desktop-capability-policies
Oct 18, 2026
Merged

DamianReeves merged 1 commit into
mainfrom
DamianReeves/desktop-capability-policies

Conversation

@DamianReeves

@DamianReeves DamianReeves commented Oct 18, 2026 •

Copy link
Copy Markdown
Member

A native Workbench session can explicitly negotiate its checking policy without changing the frozen strict mapping. This adds exact native 0.2.0-draft.2, a scoped bounded Scheme offer, and an accepted execution-plan echo. Omitted policy remains strict; unknown selections and descriptor fields reject.

Publish independent fixed MCK drafts 20–22 for the production boundary, client and owner adapters. The owner suite distinguishes controlled IO from real selected Scheme evaluation. The shared Rust runner checks observations and saved reports; it does not implement the runtime under test. Frozen contracts and kits remain unchanged. HTTP policy adoption is separate work.

Validation:

  • 162 new fixed cases across ten production adapter lanes, producing 556 independently checked observations.
  • Frozen MCK14–19 regressions pass all 24 lanes.
  • Shared MCK library 325 tests and CLI Workbench 13 integration tests pass.
  • Full Workbench schema gates, clippy with warnings denied, formatting and independent semantic review pass.
  • Packaged macOS Apple Silicon Proton policy/workers and UI regression pass in the paired implementation. OS dialog evidence is tracked separately.

Beads: morphir-etg2.16.5. Paired implementation: finos/morphir-moonbit#136. Land this shared protocol before the implementation.

Keep frozen native mappings unchanged. Publish an exact policy-aware mapping with independent boundary, client and owner cases, checked by the shared Rust MCK.
@netlify

netlify Bot commented Oct 18, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for angry-raman-7c44f6 canceled.

Name Link
🔨 Latest commit 07c2591
🔍 Latest deploy log https://app.netlify.com/projects/angry-raman-7c44f6/deploys/6ad44b0827356b7f9f9e12e1

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 18, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-18T04:32:04.591568Z 07c2591 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@DamianReeves
DamianReeves merged commit aa30cd0 into main Oct 18, 2026
17 checks passed
@DamianReeves
DamianReeves deleted the DamianReeves/desktop-capability-policies branch October 18, 2026 05:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant