Skip to content

receipt(host-mutation): ruleset 15256879 / code_quality rule removed (Aaron-auth 2026-04-29)#861

Merged
AceHack merged 2 commits intomainfrom
receipt/host-mutation-ruleset-15256879-code-quality-removed-2026-04-29
Apr 29, 2026
Merged

receipt(host-mutation): ruleset 15256879 / code_quality rule removed (Aaron-auth 2026-04-29)#861
AceHack merged 2 commits intomainfrom
receipt/host-mutation-ruleset-15256879-code-quality-removed-2026-04-29

Conversation

@AceHack
Copy link
Copy Markdown
Member

@AceHack AceHack commented Apr 29, 2026

Summary

Receipt for a live host mutation made before the executable-host-settings reconciler tooling exists. Per Amara 2026-04-29 carved blade: "Clickops used to restore declarative ownership must become a receipt, or it becomes the next drift." Aaron explicit endorsement: "Now record the host mutation so git can remember it. that's a sharp and perfect catch from Amara."

What this records

Authorization chain

  1. Aaron 2026-04-29: "if the org-recommended are legacy we can remove, declarative is better"
  2. Amara 2026-04-29: design recommendation (one CodeQL owner)
  3. Standing-authority + branch-protection-is-agent-call delegation

What this receipt is NOT (per Amara corrections)

  • ❌ NOT a doctrine adoption — executable-host-settings is research-first
  • ❌ NOT precedent for casual ruleset mutations — hook denial during the episode was healthy; future apply path is host-reconciler-mediated with WorkClaim + policy + receipt
  • ❌ NOT a permanent erasure of GitHub Code Quality — it's a current public-preview feature; "legacy" only relative to Zeta's desired declarative architecture
  • ❌ NOT authorization to broaden `gh api ... rulesets/PUT` permission in `.claude/settings.json` — keep the hook scope narrow

Files

  • `memory/feedback_host_mutation_receipt_2026_04_29_ruleset_15256879_code_quality_removed.md` (NEW — full receipt)
  • `memory/MEMORY.md` (paired index entry per memory-index-integrity rule)

Future-state record

When `.zeta/hosts/github/lfg-zeta.yaml` lands per Amara's MVP "PR 1" (still research-first), the desired-state declaration should reflect the 5-rule ruleset; the future reconciler reads this receipt to resolve the would-be `unauthorized_drift` finding into `expected_drift`.

Composes with

Test plan

  • Memory file frontmatter follows feedback_*.md convention
  • MEMORY.md paired entry added (lint requirement)
  • Receipt covers BEFORE/AFTER state diff explicitly
  • Authorization chain documented
  • What-this-is-NOT section preserves Amara's corrections
  • Future-state record provided for the reconciler
  • No code/CI risk (memory-only)

Copilot AI review requested due to automatic review settings April 29, 2026 21:13
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1785d1a096

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

…(Aaron-auth 2026-04-29)

Per Amara 2026-04-29: "Clickops used to restore declarative ownership
must become a receipt, or it becomes the next drift." Aaron explicit
endorsement of Amara's catch: "Now record the host mutation so git can
remember it. that's a sharp and perfect catch from Amara."

This receipt records the live host (GitHub) mutation made before the
executable-host-settings reconciler tooling exists.

Operation: PUT /repos/Lucent-Financial-Group/Zeta/rulesets/15256879
Diff (rules array):
  BEFORE (6 rules): deletion, non_fast_forward, copilot_code_review,
                    pull_request, required_linear_history,
                    code_quality severity=all
  AFTER (5 rules):  deletion, non_fast_forward, copilot_code_review,
                    pull_request, required_linear_history

Reason: eliminate the host-side / non-git-declared CodeQL owner that
was injecting `event=dynamic` "Code Quality" runs bypassing the
source-presence gate from PR #857. The git-visible advanced workflow
`.github/workflows/codeql.yml` is now sole CodeQL owner. Resolves
multi-master conflict that blocked PR #849.

Authorization chain:
- Aaron 2026-04-29: "if the org-recommended are legacy we can remove,
  declarative is better"
- Amara 2026-04-29 design recommendation
- standing-authority + branch-protection-is-agent-call delegation

What this receipt is NOT (per Amara corrections):
- NOT a doctrine adoption (executable-host-settings is research-first)
- NOT precedent for casual ruleset mutations (hook denial was healthy)
- NOT a permanent erasure of GitHub Code Quality (it's a current
  public-preview feature; "legacy" only relative to Zeta's desired
  declarative architecture)

Future-state record provided for the reconciler to absorb when
.zeta/hosts/github/lfg-zeta.yaml lands.

Paired MEMORY.md index entry per memory-index-integrity rule.

Composes with task #343 (drift-debt receipt task this fulfils).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@AceHack AceHack force-pushed the receipt/host-mutation-ruleset-15256879-code-quality-removed-2026-04-29 branch from 1785d1a to 23fcfa2 Compare April 29, 2026 21:15
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 23fcfa27e4

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Records a GitHub-side ruleset mutation as durable substrate (“receipt”) by adding a new memory entry and indexing it in memory/MEMORY.md, so future host-reconciler tooling can account for the change.

Changes:

  • Add a new receipt memory documenting removal of the code_quality severity=all rule from ruleset 15256879.
  • Add a corresponding top-level index entry in memory/MEMORY.md.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File Description
memory/feedback_host_mutation_receipt_2026_04_29_ruleset_15256879_code_quality_removed.md New receipt documenting the host-side ruleset change and rationale.
memory/MEMORY.md Adds an index entry pointing to the new receipt.

…ame consistency (Codex P2 + Copilot P1 x2)

PR #861 review threads:

- L55 + L97 (Codex P2 + Copilot P1, similar finding): receipt cited
  files that don't exist on main yet:
  * `memory/feedback_executable_declarative_host_settings_design_
    packet_research_first_aaron_amara_2026_04_29.md` — parked on
    `doctrine/executable-declarative-host-settings-2026-04-29` branch
  * `docs/research/2026-04-29-amara-executable-declarative-host-
    settings.md` — also parked on same branch
  Both are pending the research-first lane per Aaron's
  *"we should research it first i think the whole space"* directive.

  Fix: explicitly note these as parked-not-landed with the branch
  name where they live, so future readers chase a real branch ref
  instead of a dead in-tree path.

- L70 (Copilot P1, branch-name consistency): future-state YAML
  example used `refs/heads/main` but the live ruleset condition
  recorded above is `~DEFAULT_BRANCH`. Inconsistent — could encode
  a wrong branch name into the future declaration.

  Fix: use `~DEFAULT_BRANCH` to match the live ruleset condition,
  with inline comment noting it resolves to `refs/heads/main` on
  this repo today.

- The standing-authority citation was correct on the rebased branch
  (file exists on main post-#860 merge); Codex's earlier finding
  about that was stale. Replied + resolved separately.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@AceHack AceHack merged commit 8721225 into main Apr 29, 2026
23 checks passed
@AceHack AceHack deleted the receipt/host-mutation-ruleset-15256879-code-quality-removed-2026-04-29 branch April 29, 2026 21:24
AceHack added a commit that referenced this pull request Apr 29, 2026
…ra round-2 convergence

Aaron 2026-04-29 sent the round-0 DecisionSignal/AutonomyEvidence
packet to multi-AI review per the established pattern. 5 reviewers
returned substantive feedback (Gemini / Ani / Claude.ai / Alexa /
Deepseek), and Amara synthesized into a round-2 convergence framing
with 10 specific review questions.

Aaron 2026-04-29 status: "I'm going through round 2 now, I'll bring
it back in a bit." — round-2 in flight; NO active doctrine adoption
yet.

Per Otto-363 substrate-or-it-didn't-happen + channel-verbatim-
preservation rule: round-1 review verbatim preservation lands now so
the synthesis substrate is durable before round-2 returns.

This commit lands ONLY:
- Verbatim 5-AI review + Amara round-2 convergence framing:
  docs/research/2026-04-29-decisionsignal-multi-ai-review-round-1-
  and-amara-round-2-convergence.md
- Updated status marker on the parked branch's memory file with
  Round-1-complete status + 14 cross-reviewer convergence points.

Convergence highlights (multiple reviewers independently flagged):
- canonical name: DecisionSignal (vs AutonomyEvidence)
- initial_classification + final_classification (transition matters)
- minimum-viable-signal boundary as concrete inclusion test
- required-vs-recommended fields per receipt risk class
- autonomy_justification field (the why of the level label)
- git-native location: memory/decisions/DS-YYYY-MM-DD-<slug>.md
- decision_class field (diagnostic/value_choice/invariant_enforcement/
  host_mutation/permission_change/refusal)
- non_actions classification (active_refusal/out_of_scope/deferred)
- tie-breaking rule (highest satisfied; downgrade when uncertain)
- A4/A5 must never have human_intervention: none
- human_signals/agent_inference are bullet-points, not transcripts
- human_intervention.what_human_did_not_do (symmetric boundary)
- durability self-check applying NO-INVISIBLE-DIRECTIVES rule
- anchor to NIST AI RMF / NIST AI 600-1 / SLSA-in-toto / W3C PROV /
  SAE J3016 / Miller-Parasuraman literature

Amara's recommended next step (post-round-2): implement a tiny
DecisionSignal v0 for the Code Quality episode in a WIP branch,
paired with the existing host-mutation receipt landed via PR #861.

This commit DOES NOT land:
- DecisionSignal v0 implementation (premature without round-2
  settlement)
- memory/decisions/ directory or schema (premature)
- AgencyReceipt schema augmentation (premature)
- MEMORY.md index pairing (will land paired when this branch
  un-parks after round-2)

Branch remains parked. Per Aaron's "review-then-bring-back" pattern.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
AceHack added a commit that referenced this pull request Apr 29, 2026
…ubstrate framing + Amara final packet

Aaron returned with substrate framing on peer/buddy class taxonomy
(verbatim preserved): peer agent harness has two sub-classes
(substrate-aware vs host-only), buddy agent harness has two sub-classes
(PR-capable vs local-only), plus runtime-internal subagents — all
optimized for parallelization.

Amara's round-3 rewrite formalized this as conceptual-categories-not-
mirror-slang: independent_agent_harness / parent_managed_agent_harness
/ runtime_internal_subagent / invoked_tool / ci_actor / host_actor /
human_principal. Five-AI review (Claude.ai, Ani, Deepseek, Gemini,
Alexa) returned interface-hardening only — no architectural challenges.

Amara final packet: "Round 3 convergence reached. Do not run another
broad review." Architecture LOCKED:

- Recursive primitive: DelegationEdge*
- Accountable output: SharedEffect*
- Evaluation layer: AttributionRecord* + OutcomeAssessment*
- Causal chain: DecisionSignal → AgencyReceipt → SharedEffect
  → AttributionRecord → OutcomeAssessment
- Universal: SharedEffect + trace + attribution
- Boundary-crossing: + DecisionSignal + AgencyReceipt + non_actions
  + WorkClaim proof

Final doctrine (locked):
  Do not canonize the mirror slang. Canonize the concepts.
  Lifecycle is not authority. Authority is not effect.
  Shared effect is the accountability boundary.
  Delegation is recursive. Execution is traced.
  Effects are receipted. Outcomes are attributed.
  Attribution is evidence, not verdict.
  Blame and credit are views over evidence.

Implementation direction (Amara, locked): "Do not build the whole
scoring engine now." Light schema-concept implementation only. First
worked example: Code Quality episode (PR #861 host mutation receipt)
pairs with DecisionSignal v0 + SharedEffect + AttributionRecord.
Example weights illustrative-not-derived.

NOT this session — Aaron's "I'll be back after round 3" closes here.
This preservation IS round-3 close. Staged rollout deferred to next
session per Amara's implementation direction.

Status marker memory updated to reflect convergence; autonomy levels
A0–A5 from round-0 demoted to secondary; "peer"/"buddy" demoted from
canonical → working aliases.

Per Otto-363 (substrate-or-it-didn't-happen) + channel-verbatim-
preservation rule: research-grade preservation, NOT operational
adoption. Synthesis lives alongside the verbatim, not instead.

Composes with PR #855 (Otto-363), prior round verbatim preservation
files, and the agent-orchestra layered-actor-identity work
(PRs #851/#852/#853).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants