Repository navigation
docs: define versioned local receipt bootstrap for Codex and Claude - #174
Conversation
Record owner-selected delegation and collector lifecycle, preserve generation-bound v1, and propose a separate Claude receipt context with bounded ownership and ordering rules. Refs #132
abruption
added this to the
0.6.0 — Claude discovery, authenticated receipts and research milestone
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
Preserve the reviewed package allowlist and link the repository-only design through its immutable source. Refs #132
Include the native result, queue calls and retained scope in two existing assertions without changing guards, expectations or budgets.
|
Codex Review: Didn't find any major issues. Already looking forward to the next diff. Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
|
@codex security review |
🛡️ Codex Security ReviewSecurity review completed. No security issues were found in this pull request. Reviewed commit: Only the user who started this review can view the report in Codex. ℹ️ About Codex security reviews in GitHubThis is an experimental Codex feature. Security reviews are triggered when:
Once complete, Codex will leave suggestions, or a comment if no findings are found. |
Purpose
Record the owner-selected contract direction for #132 before runtime implementation: include Claude alongside the Codex generation-bound route, delegate receipt-only authority through explicit opt-in recipient input, require an explicitly invoked installed handler, and use a manually started/stopped local collector.
Claude cannot establish the original native generation required by v1. The proposal therefore keeps Codex receipt/handoff v1 semantics and defines a separate proposed Claude delegated-context v2. Such a receipt proves possession of explicitly delegated receipt authority, not native generation, injection, model identity, message consumption or task completion. Recipient native history may retain delegated authority; sender/collector argv, environment, URI, public output and raw persistence must not contain it.
Reviewable candidate
The version numbers, IPC fields and bounds are an implementation-review candidate, not a shipped/frozen protocol or platform qualification. This PR changes the repository-only design document, its immutable parity link, the docs npm exclusion, and diagnostics in two existing test assertions. #132 remains open for subsequent contract review and implementation.
Validation and limits
Repository structure/local links and anchors, scoped version check and
git diff --checkpass. Package smoke also passes with the existing 79-file allowlist; initial CI exposed accidental packaging of the new design, corrected by excluding this repository-only proposal and using an immutable web link in packaged parity notes. Both JSON examples parse. Existing strict validators reject the proposed new examples; the representative handoff satisfies unchanged v1 predicates after explicitly reversing only the declared schema/context delta. This is a document-consistency check, not execution of a new v2 validator.The subsequent macOS CI run failed two existing handoff timeout fixtures (queued versus refused, and timed-out versus unsupported). The source and tests were unchanged in that documentation head; the available logs do not establish the cause. Current commit
5f0774badds result/call/scope diagnostics only, preserving all guards, expected outcomes and budgets. Both targeted fixtures and types pass locally; exact head5f0774bCI is 12/12 successful. No runner-flake or product-root-cause claim is made.Independent read-only Codex reviews identified the payload-binding omission and fast-receipt ordering gap; the candidate now explicitly addresses both, with no further concrete contradiction found in the final targeted review. Planned compatibility, ownership, crash, resource and live qualification fixtures remain unexecuted.
No runtime/schema changes or fixture behavior changes, collector execution, native/model/SSH/ACK experiments, installation, merge, release or publication are included. The separate #73 investigation recommends no-go for transcript-derived observation; it is not a prerequisite for this voluntary receipt route.
Refs #132
Manual Code Review and Security Review both completed on exact head
5f0774b0e6dfff8930f99d7469a15a71e560f981with no findings. Current-head CI is 12/12 successful.