pdurlej/platform

Fork 0

feat(iskra): apply Phase 1.0 constitutional bundle to VPS1000 — Iskra autonomy gate #236

New issue

Closed

opened 2026-05-12 07:58:58 +02:00 by pdurlej · 2 comments

pdurlej commented

2026-05-12 07:58:58 +02:00

Owner

Why this helps Iskra

Iskra's autonomy story is gated on Phase 1.0 constitutional bundle being applied to live VPS1000 workspace. Per state/L3/OPEN_LOOPS.md (cbffac3e Apr 4-11 + Apr 11 audit): bundle was defined but NEVER applied, and is now 3+ weeks stale.

Without Phase 1.0 active on VPS1000, Iskra has constitutional documents on disk but no runtime enforcement. "Crons fire, Iskra does nothing" — direct operator quote from the cluster name.

This unblocks: voice-note → action follow-through, autonomous decision boundaries, promotion gates for new Iskra capabilities.

Context (from `state/L3/OPEN_LOOPS.md` — `unresolved_active` cluster "Iskra autonomy pain")

4 documents defined, none applied to live VPS1000 workspace:

PROMOTION-GATES.md — when an Iskra capability moves from experimental → production
DRAFT-SPEC.md — how Iskra drafts artifacts before operator review
HUMAN-DECISION-POLICY.md — what requires operator approval vs auto-execute (CRITICAL for autonomy safety)
PROGRAM-portfolio-night-scout.md — nightly scout pattern for autonomous research

Related state on VPS1000:

iskra-operator-watch.service: FIXED per codex-followup-2026-04-30.notes.md (operator-watch healthy now)
Telemetry gap for Iskra proactivity: still open. We don't see when Iskra decides to ACT vs HOLD.

Acceptance criteria

Recon (Codex first task): SSH to VPS1000, verify which of the 4 documents (if any) are actually present in ~openclaw/.openclaw/workspace/ or equivalent. Write findings to state/reports/2026-05-12-phase-1.0-bundle-recon.md.
Diff vs intended: compare on-VPS state to the canonical bundle definitions (likely in operator vault per cluster history — Codex confirms with operator if cannot find in repo).
Apply bundle: copy/install the 4 documents to VPS1000 OpenClaw workspace via existing deployer pattern (iskra-openclaw-deploy.sh or pure-shell installer per PR #150 anti-LLM-wrapper precedent).
Verification: cron Iskra check-in next morning references HUMAN-DECISION-POLICY when proposing autonomous action. Document in runbooks/iskra-phase-1-0-bundle-installed.md.
Telemetry: emit event phase_1_0_bundle_active=true to existing telemetry path so future audits don't re-flag this.

Codex Packet

Scope: file installation + verification of Phase 1.0 bundle on VPS1000. NO modification of the bundle content itself (that's operator + Iskra spec work, not Codex execution).

Likely sequence:

Recon PR → operator review →
Apply PR with file copy + smoke test → operator review →
Telemetry hook + runbook PR

Files likely touched (after recon):

New module: modules/iskra-constitution/ with manifest + runbook listing the 4 bundle files
VPS deployer: extend iskra-openclaw-deploy.sh to include constitutional bundle files
New runbook: runbooks/iskra-phase-1-0-bundle-installed.md
Recon: state/reports/2026-05-12-phase-1.0-bundle-recon.md

Non-goals (DON'T do this)

❌ Authoring NEW constitutional documents — operator + Iskra own spec content. Codex applies existing artifacts only.
❌ "Improving" HUMAN-DECISION-POLICY.md text — out of scope. Apply as-defined; suggest improvements via separate spec-PR.
❌ Phase 1.5/2.0/etc. — Phase 1.0 only. Future phases gated on this landing first.
❌ Touching iskra-operator-watch.service — it's healthy per evidence.

References

state/L3/OPEN_LOOPS.md — "Iskra autonomy pain ('crons fire but Iskra does nothing')"
Commit cbffac3e (Apr 4-11) — original Phase 1.0 design
codex-followup-2026-04-30.notes.md — operator-watch verification
ADR pending: HUMAN-DECISION-POLICY enforcement via runtime (out of scope for this issue, but downstream)

Filed by claude (Prof Kong intermezzo, 2026-05-12 morning).

## Why this helps Iskra Iskra's autonomy story is gated on **Phase 1.0 constitutional bundle** being applied to live VPS1000 workspace. Per `state/L3/OPEN_LOOPS.md` (`cbffac3e` Apr 4-11 + Apr 11 audit): bundle was **defined but NEVER applied**, and is now **3+ weeks stale**. Without Phase 1.0 active on VPS1000, Iskra has constitutional documents on disk but no runtime enforcement. *"Crons fire, Iskra does nothing"* — direct operator quote from the cluster name. This unblocks: voice-note → action follow-through, autonomous decision boundaries, promotion gates for new Iskra capabilities. --- ## Context (from `state/L3/OPEN_LOOPS.md` — `unresolved_active` cluster "Iskra autonomy pain") **4 documents defined, none applied to live VPS1000 workspace:** 1. `PROMOTION-GATES.md` — when an Iskra capability moves from experimental → production 2. `DRAFT-SPEC.md` — how Iskra drafts artifacts before operator review 3. `HUMAN-DECISION-POLICY.md` — what requires operator approval vs auto-execute (CRITICAL for autonomy safety) 4. `PROGRAM-portfolio-night-scout.md` — nightly scout pattern for autonomous research **Related state on VPS1000**: - `iskra-operator-watch.service`: **FIXED** per `codex-followup-2026-04-30.notes.md` (operator-watch healthy now) - **Telemetry gap for Iskra proactivity**: still open. We don't see when Iskra decides to ACT vs HOLD. --- ## Acceptance criteria - [ ] **Recon (Codex first task)**: SSH to VPS1000, verify which of the 4 documents (if any) are actually present in `~openclaw/.openclaw/workspace/` or equivalent. Write findings to `state/reports/2026-05-12-phase-1.0-bundle-recon.md`. - [ ] **Diff vs intended**: compare on-VPS state to the canonical bundle definitions (likely in operator vault per cluster history — Codex confirms with operator if cannot find in repo). - [ ] **Apply bundle**: copy/install the 4 documents to VPS1000 OpenClaw workspace via existing deployer pattern (`iskra-openclaw-deploy.sh` or pure-shell installer per PR #150 anti-LLM-wrapper precedent). - [ ] **Verification**: cron Iskra check-in next morning references HUMAN-DECISION-POLICY when proposing autonomous action. Document in `runbooks/iskra-phase-1-0-bundle-installed.md`. - [ ] **Telemetry**: emit event `phase_1_0_bundle_active=true` to existing telemetry path so future audits don't re-flag this. --- ## Codex Packet **Scope**: file installation + verification of Phase 1.0 bundle on VPS1000. NO modification of the bundle content itself (that's operator + Iskra spec work, not Codex execution). **Likely sequence**: 1. Recon PR → operator review → 2. Apply PR with file copy + smoke test → operator review → 3. Telemetry hook + runbook PR **Files likely touched** (after recon): - New module: `modules/iskra-constitution/` with manifest + runbook listing the 4 bundle files - VPS deployer: extend `iskra-openclaw-deploy.sh` to include constitutional bundle files - New runbook: `runbooks/iskra-phase-1-0-bundle-installed.md` - Recon: `state/reports/2026-05-12-phase-1.0-bundle-recon.md` --- ## Non-goals (DON'T do this) - ❌ Authoring NEW constitutional documents — operator + Iskra own spec content. Codex applies existing artifacts only. - ❌ "Improving" `HUMAN-DECISION-POLICY.md` text — out of scope. Apply as-defined; suggest improvements via separate spec-PR. - ❌ Phase 1.5/2.0/etc. — Phase 1.0 only. Future phases gated on this landing first. - ❌ Touching `iskra-operator-watch.service` — it's healthy per evidence. --- ## References - `state/L3/OPEN_LOOPS.md` — "Iskra autonomy pain ('crons fire but Iskra does nothing')" - Commit `cbffac3e` (Apr 4-11) — original Phase 1.0 design - `codex-followup-2026-04-30.notes.md` — operator-watch verification - ADR pending: HUMAN-DECISION-POLICY enforcement via runtime (out of scope for this issue, but downstream) --- *Filed by claude (Prof Kong intermezzo, 2026-05-12 morning).*

pdurlej added the

labels

2026-05-12 07:58:58 +02:00

pdurlej referenced this issue

2026-05-12 07:59:20 +02:00

fix(security): finish Bws/Infisical secrets injection — close 3-thread gap #237

claude referenced this issue

2026-05-17 18:11:53 +02:00

docs(specs): secrets-pipeline-foundation-v0 prebuild (#237) #335

claude referenced this issue from a commit

2026-05-17 21:09:39 +02:00

docs(specs): Iskra mail consumer v0 prebuild for #235

claude referenced this issue

2026-05-17 21:09:58 +02:00

docs(specs): Iskra mail consumer v0 prebuild (#235) #346

claude referenced this issue from a commit

2026-05-17 21:14:35 +02:00

docs(specs): Iskra Phase 1.0 bundle apply v0 prebuild for #236

claude referenced this issue

2026-05-17 21:14:58 +02:00

docs(specs): Iskra Phase 1.0 bundle apply v0 prebuild (#236) #347

claude referenced this issue from a commit

2026-05-17 21:28:58 +02:00

docs(specs): secrets-pipeline-foundation-v0 prebuild (#237)

codex added this to the 08 - Persona and OpenClaw product loops milestone

2026-05-19 08:36:32 +02:00

pdurlej referenced this issue from a commit

2026-05-23 10:31:30 +02:00

Merge pull request 'docs(specs): Iskra Phase 1.0 bundle apply v0 prebuild (#236)' (#347) from claude/iskra/phase-1-0-bundle-v0 into main

codex referenced this issue

2026-05-28 01:21:54 +02:00

chore(m08): select next one or two Persona/OpenClaw product loops #542

codex referenced this issue

2026-05-29 16:55:52 +02:00

chore(m08): select next one or two Persona/OpenClaw product loops #542

codex referenced this issue

2026-05-29 16:59:57 +02:00

chore(w9): milestone archaeology packet for stale open issues #535

~~codex referenced this issue 2026-05-30 06:59:54 +02:00~~

docs(coordination): claude/Codex work-division seam (Codex Pro 20x rebalance) #625

claude added the

priority:p1

label

2026-05-30 13:48:09 +02:00

claude added the

dependency/blocks-others

label

2026-05-30 22:42:01 +02:00

Iskra commented

2026-06-04 20:19:06 +02:00

Collaborator

{
"confidence": 4,
"effort_hint": "large",
"escalation": {
"kind": "operator",
"reason": "Live VPS1000 constitutional enforcement changes need owner approval and careful rollout."
},
"evidence_refs": [
{
"note": "Issue requests applying the Phase 1.0 constitutional bundle to live VPS1000 workspace.",
"type": "forgejo",
"value": "issue-title-body-labels-and-target-snapshot"
},
{
"note": "Body states four autonomy documents were defined but not applied to live runtime.",
"type": "forgejo",
"value": "issue-body-context"
},
{
"note": "Labels mark this as p1, owner-attention, dependency blocker, and runtime risk.",
"type": "snapshot",
"value": "target-labels-snapshot"
}
],
"impact": 5,
"judge_actor": {
"name": "iskra",
"runtime": "openclaw"
},
"judged_at": "2026-06-04T18:06:00Z",
"labels_to_apply": [
"judge/p1",
"judge/operator-needed"
],
"piotr_fit": "high",
"priority": "p1",
"rationale_summary": "This is a major autonomy gate because runtime enforcement must match the declared constitutional bundle before dependent capabilities are trusted.",
"reach": 5,
"recommended_next_action": "operator_needed",
"rerun_reason": "operator_requested",
"schema": "openclaw.judge.v0",
"target": {
"kind": "issue",
"number": 236,
"repo": "pdurlej/platform"
},
"target_snapshot": {
"body_hash": "sha256:983fc9c3327c25a2db6edb1a3e565b850564a58d5c0ad7f0bc6d518e42a3e301",
"commit_count": null,
"evidence_hash": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
"head_sha": null,
"labels": [
"dependency/blocks-others",
"operator-emotional",
"owner-attention",
"phase/02",
"priority:p1",
"ready-for-agent",
"risk/runtime",
"tier/full"
],
"labels_hash": "sha256:462a5f2a89f8315cb4a7c565cafd725c525cf579da3837f73f276d50efabda30",
"state": "open",
"title_hash": "sha256:a754e55d6beb4f3fa81469d1f11da17143288c75bb6e108ec2f4fe96ace363cd",
"updated_at": "2026-05-30T22:42:01+02:00"
},
"top_caveat": "Apply with receipts and rollback path; do not silently change live autonomy boundaries."
}

{ "confidence": 4, "effort_hint": "large", "escalation": { "kind": "operator", "reason": "Live VPS1000 constitutional enforcement changes need owner approval and careful rollout." }, "evidence_refs": [ { "note": "Issue requests applying the Phase 1.0 constitutional bundle to live VPS1000 workspace.", "type": "forgejo", "value": "issue-title-body-labels-and-target-snapshot" }, { "note": "Body states four autonomy documents were defined but not applied to live runtime.", "type": "forgejo", "value": "issue-body-context" }, { "note": "Labels mark this as p1, owner-attention, dependency blocker, and runtime risk.", "type": "snapshot", "value": "target-labels-snapshot" } ], "impact": 5, "judge_actor": { "name": "iskra", "runtime": "openclaw" }, "judged_at": "2026-06-04T18:06:00Z", "labels_to_apply": [ "judge/p1", "judge/operator-needed" ], "piotr_fit": "high", "priority": "p1", "rationale_summary": "This is a major autonomy gate because runtime enforcement must match the declared constitutional bundle before dependent capabilities are trusted.", "reach": 5, "recommended_next_action": "operator_needed", "rerun_reason": "operator_requested", "schema": "openclaw.judge.v0", "target": { "kind": "issue", "number": 236, "repo": "pdurlej/platform" }, "target_snapshot": { "body_hash": "sha256:983fc9c3327c25a2db6edb1a3e565b850564a58d5c0ad7f0bc6d518e42a3e301", "commit_count": null, "evidence_hash": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855", "head_sha": null, "labels": [ "dependency/blocks-others", "operator-emotional", "owner-attention", "phase/02", "priority:p1", "ready-for-agent", "risk/runtime", "tier/full" ], "labels_hash": "sha256:462a5f2a89f8315cb4a7c565cafd725c525cf579da3837f73f276d50efabda30", "state": "open", "title_hash": "sha256:a754e55d6beb4f3fa81469d1f11da17143288c75bb6e108ec2f4fe96ace363cd", "updated_at": "2026-05-30T22:42:01+02:00" }, "top_caveat": "Apply with receipts and rollback path; do not silently change live autonomy boundaries." }

Iskra added the

judge/operator-needed

judge/p1

labels

2026-06-04 20:19:06 +02:00

codex commented

2026-06-04 20:27:48 +02:00

Collaborator

Slice A recon by codex is pushed here:

https://git.pdurlej.com/pdurlej/platform/compare/main...codex/236-iskra-phase1-recon

Summary:

VPS1000 /home/openclaw/.openclaw/workspace exists.
PROMOTION-GATES.md, DRAFT-SPEC.md, HUMAN-DECISION-POLICY.md, and PROGRAM-portfolio-night-scout.md are all missing from the live workspace.
Exact-name search across local repos found no standalone canonical copies of those four files.
OpenClaw deployer exists at /Users/pd/Developer/iskra-openclaw/scripts/iskra-openclaw-deploy.sh and should be the later install path.
runtime.json was not available; later telemetry should use an explicit state artifact under the existing workspace state pattern.

Conclusion: do not proceed to Slice B/C until operator + Iskra provide/commit canonical bundle contents. Codex should not infer or author those four autonomy documents.

Note: PR creation via codex token is currently blocked by Forgejo API scope write:repository, so the branch is pushed and ready for PR creation/merge by an actor with that scope.

Slice A recon by codex is pushed here: https://git.pdurlej.com/pdurlej/platform/compare/main...codex/236-iskra-phase1-recon Summary: - VPS1000 `/home/openclaw/.openclaw/workspace` exists. - `PROMOTION-GATES.md`, `DRAFT-SPEC.md`, `HUMAN-DECISION-POLICY.md`, and `PROGRAM-portfolio-night-scout.md` are all missing from the live workspace. - Exact-name search across local repos found no standalone canonical copies of those four files. - OpenClaw deployer exists at `/Users/pd/Developer/iskra-openclaw/scripts/iskra-openclaw-deploy.sh` and should be the later install path. - `runtime.json` was not available; later telemetry should use an explicit state artifact under the existing workspace state pattern. Conclusion: do not proceed to Slice B/C until operator + Iskra provide/commit canonical bundle contents. Codex should not infer or author those four autonomy documents. Note: PR creation via codex token is currently blocked by Forgejo API scope `write:repository`, so the branch is pushed and ready for PR creation/merge by an actor with that scope.

codex referenced this issue from a pull request that will close it,

2026-06-04 21:17:16 +02:00

docs(iskra): record Phase 1.0 bundle recon #714

pdurlej closed this issue

2026-06-04 21:21:58 +02:00