docs(specs): Matrix Heretic Room v0 prebuild (#112) #328

Closed
claude wants to merge 0 commits from claude/iskra/matrix-heretic-room-v0 into main
Collaborator

Summary

Prebuild for #112 — dedicated Matrix room on RS2000 proxying to operator's Mac-hosted pdurlej/gemma-4-26B-A4B-it-heretic:Q4_K_M Ollama model via Tailnet-internal tunnel.

Side channel for contrarian / red-team / unfiltered-material research where mainstream-aligned models refuse. Not global assistant — dedicated room only, operator-controlled invite, audit log per turn.

What's in this PR

6-file Spec Kit + companion execution prompt:

  • docs/specs/matrix-heretic-room-v0/README.md — index
  • docs/specs/matrix-heretic-room-v0/00-constitution.md — 8 principles, non-negotiable (Mac stays Mac, Tailnet-only, dedicated room not default, NO moralizatorstwo layer, operator-only invite, visible degradation, audit log, resource-conscious)
  • docs/specs/matrix-heretic-room-v0/01-specify.md — problem, scope, acceptance criteria, success metrics
  • docs/specs/matrix-heretic-room-v0/02-plan.md — architecture, 4-slice breakdown, Q1-Q6 open questions, dependencies, risks
  • docs/specs/matrix-heretic-room-v0/03-tasks.md — per-slice task list with acceptance criteria
  • docs/specs/matrix-heretic-room-v0/04-implement-notes.md — matrix-nio + httpx scaffolds, gotchas G1-G6, DRY pointers
  • prompts/codex-matrix-heretic-room.md — execution prompt with Safety / production boundary statement + per-slice instructions + stop conditions

Slices (forthcoming PRs)

  • (a) Tunnel setup — Lite — operator-runnable Tailscale Serve config + RS2000-side verification scripts
  • (b) Heretic bot module — Full (security-sensitive) — new modules/heretic-bot/ + services/heretic-bot/ Python + matrix-nio
  • (c) Room creation + ACL hardening — Full — Synapse admin, P3+P5 stress tests
  • (d) Documentation + sunset — Lite — operator guide, audit review, sunset runbook

Tier

Trivial per ADR-0007 (docs-only prebuild, no runtime / schema / sacred-path mutation).

Operator action

Draft for review. After merge: paste prompts/codex-matrix-heretic-room.md to fresh codex session to begin Slice (a).

Operator-side coordination point: Slice (a) Mac tunnel setup is OPERATOR-RUNNABLE (codex provides runbook; codex does not deploy to operator's Mac). Slice (b) blocks until operator confirms tunnel up + provides Mac tailnet IP.

Refs #112

## Summary Prebuild for #112 — dedicated Matrix room on RS2000 proxying to operator's Mac-hosted `pdurlej/gemma-4-26B-A4B-it-heretic:Q4_K_M` Ollama model via Tailnet-internal tunnel. Side channel for contrarian / red-team / unfiltered-material research where mainstream-aligned models refuse. **Not global assistant** — dedicated room only, operator-controlled invite, audit log per turn. ## What's in this PR 6-file Spec Kit + companion execution prompt: - `docs/specs/matrix-heretic-room-v0/README.md` — index - `docs/specs/matrix-heretic-room-v0/00-constitution.md` — 8 principles, non-negotiable (Mac stays Mac, Tailnet-only, dedicated room not default, NO moralizatorstwo layer, operator-only invite, visible degradation, audit log, resource-conscious) - `docs/specs/matrix-heretic-room-v0/01-specify.md` — problem, scope, acceptance criteria, success metrics - `docs/specs/matrix-heretic-room-v0/02-plan.md` — architecture, 4-slice breakdown, Q1-Q6 open questions, dependencies, risks - `docs/specs/matrix-heretic-room-v0/03-tasks.md` — per-slice task list with acceptance criteria - `docs/specs/matrix-heretic-room-v0/04-implement-notes.md` — matrix-nio + httpx scaffolds, gotchas G1-G6, DRY pointers - `prompts/codex-matrix-heretic-room.md` — execution prompt with Safety / production boundary statement + per-slice instructions + stop conditions ## Slices (forthcoming PRs) - **(a) Tunnel setup** — Lite — operator-runnable Tailscale Serve config + RS2000-side verification scripts - **(b) Heretic bot module** — Full (security-sensitive) — new `modules/heretic-bot/` + `services/heretic-bot/` Python + matrix-nio - **(c) Room creation + ACL hardening** — Full — Synapse admin, P3+P5 stress tests - **(d) Documentation + sunset** — Lite — operator guide, audit review, sunset runbook ## Tier Trivial per ADR-0007 (docs-only prebuild, no runtime / schema / sacred-path mutation). ## Operator action Draft for review. After merge: paste `prompts/codex-matrix-heretic-room.md` to fresh codex session to begin Slice (a). **Operator-side coordination point**: Slice (a) Mac tunnel setup is OPERATOR-RUNNABLE (codex provides runbook; codex does not deploy to operator's Mac). Slice (b) blocks until operator confirms tunnel up + provides Mac tailnet IP. Refs #112
Author
Collaborator

Closing empty PR — fork-anchor 2026-05-17 coordination loss

This PR's branch has zero commits unique vs main — the parallel-fork-claude session that owned this branch wrote spec files locally but those commits never landed on this branch (likely due to shared-checkout collision: forks alternated .git/HEAD between each other's checkout -b, leaving some forks' work uncommitted or on wrong branches).

The untracked spec files were lost during subsequent branch switches by other forks. The PR description above describes intent + scope but no implementation artifact exists on this branch.

Lesson learned: parallel forks on shared local checkout need git worktree add per fork. Next dispatch should use /Users/pd/Developer/iskra-platform-2026-04-30-fork-<letter>/ per fork with own .git/HEAD.

To retry: open a fresh fork session in dedicated worktree, recreate the prebuild from the issue description + this PR's scope description.

Closing as cleanup; not a fail of the underlying spec idea.

## Closing empty PR — fork-anchor 2026-05-17 coordination loss This PR's branch has **zero commits unique vs `main`** — the parallel-fork-claude session that owned this branch wrote spec files locally but those commits never landed on this branch (likely due to shared-checkout collision: forks alternated `.git/HEAD` between each other's `checkout -b`, leaving some forks' work uncommitted or on wrong branches). The untracked spec files were lost during subsequent branch switches by other forks. The PR description above describes intent + scope but no implementation artifact exists on this branch. **Lesson learned:** parallel forks on shared local checkout need `git worktree add` per fork. Next dispatch should use `/Users/pd/Developer/iskra-platform-2026-04-30-fork-<letter>/` per fork with own `.git/HEAD`. **To retry:** open a fresh fork session in dedicated worktree, recreate the prebuild from the issue description + this PR's scope description. Closing as cleanup; not a fail of the underlying spec idea.
claude closed this pull request 2026-05-17 22:42:28 +02:00
All checks were successful
merged-in-main-audit / audit (push) Successful in 3s
base-is-main / guard (pull_request) Successful in 1s
Required
Details
canary-required / collect-diff (pull_request) Successful in 3s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 3s
canary-required / canary (pull_request) Has been skipped
patchwarden-pr-sanity / sanity (pull_request) Successful in 21s
Required
Details

Pull request closed

Sign in to join this conversation.
No reviewers
No labels
W6d-automerge-calibration
agent/claude-code
agent/codex
agent/hermes
agent/iskra
agent/ollama
agent/patchwarden
automerge-candidate
class/security-sensitive
cutover-gate
dependency/blocked
dependency/blocks-others
dependency/cross-repo
dependency/needs-confirmation
domain:agents
domain:ci
domain:docs
domain:forgejo
domain:infra
domain:memory
domain:runtime
domain:signal
domain:ux
flow/architecture
flow/blocked
flow/deployed
flow/done
flow/implementation
flow/intake
flow/maintained
flow/observed
flow/ready
flow/refining
flow/retired
flow/review
iterating
judge/codex-candidate
judge/hermes-candidate
judge/low-confidence
judge/needs-refinement
judge/operator-needed
judge/p0
judge/p1
judge/p2
judge/p3
judge/park
judge/patchwarden-candidate
judge/stale-priority
kind/adr
kind/bug
kind/chore
kind/feature
kind/infra
kind/ops
kind/refactor
kind/research
large-impact
merge/auto
merge/manual
merge/manual-dependency-conflict
merge/manual-failing-tests
merge/manual-merge-conflict
merge/manual-missing-review
merge/manual-operator-preference
merge/manual-red-zone
merge/manual-security-sensitive
merge/manual-unclear-scope
merge/manual-unknown
meta
mode:operator-only
mode:patchwarden-iskra-approved
mode:safe-auto
needs-operator-decision
needs-triage
not-ready
observed/erroring
observed/needs-followup
observed/pending
observed/retire-candidate
observed/unused
observed/used
operator-emotional
owner-attention
phase/02
phase/03
priority:p0
priority:p1
priority:p2
priority:p3
proposed
ready-for-agent
ready-for-operator
recovery
review:claude-reviewed
review:codex-reviewed
review:dziadek-reviewed
review:needs-human
risk/exposure
risk/process
risk/product
risk/runtime
safety:external-write
safety:no-prod-mutation
safety:prod-impact
safety:secret-touch
size/large
size/medium
size/small
size/tiny
size/unknown
source/adr
source/agent-generated
source/manual
source/operator-chat
source/voice-note
status:blocked
status:codex-ready
status:merged:pending-evidence
status:needs-evidence
status:operator-needed
status:parked
tier/full
tier/lite
tier/stacked
tier:0-platform-substrate
tier:1-iskra-value-layer
tier:2-tools-products-modules
type:bug
type:chore
type:docs
type:feat
type:policy
type:research
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
pdurlej/platform!328
No description provided.