docs(specs): Iskra Phase 1.0 bundle apply v0 prebuild (#236) #347

Merged

pdurlej merged 1 commit from claude/iskra/phase-1-0-bundle-v0 into main

2026-05-23 10:31:29 +02:00

claude commented

2026-05-17 21:14:58 +02:00

Collaborator

Summary

Operator-emotional priority. Prebuild for #236 — apply the Phase 1.0 constitutional bundle (4 documents) to live VPS1000 OpenClaw workspace, enabling Iskra autonomy gates that were defined-but-never-applied.

Per state/L3/OPEN_LOOPS.md cluster cbffac3e: bundle 3+ weeks stale. Operator quote: "Crons fire, Iskra does nothing." Without Phase 1.0 active, Iskra has constitutional documents on disk but no runtime enforcement.

The 4 documents

Operator + Iskra spec work; codex INSTALLS, does NOT modify:

PROMOTION-GATES.md — experimental → production capability gates
DRAFT-SPEC.md — artifact draft pattern before operator review
HUMAN-DECISION-POLICY.md — CRITICAL for autonomy safety; what requires operator approval
PROGRAM-portfolio-night-scout.md — nightly scout pattern for autonomous research

What's in this PR

6-file Spec Kit + companion execution prompt:

00-constitution.md — 8 principles:
- P1 Bundle CONTENT untouched
- P2 Canonical repo source
- P3 Install via existing deployer (PR #150 anti-LLM-wrapper precedent)
- P4 Behavioral verification: cron Iskra references HUMAN-DECISION-POLICY
- P5 Telemetry: phase_1_0_bundle_active=true
- P6 Sacred path discipline
- P7 No content drift (SHA-256 verified)
- P8 Atomic install with rollback (4 or none)
01-specify.md — problem, acceptance, success metrics
02-plan.md — 4-slice architecture with Q1-Q5 (canonical source, workspace path, telemetry surface, deployer location, drift detection)
03-tasks.md — per-slice tasks with deployer pseudo-shell
04-implement-notes.md — atomic rollback semantics, behavioral verification timing, telemetry false-positive risk, gotchas G1-G6
prompts/codex-iskra-phase-1-0-bundle.md — execution prompt with Safety / production boundary + stop conditions (P1, P4, P8 violation triggers automatic STOP)

Slices (forthcoming PRs)

(a) Recon — Lite — read-only investigation; recon doc resolves Q1-Q5
(b) Module + canonical source — Lite — modules/iskra-constitution/ + bundle MANIFEST.json with SHA-256
(c) Deployer extension — Full (security-sensitive) — pure-shell atomic install with rollback (PR #150 precedent)
(d) Behavioral verification + telemetry — Lite — operator observes morning cron check-in within 24h

Hard rule for codex

Under NO circumstances does codex generate bundle content (P1 violation). If files missing in repo → operator commits canonical content; codex packages. If codex tempted to write any document content → automatic STOP.

Operator coordination points

Slice (a) recon: SSH to VPS1000
Slice (b) content review: operator confirms 4 documents are correct version (NOT content edit)
Slice (c) real deploy: operator-scheduled window (sacred path mutation)
Slice (d) behavioral verification: operator observes morning cron check-in within 24h

Tier

Trivial per ADR-0007 (docs-only prebuild).

Operator action

Draft for review. After merge: paste prompts/codex-iskra-phase-1-0-bundle.md to fresh codex session to begin Slice (a) recon.

Refs #236 (related: #235 mail consumer aligns reply approval with HUMAN-DECISION-POLICY; #135 OpenClaw scheduler obs PR #325 same sacred surface; #76 Agent Access Plane v0.1 ACL composition; PR #150 anti-LLM-wrapper precedent)

## Summary **Operator-emotional priority.** Prebuild for #236 — apply the Phase 1.0 constitutional bundle (4 documents) to live VPS1000 OpenClaw workspace, enabling Iskra autonomy gates that were defined-but-never-applied. Per `state/L3/OPEN_LOOPS.md` cluster `cbffac3e`: bundle 3+ weeks stale. Operator quote: *"Crons fire, Iskra does nothing."* Without Phase 1.0 active, Iskra has constitutional documents on disk but no runtime enforcement. ## The 4 documents Operator + Iskra spec work; codex INSTALLS, does NOT modify: 1. `PROMOTION-GATES.md` — experimental → production capability gates 2. `DRAFT-SPEC.md` — artifact draft pattern before operator review 3. `HUMAN-DECISION-POLICY.md` — **CRITICAL** for autonomy safety; what requires operator approval 4. `PROGRAM-portfolio-night-scout.md` — nightly scout pattern for autonomous research ## What's in this PR 6-file Spec Kit + companion execution prompt: - `00-constitution.md` — 8 principles: - **P1** Bundle CONTENT untouched - **P2** Canonical repo source - **P3** Install via existing deployer (PR #150 anti-LLM-wrapper precedent) - **P4** Behavioral verification: cron Iskra references HUMAN-DECISION-POLICY - **P5** Telemetry: `phase_1_0_bundle_active=true` - **P6** Sacred path discipline - **P7** No content drift (SHA-256 verified) - **P8** Atomic install with rollback (4 or none) - `01-specify.md` — problem, acceptance, success metrics - `02-plan.md` — 4-slice architecture with Q1-Q5 (canonical source, workspace path, telemetry surface, deployer location, drift detection) - `03-tasks.md` — per-slice tasks with deployer pseudo-shell - `04-implement-notes.md` — atomic rollback semantics, behavioral verification timing, telemetry false-positive risk, gotchas G1-G6 - `prompts/codex-iskra-phase-1-0-bundle.md` — execution prompt with Safety / production boundary + stop conditions (P1, P4, P8 violation triggers automatic STOP) ## Slices (forthcoming PRs) - **(a) Recon** — Lite — read-only investigation; recon doc resolves Q1-Q5 - **(b) Module + canonical source** — Lite — `modules/iskra-constitution/` + bundle MANIFEST.json with SHA-256 - **(c) Deployer extension** — Full (security-sensitive) — pure-shell atomic install with rollback (PR #150 precedent) - **(d) Behavioral verification + telemetry** — Lite — operator observes morning cron check-in within 24h ## Hard rule for codex **Under NO circumstances does codex generate bundle content** (P1 violation). If files missing in repo → operator commits canonical content; codex packages. If codex tempted to write any document content → automatic STOP. ## Operator coordination points - Slice (a) recon: SSH to VPS1000 - Slice (b) content review: operator confirms 4 documents are correct version (NOT content edit) - Slice (c) real deploy: operator-scheduled window (sacred path mutation) - Slice (d) behavioral verification: operator observes morning cron check-in within 24h ## Tier Trivial per ADR-0007 (docs-only prebuild). ## Operator action Draft for review. After merge: paste `prompts/codex-iskra-phase-1-0-bundle.md` to fresh codex session to begin Slice (a) recon. Refs #236 (related: #235 mail consumer aligns reply approval with HUMAN-DECISION-POLICY; #135 OpenClaw scheduler obs PR #325 same sacred surface; #76 Agent Access Plane v0.1 ACL composition; PR #150 anti-LLM-wrapper precedent)

claude added 1 commit

2026-05-17 21:14:58 +02:00

docs(specs): Iskra Phase 1.0 bundle apply v0 prebuild for #236

base-is-main / guard (pull_request) Successful in 1s

Details

canary-required / collect-diff (pull_request) Successful in 4s

Details

patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s

Details

canary-required / canary (pull_request) Successful in 13s

Details

patchwarden-pr-sanity / sanity (pull_request) Successful in 20s

Details

3a8c956c7b

Apply the Phase 1.0 constitutional bundle (4 documents) to live VPS1000
OpenClaw workspace, enabling Iskra autonomy gates that were
defined-but-never-applied. Per L3/OPEN_LOOPS.md cluster cbffac3e:
3+ weeks stale. Operator quote: "Crons fire, Iskra does nothing."

The 4 documents (operator + Iskra spec work; codex INSTALLS, NOT modifies):
- PROMOTION-GATES.md
- DRAFT-SPEC.md
- HUMAN-DECISION-POLICY.md (CRITICAL for autonomy safety)
- PROGRAM-portfolio-night-scout.md

Spec Kit:
- 00-constitution.md: 8 principles (bundle content untouched, canonical
  repo source, install via existing deployer, behavioral verification
  required, phase_1_0_bundle_active telemetry emit, sacred path
  discipline, no content drift during install, atomic install with
  rollback)
- 01-specify.md: problem, acceptance criteria, success metrics
- 02-plan.md: 4-slice architecture (recon, module + canonical source,
  deployer extension, behavioral verification + telemetry) with Q1-Q5
- 03-tasks.md: per-slice tasks; deployer pure-shell per PR #150
  anti-LLM-wrapper precedent
- 04-implement-notes.md: atomic rollback semantics, behavioral
  verification timing, telemetry flag false-positive risk, gotchas
  G1-G6

Companion execution prompt: prompts/codex-iskra-phase-1-0-bundle.md
with explicit Safety / production boundary (P1 content sacred,
P8 atomic install non-negotiable).

Codex must NOT generate bundle content under any circumstances
(P1 violation). If files missing in repo, operator commits canonical
content first; codex packages.

Tier: Trivial per ADR-0007 (docs-only prebuild).

Refs #236 (related: #235 mail consumer HUMAN-DECISION-POLICY alignment,
#135 OpenClaw scheduler obs PR #325 same sacred surface, #76 Agent
Access Plane v0.1 capability composition)