docs(specs): #112 Matrix Heretic room v0 prebuild #368

Merged

pdurlej merged 1 commit from claude/fork-B1-matrix-heretic-room into main

2026-05-23 09:19:59 +02:00

claude commented

2026-05-18 08:19:34 +02:00

Collaborator

Summary

Prebuild for #112 — dedicated Matrix room on RS2000 Matrix stack proxying to operator's Mac-hosted pdurlej/gemma-4-26B-A4B-it-heretic:Q4_K_M Ollama via Tailscale tunnel. Side channel for contrarian / red-team / unfiltered research where mainstream-aligned models refuse.

Not a global assistant — dedicated room only, operator invite-controlled, per-turn audit log, NOT integrated with Iskra persona system per Constitution P5.

Authored by claude Fork B1 in dedicated worktree per v0.1 fork-dispatch template (PR #356). Worktree isolation prevents yesterday's shared-checkout collision.

Spec Kit contents

docs/specs/matrix-heretic-room-v0/ (6 files):

README.md — overview
00-constitution.md — 10 principles (6 non-negotiable: P1 single bounded surface, P2 Mac hosts model RS2000 hosts bot, P3 invite-only, P5 no persona no memory, P7 kill switch always works, P10 no silent model swap)
01-specify.md — 10 machine-checkable acceptance criteria (A1-A10)
02-plan.md — architecture, 8 design decisions, 6 rejected alternatives, 4 open questions
03-tasks.md — 4-slice breakdown: (a) Lite operator prep, (b) Lite RS2000 bootstrap, (c) Full bot code, (d) Full hardening + Access Plane composition
04-implement-notes.md — 10 gotchas (G1-G10), config schema, test fixtures, slice (c) review checklist

prompts/codex-matrix-heretic-room.md — companion execution prompt per PR #326 convention (Safety/production boundary + per-slice instructions + stop conditions per ADR-0018 + reporting format).

Safety / production boundary

This PR does NOT authorize: Mac Ollama config mutation, Tailscale ACL changes, Synapse admin API calls, Matrix user provisioning, room creation, systemd activation on RS2000, or any operator-private secret access. Implementation slices have their own tier classification + operator gates.

Composability

PR #323 Agent Access Plane → Slice (d) replaces env-file token with capability handle
PR #325 OpenClaw scheduler observability → Slice (d) adds bot to drift-detection inventory
BATCH K agent observability → Slice (d) audit log feeds platform-wide telemetry

Tier

Trivial per ADR-0007 (prompt + spec docs only, no code/runtime/sacred-path mutation).

Refs #112, follows PR #356 fork-dispatch template v0.1

## Summary Prebuild for **#112** — dedicated Matrix room on RS2000 Matrix stack proxying to operator's Mac-hosted `pdurlej/gemma-4-26B-A4B-it-heretic:Q4_K_M` Ollama via Tailscale tunnel. Side channel for contrarian / red-team / unfiltered research where mainstream-aligned models refuse. **Not a global assistant** — dedicated room only, operator invite-controlled, per-turn audit log, NOT integrated with Iskra persona system per Constitution P5. Authored by claude Fork B1 in dedicated worktree per v0.1 fork-dispatch template (PR #356). Worktree isolation prevents yesterday's shared-checkout collision. ## Spec Kit contents `docs/specs/matrix-heretic-room-v0/` (6 files): - README.md — overview - **00-constitution.md** — 10 principles (6 non-negotiable: P1 single bounded surface, P2 Mac hosts model RS2000 hosts bot, P3 invite-only, P5 no persona no memory, P7 kill switch always works, P10 no silent model swap) - 01-specify.md — 10 machine-checkable acceptance criteria (A1-A10) - 02-plan.md — architecture, 8 design decisions, 6 rejected alternatives, 4 open questions - 03-tasks.md — 4-slice breakdown: (a) Lite operator prep, (b) Lite RS2000 bootstrap, (c) Full bot code, (d) Full hardening + Access Plane composition - 04-implement-notes.md — 10 gotchas (G1-G10), config schema, test fixtures, slice (c) review checklist `prompts/codex-matrix-heretic-room.md` — companion execution prompt per PR #326 convention (Safety/production boundary + per-slice instructions + stop conditions per ADR-0018 + reporting format). ## Safety / production boundary This PR does NOT authorize: Mac Ollama config mutation, Tailscale ACL changes, Synapse admin API calls, Matrix user provisioning, room creation, systemd activation on RS2000, or any operator-private secret access. Implementation slices have their own tier classification + operator gates. ## Composability - PR #323 Agent Access Plane → Slice (d) replaces env-file token with capability handle - PR #325 OpenClaw scheduler observability → Slice (d) adds bot to drift-detection inventory - BATCH K agent observability → Slice (d) audit log feeds platform-wide telemetry ## Tier Trivial per ADR-0007 (prompt + spec docs only, no code/runtime/sacred-path mutation). Refs #112, follows PR #356 fork-dispatch template v0.1

claude added 1 commit

2026-05-18 08:19:34 +02:00

docs(specs): Matrix Heretic Room v0 prebuild (#112 )

base-is-main / guard (pull_request) Successful in 1s

Details

canary-required / collect-diff (pull_request) Successful in 4s

Details

patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s

Details

platformctl plan / auto-apply scope (pull_request) Successful in 21s

Details

canary-required / canary (pull_request) Successful in 13s

Details

patchwarden-pr-sanity / sanity (pull_request) Successful in 21s

Details

ed7dc925db

Prebuild for #112 — dedicated Matrix room on RS2000 Matrix stack
proxying to operator's Mac-hosted pdurlej/gemma-4-26B-A4B-it-heretic
:Q4_K_M Ollama via Tailscale tunnel. Side channel for contrarian /
red-team / unfiltered research where mainstream-aligned models
refuse to engage.

Not a global assistant — dedicated room only, operator invite-
controlled, per-turn audit log, NOT integrated with Iskra persona
system per Constitution P5.

Authored by claude Fork B1 in dedicated worktree
/Users/pd/Developer/iskra-platform-2026-04-30-fork-B1 per v0.1
fork-dispatch template (PR #356). Worktree isolation prevents
shared-checkout collision that lost yesterday's attempt at this
prebuild.

## What's in

docs/specs/matrix-heretic-room-v0/ (6 files):
- README.md — overview + what this is/isn't
- 00-constitution.md — 10 principles (6 non-negotiable: P1 single
  bounded surface, P2 Mac hosts model RS2000 hosts bot, P3 invite-
  only, P5 no persona no memory, P7 kill switch always works, P10
  no silent model swap)
- 01-specify.md — 10 machine-checkable acceptance criteria
  (A1-A10) + 5 success metrics
- 02-plan.md — architecture, 8 design decisions, 6 rejected
  alternatives, 4 open questions for operator
- 03-tasks.md — 4-slice implementation breakdown:
  - (a) Lite operator-side prep + Tailnet ACL
  - (b) Lite RS2000 user/dirs/Matrix room provisioning
  - (c) Full bot code (canary 3+3 required)
  - (d) Full hardening + Agent Access Plane composition (defers
       to PR #323 merging)
- 04-implement-notes.md — 10 gotchas (G1-G10), config schema,
  test fixtures, slice (c) review checklist

prompts/codex-matrix-heretic-room.md — companion execution prompt
per PR #326 convention with:
- Safety / production boundary section
- Per-slice instructions (branch / tier / tasks / acceptance)
- Stop conditions per ADR-0018
- Reporting format
- Cousin coordination rules

## Why this prebuild matters

Operator's framing (2026-05-17): "to by pomogło mi w zdobywaniu
ebooków i innych materiałów bez moralizatorstwa". This is a
deliberately-bounded personal-use surface for material that needs
frank engagement without policy refusal cascades.

Constitution P5 keeps Heretic a tool (not a persona) — does NOT
get SOUL/IDENTITY/MEMORY docs, does NOT compete with Iskra.

Constitution P2 keeps the 16.8 GB model on Mac (not RS2000) — Mac
M-series silicon is faster than RS2000 CPU and RS2000 RAM budget
is tight.

## Composability

- PR #323 Agent Access Plane → Slice (d) replaces env-file token
  with capability handle
- PR #325 OpenClaw scheduler observability → Slice (d) adds bot
  to drift-detection inventory
- BATCH K agent observability → Slice (d) bot audit log feeds
  platform-wide telemetry

## Tier

Trivial per ADR-0007 (prompt + spec docs only, no code, no
runtime mutation, no sacred-path touch). Implementation slices
have own tier classification per 03-tasks.md.

Refs #112