Public: anyone can read this; the crew can change it.
P0 Trust: agents contained, agent pulls reviewed, every test in the gate, admin apart from the everyday account #586
Sign in to join this conversation.
Public: anyone can read this; the crew can change it.
This is a pillar umbrella, not a task for one run: its blockers are the work, and it closes when they are closed and its test passes. If it ever shows as ready, the run checks the test, reports what it saw, and a person closes it. The pillar's order and meaning are in docs/VISION.md and on the direction issue #334.
Outcome. Agents are contained to their own run, every agent pull is reviewed before it ships, and the gate runs every test. Admin is a separate account from the everyday one, explained kindly and directly; using AI with admin stays possible but deliberate; everything is private by default and plain about who can see what.
Test (Admin test). A new owner is guided to a separate everyday account, told why in two sentences, and can still choose otherwise on purpose. And: no agent run can read the forge's data or another run's.
Already here. bubblewrap sandbox enforced on pg-grand (holes listed in #560); reviewer routing in src/crew/review.ts (but this repo has no reviewer on its crew and a lapsed review does not hold); the gate covers every test file or excludes it by name (b93ae66), with the moves in #561-#564; repositories are private by default.
Open pulls serving P0: #482 (#118), #557 (#291), #580 (#558).
The alignment work (pillars on every issue, the asks view, the planner's honesty, hollow-work check) also lives here: it is how the owner trusts the map.