Skip to content

Controlled Alternatives runtime status and Console evidence - #170

Merged
oleg-bk merged 5 commits into
mainfrom
codex/public-controlled-alternatives-runtime-status-v1
Sep 16, 2026
Merged

oleg-bk merged 5 commits into
mainfrom
codex/public-controlled-alternatives-runtime-status-v1

Conversation

@oleg-bk

@oleg-bk oleg-bk commented Sep 16, 2026

Copy link
Copy Markdown
Contributor

Summary

  • complete thin/basic Controlled Alternatives filesystem delivery surface
  • add hybrid patch/Git policy routing and exact deny boundaries
  • upload bounded controlled-action outcomes to Console
  • add active-only Controlled Alternatives runtime-status heartbeat after successful runtime binding

Evidence

  • Product Guard PASS for public-controlled-alternatives-runtime-status-v1: 9bf90939b1e13dce789f40812ebf599079a464f48ef16fba102406eccf551e13
  • Full public SDK PR gate: 4141 passed, 61 skipped
  • Local Console browser acceptance against paired private candidate: PASS

Boundaries

  • No tag
  • No PyPI publish
  • No deploy
  • Private backend changes are handled in a separate private PR

Bind Free Builder to the thin package, load vendored CA authority safely, add exact filesystem CA policy rules, and provide an explicit hash-bound policy migration. Preserve approval for cleanup and existing paid paths.\n\nImplemented with assistance from Codex.
Add exact server, tool, and alternative-ID policy rules for patch preparation, approval-gated patch apply, and Git review preparation. Extend the explicit filesystem policy migration to v2 while preserving unknown and custom route behavior.\n\nImplemented with assistance from Codex.
Persist bounded Controlled Alternatives outcome metadata before best-effort Console upload while preserving the legacy decision-summary schema. Reject malformed or contradictory completion claims.\n\nImplemented with assistance from Codex.
Require operation-consistent rollback availability and verified redirect lineage in Controlled Alternatives Console summaries. Preserve the schema-v1 contract.\n\nImplemented with assistance from Codex.
Send a bounded active-only heartbeat after successful Controlled Alternatives binding using AVP-Sig and the existing Console credential. Keep custom backends, proxy execution, and shutdown behavior unchanged.\n\nImplemented with assistance from Codex.
@oleg-bk
oleg-bk merged commit b606823 into main Sep 16, 2026
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant