PDS v5.0.0 — modernization: security perimeter + swarm retrofit (#159) - #160
Open
rmzi wants to merge 1 commit into
Open
PDS v5.0.0 — modernization: security perimeter + swarm retrofit (#159)#160rmzi wants to merge 1 commit into
rmzi wants to merge 1 commit into
Conversation
18 tasks
rmzi
changed the title
9 tasks
Owner
Author
⏸ Parked — do not drive to completion until #161 landsPivot to a whitepaper-first, first-principles rebuild (see #159 and #161). This branch is set down, not abandoned — the security perimeter fixes and the Zone 1 implicit-team retrofit stay committed here. Do not merge or extend this PR until the rebuilt spec (#161) lands. At that point: re-baseline this work against the new whitepaper, and decide whether the live-exposure security commits get cherry-picked to land ahead independently. |
Owner
Author
|
@claude what do you think of this PR overall? |
…e/TeamDelete Claude Code removed TeamCreate/TeamDelete at v2.1.178. Agent teams are now implicit per-session: one team, formed on the first spawn, session-derived name, team_name accepted-but-ignored. PDS referenced the removed tools in ~65 places; this sweep corrects the 10 live files and leaves dated history (CHANGELOG entries, swarm-reports, conversations, ADR) untouched. Live surface: - agents/orchestrator.md — drop TeamCreate/TeamDelete from tools; remove the dead TeamDelete PreToolUse matcher; dispatch/knowledge phases rewritten for implicit teams (shutdown -> team dissolves at session end). - hooks/scripts/orchestrator-teardown-gate.sh — stubbed. Its blockable trigger (TeamDelete) is gone; the check logic is preserved and the header documents that the gate must re-home onto a Stop-based gate or fold into the PR gate. TODO(#159, Zone 1) — decision deferred. - skills/swarm/SKILL.md, skills/team/SKILL.md — runbook updated; teardown is drain-shutdowns-then-session-end. - .claude/settings.json — SessionStart context string corrected. - docs/{whitepaper,architecture,teams,proposal,claude-code-source-analysis}.md — refs corrected. Enduring docs (whitepaper/architecture/teams/proposal) state only the durable guarantee; migration/#159/re-homing notes live in code comments, the swarm runbook, and the tracker — not in the whitepaper. Implicit-team mechanics grounded in research Deliverable A (context.md), not reconstructed. Zero imperative TeamCreate/TeamDelete refs remain; residuals are past-tense "removed at v2.1.178" explanations. Not exercised end-to-end — dispatch is blocked by the global empty-registry condition (see #159). Refs #159 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The v5.0.0 modernization PR for #159 — PDS retrofitted onto current Claude Code (baseline drifted ~12 weeks / ~93 CC versions). Big-bang single PR; breaking changes allowed. In progress — not all zones landed; see #159 for the live plan and the full zone map.
Landed on this branch
Security perimeter (Zone 4, partial)
Write()deny rules →Edit()(912ec66). CC honours onlyEdit(path)for file permission checks; theWrite()forms had been silent no-ops sincef4cd05a— read-protected but write-exposed. Enforcement proven behaviourally.mcp__*removed frompermissions.allow(912ec66) — wildcard tool names are rejected; it was a no-op emitting a startup warning.security-baselinepreset (dd1c6f1,5fb86d6) — 58-rule credential perimeter as a shipped preset, discoverable + default-on, so it reaches users who never runinstall.sh. Committed UNVERIFIED (presets resolve from the plugin cache, not the repo) — behavioural verification owed.protected_branches: [main]inexamples/config.yaml(shipped empty →/pds:finishguard never fired).Swarm retrofit onto implicit-team semantics (Zone 1, P0) —
3d4cde9CC removed
TeamCreate/TeamDeleteat v2.1.178; agent teams are now implicit per-session. Swept ~65 references across the live surface (orchestrator agent,/pds:swarm,/pds:team, hooks, settings, whitepaper/architecture/teams/proposal docs). Teardown gate stubbed pending a re-home decision. Enduring docs state the durable guarantee only; migration notes live in code + the tracker. Dated history (CHANGELOG, swarm-reports, conversations, ADR) left intact.Planned / in flight (tracked on #159)
Version intentionally held at 4.22.0 until Zone 7. CHANGELOG
[Unreleased]accumulates.Refs #159