Agentic GitLab-Style Shell: supervisory-control UI + orchestration runtime (spec v0.1, steps 3-6)

[mdheller]

Follow-up to #34, which froze the task object model + risk-based approval contract (spec Immediate next design steps 1-2). The remaining spec surface requires a shell frontend + orchestration runtime that does not yet exist in this repo, so it is not buildable now. This issue tracks it with acceptance criteria.

Source: ~/dev/spec-intake/2026-08-03/# Agentic GitLab-Style Shell v0.1.docx.pdf. Object/state/approval model already landed in #34 (schemas/agentic-*.schema.json, docs/agentic-gitlab-style-shell.md).

Scope (spec steps 3-6)

Desktop shell anatomy — five persistent regions

• Global objective bar (goal/command input, scope selector, policy envelope, autonomy selector, budget/time cap, review-queue entry). Accepts mixed NL + structured tokens; persists current task across navigation.
• Task status strip (task name, state, elapsed time, blocked count, confidence summary, last action).
• Left rail (saved views, scope tree, worksets, policies/memory, review filters).
• Center work canvas (default: comparison health matrix; modes: recommendation queue, change review, dependency graph, diff review, incident board; staging area + approval controls).
• Right inspector — trust surface (planned steps, evidence for selected row/workset, confidence/uncertainty, applicable policies, why approval is/isn't required, escape hatch to revise plan). Mandatory per spec.
• Bottom strip (execution timeline + typed interrupt triage).

Layout

• Reference desktop 1440-1800px; left rail 240-280px, center 55-62%, right inspector 320-420px, objective bar 56-72px, status strip 40-48px, bottom timeline 140-180px.
• Width-pressure behavior: inspector collapses to drawer only below laptop thresholds; objective bar keeps goal text visible; matrix degrades to stacked cards only as last resort.

Interaction / workflows

• Row select updates inspector; multi-select materializes a workset + aggregate risk + batch controls.
• Filtering: structured facets, freeform search, saved views, NL filter translation.
• Preview/simulation before apply: diff preview, issue/MR draft preview, expected blast radius, policy compliance check, rollback path.
• Undo co-located with timeline: reverse-action availability, revert prerequisites, partial-failure notes.
• Typed interrupts (FYI / review-requested / blocked / critical); only critical may invade focus.
• Wire the three reference workflows: group health audit, dependency update campaign, ownership remediation.

Keyboard & accessibility

• Full keyboard traversal, predictable focus order, screen-reader labels for state/risk/action, no icon-only critical controls, color never the sole status channel, dense mode preserves hit targets.
• Suggested model: / objective bar, g v saved views, j/k matrix move, shift+j/k extend, e inspector, a approve low-risk, p preview, u undo.

Orchestration runtime

• Task/approval state machine over the feat(agentic-shell): freeze task object model + risk-based approval contract #34 schemas.
• Event-sourced timeline records.
• Background job orchestration for scans + draft generation.
• Policy engine for risk tiering + approval routing (consume Policy Fabric / guardrail-fabric per .sourceos/manifest.json authorityRepos — do not fork).
• Telemetry from day one (metrics: steps per multi-repo workflow, time-to-first-recommendation, page transitions per task, approval throughput, escalation precision, false-positive interrupts, rollback frequency, operator explanation accuracy).

Acceptance criteria

• Clickable prototype for one workflow (group health audit) exercising objective bar -> matrix -> inspector -> staged approval, backed by the feat(agentic-shell): freeze task object model + risk-based approval contract #34 schemas.
• Right inspector renders real evidence packets; no action is approvable without its evidence + policy-fit shown.
• Risk-based approval enforced end-to-end: high-risk actions cannot execute without explicit approval + evidence (already contract-enforced in feat(agentic-shell): freeze task object model + risk-based approval contract #34; must hold at runtime).
• Undo path demonstrated for at least one low-risk action.
• Telemetry emitted for the tracked metrics on the prototype workflow.
• Consume-not-fork; MIT/Apache only; SHA-256 for any hashing (FIPS).

Constraints

Consume-not-fork; contracts already machine-readable in this repo (#34) and cross-referenced to sourceos-spec; MIT/Apache-only deps; FIPS SHA-256.