Dogfood the Reploid Change Passport gate

GOALS.md

@@ -6,13 +6,13 @@ Reploid should govern consequential decisions made by agents and humans from
 proposal through evidence, disagreement, evaluation, approval, activation,
 observed outcome, rollback, and reopening.
 
-The first commercial expression is Reploid Change Passport. It makes an
-agent-generated model, prompt, tool, policy, configuration, or source patch
-change reviewable,
-reversible, and automatically reopenable when a declared part of its evidence
-or policy basis changes. A passport verifies the declared evidence and policy
-basis under which a decision became active. It does not prove that the decision
-was objectively correct or that every contributing system was honest.
+The first commercial expression is Reploid Agent Release Passport. It governs
+eligibility for an exact agent tool, MCP server, permission policy, or
+production-agent configuration release. It preserves the evidence,
+disagreement, human authority, rollback target, and reopening rules that made
+the release eligible. GitHub controls merge, deployment systems control
+activation, and identity systems control access. Reploid controls eligibility
+and preserves its basis.
 
 Reploid Room-1 remains the first scientific proof. It tests whether the same
 contradiction-preserving decision mechanism can help curators of public protein
@@ -38,7 +38,10 @@ GitHub App client and required-check projection, CI action, TypeScript SDK,
 browser review surface, explicit deployment and rollback adapters, standard
 reopening triggers, offline export verification, and a separate adapter from
 `rsi.improvement-episode/v1`. These claims are bounded to repository tests and
-the local browser journey. A complete Visual Change Passport dogfood path also
+the local browser journey. A GitHub App is installed only on
+`clocksmith/reploid`, its webhook is deployed, and a dedicated dogfood branch
+requires the App-bound check. No authentic blocked and eligible check pair has
+been observed. A complete Visual Change Passport dogfood path also
 binds the development Bridge's complaint and reversible patch receipts to an
 independent physical-Chromium evaluation, attributed acceptance, local CI
 activation, post-activation render outcome, exact source reversal, and
@@ -68,8 +71,8 @@ independent model evidence, biological correctness, or scientific replication.
 
 The first commercial proof is narrower than generic decision governance:
 
-> Reploid governs an agent-generated model, prompt, tool, policy,
-> configuration, or source patch change in a real GitHub and CI workflow. It binds the exact
+> Reploid governs an agent tool, MCP server, permission policy, or
+> production-agent configuration release in a real GitHub and CI workflow. It binds the exact
 > candidate, frozen baseline, evaluator, evidence, disagreement, approval,
 > activation, outcome, rollback, and reopening conditions. Reploid succeeds
 > only when the team can approve or reject the change with less reconstruction
@@ -124,8 +127,8 @@ continuously improving decision-policy loop remain target capabilities.
 ## Initial users and market constraints
 
 The initial commercial user is an AI platform, developer infrastructure,
-reliability, or security operator promoting agent models, prompts, tools,
-policies, or production configuration through GitHub and CI. The first workflow
+reliability, or security operator promoting agent tools, MCP servers,
+permission policies, or production-agent configuration through GitHub and CI. The first workflow
 must name the repository, controlled change type, current required checks,
 evaluator, approval authority, activation system, rollback owner, and business
 condition that makes Reploid preferable.

docs/change-passport/dogfood/active-policy.json

@@ -0,0 +1,11 @@
+{
+  "schema": "reploid.change-passport-policy-activation/v1",
+  "policyId": "policy:reploid-visual-dogfood",
+  "version": "1.1.0",
+  "policyHash": "sha256:9d8ddc4a7aad1a3c6ff9a03a3f73e9f189da77648d3c21a69d1be50230e876a7",
+  "source": "docs/change-passport/dogfood/visual-policy-v1.1.0.json",
+  "scope": "dedicated_visual_dogfood_only",
+  "authorityId": "human:portfolio-owner",
+  "appliedAt": "2026-08-23T18:31:37.337Z",
+  "qualificationGranted": false
+}

docs/change-passport/dogfood/visual-policy-v1.0.0.json

@@ -0,0 +1,26 @@
+{
+  "schema": "change.passport-policy/v1",
+  "policyId": "policy:reploid-visual-dogfood",
+  "version": "1.0.0",
+  "changeClasses": ["source_patch"],
+  "requiredEvidenceKinds": ["visual_complaint", "source_owned_patch"],
+  "requiredEvaluationConclusion": "pass",
+  "requiredReviewerRoles": ["visual_reviewer"],
+  "minimumApprovals": 1,
+  "independence": {"proposerEvaluator": true, "proposerReviewer": true, "evaluatorReviewer": true},
+  "allowedEffects": ["ci_activation"],
+  "rollbackAuthorityId": "authority:visual-rollback",
+  "reopeningRules": [{
+    "ruleId": "rule:visual-source:reploid:dogfood-passports-ui",
+    "sourceKind": "visual_feedback_bridge",
+    "observationKind": "candidate_artifact_changed",
+    "targetId": "reploid:dogfood-passports-ui",
+    "sensorAuthorityId": "authority:bridge-source-observer",
+    "freshnessMilliseconds": 300000,
+    "match": {"field": "changed", "operator": "equals", "value": true},
+    "action": "review"
+  }],
+  "falseBlockTolerance": 0,
+  "unresolvedBlocksActivation": true,
+  "policyHash": "sha256:30cad159daf345393f5b27f4acb78256f77426e6ed498992b7c552f00f8d2bbb"
+}

docs/change-passport/dogfood/visual-policy-v1.1.0.json

@@ -0,0 +1,26 @@
+{
+  "schema": "change.passport-policy/v1",
+  "policyId": "policy:reploid-visual-dogfood",
+  "version": "1.1.0",
+  "changeClasses": ["source_patch"],
+  "requiredEvidenceKinds": ["visual_complaint", "source_owned_patch", "rollback_identity"],
+  "requiredEvaluationConclusion": "pass",
+  "requiredReviewerRoles": ["visual_reviewer"],
+  "minimumApprovals": 1,
+  "independence": {"proposerEvaluator": true, "proposerReviewer": true, "evaluatorReviewer": true},
+  "allowedEffects": ["ci_activation"],
+  "rollbackAuthorityId": "authority:visual-rollback",
+  "reopeningRules": [{
+    "ruleId": "rule:visual-source:reploid:dogfood-passports-ui",
+    "sourceKind": "visual_feedback_bridge",
+    "observationKind": "candidate_artifact_changed",
+    "targetId": "reploid:dogfood-passports-ui",
+    "sensorAuthorityId": "authority:bridge-source-observer",
+    "freshnessMilliseconds": 300000,
+    "match": {"field": "changed", "operator": "equals", "value": true},
+    "action": "review"
+  }],
+  "falseBlockTolerance": 0,
+  "unresolvedBlocksActivation": true,
+  "policyHash": "sha256:9d8ddc4a7aad1a3c6ff9a03a3f73e9f189da77648d3c21a69d1be50230e876a7"
+}

docs/change-passport/github-app-least-privilege.json

@@ -0,0 +1,22 @@
+{
+  "schema": "reploid.github-app-permission-contract/v1",
+  "appSlug": "reploid-change-passport",
+  "appId": 4693600,
+  "defaultPermissions": {"checks": "write", "metadata": "read", "pullRequests": "read"},
+  "defaultEvents": ["pull_request", "pull_request_review"],
+  "forbiddenDefaultPermissions": [
+    "administration:write",
+    "contents:write",
+    "deployments:write",
+    "environments:write",
+    "secrets",
+    "workflows:write"
+  ],
+  "effectAdapters": {
+    "deployment": "separately_enabled",
+    "permissionRevocation": "separately_enabled",
+    "rollback": "separately_enabled"
+  },
+  "installationScope": ["clocksmith/reploid"],
+  "qualificationGranted": false
+}

docs/change-passport/implementation-plan.md

@@ -23,8 +23,11 @@ Current state:
   Passport dogfood workflow implemented with a physical Chromium oracle,
   conflict-safe reverse patch, and deterministic reopening.
 - [x] Live GitHub App installation and App-bound branch-protection rule recorded
+- [x] Unproved App check removed from ordinary `main` without rewriting the installation observation
+- [x] Dedicated `passport-dogfood` branch created with the App-bound blocking check
+- [x] Existing GitHub App registration reduced to the least-privilege permission contract
   for `clocksmith/reploid` in the
-  [status artifact](../status/change-passport-github-installation-2026-08-23.json).
+  [status artifact](../status/change-passport-github-least-privilege-2026-08-23.json).
 - [ ] Live blocked and eligible Change Passport check-run evidence recorded.
 - [x] Clean dual-host Firebase Hosting and Cloud Run release identity recorded
   without qualification in the

docs/change-passport/product-intent.md

@@ -1,10 +1,12 @@
-# Reploid Change Passport Product Intent
+# Reploid Agent Release Passport Product Intent
 
 ## Product statement
 
-Reploid Change Passport makes an agent-generated change reviewable,
-reversible, and automatically reopenable when a declared part of the evidence
-or policy basis that allowed it changes.
+Reploid Agent Release Passport decides whether an exact versioned agent policy,
+tool, MCP server, permission bundle, or production-agent configuration is
+eligible to proceed. It preserves why eligibility was granted and reopens the
+decision when an authoritative observation invalidates its evidence or policy
+basis.
 
 The verified claim is narrow:
 
@@ -19,12 +21,13 @@ or successful rollback.
 The first user is an AI platform, developer infrastructure, reliability, or
 security operator. The first controlled actions are promotions of:
 
-- a model or model configuration;
-- a system prompt or prompt bundle;
 - an agent tool or MCP server version;
 - an agent permission or operating policy;
 - production configuration that changes agent behavior.
 
+Model, prompt, and ordinary source-code changes may use the contract later.
+They are not the first commercial wedge.
+
 The change is represented in GitHub and evaluated through CI. Ordinary code
 changes may use the same contract later, but generic pull-request review is not
 the first differentiation target.

docs/rsi-improvement-episodes.md

@@ -128,6 +128,21 @@ protein-adjudication cost. Poolday may
 admit a capability only through its own frozen policy and prospective Research
 Room evidence.
 
+## Federated strategy projection
+
+Ouroboros `strategy.episode/v1` is a reference projection over project-owned
+evidence. It does not replace this ledger. A Reploid adapter may bind an
+immutable episode projection, event head, candidate, evaluator, outcome, and
+negative evidence into an Ouroboros episode. Ouroboros may then propose a
+human-reviewed strategy consequence, but it cannot promote a Reploid artifact,
+rewrite this ledger, change a Reploid claim, or close a Reploid blocker.
+
+The first reference carrier is a Visual Change Passport dogfood policy
+revision. Its candidate may change only the dedicated policy artifact. The
+episode protects the evaluator, ledger, verifier, promotion adapter, rollback
+path, and general product policy from candidate mutation. Passing establishes
+internal causal closure only, never customer value or product qualification.
+
 ## Acceptance evidence
 
 - [`tests/unit/improvement-episode.test.js`](../tests/unit/improvement-episode.test.js)

docs/status/change-passport-github-authority-boundary-2026-08-23.json

@@ -0,0 +1,37 @@
+{
+  "schema": "reploid.change-passport-github-authority-boundary/v1",
+  "observedAt": "2026-08-23T18:15:12Z",
+  "repository": "clocksmith/reploid",
+  "app": {"slug": "reploid-change-passport", "appId": 4693600},
+  "ordinaryMain": {
+    "requiredPassportCheck": false,
+    "preservedProtections": [
+      "one approving review",
+      "dismiss stale reviews",
+      "require approval after latest push",
+      "linear history",
+      "resolved conversations",
+      "force pushes disabled",
+      "deletions disabled"
+    ]
+  },
+  "dogfood": {
+    "branch": "passport-dogfood",
+    "requiredCheck": "Reploid Change Passport",
+    "boundAppId": 4693600,
+    "strict": true,
+    "liveBlockedAndEligibleRunsObserved": false
+  },
+  "permissionBoundary": {
+    "targetRef": "docs/change-passport/github-app-least-privilege.json",
+    "existingRegistrationReduced": false,
+    "blocker": "GitHub App permission removal requires an owner change in the GitHub App Permissions and events settings."
+  },
+  "claimPermission": {
+    "githubInstallation": true,
+    "blockingDogfoodBranchConfigured": true,
+    "liveCheckBehavior": false,
+    "productQualification": false,
+    "commercialValue": false
+  }
+}

docs/status/change-passport-github-least-privilege-2026-08-23.json

@@ -0,0 +1,48 @@
+{
+  "schema": "reploid.github-app-least-privilege-observation/v1",
+  "observedAt": "2026-08-23T19:30:22Z",
+  "app": {
+    "id": 4693600,
+    "slug": "reploid-change-passport",
+    "registrationUpdatedAt": "2026-08-23T19:30:21Z"
+  },
+  "installation": {
+    "id": 155987328,
+    "account": "clocksmith",
+    "repositorySelection": "selected",
+    "repositories": [
+      "clocksmith/reploid"
+    ],
+    "updatedAt": "2026-08-23T19:30:22Z",
+    "suspended": false
+  },
+  "permissions": {
+    "checks": "write",
+    "metadata": "read",
+    "pullRequests": "read"
+  },
+  "events": [
+    "pull_request",
+    "pull_request_review"
+  ],
+  "removedPermissions": [
+    "contents",
+    "deployments"
+  ],
+  "authorityBoundary": {
+    "ordinaryMainRequiredCheck": false,
+    "dogfoodBranch": "passport-dogfood",
+    "dogfoodRequiredCheck": "Reploid Change Passport",
+    "contentMutation": false,
+    "deploymentMutation": false,
+    "mergeAuthority": false,
+    "rollbackAuthority": false
+  },
+  "observationMethod": "Authenticated GitHub App JWT requests to GET /app and GET /app/installations/155987328 using API version 2026-03-10.",
+  "historicalObservationsPreserved": [
+    "docs/status/change-passport-github-installation-2026-08-23.json",
+    "docs/status/change-passport-github-authority-boundary-2026-08-23.json"
+  ],
+  "qualificationEligible": false,
+  "claimBoundary": "This establishes the live least-privilege registration and installation permission boundary only. It does not establish a blocked or eligible check run, external operator use, commercial value, qualification, adoption, deployment authority, rollback authority, or cross-repository authority."
+}