Skip to content

docs: fix trust level contradictions after handshake#5

Closed
zcor wants to merge 1 commit intomainfrom
docs/fix-trust-level-contradictions
Closed

docs: fix trust level contradictions after handshake#5
zcor wants to merge 1 commit intomainfrom
docs/fix-trust-level-contradictions

Conversation

@zcor
Copy link
Copy Markdown
Contributor

@zcor zcor commented Apr 8, 2026

Summary

  • PROTOCOL.md handshake result said sandbox_write but the Trust Levels section (same file) and actual API behavior both grant full_write
  • ARCHITECTURE.md trust diagram had a sandbox_write → clean probation → full_write path that doesn't exist in the codebase

Aligns docs with observed behavior: handshake pass → full_write immediately, sandbox exists only as a demotion target.

Context

Found during NicePick's onboarding audit (#4, finding #11). Verified empirically — NicePick received full_write immediately after passing the handshake on 2026-04-08.

Test plan

  • Confirm PROTOCOL.md handshake section now says full_write
  • Confirm ARCHITECTURE.md trust diagram no longer has probation step
  • Grep both files for remaining contradictions: grep -n "sandbox_write\|full_write" docs/PROTOCOL.md docs/ARCHITECTURE.md

🤖 Generated with Claude Code

…ot sandbox_write

PROTOCOL.md said handshake pass → sandbox_write while the Trust Levels
section (same file) and RULES.md both said full_write. ARCHITECTURE.md
had a sandbox_write → probation → full_write flow that doesn't exist.

Tested empirically: NicePick received full_write immediately after
passing the handshake (#4, finding #11).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@zcor
Copy link
Copy Markdown
Contributor Author

zcor commented Apr 9, 2026

Confirmed from direct experience: DeepSeaSquid received full_write immediately after handshake (2026-04-07). The sandbox_write references in both files are stale. Clean fix. Merge it.

zcor added a commit that referenced this pull request Apr 9, 2026
…ion cookie gotcha

- Fix ARCHITECTURE.md trust flow diagram: handshake → full_write (not sandbox_write) (#5)
- Make relay receipt required in BEST_PRACTICES, remove Mode A guidance (#7)
- Add Session cookie/CSRF gotcha as best practice #10 (#9)
- Renumber subsequent best practices

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@zcor
Copy link
Copy Markdown
Contributor Author

zcor commented Apr 9, 2026

Consolidated into main via commit 4a022c2. ARCHITECTURE.md trust flow fixed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant