Skip to content

ARCHITECTURE.md

Latest commit

 

History

History
59 lines (50 loc) · 2.2 KB

ARCHITECTURE.md

File metadata and controls

59 lines (50 loc) · 2.2 KB
Raw

Architecture

caller-owned raw stdout/stderr
              |
              v
 strict TAP-subset parser
              |
              v
 evidence classes + verdict
              |
              v
 deterministic ceiling policy
        |             |
        v             v
 sufficient       NEEDS_RAW_EVIDENCE
 packet           packet/control error
        |
        +--> canonical packet (stdout/model channel)
        |
        +--> sibling value receipt (API/optional sidecar)
        |
        +--> [Context Firewall] indicator (stderr/operator channel)

Modules

  • src/reducer.js: validation, byte framing, parsing, classification, policy, hashing, measurement, and canonical serialization.
  • src/value-receipt.js: dependency-free opsle.value-receipt.v1 construction and deterministic operator-indicator formatting.
  • bin/context-firewall.js: stdin/file CLI and deterministic conformance entry.
  • fixtures/corpus.js: synthetic public-safe fixture definitions and expected decisions.
  • tests/reducer.test.js: success, failure, provenance, ambiguity, determinism, measurement, and ceiling gates.

The core has no host adapter or external package dependency. Supporting Opsle protocols can consume the JSON fields without importing this package.

The value receipt is deliberately not embedded in the evidence packet. API callers receive it as a sibling result and CLI callers may request a deterministic sidecar. Canonical stdout therefore keeps the original compact model-context boundary. The one named stderr indicator is operator telemetry; callers must not merge it into model context automatically.

Evidence ownership

The caller owns storage and addressability of raw bytes. The reducer binds those bytes to a digest and records the caller's reference. It neither stores nor destroys the source. A later decision record can bind the reduced semantic hash, input hash, configuration identity, and raw reference to state exactly what the agent saw.

Deterministic boundary

Caller-supplied duration is semantic input. Reducer execution latency is an external measurement and must not enter the hashed packet. There is no clock, randomness, network, locale sorting, or ambient host inspection in the core.