decisions · AOS · Tangled

david.boston / AOS

Architecture research toward an agent-native operating system; rigorous, pre-prototype, and intentionally self-aware.

AOS decisions

4 folders · 208 files

david.yapfest.club · Record owner ratification of the T-3a/T-3b split (2026-09-16, relayed via Anna) · 1mo ago

Record source-only G6 frozen witness and law-set blockers

Track m3-rehearsal-14-prod-attempt2-halted-enospc (fourth evidence namespace, same class as the approved disposition)

D-012 rev17 docs-only correction (reviewer:d012-rev16-verifier LOW): the replay-index invariant text overstated the guarantee — rev15/rev16 deliberately permit non-binding catastrophic residues at lock release, and the probe demonstrates two entries simultaneously referencing one attempt whose durable binding is only one of them. The absolute 'bidirectional / durably CONSUMED with that digest' wording is replaced with the classified invariant the code actually implements: an entry is BINDING iff its referenced attempt is durably in a binding state AND that attempt's durable binding equals the entry's key; ALLOCATED/ABANDONED entries and alternate-digest entries are non-binding residues, conservatively rejected and lazily reconciled. Sole-writer and shared-lock claims preserved. No behavioral change; docs-only. 68/68 tests.

Retain D-010 frozen evidence

ADR-001-identity-and-references.md

Resolve D-001 identity and references

ADR-002-world-relative-state-scope.md

Resolve D-002 World-relative state scope

ADR-003-grant-activation-algebra.md

Resolve D-003 grant activation algebra

ADR-004-durable-transition-and-recovery-algebra.md

Resolve D-004 durable recovery algebra

ADR-005-effect-and-disclosure-algebra.md

Resolve D-005 effect algebra

ADR-006-actor-update-algebra.md

Resolve D-006 actor update algebra

ADR-007-world-proposal-algebra.md

Resolve D-007 world proposal algebra

ADR-008-typed-budget-algebra.md

Resolve D-008 typed Budget algebra

ADR-009-commitment-lifecycle-algebra.md

Resolve D-009 commitment lifecycle algebra

ADR-010-channel-delivery-algebra.md

Resolve D-010 typed Channel delivery

ADR-011-boundary-and-abi.md

ADR-011: D-011 RESOLVED -- TRUSTED_RUNTIME selected. Mechanical _select_validated over the G6-authorized v15-evidence-003 production bundle (sha256 327ae3eb..., _inner_validate True, exposure sets 48/28/24, unique strict subset, independent decision review 7/7 CONFIRMED). Evidence chain and D-012 inputs (pin granularity, pre-freeze assembly gate) recorded in the ADR. DECISIONS.md register updated.

ADR-012-promotion-evidence-governance.md

Record owner ratification of the T-3a/T-3b split (2026-09-16, relayed via Anna)

agent-native-harness-completion-v1.json

Complete agent-native harness semantics review

agent-native-harness-coverage-v1.json

Complete agent-native harness semantics review

agent-native-harness-evidence-v1.md

Complete agent-native harness semantics review

agent-native-harness-review-v1.md

Complete agent-native harness semantics review

AGENT-NATIVE-HARNESS-WORK-ITEM.md

Gate D-008 through D-011 on harness semantics review

AGENT-NATIVE-IPC-SHARING-INTROSPECTION-WORK-ITEM.md

Park agent-native IPC/sharing/introspection exploration (work item, PARKED); adopt five D-011 boundary constraints as packet addendum (operator-directed, negative constraints only — no new laws, no qualification claim; positive laws deferred to future D-016). Grounded in verified prior art (kernel + runtime families), executed experiments E1 (channel carriage composition, 11/11) and E2 (semantic reclamation safety, 0 vs 13 violations), with corrected counterarguments.

D-001-PACKET.md

Resolve D-001 identity and references

D-002-PACKET.md

Resolve D-002 World-relative state scope

D-003-PACKET-v2.md

Resolve D-003 grant activation algebra

D-003-PACKET.md

Preregister D-003 capability algebra

D-003-V1-INVALIDATION.md

Preregister corrected D-003 capability algebra v2

D-004-PACKET.md

Resolve D-004 durable recovery algebra

D-005-PACKET.md

Resolve D-005 effect algebra

D-006-PACKET.md

Resolve D-006 actor update algebra

D-007-PACKET.md

Resolve D-007 world proposal algebra

D-008-PACKET.md

Preregister D-008 budget evidence contract

D-009-PACKET.md

Preregister D-009 commitment semantics

D-009-PROVENANCE-PACKET.md

Preregister D-009 provenance contract

D-010-PACKET.md

decisions: preregister D-010 channel semantics

D-010-PROVENANCE-PACKET.md

Preregister D-010 Stage B provenance contract v3

D-011-LOCK-V12.json

D-011 v12 freeze satisfiable Stage B inputs

D-011-PACKET.md

D-011 v12 separate frozen input from qualification Git chain

D-011-PREFREEZE-AGGREGATE.json

D-011 v12 freeze satisfiable Stage B inputs

D-011-PREFREEZE-PROVENANCE.json

D-011 v12 freeze satisfiable Stage B inputs

D-011-PREFREEZE-SEMANTIC.json

D-011 v12 freeze satisfiable Stage B inputs

D-011-ROLE-ASSURANCE_EXECUTOR.json

D-011 v12 freeze satisfiable Stage B inputs

D-011-ROLE-FREEZER.json

D-011 v12 freeze satisfiable Stage B inputs

D-011-ROLE-LOCK_AUTHOR.json

D-011 v12 freeze satisfiable Stage B inputs

D-011-ROLE-ORACLE_EXECUTOR.json

D-011 v12 freeze satisfiable Stage B inputs

D-011-ROLE-PREFREEZE_PROVENANCE_REVIEWER.json

D-011 v12 freeze satisfiable Stage B inputs

D-011-ROLE-PREFREEZE_SEMANTIC_REVIEWER.json

D-011 v12 freeze satisfiable Stage B inputs

D-011-ROLE-PRIMARY_EXECUTOR.json

D-011 v12 freeze satisfiable Stage B inputs

D-011-ROLE-REVIEWER_C.json

D-011 v12 freeze satisfiable Stage B inputs

D-011-ROLE-REVIEWER_H.json

D-011 v12 freeze satisfiable Stage B inputs

D-011-STAGE-B-FREEZE.json

D-011 v12 freeze satisfiable Stage B inputs

D-012-DESIGN-CONVERGENCE.md

D-012 rev8 corrections (reviewer:d012-rev7-verifier findings): (H1) frozen encoding is now type-exact and INJECTIVE — every stored value carries an explicit type tag, so dict vs list-of-pairs, bool vs int vs float, and list vs tuple remain distinct policy structures (changed bodies classify RE_EVALUATE, never silently unchanged); only exact built-in types accepted, all scalar/container subclasses typed FAIL_CLOSED; parent-chain navigation untags the storage encoding. (H2) fork detection derives solely from the validated owned snapshot — the caller's objects are never re-read after the payload snapshot, closing the snapshot/comparison TOCTOU in both directions. (H3) post-callback temporal re-validation: a currentness callback that replaces a registered expiry bound with NaN/None/malformed values is typed FAIL_CLOSED (bound removal refused), and a callback that reentrantly commits at a later instant makes the outer earlier operation typed-fail without rolling back the monotonic clock. (M1) DESIGN-CONVERGENCE provenance corrected: body restored byte-identical to the retained record (mechanically verified) and the footer now states precisely what changed, records the six-vs-five H1 attack enumeration defect, and marks the sixth attack UNRESOLVED-ENUMERATION pending reconstruction from primary sources. (L1) embedded module/test metadata names the correction-generation history through rev8. 53/53 tests; new guards mutation-checked.

D-012-PACKET.md

Adopt G-5 (predeclared auditable review-closure procedure) into D-012-PACKET — owner-approved 2026-09-15. Learned from the D-012 correction loop itself (rev5->rev16, twelve adversarial rounds; reviewer silence is not a stable stopping rule). Draft adversarially reviewed by reviewer:g5-draft-reviewer (verdict ADOPT-WITH-AMENDMENTS: 3 HIGH, 4 MEDIUM); the reviewer's replacement text is adopted verbatim as v2: versioned review-coverage manifest frozen before the first adversarial round; two-sided inventories (implementation-derived + contract-derived) with the reviewer's first duty being the omission attack; seven minimum Full-tier dimensions including resource/termination bounds and output/authority/information-flow; severity-precedence disposition (Critical/High always FIXED or REBUTTED; RECORD only for bounded Medium/Low with reviewer endorsement and owner approval, consumers/composition/trigger/expiry recorded); two-sided guarantee audit with OPEN-pending-versioned-amendment when a guarantee under-determines its relation; explicit precedence over external gates; prospective application — no retrospective savings claim, first applied to the hosted-proof loop. ADR-012 and DECISIONS.md note the adoption.

d001_independent_runner.py

Fix D-001 metric set semantics

d001_profiles.py

Add reviewed D-001 experiment boundary

d001_runtime.py

Add reviewed D-001 experiment boundary

Resolve D-001 identity and references

Resolve D-002 World-relative state scope

Preregister D-002 scope experiment v2

d002-scope-manifest-v1.freeze.json

Freeze D-002 scope experiment

d002-scope-manifest-v1.json

Preregister D-002 scope experiment

d002-scope-manifest-v2.freeze.json

Freeze D-002 scope experiment v2

d002-scope-manifest-v2.json

Preregister D-002 scope experiment v2

d003_evidence_run.py

Add D-003 freeze-3 evidence runner

d003_manifest_v2.py

Allow empty D-003 dependency provenance

d003_manifest.py

Preregister D-003 capability algebra

Implement independent D-003 v2 evidence engines

Implement independent D-003 v2 evidence engines

Correct D-003 provenance import closure

d003-capability-manifest-v1.json

Preregister D-003 capability algebra

d003-capability-manifest-v2.freeze-2.json

Replace invalid D-003 evidence freeze

d003-capability-manifest-v2.freeze-3.json

Canonicalize D-003 freeze boundary

d003-capability-manifest-v2.freeze.json

Freeze D-003 v2 evidence boundary

d003-capability-manifest-v2.json

Preregister corrected D-003 capability algebra v2

d004_capture.py

Close D-004 producer capture provenance

d004_evidence_run.py

Add frozen D-004 evidence runner

d004_manifest.py

Close D-004 producer capture provenance

d004-checker-identity-v1.json

Freeze D-004 producer package

d004-crash-manifest-v1.freeze.json

Freeze D-004 producer package

d004-crash-manifest-v1.json

Close D-004 producer capture provenance

d004-executor-identity-v1.json

Freeze D-004 producer package

d004-package-capture-v1.json

Freeze D-004 producer package

d005_manifest.py

Tighten D-005 stdlib import closure

d005-checker-identity-v1.json

Recapture D-005 v9 producer identities

d005-checker-review-v1.json

Record D-005 independent reviews

d005-effect-manifest-v1.freeze.json

Freeze D-005 evidence inputs

d005-effect-manifest-v1.json

Tighten D-005 stdlib import closure

d005-evaluator-review-v1.json

Record D-005 independent reviews

d005-executor-identity-v1.json

Recapture D-005 v9 producer identities

d005-executor-review-v1.json

Record D-005 independent reviews

d005-independence-report-v1.json

Record D-005 independent reviews

d006_manifest.py

Correct D-006 recovery preregistration

d006-checker-identity-v1.json

Freeze D-006 evidence provenance

d006-checker-review-v1.json

Freeze D-006 evidence provenance

d006-concurrency-manifest-v1.freeze.json

Freeze D-006 evidence provenance

d006-concurrency-manifest-v1.json

Correct D-006 recovery preregistration

d006-evaluator-review-v1.json

Freeze D-006 evidence provenance

d006-executor-identity-v1.json

Freeze D-006 evidence provenance

d006-executor-review-v1.json

Freeze D-006 evidence provenance

d006-independence-report-v1.json

Freeze D-006 evidence provenance

d006-prefreeze-signoff-v1.json

Freeze D-006 evidence provenance

d007_manifest.py

Preregister D-007 world proposal algebra v3

d007-checker-identity-v1.json

Retain D-007 world proposal evidence

d007-checker-review-v1.json

Retain D-007 world proposal evidence

d007-evaluator-review-v1.json

Retain D-007 world proposal evidence

d007-executor-identity-v1.json

Retain D-007 world proposal evidence

d007-executor-review-v1.json

Retain D-007 world proposal evidence

d007-independence-report-v1.json

Retain D-007 world proposal evidence

d007-prefreeze-signoff-v1.json

Retain D-007 world proposal evidence

d007-world-merge-manifest-v1.freeze.json

Retain D-007 world proposal evidence

d007-world-merge-manifest-v1.json

Preregister D-007 world proposal algebra v3

d008_manifest.py

Preregister D-008 budget evidence contract

d008-budget-manifest-v1.freeze.json

Freeze D-008 evidence subjects

d008-budget-manifest-v1.json

Preregister D-008 budget evidence contract

d008-checker-identity-v3.json

Authenticate D-008 producers and reviewers

d008-executor-identity-v3.json

Authenticate D-008 producers and reviewers

d008-independence-report-v3.json

Bind D-008 independence report

d008-manual-copy-facts-v3.json

Retain D-008 budget evidence

d008-prefreeze-v3.json

Complete D-008 prefreeze gate

d008-prereg-root-v3.json

Capture D-008 root and producer sources

d008-rc-review-v3.json

Record D-008 source and semantic reviews

d008-reviewer-rc-identity-v3.json

Authenticate D-008 producers and reviewers

d008-reviewer-rp-identity-v3.json

Authenticate D-008 producers and reviewers

d008-reviewer-rv-identity-v3.json

Authenticate D-008 producers and reviewers

d008-reviewer-rx-identity-v3.json

Authenticate D-008 producers and reviewers

d008-rp-review-v3.json

Record D-008 prefreeze review

d008-rv-review-v3.json

Record D-008 source and semantic reviews

d008-rx-review-v3.json

Record D-008 source and semantic reviews

d009_manifest.py

Preregister D-009 commitment semantics

d009_provenance.py

Preregister D-009 provenance contract

d009-checker-role-v1.json

Capture D-009 root and role subjects

d009-commitment-manifest-v1.json

Preregister D-009 commitment semantics

d009-executor-role-v1.json

Capture D-009 root and role subjects

d009-freeze-v1.json

Freeze D-009 evidence subjects

d009-implementation-path-report-v1.json

Bind D-009 implementation path report

d009-prefreeze-v1.json

Complete D-009 prefreeze candidate

d009-prereg-root-v1.json

Capture D-009 root and role subjects

d009-provenance-manifest-v1.json

Preregister D-009 provenance contract

d009-rc-review-v1.json

Record D-009 engine and root reviews

d009-reviewer-rc-role-v1.json

Capture D-009 root and role subjects

d009-reviewer-rp-role-v1.json

Capture D-009 root and role subjects

d009-reviewer-rv-role-v1.json

Capture D-009 root and role subjects

d009-reviewer-rx-role-v1.json

Capture D-009 root and role subjects

d009-rp-review-v1.json

Record D-009 prefreeze review

d009-rv-review-v1.json

Record D-009 engine and root reviews

d009-rx-review-v1.json

Record D-009 engine and root reviews

d010_manifest.py

decisions: preregister D-010 channel semantics

d010_provenance.py

Preregister D-010 Stage B provenance contract v3

d010-channel-manifest-v1.json

decisions: preregister D-010 channel semantics

d010-checker-role-v1.json

Capture D-010 root and role subjects

d010-decision-provenance-review-v1.json

Preregister D-010 independent reviews

d010-decision-provenance-reviewer-role-v1.json

Capture D-010 root and role subjects

d010-freeze-v1.json

Freeze D-010 evidence contract

d010-prefreeze-v1.json

Preregister D-010 prefreeze

d010-prereg-root-v1.json

Capture D-010 root and role subjects

d010-producer-role-v1.json

Capture D-010 root and role subjects

d010-provenance-manifest-v1.json

Preregister D-010 Stage B provenance contract v3

d010-semantic-security-review-v1.json

Preregister D-010 independent reviews

d010-semantic-security-reviewer-role-v1.json

Capture D-010 root and role subjects

d011_assurance.py

D-011 v10 Stage A orthogonal assurance candidate

d011_manifest.py

D-011 v12 separate frozen input from qualification Git chain

D-011 v10 Stage A orthogonal assurance candidate

d011_primary.py

D-011 v10 Stage A orthogonal assurance candidate

d011_stage_b.py

Harden D-011 post-freeze Git provenance validation

d011_stage_c_execution.py

Checkpoint N2.2 host TEST_ONLY execution adapters and OP21 closure

d011_stage_c_launcher.c

Checkpoint reviewed P2.5 sealed-image prefix handoff

d011_stage_c_producers.py

Checkpoint N2.2 host TEST_ONLY execution adapters and OP21 closure

d011_stage_c_protocol.py

Checkpoint reviewed inert D-011 Node1 protocol and recovery journal

d011_stage_c_runner.py

Checkpoint N2.2 host TEST_ONLY execution adapters and OP21 closure

d011_stage_c_worker.py

Checkpoint reviewed inert D-011 P2.6/P2.7 worker handoff

d011_stage_c.py

Checkpoint reviewed inert D-011 Stage C coordination scaffold

d011-boundary-manifest-v1.json

D-011 v12 separate frozen input from qualification Git chain

d011-corrective-freeze-plan.md

Record reviewed D-011 corrective freeze plan

d011-native-bootstrap-plan.md

Checkpoint N2.2 host TEST_ONLY execution adapters and OP21 closure

d011-stage-c-operational-protocol.md

Record source-only D-011 frozen placement-checker blocker

DECISION-PROCEDURE.md

Resolve D-001 identity and references

generate_d002_scope_manifest.py

Preregister D-002 scope experiment v2

generate_profile_manifest_v1.py

Freeze D-001 profile manifest bytes

profile-manifest-v1.freeze.json

Freeze D-001 profile manifest bytes

profile-manifest-v1.json

Fix D-001 metric set semantics

test_d001_independent_runner.py

Fix D-001 metric set semantics

test_d001_profiles.py

Add reviewed D-001 experiment boundary

test_d001_runtime.py

Add reviewed D-001 experiment boundary

test_d001_select.py

Resolve D-001 identity and references

test_d002_run.py

Resolve D-002 World-relative state scope

test_d002_scope.py

Preregister D-002 scope experiment v2

test_d003_evidence_run.py

Add D-003 freeze-3 evidence runner

test_d003_manifest_v2.py

Allow empty D-003 dependency provenance

test_d003_manifest.py

Preregister D-003 capability algebra

test_d003_r1_v2.py

Implement independent D-003 v2 evidence engines

test_d003_r2_v2.py

Implement independent D-003 v2 evidence engines

test_d003_v3_v2.py

Correct D-003 provenance import closure

test_d004_capture.py

Close D-004 producer capture provenance

test_d004_evidence_run.py

Resolve D-004 durable recovery algebra

test_d004_manifest.py

Close D-004 producer capture provenance

test_d005_manifest.py

Tighten D-005 stdlib import closure

test_d006_manifest.py

Correct D-006 recovery preregistration

test_d007_manifest.py

Preregister D-007 world proposal algebra v3

test_d008_manifest.py

Preregister D-008 budget evidence contract

test_d009_manifest.py

Preregister D-009 commitment semantics

test_d009_provenance.py

Preregister D-009 provenance contract

test_d010_manifest.py

decisions: preregister D-010 channel semantics

test_d010_provenance.py

Preregister D-010 Stage B provenance contract v3

test_d011_manifest.py

D-011 v12 separate frozen input from qualification Git chain

test_d011_stage_b.py

Keep D-011 Stage B tests valid after operational checkpoints

test_d011_stage_c_execution.py

Checkpoint N2.2 host TEST_ONLY execution adapters and OP21 closure

test_d011_stage_c_launcher.py

Checkpoint reviewed P2.5 sealed-image prefix handoff

test_d011_stage_c_producers.py

Checkpoint N2.2 host TEST_ONLY execution adapters and OP21 closure

test_d011_stage_c_protocol.py

Checkpoint reviewed inert D-011 Node1 protocol and recovery journal

test_d011_stage_c_runner.py

Checkpoint N2.2 host TEST_ONLY execution adapters and OP21 closure

test_d011_stage_c.py

Checkpoint reviewed inert D-011 Stage C coordination scaffold

test_generate_profile_manifest_v1.py

Freeze D-001 profile manifest bytes