Repository navigation
Conversation
Kubo init creates the backend repo as 0775 under a group-write umask. Capacity then fails closed, so Marketplace Get never reaches MetadataRead. Seal an owned repo root to exactly 0700 at prepare, including 0755 and 0750, and fail closed unless the restat is a real owner-only directory.
Assistant picker and Settings now report requested model, resolved model, provider, limits, privacy, cost, and fallback from the typed offer and backend facts.
…runs Runtime writes a sanitized consequence record before hosted runs_create, keeps deterministic policy ahead of Jev, and stores recommendation, human decision, and outcome under one request id without auto-approval.
Update current truth with enrolled Linux Marketplace Get, Assistant persist, Stop settlement, Qwen identity reuse, and the missing hosted credential.
A reloaded chat can keep the prompt in modelText after display text is empty. The user bubble now paints from that field so Home reload shows the same Ping.
Freeze TASKS.md and state.md to HEAD 7c65a7c, Darwin Runtime a908e7b7, Linux 61942 Runtime 07a8477c, remote grant 503a0102, and the hosted-credential pending input.
A full isolated gateway restart restored model qwen3-5-9b-q4-k-m-local, grant 503a0102 as reachable, and zero extra runs_create.
…e exists Remote offers inherited local cost and privacy, and the shadow lens invented a review score. Assistant now reports execution from the selected route, and a hosted runs_create records dispatch acceptance only.
/.audit holds local proof receipts. Ignoring that directory stops a later add from staging them.
… tree Native Darwin release builds omit --target, Home-Agent is retired from the vendor loop, and the Carrier check expects elastos-identity 0.7.0.
…isting path Expiry can admit a complete hashed stage without extending the live deadline. A busy removal keeps the bytes, and Content writes the dest stream onto the caller path.
… this Home Each OpenRouter or Venice connection has its own id and secret file. Share stays off until this Home accepts the named terms for that provider and model.
The composer keeps the selected offer explicit. A named Jev instance can write Inbox advice without approving the hosted run.
Each MA1 clause now has one verdict. The successor catalogue and the global sole copy stay separate waiting gates.
The signed CID is already pinned in the 61953 gateway repo. The managed runtime repo does not have it, and a second copy would cross the disk floor.
The Home runtime that serves Content used a second repo. It now uses the parent repo that already holds the pinned closure, so one Kubo stays the writer.
The seed read exact bounded ranges from the Mac holder. The one full Marketplace Get then stopped at metadata read with zero payload bytes.
Use one direct-only Carrier endpoint policy for listener fallback and short-lived operator and content dials. Preserve bounded model reads and cancellation ownership through provider settlement. Validation: direct-policy and preparation checks; bounded Carrier transfer fixture; installed SmolLM2 cold-to-warm Marketplace and Assistant journey. Combined candidate validation: just verify and the AGENTS basic gate passed.
Load the optional carrier_bind_addr setting before startup side effects and propagate explicit bind failures. The config setter validates addresses and preserves existing TOML fields. Validation: setter and loader tests; matching signed network setup on two local Homes; stable local bootstrap address across restart. Combined candidate validation: just verify and the AGENTS basic gate passed.
Use the pinned Jev Decisions interface with a strict typed contract and a sanitized Runtime rubric. Keep advice separate from human authority, preserve unknown confidence and settlement, and keep decision offers private. Validation: contract, adapter and Inbox fixtures, including malformed/unavailable advice. Live Jev enrollment remains pending; fixtures are not live provider evidence. Combined candidate validation: just verify and the AGENTS basic gate passed.
Continue preparation progress polling through the operation lifecycle, including transfers longer than three minutes. Clear the timer on terminal completion, view closure, destruction or error. Validation: regression fixture exceeds the previous 120-poll ceiling and checks terminal and view cleanup; installed shared UI files match source. Combined candidate validation: just verify and the AGENTS basic gate passed.
Box oversized response and record variants, group coupled arguments, and simplify equivalent expressions to satisfy the combined workspace lint gate. Validation: workspace formatting and clippy with warnings denied; affected Runtime tests. Combined candidate validation: just verify and the AGENTS basic gate passed.
Bring fixtures into line with current host authority, private key permissions, explicit direct routes and protected-state preservation. Bound incomplete remote-grant reconciliation and keep paused-clock cleanup tests under explicit clock control. Validation: 25 affected fixture replays and 13 parallel reconciliation cases; retain exact ownership, denial and terminal-cleanup assertions. Combined candidate validation: just verify and the AGENTS basic gate passed.
Record accepted Carrier, installed SmolLM2 and live Venice evidence. Keep Jev setup, ordinary hosted sharing and deferred release qualification explicit. Publication and deployment remain separate actions. Combined candidate validation: just verify and the AGENTS basic gate passed.
Keep Save retries on one instance, retain same-provider keys during authenticated edits, and preserve instance order. Permit independent hosted additions while an idle local engine retains its model. Bind Decisions responses to the validated catalog identity and retain reported accounting. Verified provider, gateway, HTTP identity and UI fixtures; server/provider clippy; installed Home Edit and real Jev approval followed by completed DS4 inference.
Render typed request and grant copy as text in list, rail and detail views while retaining technical-message filtering for other kinds. Verified Inbox behavior and layout fixtures plus installed contact and service request delivery.
…fers Join the service request mailbox when local or hosted model sharing is enabled. Use Runtime's key-presence predicate for saved secret references. Preserve destination grant checks and existing-run settlement through access withdrawal. Verified three mailbox tests and all 29 remote-model tests, including exact fresh-request denial codes, regrant recovery, and disconnect. Installed request delivery is verified; live shared inference awaits human approval.
Distinguish completed private hosted and human-approved Jev/DS4 outcomes from source sharing fixtures and the pending second-Home inference. Record current installed artifact parity and retain the historical scope of combined verification.
Resolve the provider-relative payer label for remote hosted offers. Name both prompt recipients and leave upstream retention unreported when the shared offer omits its policy. Preserve private-hosted and explicit external payer labels. Verified Assistant shell regression, Home entropy, installed and served artifact parity on both Homes, and one completed remote Venice request after human service approval.
Record the human-granted Venice reply, exact cross-Home run binding, reload recovery and authorized installed pause/restore with unchanged owner runs and keys. Keep source-only negative cases, conservative unknown acceptance, Marketplace flow and wider qualification explicit.
Stage provider credentials under a stable instance ID before validation, bind exact-origin connection decisions to that credential and Runtime policy, and preserve approved authority across model selection. Keep the Mac operator path separate and Linux dispatch paused. Surface broker-owned access refusals as typed run errors while preserving genuine provider 401/403 classification. Add unpaid source and UI regressions; concurrent Inbox End/send admission remains open.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This draft adds the signed local-model and exact two-Home sharing paths to Assistant. It publishes the committed source through
f200dde1for review. It is not a 0.7.2 release candidate.The branch builds on PR #64 and
fix/0.7.1-security. It should be reviewed as a stacked change and merged only after or with those dependencies.Verified on the named test builds: a signed SmolLM2 package was admitted and used in Assistant; an isolated Consumer requested an exact Owner model, received a local-model reply, and lost access after the Owner ended the grant. Earlier Mac builds completed Venice and OpenRouter replies. Those receipts do not establish acceptance for this whole branch.
Open gates include installed Mac and Linux provider isolation, ordinary Runtime-owned hosted approval and End, access-change and recovery cases, and human acceptance. PR #62 adds a related external-data consent path that needs to share Runtime authority before integration. Files under
.audit/are private operator receipts and are not part of this PR.CI status for this draft is unknown at creation. Keep it in Draft until the integrated checks pass.