docs: repair formatting + content from positive-language rewrite (#124)
Some checks failed
CI / rust (pull_request) Has been cancelled
CI / markdown (pull_request) Has been cancelled
CI / port (pull_request) Has been cancelled
CI / agent-jail-pkgs (pull_request) Has been cancelled

PR #124 applied the positive-instruction-framing convention across docs but
was self-merged without the markdown format gate, leaving 6 files failing
prettier and a few structural defects. This repairs them:

- prettier --write on the 6 files that failed ./scripts/check-format.sh
  (AGENTS.md, CLAWDIE-STUDIO-PROPOSAL, COLIBRI-SKILLS-PLAN, HEADROOM-SIDECAR,
  MULTI-AGENT-HOST-PLAN, VAULT-PROVISION-FIRST-PROOF).
- COLIBRI-SKILLS-PLAN.md: fix a table row split across two lines by a stray
  newline injected mid-cell.
- CLAWDIE-STUDIO-PROPOSAL.md: remove an orphaned "together." left dangling
  by a reworded sentence; restore the editor-bridge (MCP) guardrail bullet
  that was dropped, reworded positively; restore the guardrail list structure.
- CLAWDIE-STUDIO-PROPOSAL.md: plain-language the three implementation
  guardrails (MCP foundation, opt-in/guarded tools, set-cost-mode scope).

./scripts/check-format.sh -> green.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Sam & Claude 2026-06-21 13:19:26 +02:00
parent b40fd2aa4b
commit 5fe3e676b2
6 changed files with 30 additions and 27 deletions

View file

@ -57,12 +57,12 @@ static linking on FreeBSD (no `openssl-sys` dependency).
## Agent Identity
| Identity | Platform | Capabilities | Restrictions |
| ----------------------- | ----------------------- | ----------------------------------------- | ---------------------------------------------------------- |
| Identity | Platform | Capabilities | Restrictions |
| ----------------------- | ----------------------- | ----------------------------------------- | ------------------------------------------------------------------------------------- |
| Claude (domedog) | Linux, domedog | `cargo build`, `cargo test`, code edits | Delegate FreeBSD 15 runtime proof to the FreeBSD agent; push artifacts for validation |
| Hermes (debby) | Debian 13, debby | `cargo build`, `cargo test`, code edits | Delegate FreeBSD 15 runtime proof to the FreeBSD agent; push artifacts for validation |
| Codex / Aider (FreeBSD) | FreeBSD 15 host | `cargo test` on real FreeBSD, integration | Receives handoff docs; validates Linux-built artifacts |
| Operator (Sam) | FreeBSD 15 host + Linux | Final review, merge, deploy | Human — all deployment decisions require approval |
| Codex / Aider (FreeBSD) | FreeBSD 15 host | `cargo test` on real FreeBSD, integration | Receives handoff docs; validates Linux-built artifacts |
| Operator (Sam) | FreeBSD 15 host + Linux | Final review, merge, deploy | Human — all deployment decisions require approval |
## Workspace — current crates

View file

@ -12,7 +12,6 @@ tasks, scheduler, sessions — all from one visual surface.
The studio provides a unified surface so the user operates the control plane
entirely within the editor, without terminal context-switching.
together.
## Why Rust Makes This Feasible
@ -202,11 +201,15 @@ This is sufficient for the next ISO if Zed is present but the integration bridge
## Implementation guardrails
Colibri always remains service-owned and headless-safe; boot and supervision
function independently of any editor.
- Native Zed extension/panel is a later UX layer, not the protocol source of truth.
- Write tools are opt-in; spawn tools are separately guarded and allowlisted.
- `set-cost-mode` remains runtime-only acknowledgement until a real mutable config model is implemented.
- Colibri always remains service-owned and headless-safe; boot and supervision
function independently of any editor.
- MCP is the first editor bridge: it serves any MCP-capable client and keeps Zed unforked.
- The standard editor bridge (MCP) is the foundation; a custom Zed panel is an
optional nicer face we may add later, never the part everything depends on.
- Tools that change things are off by default and must be turned on on purpose;
tools that launch agents are locked down further and only approved ones run.
- `set-cost-mode` only applies to the current session for now and isn't saved —
permanent settings wait until we build a proper editable-config system.
- No arbitrary shell command tool in MCP.
## Decision Points

View file

@ -70,14 +70,14 @@ video → local transcript → topic extraction → how-to/runbook
## Ownership
| Layer | Role | Writes | Reads |
| ---------------- | ----------------- | ---------------------------- | ---------------------------------------------- |
| Clawdie-AI | Source of truth | Skill artifacts via PR | N/A |
| `colibri-skills` | Runtime consumer | Writes only to the runtime store; source repo remains read-only for the skills
consumer. | Indexed skill structs from committed artifacts |
| Agents | Authors/reviewers | Candidate skill artifact PRs | Skill content for task routing |
| `system_brain` | Agent/user memory | Personal/user/agent context | Not canonical skill docs |
| `system_ops` | Runtime state | Live task/service state | Not skills |
| Layer | Role | Writes | Reads |
| ---------------- | ---------------------------------------------- | ------------------------------------------------------------------------------ | ------------------------------ |
| Clawdie-AI | Source of truth | Skill artifacts via PR | N/A |
| `colibri-skills` | Runtime consumer | Writes only to the runtime store; source repo remains read-only for the skills |
| consumer. | Indexed skill structs from committed artifacts |
| Agents | Authors/reviewers | Candidate skill artifact PRs | Skill content for task routing |
| `system_brain` | Agent/user memory | Personal/user/agent context | Not canonical skill docs |
| `system_ops` | Runtime state | Live task/service state | Not skills |
## What `colibri-skills` does
@ -197,9 +197,9 @@ colibri verify-skill <id>
- Treat local provenance paths like `/home/samob/Videos/...` as metadata only.
- Verify checksums against committed artifacts, not local source paths.
- Store paths relative to the Clawdie-AI repo.
Normal tests run with only local SQLite and committed test fixtures; keep
PostgreSQL, remote Forgejo, and local media as optional integration
dependencies.
Normal tests run with only local SQLite and committed test fixtures; keep
PostgreSQL, remote Forgejo, and local media as optional integration
dependencies.
## Future skillpacks

View file

@ -64,6 +64,6 @@ Current daemon timeout: 5 seconds per sidecar request.
cost-mode compaction.
- Keep `COLIBRI_HEADROOM_ENABLED=0` for ISO/live-USB defaults unless Headroom is
staged and validated on the target image.
FreeBSD: ONNX/ORT-backed extras need local packaging; use a known-good Python
environment and validate `scripts/headroom-sidecar.py` directly before enabling
the daemon flag.
FreeBSD: ONNX/ORT-backed extras need local packaging; use a known-good Python
environment and validate `scripts/headroom-sidecar.py` directly before enabling
the daemon flag.

View file

@ -83,7 +83,7 @@ socket calls.
| --- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------- | -------------------------------- |
| 1 | **Multi-agent task-board contention**`pick_agent` only tested with 0-1 agents; no capability-based multi-agent assignment test; no same-agent-multiple-tasks test | High | Yes |
| 2 | **CLI surface gaps**`claim-task`, `transition-task`, `register-agent`, `list-agents` have no CLI; remote agents forced to use raw Python | Medium | Yes |
| 3 | **Agent presence model** — missing `host`, `last_seen`, and heartbeat/lease columns; add these schema fields to detect stale remote agents | High | Yes (schema change) |
| 3 | **Agent presence model** — missing `host`, `last_seen`, and heartbeat/lease columns; add these schema fields to detect stale remote agents | High | Yes (schema change) |
| 4 | **Remote-safe task claim**`claim_task` is a blind UPDATE, no concurrency safety, no lease/TTL | Medium | Yes |
| 5 | **Python polling scripts**`colibri_poll.py` and `colibri_task_done.py` have zero test coverage | Medium | Yes |
| 6 | **TCP bridge round-trip** — socat bridge untested end-to-end | Medium | Partial (needs socat or FreeBSD) |

View file

@ -125,8 +125,8 @@ sudo bastille destroy "$T"
## Security notes
- Scratch jail + test collection only (first-proof policy) — no real tenant secrets.
Bootstrap creds (`BW_*`) remain confined to the daemon's `provider.env`
(0600); only the resolved `.env` enters the jail.
Bootstrap creds (`BW_*`) remain confined to the daemon's `provider.env`
(0600); only the resolved `.env` enters the jail.
## Follow-ups that retire the manual steps