kami/correx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(qa): live-QA plan for cross-session grants + revoke

Browse Source 
QA-grants.md (10 checks): the headline is grant-in-session-A →
auto-clear-in-session-B, keyed on ApprovalDecisionResolved(AUTO_APPROVED,
reason="grant:<id>") with no APPROVAL_PENDING; plus tool-binding, no-cap
T3/T4, PROJECT same-repo vs different-repo isolation, restart persistence,
revoke-re-prompts, session-grant-no-leak regression, and replay determinism.
Indexed in README; BACKLOG drafted-plans pointer updated.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
kami
2026-06-21 22:41:02 +00:00
parent 67855d8593
commit 3f4c45a7b0
3 changed files with 64 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/qa/README.md
+6 -4
View File
@@ -17,14 +17,16 @@ to RETRO with the run date + cited evidence; on FAIL → refile each miss as a n
| `QA-idea-promotion.md` | idea-board → `.correx/project.toml` promotion | `f107ff5` | bound workspace (router model optional — can seed the event) |
| `QA-reviewer-static-first.md` | reviewer static-findings exclusion (PARTIAL — producing stage not built) | `447fc7a` | seed `StaticFindingsRecordedEvent` |
| `QA-brief-echo-gate.md` | **ARM-IT** plan: brief echo-back gate (off by default; risky to arm blind) | `1df7af5` | prod-candidate model |
| `QA-grants.md` | cross-session grants (PROJECT/GLOBAL) + revoke | `c36d41b` `8df0ec7` | model + a T2+ tool call, 2 sessions, 2 workspaces |
## Order of attack (suggested)
1. **`QA-llama-health-probe`** + **`QA-idea-promotion`** — cheapest, least model-dependent (health is liveness; promotion can be seeded). Quick wins.
2. **`QA-research-egress`** — once SearXNG is up.
3. **`QA-architect-contradiction`** — needs a real embedder + two sessions.
4. **`QA-brief-echo-gate`** — run this **before** arming the gate anywhere real; check 2 (100% parseable-echo across runs) is the go/no-go for production.
5. **`QA-reviewer-static-first`** — partial until the static-check stage seam lands.
2. **`QA-grants`** — no network/embedder; just a model that drives one repeatable T2+ tool call. The headline check (grant in session A → auto-clear in session B) is a strong, cheap signal.
3. **`QA-research-egress`** — once SearXNG is up.
4. **`QA-architect-contradiction`** — needs a real embedder + two sessions.
5. **`QA-brief-echo-gate`** — run this **before** arming the gate anywhere real; check 2 (100% parseable-echo across runs) is the go/no-go for production.
6. **`QA-reviewer-static-first`** — partial until the static-check stage seam lands.
## Still-open §F live-QA gates (no dedicated plan yet — same env applies)