kami
d26f20c316
Root Child DOX Index assembled, plus a per-module AGENTS.md across the tree (core/*, infrastructure/*, apps/*, testing/*, and docs/examples/frontend/etc), each following the DOX section shape: Purpose, Ownership, Local Contracts, Work Guidance, Verification, Child DOX Index.
33 lines
1.2 KiB
Markdown
33 lines
1.2 KiB
Markdown
# core/risk — AGENTS.md
|
|
|
|
## Purpose
|
|
|
|
Risk assessment for tool calls and workflow operations: maps tool execution tiers to risk levels and evaluates `RiskContext` to produce a `RiskSummary`.
|
|
|
|
## Ownership
|
|
|
|
CORREX kernel team.
|
|
|
|
## Local Contracts
|
|
|
|
- `RiskAssessor` — interface; `DefaultRiskAssessor` applies `TierMapping` to produce `RiskSummary`. `NoOpRiskAssessor` always returns clean (used in test contexts).
|
|
- `RiskContext` — input to assessment: tool identity, parameters, session context.
|
|
- `TierMapping` — maps `Tier` values (from `core:events`) to `RiskLevel`. Tier levels are the canonical risk signal — do not invent secondary risk signals here.
|
|
- `RiskSummary` / `RiskAction` / `RiskLevel` / `RiskSignal` — vocabulary types (defined in `core:events`; referenced here).
|
|
- Hard Invariant #5: all tools declare execution tier; tier drives risk level. Risk assessment is not optional.
|
|
|
|
## Work Guidance
|
|
|
|
- `DefaultRiskAssessor` is stateless — no event sourcing needed here.
|
|
- Do not add approval logic here; that belongs in `core:approvals`. Risk assessment produces a summary; approval evaluation consumes it.
|
|
|
|
## Verification
|
|
|
|
```bash
|
|
./gradlew :core:risk:test --rerun-tasks
|
|
```
|
|
|
|
## Child DOX Index
|
|
|
|
No child AGENTS.md (leaf module).
|