Files

T

kami d26f20c316 docs(dox): build out the DOX AGENTS.md hierarchy

Root Child DOX Index assembled, plus a per-module AGENTS.md across the tree
(core/*, infrastructure/*, apps/*, testing/*, and docs/examples/frontend/etc),
each following the DOX section shape: Purpose, Ownership, Local Contracts,
Work Guidance, Verification, Child DOX Index.

2026-06-28 20:43:27 +04:00

1.2 KiB

Raw Blame History

core/risk — AGENTS.md

Purpose

Risk assessment for tool calls and workflow operations: maps tool execution tiers to risk levels and evaluates RiskContext to produce a RiskSummary.

Ownership

CORREX kernel team.

Local Contracts

RiskAssessor — interface; DefaultRiskAssessor applies TierMapping to produce RiskSummary. NoOpRiskAssessor always returns clean (used in test contexts).
RiskContext — input to assessment: tool identity, parameters, session context.
TierMapping — maps Tier values (from core:events) to RiskLevel. Tier levels are the canonical risk signal — do not invent secondary risk signals here.
RiskSummary / RiskAction / RiskLevel / RiskSignal — vocabulary types (defined in core:events; referenced here).
Hard Invariant #5: all tools declare execution tier; tier drives risk level. Risk assessment is not optional.

Work Guidance

DefaultRiskAssessor is stateless — no event sourcing needed here.
Do not add approval logic here; that belongs in core:approvals. Risk assessment produces a summary; approval evaluation consumes it.

Verification

./gradlew :core:risk:test --rerun-tasks

Child DOX Index

No child AGENTS.md (leaf module).

1.2 KiB Raw Blame History