hermes/cto
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Admit OpenAI Codex model pair

Browse Source
This commit is contained in:
Svrnty 2026-05-31 21:37:30 -04:00
parent 03c87d437b
commit 7a68d85191
5 changed files with 89 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
.sot/03-PROTOCOLS/CTO-CASE-MODEL-PROVIDER-ADMISSION-ISSUES.md
View File

@ -87,3 +87,25 @@ Required fields:
- `review_trigger`: expiry, date, or condition that forces review.
- `evidence_sources`: references to existing admission/build evidence, not copied runtime evidence.
- `effect`: `CTO-WORK-020 remains blocked until admitted provider/model and real Stage 2 pass report exist`.
## CTO-WORK-027 - OpenAI Codex Model Admission JSON
Status: validated.
Record the exact non-secret admission JSON required by `CTO_HARNESS_CASE_MODEL_ADMISSION_FILE` for the approved `openai-codex` / `gpt-5.5` primary provider path.
Acceptance:
- Admission file path is `.sot/03-PROTOCOLS/CTO-CASE-MODEL-PROVIDER-ADMISSION.openai-codex-gpt-5.5.json`.
- Admission JSON has `status`: `admitted`.
- Admission JSON has `provider`: `openai-codex`.
- Admission JSON has `model`: `gpt-5.5`.
- Admission JSON has `credential_source_class`: `hermes-openai-codex-oauth-and-local-vllm-config`.
- Admission JSON has `allowed_network_class`: `codex-oauth-hosted-model-plus-local-vllm-fallback`.
- Admission JSON has `approval_source`: `JP chat approval on 2026-05-31`.
- Admission JSON has `admission_timestamp`.
- Admission JSON has `review_trigger`.
- Admission JSON contains no secret keys or secret values.
- Fallback to `vllm` / `qwen3.6-35b-a3b` remains explicit decision-record context and must be represented in runtime evidence before it may count as a Case provider/model path.
- `CTO-WORK-020` remains blocked until real Case Stage 2 produces a Harness Evidence Interface pass report using this admission file.
- Real Case Stage 2 command must set `CTO_HARNESS_CASE_MODEL_ADMISSION_FILE` to this admission JSON path.

10
.sot/03-PROTOCOLS/CTO-CASE-MODEL-PROVIDER-ADMISSION.openai-codex-gpt-5.5.json Normal file
View File

@ -0,0 +1,10 @@
{
"admission_timestamp": "2026-05-31T00:00:00-04:00",
"allowed_network_class": "codex-oauth-hosted-model-plus-local-vllm-fallback",
"approval_source": "JP chat approval on 2026-05-31",
"credential_source_class": "hermes-openai-codex-oauth-and-local-vllm-config",
"model": "gpt-5.5",
"provider": "openai-codex",
"review_trigger": "Before real Case Stage 2 admission JSON path changes, before credential source changes, before default/fallback model changes, or before promotion beyond copied artificial fixture.",
"status": "admitted"
}

3
README.md
View File

@ -52,7 +52,8 @@ This workspace is registered as a child-local planning workspace. Registration d
| |-- CTO-CASE-LOCAL-PROVIDER-ROUTE-ISSUES.md
| |-- CTO-CASE-PROVIDER-DECISION-PACKET-PRD.md
| |-- CTO-CASE-PROVIDER-DECISION-PACKET-ISSUES.md
| `-- CTO-CASE-PROVIDER-DECISION-RECORD.md
| |-- CTO-CASE-PROVIDER-DECISION-RECORD.md
| `-- CTO-CASE-MODEL-PROVIDER-ADMISSION.openai-codex-gpt-5.5.json
`-- tools/
`-- validate_cto_child.py
```

5
WORKBOARD.yaml
View File

@ -130,3 +130,8 @@ items:
status: validated
source: .sot/03-PROTOCOLS/CTO-CASE-PROVIDER-DECISION-RECORD.md
owner: ""
- id: CTO-WORK-027
title: OpenAI Codex Model Admission JSON
status: validated
source: .sot/03-PROTOCOLS/CTO-CASE-MODEL-PROVIDER-ADMISSION.openai-codex-gpt-5.5.json
owner: ""

50
tools/validate_cto_child.py
View File

@ -39,6 +39,7 @@ REQUIRED_FILES = [
".sot/03-PROTOCOLS/CTO-CASE-PROVIDER-DECISION-PACKET-PRD.md",
".sot/03-PROTOCOLS/CTO-CASE-PROVIDER-DECISION-PACKET-ISSUES.md",
".sot/03-PROTOCOLS/CTO-CASE-PROVIDER-DECISION-RECORD.md",
".sot/03-PROTOCOLS/CTO-CASE-MODEL-PROVIDER-ADMISSION.openai-codex-gpt-5.5.json",
]
REQUIRED_BRIEF_PHRASES = [
@ -420,6 +421,7 @@ REQUIRED_MODEL_PROVIDER_ADMISSION_PRD_PHRASES = [
REQUIRED_MODEL_PROVIDER_ADMISSION_ISSUE_IDS = [
"CTO-WORK-019",
"CTO-WORK-020",
"CTO-WORK-027",
]
REQUIRED_MODEL_PROVIDER_ADMISSION_ISSUE_PHRASES = [
@ -454,8 +456,29 @@ REQUIRED_MODEL_PROVIDER_ADMISSION_ISSUE_PHRASES = [
"`review_trigger`: expiry, date, or condition that forces review.",
"`evidence_sources`: references to existing admission/build evidence, not copied runtime evidence.",
"`effect`: `CTO-WORK-020 remains blocked until admitted provider/model and real Stage 2 pass report exist`.",
"CTO-WORK-027 - OpenAI Codex Model Admission JSON",
"Admission file path is `.sot/03-PROTOCOLS/CTO-CASE-MODEL-PROVIDER-ADMISSION.openai-codex-gpt-5.5.json`.",
"Admission JSON has `status`: `admitted`.",
"Admission JSON has `provider`: `openai-codex`.",
"Admission JSON has `model`: `gpt-5.5`.",
"Admission JSON has `credential_source_class`: `hermes-openai-codex-oauth-and-local-vllm-config`.",
"Admission JSON has `allowed_network_class`: `codex-oauth-hosted-model-plus-local-vllm-fallback`.",
"Admission JSON has `approval_source`: `JP chat approval on 2026-05-31`.",
"Admission JSON contains no secret keys or secret values.",
"Fallback to `vllm` / `qwen3.6-35b-a3b` remains explicit decision-record context and must be represented in runtime evidence before it may count as a Case provider/model path.",
"`CTO-WORK-020` remains blocked until real Case Stage 2 produces a Harness Evidence Interface pass report using this admission file.",
"Real Case Stage 2 command must set `CTO_HARNESS_CASE_MODEL_ADMISSION_FILE` to this admission JSON path.",
]
REQUIRED_OPENAI_CODEX_ADMISSION_JSON = {
"status": "admitted",
"provider": "openai-codex",
"model": "gpt-5.5",
"credential_source_class": "hermes-openai-codex-oauth-and-local-vllm-config",
"allowed_network_class": "codex-oauth-hosted-model-plus-local-vllm-fallback",
"approval_source": "JP chat approval on 2026-05-31",
}
REQUIRED_LOCAL_PROVIDER_ROUTE_PRD_PHRASES = [
"Local planning SOT only. Not a Core Protocol. Not active Core authority.",
"`CTO-WORK-020` remains blocked until a provider policy decision exists.",
@ -845,6 +868,30 @@ def main() -> int:
if phrase not in text:
errors.append(f"missing_model_provider_admission_issue_phrase:{phrase}")
openai_codex_admission = ROOT / ".sot/03-PROTOCOLS/CTO-CASE-MODEL-PROVIDER-ADMISSION.openai-codex-gpt-5.5.json"
if openai_codex_admission.is_file():
checked.append("openai_codex_admission_json:parse")
try:
payload = json.loads(openai_codex_admission.read_text(encoding="utf-8"))
except json.JSONDecodeError as exc:
errors.append(f"openai_codex_admission_invalid_json:{exc}")
payload = {}
if not isinstance(payload, dict):
errors.append("openai_codex_admission_must_be_object")
payload = {}
for key, expected in REQUIRED_OPENAI_CODEX_ADMISSION_JSON.items():
checked.append(f"openai_codex_admission_json:{key}")
if payload.get(key) != expected:
errors.append(f"openai_codex_admission_mismatch:{key}:expected_{expected}:actual_{payload.get(key)}")
for key in ["admission_timestamp", "review_trigger"]:
checked.append(f"openai_codex_admission_json:{key}")
if not isinstance(payload.get(key), str) or not payload.get(key):
errors.append(f"openai_codex_admission_missing:{key}")
for key in payload:
checked.append(f"openai_codex_admission_json_secret_key:{key}")
if key.lower() in {"api_key", "apikey", "access_token", "token", "secret", "password", "credential_value"}:
errors.append(f"openai_codex_admission_forbidden_secret_key:{key}")
local_provider_route_prd = ROOT / ".sot/03-PROTOCOLS/CTO-CASE-LOCAL-PROVIDER-ROUTE-PRD.md"
if local_provider_route_prd.is_file():
text = local_provider_route_prd.read_text(encoding="utf-8")
@ -968,6 +1015,7 @@ def main() -> int:
"CTO-WORK-024": "validated",
"CTO-WORK-025": "validated",
"CTO-WORK-026": "validated",
"CTO-WORK-027": "validated",
}
for issue_id, expected in expected_statuses.items():
checked.append(f"workboard_status:{issue_id}:{expected}")
@ -1016,6 +1064,8 @@ def main() -> int:
errors.append("workboard_missing_provider_decision_packet_issues_source")
if "CTO-CASE-PROVIDER-DECISION-RECORD.md" not in text:
errors.append("workboard_missing_provider_decision_record_source")
if "CTO-CASE-MODEL-PROVIDER-ADMISSION.openai-codex-gpt-5.5.json" not in text:
errors.append("workboard_missing_openai_codex_admission_json_source")
payload = {
"ok": not errors,