64 lines
2.1 KiB
Markdown
64 lines
2.1 KiB
Markdown
---
|
|
name: CTO Hermes Approval Packet PRD
|
|
status: validated
|
|
lifecycle_classification: sot
|
|
owner: jp
|
|
created: 2026-06-01
|
|
last_reviewed: 2026-06-01
|
|
core_promotion_status: not-promoted
|
|
---
|
|
|
|
# CTO Hermes Approval Packet PRD
|
|
|
|
Local planning SOT only. Not a Core Protocol. Not active Core authority.
|
|
|
|
## Problem
|
|
|
|
Hermes now shows read-only JP approval state, but JP still needs a precise copy/paste approval packet that includes evidence paths, allowed paths, blocked actions, and the exact approval text. Without that, the handoff from proof to human approval is still manual and easy to distort.
|
|
|
|
## Scope
|
|
|
|
Add a read-only JP approval packet to the CTO control summary and panel:
|
|
|
|
- `approval_packet`
|
|
- `approval_command_text`
|
|
- required evidence paths
|
|
- allowed paths
|
|
- blocked actions
|
|
- proof-ready state
|
|
|
|
The packet prepares text for JP to copy/paste. It must not approve anything by itself.
|
|
|
|
## Non-goals
|
|
|
|
- Do not add executable approval buttons.
|
|
- Do not activate Case as default backend.
|
|
- Do not mutate target repositories.
|
|
- Do not edit upstream `hermes-webui`.
|
|
- Do not edit upstream `hermes-agent`.
|
|
- Do not change Cortex Core authority.
|
|
- Do not infer missing target repository admission beyond Harness evidence.
|
|
|
|
## Acceptance Criteria
|
|
|
|
- CTO control summary includes `approval_packet`.
|
|
- Approval packet includes `approval_command_text`.
|
|
- Approval packet includes required evidence paths.
|
|
- Approval packet includes allowed paths.
|
|
- Approval packet includes blocked actions.
|
|
- Approval packet is marked not executable.
|
|
- Hermes panel renders copy/paste approval text.
|
|
- Harness-backed summary data remains the source of truth.
|
|
- Hermes prepares approval text; JP remains the approver.
|
|
|
|
## Validation
|
|
|
|
- Focused plugin tests prove packet fields, fail-closed state, and static rendering hooks.
|
|
- Plugin aggregate tests pass before commit and after merge.
|
|
- CTO child validator records planning and evidence.
|
|
- S69 prose validator passes before report.
|
|
|
|
## Success Definition
|
|
|
|
Hermes can prepare a precise JP approval packet from Harness evidence without gaining approval authority or execution authority.
|