docs: define personal Secondbrain proposal route

This commit is contained in:
Svrnty
2026-06-14 08:32:20 -04:00
parent c1e4d77611
commit 5807a86b2e
6 changed files with 400 additions and 3 deletions
+172 -1
View File
@@ -20,6 +20,7 @@ REQUIRED = [
"docs/contracts/personal-agent-profile-surface-contract.json",
"docs/contracts/personal-agent-bluebubbles-binding.json",
"docs/contracts/personal-agent-proton-rclone-package.json",
"docs/contracts/personal-agent-secondbrain-proposal-route.json",
"docs/prd/2026-06-14-personal-agent-context-runtime-prd.md",
"docs/issues/2026-06-14-personal-agent-context-runtime-work-orders.md",
"docs/supersession/2026-06-14-personal-agent-context-runtime-supersession-register.md",
@@ -75,6 +76,35 @@ REQUIRED_PROTON_RCLONE_DENIED_EFFECTS = {
"orgbrain_write",
}
REQUIRED_MEMORY_SOURCE_SURFACES = {
"imessage.read",
"mail.read",
"calendar.read",
"contacts.read",
"drive.read",
}
REQUIRED_PROPOSAL_ENVELOPE_FIELDS = {
"schema_version",
"proposal_id",
"profile_identity",
"human_authority_principal",
"target_memory_domain",
"target_domain_term",
"source_capability_package",
"source_surface",
"proposal_type",
"target_lifecycle_state",
"source_handle_redacted",
"content_digest",
"redacted_summary",
"changed_fields",
"validator_plan",
"rollback_note",
"approval_state",
"proof_redaction",
}
def read_text(rel: str) -> str:
return (ROOT / rel).read_text(encoding="utf-8")
@@ -109,6 +139,7 @@ def main() -> int:
"PACR-002",
"PACR-003",
"PACR-004",
"PACR-005",
"status: candidate",
"owner: jp",
]:
@@ -407,6 +438,145 @@ def main() -> int:
if remaining_gates.get(gate) != "blocked-follow-up":
errors.append(f"proton_rclone_remaining_gate_missing:{gate}")
memory_route = load_json("docs/contracts/personal-agent-secondbrain-proposal-route.json", errors)
if memory_route:
if memory_route.get("schema_version") != "personal-agent-secondbrain-proposal-route/v1":
errors.append("memory_route_schema_version_invalid")
if memory_route.get("status") != "active-profile-memory-proposal-route":
errors.append("memory_route_status_invalid")
if memory_route.get("route_id") != "personal-agent-secondbrain-proposal-route":
errors.append("memory_route_id_invalid")
if memory_route.get("profile_identity") != "personal-agent":
errors.append("memory_route_profile_identity_not_personal_agent")
if memory_route.get("display_name") != "Steev":
errors.append("memory_route_display_name_not_steev")
if memory_route.get("target_memory_domain") != "secondbrain-personal":
errors.append("memory_route_target_not_secondbrain_personal")
if memory_route.get("target_domain_term") != "Personal Memory Domain":
errors.append("memory_route_domain_term_invalid")
if "orgbrain" not in memory_route.get("forbidden_memory_domains", []):
errors.append("memory_route_orgbrain_not_forbidden")
for key in [
"durable_write_allowed",
"direct_write_allowed",
"profile_runtime_readiness_claimed",
"secondbrain_runtime_readiness_claimed",
"seed_readiness_claimed",
]:
if memory_route.get(key) is not False:
errors.append(f"memory_route_overclaim:{key}")
boundary = memory_route.get("authority_boundary", {})
for key in [
"profile_owns_source_surface_exposure",
"secondbrain_owns_personal_memory_domain",
"curator_owns_hygiene_review_queue",
"capability_packages_emit_proposals_only",
]:
if boundary.get(key) is not True:
errors.append(f"memory_route_boundary_missing:{key}")
if boundary.get("apply_owner") != "secondbrain":
errors.append("memory_route_apply_owner_not_secondbrain")
if boundary.get("hygiene_owner") != "curator":
errors.append("memory_route_hygiene_owner_not_curator")
source_routes = memory_route.get("source_routes", [])
source_surface_names = {route.get("source_surface") for route in source_routes}
missing_sources = sorted(REQUIRED_MEMORY_SOURCE_SURFACES - source_surface_names)
if missing_sources:
errors.append(f"memory_route_source_surfaces_missing:{','.join(missing_sources)}")
for route in source_routes:
surface = route.get("source_surface", "<unknown>")
if route.get("capability_package") not in {"bluebubbles", "proton-rclone"}:
errors.append(f"memory_route_bad_capability_package:{surface}")
if not str(route.get("proposal_type", "")).startswith("secondbrain.memory.propose_"):
errors.append(f"memory_route_bad_proposal_type:{surface}")
if route.get("target_lifecycle_state") != "inbox":
errors.append(f"memory_route_lifecycle_not_inbox:{surface}")
allowed = route.get("allowed_effects")
if not isinstance(allowed, list) or "emit_redacted_proposal" not in allowed:
errors.append(f"memory_route_redacted_proposal_not_allowed:{surface}")
denied = route.get("denied_effects")
if not isinstance(denied, list):
errors.append(f"memory_route_denied_effects_not_list:{surface}")
else:
for effect in ["durable_memory_write", "orgbrain_write"]:
if effect not in denied:
errors.append(f"memory_route_denied_effect_missing:{surface}:{effect}")
envelope = memory_route.get("proposal_envelope_contract", {})
if envelope.get("schema_version") != "personal-agent.secondbrain.proposal-envelope.v1":
errors.append("memory_route_envelope_schema_invalid")
fields = set(envelope.get("required_fields", []))
missing_fields = sorted(REQUIRED_PROPOSAL_ENVELOPE_FIELDS - fields)
if missing_fields:
errors.append(f"memory_route_envelope_fields_missing:{','.join(missing_fields)}")
if envelope.get("target_memory_domain") != "secondbrain-personal":
errors.append("memory_route_envelope_target_invalid")
if envelope.get("approval_state") != "pending":
errors.append("memory_route_envelope_approval_not_pending")
if envelope.get("raw_payload_in_core_or_profile_proof") is not False:
errors.append("memory_route_envelope_allows_raw_payload_proof")
if envelope.get("durable_apply_authorized_by_envelope") is not False:
errors.append("memory_route_envelope_authorizes_apply")
apply_policy = memory_route.get("apply_policy", {})
if apply_policy.get("apply_route") != "Secondbrain governed memory write path":
errors.append("memory_route_apply_policy_route_invalid")
if apply_policy.get("apply_allowed_now") is not False:
errors.append("memory_route_apply_allowed_now")
if apply_policy.get("requires_secondbrain_validator") != "python3 tools/validate_secondbrain_child.py":
errors.append("memory_route_secondbrain_validator_missing")
for key in [
"requires_focused_secondbrain_gate",
"requires_human_or_governed_approval",
"requires_local_evidence_and_handoff",
]:
if apply_policy.get(key) is not True:
errors.append(f"memory_route_apply_policy_missing:{key}")
if apply_policy.get("push_allowed") is not False:
errors.append("memory_route_apply_policy_allows_push")
cases = {case.get("case"): case.get("result") for case in memory_route.get("rejection_cases", [])}
expected_cases = {
"target_orgbrain": "rejected",
"direct_durable_write": "rejected",
"raw_payload_in_core_or_profile_proof": "rejected",
"apply_without_approval": "blocked",
}
for case, result in expected_cases.items():
if cases.get(case) != result:
errors.append(f"memory_route_rejection_case_missing:{case}")
refs = set(memory_route.get("referenced_secondbrain_contracts", []))
for ref in [
"../secondbrain/docs/integration/2026-06-09-secondbrain-personal-memory-domain-runtime-contract.md",
"../secondbrain/docs/integration/2026-06-09-secondbrain-governed-agent-retrieval-contract.md",
"../secondbrain/docs/integration/2026-06-09-secondbrain-governed-memory-write-path-contract.md",
"../secondbrain/docs/integration/2026-06-09-secondbrain-curator-hygiene-queue-contract.md",
"../secondbrain/docs/integration/2026-06-09-secondbrain-hermes-runtime-boundary.md",
]:
if ref not in refs:
errors.append(f"memory_route_secondbrain_ref_missing:{ref}")
forbidden_fields = set(memory_route.get("proof_policy", {}).get("forbidden_fields", []))
for field in [
"raw_messages",
"message_text",
"mail_bodies",
"contact_details",
"calendar_event_details",
"drive_file_names",
"endpoint_payloads",
"credentials",
"secret_values",
]:
if field not in forbidden_fields:
errors.append(f"memory_route_forbidden_field_missing:{field}")
remaining_gates = memory_route.get("remaining_gates", {})
for gate in [
"secondbrain_durable_apply",
"curator_hygiene_apply_review",
"desktop_adapter_exposure",
"runtime_health_proof",
"seed_package_pickup",
]:
if remaining_gates.get(gate) != "blocked-follow-up":
errors.append(f"memory_route_remaining_gate_missing:{gate}")
for rel in ["AGENT.md", "CONTRACT.md", "DISCLOSURE.md", "README.md", "docs/STEEV-MASTER.md"]:
path = ROOT / rel
if not path.exists():
@@ -426,6 +596,7 @@ def main() -> int:
"active-capability-package",
"Personal-agent BlueBubbles binding",
"Proton/rclone package candidate",
"Personal-agent Secondbrain proposal route",
"superseded",
"legacy-reference",
"blocked-follow-up",
@@ -441,7 +612,7 @@ def main() -> int:
result = {
"ok": not errors,
"validator": "personal-agent-profile-distribution-v3",
"validator": "personal-agent-profile-distribution-v4",
"checked": REQUIRED,
"errors": errors,
"warnings": [],