docs: bind BlueBubbles to personal-agent profile

2026-06-14 08:21:40 -04:00
parent 0d4a7ff4e4
commit 91d4e7f08b
6 changed files with 174 additions and 3 deletions
@@ -14,6 +14,7 @@ description: Redirect from the historical Steev master reference to the active p
 Active authority:

 - `docs/contracts/personal-agent-profile-surface-contract.json`
+- `docs/contracts/personal-agent-bluebubbles-binding.json`
 - `docs/prd/2026-06-14-personal-agent-context-runtime-prd.md`
 - `docs/supersession/2026-06-14-personal-agent-context-runtime-supersession-register.md`

@@ -0,0 +1,89 @@
+{
+  "schema_version": "personal-agent-bluebubbles-binding/v1",
+  "status": "active-profile-binding",
+  "profile_identity": "personal-agent",
+  "display_name": "Steev",
+  "surface": "imessage.read",
+  "capability_package": {
+    "id": "bluebubbles",
+    "workspace": "../bluebubbles",
+    "package_surface": "bluebubbles.imessage.readonly",
+    "authority": "active-capability-package",
+    "live_connector": "hermes-agent",
+    "profile_local_connector_allowed": false,
+    "duplicate_connector_allowed": false
+  },
+  "binding_policy": {
+    "profile_consumes_package": true,
+    "package_owns_runtime_wrapper": true,
+    "package_owns_readonly_adapter": true,
+    "package_owns_redacted_health": true,
+    "package_owns_seed_candidate": true,
+    "profile_owns_surface_exposure": true,
+    "profile_runtime_readiness_claimed": false,
+    "reason": "BlueBubbles is already the governed iMessage package. personal-agent binds to it as imessage.read without implementing another connector."
+  },
+  "memory_policy": {
+    "target": "secondbrain-personal",
+    "forbidden": [
+      "orgbrain"
+    ],
+    "durable_write_policy": "proposal-only-until-governed-secondbrain-curator-apply-route"
+  },
+  "allowed_effects": [
+    "read_message_stream",
+    "read_conversation_history",
+    "read_attachment_metadata",
+    "emit_redacted_health",
+    "emit_secondbrain_personal_proposal"
+  ],
+  "denied_effects": [
+    "send_message",
+    "send_tapback",
+    "typing_indicator",
+    "delete_message",
+    "mark_read",
+    "read_receipt",
+    "contact_mutation",
+    "chat_mutation",
+    "attachment_content_download",
+    "credential_mutation",
+    "secondbrain_durable_write",
+    "orgbrain_write",
+    "browser_full_control"
+  ],
+  "proof_policy": {
+    "mode": "redacted-only",
+    "forbidden_fields": [
+      "raw_messages",
+      "message_text",
+      "sender_address",
+      "contact_details",
+      "attachment_content",
+      "endpoint_payloads",
+      "credentials",
+      "secret_values"
+    ]
+  },
+  "bluebubbles_package_evidence": {
+    "validator_command": "python3 tools/validate_bluebubbles_child.py",
+    "validator_result_observed": "ok",
+    "validator_observed_date": "2026-06-14",
+    "runtime_claims_from_validator": false,
+    "referenced_artifacts": [
+      "contracts/personal-agent-imessage-readonly-contract.json",
+      "contracts/runtime-compliance-boundary.json",
+      "contracts/secondbrain-proposal-envelope-contract.json",
+      ".sot/08-OUTPUTS/bluebubbles-live-service-package-proof.json",
+      ".sot/08-OUTPUTS/bluebubbles-always-on-resilience-proof.json",
+      "runtime/steev/hermes-personal-agent-bluebubbles.service",
+      "runtime/steev/hermes-personal-agent-bluebubbles-watchdog.timer"
+    ]
+  },
+  "remaining_gates": {
+    "seed_package_pickup": "blocked-follow-up",
+    "secondbrain_durable_apply": "blocked-follow-up",
+    "desktop_adapter_exposure": "blocked-follow-up",
+    "browser_webwright_host_runtime": "separate-hitl-approval"
+  }
+}
@@ -31,6 +31,7 @@ desktop exposure must be treated as one of:
 | --- | --- | --- |
 | Personal-agent profile contract | active-authority | This PRD and work orders |
 | Steev display name | active-alias | User-facing name for `personal-agent`, not separate authority |
+| Personal-agent BlueBubbles binding | active-authority | `docs/contracts/personal-agent-bluebubbles-binding.json` binds `imessage.read` to the package |
 | BlueBubbles iMessage | active-capability-package | BlueBubbles child completion-readiness package |
 | Proton Mail/Calendar/Contacts | blocked-follow-up | New Proton/rclone capability package work from `PACR-004` |
 | Proton Drive/rclone | blocked-follow-up | New Proton/rclone capability package work from `PACR-004` |