epic: internal AI guardrails thin distribution for Cor-Incorporated #1

Activity

1. terisuke commented on Apr 3, 2026

   

   terisuke

   on Apr 3, 2026

   Author

   More actions

   Child issues:

   • guardrails: bootstrap thin distribution #2 guardrails: bootstrap thin distribution
   • guardrails: Claude asset inventory and import #3 guardrails: Claude asset inventory and import
   • guardrails: plugin MVP for policy enforcement #4 guardrails: plugin MVP for policy enforcement
   • guardrails: safe agents and workflow commands #5 guardrails: safe agents and workflow commands
   • guardrails: provider admission policy #6 guardrails: provider admission policy
   • guardrails: scenario and replay harness #7 guardrails: scenario and replay harness
2. terisuke commented on Apr 3, 2026

   

   terisuke

   on Apr 3, 2026

   Author

   More actions

   Child issues:

   • guardrails: bootstrap thin distribution #2 guardrails: bootstrap thin distribution
   • guardrails: Claude asset inventory and import #3 guardrails: Claude asset inventory and import
   • guardrails: plugin MVP for policy enforcement #4 guardrails: plugin MVP for policy enforcement
   • guardrails: safe agents and workflow commands #5 guardrails: safe agents and workflow commands
   • guardrails: provider admission policy #6 guardrails: provider admission policy
   • guardrails: scenario and replay harness #7 guardrails: scenario and replay harness
3. terisuke commented on Apr 3, 2026

   

   terisuke

   on Apr 3, 2026

   Author

   More actions

   Added README/doc positioning guidance in the working branch so future sessions use the same framing:

   • this repository should be described as a Cor-Incorporated fork of OpenCode
   • compatibility with upstream should be preserved where practical
   • guardrails should ship as a thin internal distribution layer, not a deep rewrite
   • renaming the repository or published package should be treated as a separate branding/distribution decision, after install paths, package names, and release ownership are ready together

   This keeps the fork legible without breaking the current upstream-compatible shape of the repo.
4. terisuke commented on Apr 3, 2026

   

   terisuke

   on Apr 3, 2026

   Author

   More actions

   MVP readiness is now tracked explicitly in #16. The current planning split is:

   • now required before MVP claim: guardrails: safe agents and workflow commands #5, guardrails: provider admission policy #6, guardrails: scenario and replay harness #7, guardrails: plugin hardening wave 2 for MVP floor #13
   • later, after MVP floor: guardrails: authoritative CI and release gates after MVP #14, guardrails: broader Claude asset migration beyond MVP floor #12

   The local planning mirrors this in docs/ai-guardrails/mvp-readiness.md and the expanded issue pack under docs/ai-guardrails/issues/.
5. terisuke commented on Apr 8, 2026

   

   terisuke

   on Apr 8, 2026

   Author

   More actions

   PR #139 progress update

   PR #139 (fix/guardrail-review-findings-phase7) addresses:

   Phase 6 (Dogfooding fixes):

   • Merge gate regex tightened — git merge-base no longer falsely blocked
   • Version baseline regression test added

   Phase 7 (Bug fixes / Test coverage):

   • 14 new test cases: FactCheck state machine, security patterns, bash mutation, review_state reset, docker secrets, branch protection, team plugin edge cases
   • PR feat(guardrail): add git freshness, merge gate, test falsifiability, doc reminder hooks #90 review findings all resolved (5 items)
   • Review HIGH-1 (process leak on timeout) fixed with proc.kill()

   Verification: 34 tests / 255 expect() / all pass. Build + typecheck + deploy firing verified.
6. terisuke commented on Apr 8, 2026

   

   terisuke

   on Apr 8, 2026

   Author

   More actions

   Epic progress update (2026-04-08)

   Closed today (4 issues)

   • FactCheck: ドキュメント鮮度検出 + Issue状態自動検証 #50 FactCheck: implemented in guardrail.ts + tested in PR fix(guardrails): PR #90 review findings + 14 test cases #139
   • [Epic] Fact-Checking and Source Freshness Verification Pipeline #41 Fact-Checking Epic: all child items complete
   • [Epic] Typed Subagent Parallel Investigation System #40 Typed Subagent Parallel: team.ts 835L with DAG/wave/background
   • [FEATURE]: Plugin-based agent orchestration layer — parallel execution without upstream changes #21 Plugin-based orchestration: team/background/team_status tools

   Remaining open (3 issues)

   • fix(ci): test failures caused by runner downgrade — blacksmith-4vcpu vs ubuntu-latest #129 CI runner: external dependency (blacksmith vs ubuntu-latest), non-blocking
   • fix: memory type enum alignment with upstream PR #20344 #54 Memory enum: waiting on upstream PR feat(opencode): native auto-memory for cross-session learning anomalyco/opencode#20344, external dependency
   • epic: internal AI guardrails thin distribution for Cor-Incorporated #1 This epic: Phase 0-7 complete. Phase 8 (production dev test) pending

   Metrics

   • guardrail.ts: 1541 lines
   • team.ts: 835 lines
   • Agents: 31 | Commands: 30
   • Tests: 34 scenario tests / 255 expect() / 192 hook tests
   • Issues: 31 closed / 3 remaining (2 external deps + this epic)
   • Roadmap: ~85%
7. terisuke commented on Apr 11, 2026

   

   terisuke

   on Apr 11, 2026

   Author

   More actions

   Issue Sweep 進捗 (2026-04-11 Session 2)

   クローズ済み

   • ✅ fix(ci): test failures caused by runner downgrade — blacksmith-4vcpu vs ubuntu-latest #129 fix(ci): unit test timing failures — PR fix(ci): resolve test failures on 2vCPU shared runners #127 で解決済み、スキップガード + タイムアウト増
   • ✅ test(guardrails): /auto パイプライン E2E 発火テスト — TUI 対話テストの実施 #149 test(guardrails): /auto E2E 発火テスト — シナリオテスト 29件 + 手動発火検証で完了

   PR オープン (CI 検証中)

   • 🔄 bug: persistent e2e flaky tests in packages/app (workspace, settings, status-popover) #166 → PR fix(e2e): stabilize flaky tests on 2vCPU CI runners #167: e2e flaky tests stabilization (expect.timeout 15s CI, openSettings/openStatusPopover resilience)
   • 🔄 feat(guardrails): delegation enforcement in plan mode — structural gap from dogfooding #159 → PR feat(guardrails): delegation enforcement in plan mode #168: delegation enforcement in plan mode (plan_exit advisory, system prompt delegation rules, 3 tests)

   残り

   • epic: internal AI guardrails thin distribution for Cor-Incorporated #1 (this epic): 全 Issue 完了後にステータス更新

   ロードマップ進捗

   • Guardrails plugin: ✅ 568L → delegation enforcement 追加
   • Scenario tests: ✅ 37/37 pass (3 new delegation tests)
   • CC parity: ✅ 100% (agents/commands/config)
   • Hooks: ~93%
   • CI stability: unit ✅ 常時 green, e2e 🔄 修正中
8. terisuke

   added 4 commits that reference this issue on May 4, 2026

   fix(agents-md): address CRITICAL data-loss bugs + clean-room score fo…

   ...

   ff221cc

   fix(agents-md): preserve child hand-written sections + sync threshold…

   ...

   deb103a

   fix(workspace): address re-review round 2 findings (LSP ENOENT + ast-…

   ...

   e6d603d
9. terisuke commented on Oct 25, 2026

   

   terisuke

   on Oct 25, 2026

   Author

   More actions

   Closed by owner decision (Terada Kousuke, 2026-10-25), posted verbatim:

   古い issue 13 件（gov #172/#166/#148/#147/#145、ccs anomalyco#390/#279/#270、opencode #340/#339/#325/#294/#1）は「運用で見る」として閉じてください。理由をコメントに残してください。

   Context: the AIDD H17 work moved to an operate-and-observe phase on 2026-10-24 (H17 control 216a955e accepted in aidd-governance#216, the report contract shipped to every entry in claude-code-skills#441, the design rule for shell state guards recorded as ADR-012). This issue was not on the H17 path, had no activity since its last update, and will be watched through real use (the guard ledger and the weekly tally in the operations guide) instead of as an open item. Reopen if real operation shows the problem.
10. terisuke

    closed this as not plannedon Oct 25, 2026