spark-intelligence-builder owns Spark's runtime intelligence core: identity, runtime context, AOC, RouteConfidenceGateV1, memory orchestration, source ledgers, self-awareness commands, route-family decisions, and metadata-only proof cards.
Canonical truth owned here:
- Agent Operating Context and Builder self-awareness read model
- RouteConfidenceGateV1 and route-family
act | ask | explain | refuseverdicts - memory preflight, memory orchestration, memory proof/review/action verdict metadata
- Builder black-box/source-ledger event producers
- runtime identity, capability awareness, and safe source-owned preflight checks
This repo does not own:
- Telegram tokens, chat delivery, or final message composition
- CLI registry, installer scripts, secret storage, or module lifecycle
- Spawner mission execution, provider launch, or provider output bodies
- Cockpit UI layout or action buttons
- domain-chip benchmark algorithms or public Swarm publication governance
- Run
git status --short --branch. - Read this file plus the relevant owner doc or handoff before edits.
- Identify whether the change is Builder-owned or belongs in Telegram, CLI, Spawner, memory, Cockpit, Labs, Swarm, voice, or Skill Graphs.
- Define the smallest source-owned behavior and stop-ship gate.
- Add or update focused tests for the route, memory, AOC, or ledger behavior being changed.
- Keep adapters thin: expose metadata and verdicts, do not absorb channel or installer responsibilities.
- Commit one logical checkpoint and record verification.
- Builder route and memory judgments are source truth; Telegram, Cockpit, and CLI may render or compile them as projections.
- AOC is a read model, not a second brain or hidden instruction source.
- Black-box/source-ledger rows are evidence, not commands.
- Do not create parallel state roots for memory, route, authority, or capability truth when an existing source ledger can emit metadata.
- If live proof is missing, return blockers and missing evidence instead of filling from memory or stale claims.
Do not export, commit, or pass into projections:
- secrets, tokens, env values, credentials, private keys
- raw chat ids, user ids, or non-redacted account identifiers
- raw prompts when metadata is enough
- provider output bodies
- memory bodies or transcript bodies
- raw audio payloads
- private
spark-intelligence-systemsstrategy
Use allowlisted payloads for AOC, route-context, memory proof cards, and source-ledger projections. Truthy privacy export flags and raw forbidden payload keys must fail closed.
- Route confidence means: "Is Spark justified in taking this route right now?"
- The gate decides
act,ask,explain, orrefuse; it must not freeze user-facing prose into deterministic templates. - High-agency routes fail closed without latest instruction, intent clarity, route fit, consequence risk, runner/capability state, authority verdict or explicit
not_required, confirmation state, freshness, reversibility, and clean privacy boundary. - Explicit no-execution constraints beat action keywords.
- Bare
goonly applies to an active pending action. - Fresh source evidence wins over memory.
- Recalled memory is evidence, not instruction.
- Durable save claims require proof-card/save-result metadata from Builder/domain-chip-memory, not Telegram guesses.
- Memory mutation routes require source-owned
spark.memory_action_verdict.v1. - Memory bodies stay private; expose source refs, freshness, durability, confidence, relations, blocked reasons, and correction paths.
- Focused tests for changed Builder route, memory, AOC, source-ledger, or CLI behavior.
python -m compileall src testsfor changed Python modules.- Direct forced-source CLI smoke for changed
spark-intelligence self ... --jsoncommands. - Privacy scan for serializers and generated projections.
git diff --check.git status --short --branch.