feat: promote P051 to D165 with cost-policy scope vocabulary#527
Merged
Conversation
D165 records the orchestration wiring shipped 2026-07-14 (live baton/ join proof at log indices 77509-77512, 77548-77550, closure 77559), adds the subagent role term to the D142 vocabulary (SKILL.md v0.6.0), and gives §6.7.1 capability envelopes / §1.11 certificate scopes an optional cost_policy sub-field (model_tiers allowlist, max_tokens budget). checkCostPolicy in @atrib/verify evaluates caller-supplied usage facts; the record-only walk produces no cost_policy mismatch, the max_amount/counterparties posture. New walk-scope-cost-policy conformance case with pinned usage vectors; existing corpus cases regenerate byte-identical. Also moves the misplaced Pending decisions header below D164 where a renumber merge had left it.
creatornader
enabled auto-merge (squash)
July 15, 2026 22:29
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Executes the three P051 handbacks and closes the pending entry. Per the boundary question raised during review: none of this changes signed bytes, event types, graph derivation, or the calculation.
D165 ledger entry records the orchestration wiring shipped 2026-07-14 in the operator's private tree, with the live acceptance proof on the public log (baton/join pairs at indices 77509-77512 and 77548-77550, closure at 77559). The P051 pending entry is removed per the promotion convention. Also fixes a pre-existing misplacement: a renumber merge had left the
# Pending decisionsheader above D164; it now sits below D165 where the section actually starts.subagentrole term joins the D142 role vocabulary in skills/atrib/SKILL.md (v0.6.0): the in-harness fleet leg, distinct fromrelay-executor(separate harness, own budget pool) andsuccessor-session. Pure content convention; no protocol surface.cost_policyscope vocabulary: §6.7.1 capability envelopes gain an optionalcost_policysub-field (model_tiershost-defined tier allowlist,max_tokensbudget), carried verbatim into §1.11 certificate scopes so a principal can grant a delegated run a compute budget as signed, offline-verifiable material. Verifier posture is §6.7.3 signal-not-invalidation; enforcement stays host-side.checkCostPolicyin @atrib/verify evaluates caller-supplied usage facts; the record-only §1.11.4 walk produces no cost_policy mismatch (the max_amount/counterparties posture). Newwalk-scope-cost-policyconformance case with pinned usage vectors; the 17 existing corpus cases regenerate byte-identical. Changeset: @atrib/verify minor.Merged cleanly over #524 (codex rollout profile v2 note and the new P052 pending entry are preserved).
Gates: pnpm -r build, @atrib/verify 655 tests, @atrib/log-dev and @atrib/sdk suites, pnpm doc-sync (14 checks), typos.