Repository navigation
feat: guard unregistered Freebuff native qualification - #6553
nikhilachale wants to merge 4 commits into
Conversation
🏆 Review leaderboardOct 4–11, 2026 · UTC
Ranked by distinct external PRs reviewed, then review rounds, then PR comments. Self-activity and bot activity are excluded. Show 5 more reviewers
|
|
Remaining batch handoff at immutable evidence Freebuff0.2.26: authorized native BYOK validation/edit/follow-up/activity/executing-child Escape cleanup controls passed, but independent private standing instructions failed on an ordinary fresh task. PR6553 remains draft and unregistered. AO UI screenshot unavailable because no AO session was admitted; no substitute screenshot or integration success claim. Blackbox/Warp/Rovo/Hermes ACP prerequisites remain explicit in the report. Completed Docker Agent/Mastra/CodeBuddy reports and their real AO images are preserved. Owned native processes were reaped; no production/merge/release/deployment changes. |
|
Final batch evidence head Final candidate report · Freebuff native hold Current source heads: Docker Agent #6540, Mastra #6541 and CodeBuddy #6546 each23/23 green with actual AO Electron screenshot evidence. Stakpak #6550 and Pool #6551 each20/20 green but draft/unregistered for native external blockers. Freebuff #6553 source Blackbox release metadata and official alternative endpoints still404; Warp private instructions/auth, Rovo site/token/credits and Hermes ACP instruction delivery/preservation remain unqualified. Existing Hermes TUI #6536 and OpenJarvis #6537 are preserved, each23/23 current-head checks green. Polygraph is excluded as a meta-orchestrator; connector scope is separate. Pool's alternate DeepSeek credential presence check found none in the authorized environment/helpers/50 native and audit configs; no secret was printed or imported. Published image re-download verification matched all6 PNG hashes, and7 earlier integration comments were read back; current reports and this comment were read back too. Source worktrees, native profiles and prior evidence are preserved. Owned Freebuff TUI/broker descendants are absent, protected PID625660 remains, production untouched. No merge/release/deploy. |
i-trytoohard
added
comp/daemon
|
Freebuff recovery source Recovery report · source diagnosis · unapplied upstream patch. Independently confirmed the released binary root-only instruction filter and retained native-005 system prompt: root rules present, private nested rules excluded, ordinary artifact present and private receipt absent. All original controls/failures are retained. Alternatives inspected include CLI/settings/profile scope, custom-agent resolver, internal transport and on-demand skills. Stock0.2.26 exposes no supported private additive input preserving defaults. The patch provides a concrete proposed bounded private-file loader and additive SDK transport, with unexecuted loader regressions and explicit native acceptance criteria. It was not applied to native code or submitted upstream; its env variable is not a stock feature. Remaining prerequisite is an official released route, followed by native and actual AO proof. PR6553 stays draft/unregistered. AO UI screenshot: unavailable because mandatory standing-instruction admission failed; AO lifecycle/Kill/UI remain NOT_RUN. No local routine tests/builds or new native turns ran. Current-head CI is pending. |
|
Freebuff recovery final receipt. Source PR6553 Immutable recovery report · precise source diagnosis · unapplied source patch/regression proposal. Published report download/hash and PR bodies were read back and verified. Remaining external prerequisite: stock Freebuff0.2.26 filters nested private instructions out of its system prompt and exposes no supported additive per-session input preserving native defaults/user rules. The proposed env input does not exist in this release and was not executed or published upstream. Need an official released route, followed by independent native instruction/cancellation proof and actual AO lifecycle/UI qualification. No duplicate PR, production registration or gate weakening. PR6553 remains draft/unregistered. AO runtime/Kill/UI: NOT_RUN. AO PNG: unavailable because the mandatory independent instruction gate failed; no synthetic substitute or integration success claim. All original negative evidence/controls are preserved. No local routine suites, builds, new native turns, AO sessions or cleanup kills were performed. Both owned source checkouts are clean; production/native profiles/protected audit process were untouched. |
|
Failure report and fix implementation started (2026-10-12). Stock Freebuff 0.2.26 discovered the nested private instruction file but did not consume it as standing context on an ordinary task. The released system-prompt filter includes only root agents.md/claude.md; the private nested key was absent from effective system context. Explicitly prompting a file read was only a control, not a passing instruction-delivery test. Preserved diagnosis and proposal. The previous patch was unapplied. Actual native source implementation is now scheduled in the active durable VPS fix worker, after Stakpak. It will add an explicit additive context input preserving native/project/user instructions, review fresh-session versus cached-context behavior, and cover real CLI/client/model-request composition in CI. The helper-only proposal is not treated as a complete fix. A concrete upstream fix PR and exact-head CI/native results will be linked here. Public-source prerelease artifacts will be labelled separately from the private npm release; no claim that stock 0.2.26 is repaired. AO screenshots remain unavailable until the fixed native path is qualified and the AO integration is exercised. No Mac changes/tests/builds, no merge or release. |
|
Implemented and published native Freebuff fix PR1505. This is actual public source and regression tests, not the previous unapplied patch. Exact head5712d04bc916125d17da46548874a0388dcc526e; CI-built Linux0.0.0-ci binary SHA The explicit creation-time Exact-head fork CI:5/5 focused regressions PASS, real constructor→run→native prompt→provider composition, original-run.ts negative control PASS, Linux runtime build and binary smoke PASS. Full SDK declaration checkFAIL, independently reproduced on unmodified main; final CI step explicitly preserves the failure. Upstream Public CIACTION_REQUIRED needs maintainer approval. Both native1505 and AO6553 remain draft. No routine local suites/install/builds were run; CI owns validation. Actual exact-head native proof ran in the real AO Electron standalone terminal on the VPS: ordinary leading-dash task once, workspace edit, independent private/project receipts, AGENTS preservation, second turn after deleting the private receipt and changing the source file, retained creation snapshot, armed Escape with executing PID/kernel witness and no delayed effect, same native identity and third turn, then independent AO terminal close204. Escape5/5 and close7/7 controlsPASS. This is not registered manager/session Kill or native restore/Chat/auth/catalog conformance. Immutable detailed report and curated receipts. All8 image URLs downloaded and SHAverified after publication, inspected for credentials. AO backend/UI UTC2026-10-12T07:03:36Z, initial ordinary task settled, PNG SHA
UTC2026-10-12T07:13:39Z, same native identity and third turn after Escape, PNG SHA
Escape childPID999673/kernel83474776, marker2026-10-12T07:09:55.107636+00:00, Escape2026-10-12T07:09:55.948115+00:00, absentwithin5s/after25s, no delayed artifact, unrelated controlPID994833/start83338796/heartbeat continued. Independent close204 at2026-10-12T07:15:45.615164+00:00 reaped native leader997948 and child1000643, no delayed artifact. Actual pre-Escape execution screen and pre-close execution screen have full capture records in the report. Failures retained separately: stock nested knowledge exclusion; nonUUID audit fixture before provider; automated evidence driver143 with origin unestablished; grouped paste left an exact owned draft; secondary-before-primary color detection; and manual25s cancel window missed, original late artifact preserved (failed screen). Later armed control kept the same delay/timeout/absence assertions. No global strict auditPASS inferred. Original stock AO screenshot unavailable because admission never created a session. Cleanup: native/runtime/control closes204, list200/empty, daemon shutdown202; exact owned native/control/PTY hosts and Electron main993952 stopped, mux helpers stopped, compute lock released. Production625660/ao-self-hosted and source/sharedgit/profiles/credentials/prior evidence untouched. Only a verified regenerable old CI artifact was reclaimed after its native PID was absent. Runner SHA8887aa2e... unchanged; current6509 evidence-head CI is tracked separately. No merge, release, deployment, signup or billing change. Final evidence CI: exact6509 head |
|
Harness-specific reports, JSON receipts, screenshots and provenance now live on this integration PR branch, rather than the skill PR #6509. Evidence index with embedded screenshots and JSON links. These screenshots show native/prerelease controls in AO standalone terminals. The harness remains gated/unregistered; this is NOT registered AO integration or manager Kill/restore proof. This is evidence relocation only. Existing tested source/native hashes and failures are preserved; the documentation commit is not a fresh runtime pass. Applicable checks run in PR CI.
|
This branch has not been deployed
2 participants
Code changes: +118 -0
Tests: +146 -0
Others: +1399 -0
Binary assets in this source snapshot: 8 (excluded from line counts).
Draft qualification boundary; unregistered and launch/hooks/restore guarded.
Current status
Current source snapshot:
8665c30db42b24d7945f201eab4b2a507ca69706(base95005365cabed5e603b3329f10487165dd1053b7). Draft; GitHub mergeabilityMERGEABLE, merge stateBLOCKED. Exact-head CI: all 20/20 reported checks successful. CI run 1 · CI run 2 · CI run 3. Green source CI does not establish current native/UI runtime proof or full integration readiness.This fix created only clean isolated source worktrees and temporary review reports; it created no AO/native sessions, provider profiles or owned runtime processes. No local build, gofmt, test, fixture, provider or UI run was performed.
Historical runtime build: No registered AO runtime build is qualified. Historical stock Freebuff0.2.26 failed independent instructions. Supplementary native/prerelease standalone-terminal capture used AO/UI
fb60bd4097ebd4109bbe7ee68e908f722e6ee03fand upstream source5712d04bc916125d17da46548874a0388dcc526e(0.0.0-ci, executable SHA2565071e80f5eec7dd7a80d055e0ca0641b17470c7da44067d5ba8f032af9108822). Report · evidence index, original receipts, image/provenance hashes. Receipt SHAs/bytes are unchanged. Linux/VPS proof is not Windows/macOS native proof. Runner SHA2568887aa2e7101b9e6d3950bfca08ffddf2e1e6c1c3f1d030c8dec2676443aecearemains historical where reported; manual/standalone proof is not a strict runner PASS.Changes since runtime proof: Source remains an intentionally guarded draft/unregistered qualification boundary. Evidence relocation did not admit stock Freebuff or rerun native conformance.
The matrix separates current verification from recorded historical passes;
NOT_RUNdoes not erase those passes. Excluded interfaces/manual model input are deliberate supported-scope decisions.Historical implementation and evidence
Released0.2.26 native BYOK/edit/follow-up/activity and witnessed Escape/reaping/no-late-effect controls passed historically, but an ordinary fresh task did not create the independently required private receipt. Prompted file reading passed only as a separate assisted control. No supported released additive input was found; public-source prerelease proof does not repair stock0.2.26 or qualify renewed restore instructions. The AO adapter hard-refuses launch/hooks/restore; issue6542 stays open and historical closed/unmerged Codebuff1826 is distinct. Historical source fcdc3db was 20/20 green; evidence aa0a700 was 5/5 green/150 fixtures, preserving the first 149/150 failure.
historical receipt 1 · historical receipt 2 · historical receipt 3
Reproduction and retained-original limitations
The pinned reports/JSON retain action/result, file/token effects, process identity, cancellation, native-history continuity and capture assertions. A complete sanitized executable reproduction bundle is not established for every manual helper: exact helper bytes/hash and invocation, applicable local-contract bytes/hash with probe argv and interrupt/readiness/draft-cleanup settings, and complete native/AO fingerprints are unavailable where not recorded in the linked receipts; recoverability of those original inputs is unknown. No missing command, contract, hash or result is invented. Later reproductions must use a new attempt and cannot replace original failed/missing evidence.
Recorded owned-process/session/daemon/Electron cleanup is historical. Source worktrees, native profiles/history, dirty scratch workspaces, binaries and raw logs were reported retained privately; a complete current inventory/location/hash and recoverability of every original class are unavailable in the public record. Current recoverability is unknown; this reporting fix reconstructs no missing input and silently substitutes none. Share sanitized artifacts only; exclude credential stores, raw DBs and provider-profile directories. Preserve the retained failures and original screenshots.