Skip to content

feat(claims): ground the two PARTIAL honesty claims after verifying the code#91

Merged
bdelanghe merged 1 commit into
mainfrom
feat/claim-grounding-partial
Jun 29, 2026
Merged

feat(claims): ground the two PARTIAL honesty claims after verifying the code#91
bdelanghe merged 1 commit into
mainfrom
feat/claim-grounding-partial

Conversation

@bdelanghe

Copy link
Copy Markdown
Contributor

What

Continues prx-qhuv. Grounds the two PARTIAL honesty claims as string-audit claim symbols — but only after verifying the mechanisms against the actual linked repos (cross-repo evidence check, two parallel agents, not assumption).

  • Provenance claim — VERIFIED: ocap-provenance/slsa.ts (in-toto Statement v1 + SLSA Provenance v1), prx/.../verify.ts + merge-guard.ts, anchored-chain content-addressed ledger, workflow.ts canEnterReadyToMerge fails closed on unsigned. Gap (why PARTIAL): emission/enforcement opt-in until Sigstore lands.
  • Broker claim — VERIFIED: keeperd/daemon.ts holds the key + performs the push, agent holds only a socket, claude-box CAPABILITIES.md credential-free. Gap: macOS TCP transport weaker than unix-socket possession; not sandbox-hardened.

Each grounding term in content/grounding.json is tagged PARTIAL with its verified file + the named gap, so the source itself stays honest; the visible PARTIAL grade carries the gap.

Honesty line held

The two ASPIRATIONAL claims (converge, contracts-honest) stay body — bets, not grounded. So now 4/6 honesty claims are grounded claim symbols; 2 remain honest bets.

Verified

audit-gate --strict 0 errors, content.mjs --check 23/23, build / structure / semantic / shacl green locally.

🤖 Generated with Claude Code

…he code

Continues prx-qhuv. Verified both PARTIAL claims against the actual linked
repos before grounding any term (cross-repo evidence check, not assumption):

- Provenance claim: ocap-provenance/slsa.ts emits in-toto Statement v1 + SLSA
  Provenance v1; prx verify.ts/merge-guard.ts verify; anchored-chain is the
  content-addressed derivation ledger; workflow.ts canEnterReadyToMerge fails
  closed on unsigned. GAP (why PARTIAL): emission/enforcement is opt-in until
  Sigstore lands.
- Broker claim: keeperd/daemon.ts holds the key and performs the push; the
  agent holds only a socket; claude-box CAPABILITIES.md is credential-free.
  GAP (why PARTIAL): macOS TCP transport is weaker than unix-socket possession;
  not sandbox-hardened.

Each grounding term is tagged PARTIAL with its verified file + the named gap,
so the source stays honest; the visible PARTIAL grade carries the gap. The two
ASPIRATIONAL claims (converge, contracts-honest) stay body — bets, not grounded.

audit-gate --strict 0 errors, content.mjs 23/23, build/structure/semantic/shacl
green locally.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@bdelanghe bdelanghe merged commit abe5d2d into main Jun 29, 2026
9 checks passed
@bdelanghe bdelanghe deleted the feat/claim-grounding-partial branch June 29, 2026 01:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant