[f] Independent high-assurance cartridge-making workflow (mint → provision → configure → harness)

[hyperpolymath]

The independent cartridge factory (scope f) — the maker job, actively worked in this thread.

Goal — effort inversion

A person notices a cartridge is missing ("Internet Archive? no cartridge — why?"). Their only real effort is (1) confirming it's absent and (2) choosing settings. ~3 minutes later the factory has produced an algorithmically-perfect, high-assurance cartridge.

Principles (from the design discussion)

• Not scratch-built, not mechanically assembled. Cartridges are derived by composition from a proven pre-mint framework — the edge is in not re-deriving the same scaffolding/proofs every time.
• One general harness, not bespoke. A single standard harness provides all capabilities; per-cartridge config selects which are locked-down (permanently denied, proven absent) vs ephemeral (granted only for the fork's lifetime). No per-cartridge harness design effort.
• Proofs carried end-to-end, none dropped. Model the pipeline in Idris2: each stage Stage : Artifact ds -> Artifact ds' is total and preserves/extends the discharged-obligation index; the final artifact's type carries the full proof set, so it is unconstructable without every proof.

Stages

• Minter — scaffold from boj-server-cartridges/cartridges/templates/ + a descriptor.
• Provisioner — capabilities / credentials / infra; ephemeral-vs-locked-down selection.
• Configurator — settings → composition.
• Harness — the general harness; reuses the truthfulness gate (Truthful catalogue: available:true ⇒ built + verified-real (+ CI gate) #196), the ABI proofs, and fork-per-request isolation (ADR-0005).

Extensible to cartridge kinds

domain / coordination / agentic / nesy — the cross-cutting base kinds (scope c, hyperpolymath/boj-server-cartridges#37).

Reuses

• feedback-mcp (the one real reference cartridge) as the gold template.
• tests/truthfulness_check.sh from Truthful catalogue: available:true ⇒ built + verified-real (+ CI gate) #196 as the standard harness check.
• The base proof bundle (scope c) and core trusted base (scope a, [proofs/a] boj-server core: enforce + minimise the trusted base #197).

First deliverables

1. Full spec document (.adoc).
2. Idris2 model proving "no dropped proofs" + capability-minimality.
3. Working minimal end-to-end mint of one new cartridge through the proven flow.

Maker track — active in this thread.

---

Filed via Claude Code · https://claude.ai/code/session_019tMcRS1Dm1nWjjYP4WvbJa