I3169 — A new pack enters campaigns/ through one command that checks the archive before writing a byte

✕BLOKOVÁNO vlna 1 · p2 · profil implementation · bezpečné paralelně

Part of campaigns-are-read-as-provenance — A prompt pack is a campaign the index serves and the plan cites.

Cíl

Add a campaign add command that reads a ZIP or directory with limits on member count, sizes, decompression ratio, nesting, path traversal and symlinks, writes the pack verbatim, appends campaigns/MANIFEST.sha256 and the campaign index member, and executes nothing it contains.

Proč

ADR 0124 point 6 (untrusted content, ZIP safety); the 2026-10-10 design separated ingestion from authorisation to execute; owner 2026-10-13: packs carry a schema, prompts and instructions. Proposed in ADR 0180 (A prompt pack is a campaign: kept as received, indexed as a kind, and cited by the records it drove) (proposed; it carries no authority until the owner accepts it). Sources: chatgpt-majordomus:c210#4, chatgpt-majordomus:c245#6.

Aktuální stav

Packs are copied in by hand and checked by campaigns-check afterwards.

Cílový stav

One safe command; the same check refuses a hand copy that breaks it.

Rozsah

• apps/majordomus-cli/src/cli.rs
• share/commands.yaml
• scripts/ci/campaigns-check
• campaigns/README.md
• apps/majordomus-cli/src/commands/mod.rs
• apps/majordomus-cli/Cargo.toml
• apps/majordomus-cli/Cargo.lock
• test/cases/340_a_brief_is_kept_as_received.sh

Mimo rozsah

• Network fetches
• Running prompts

Závislosti

• I3167○READY A campaign is a kind of the index: every pack under campaigns/ is an object with its manifest digest, served read-only

Co na tom čeká

• I3272✕BLOCKED A received brief is a campaign revision pinned by its manifest digest, and the same bytes again are the same revision

Kritéria přijetí

• Each unsafe archive shape is refused before a write
• A safe pack lands with manifest and index rows
• Each new case named here takes its number from `scripts/case-numbers next` and is announced on the board before the file is written (ADR 0053); a case number written in this record before that is provisional

Validace

• bash test/run.sh 340_a_brief_is_kept_as_received

Požadované důkazy

• case_pack_checked_before_kept

Důkazy

Nic nezaznamenáno. Za každým tokenem výše musí stát příkaz nebo artefakt, než lze tento úkol dokončit; vyprávění se odmítá.

Časová osa

zahájeno

—

ověřeno

—

dokončeno

—

Tato tři pole, důkazy výše a stav závislostí jsou vše, z čeho se stav skládá. Neexistuje žádné pole stavu, které by s nimi mohlo být v rozporu.

Canonical record: .ai/repo/project/issues/I3169.yaml. Read it back with majordomus plan show I3169.