I3286 — A proposal from a workspace arrives as intent.propose carrying the workspace reference it came from

✕BLOKOVÁNO wave 2 · p3 · implementation profile · parallel safe

Part of a-workspace-reaches-the-repository — A vendor workspace reads the repository, and proposes to it only where the owner has decided it may.

Cíl

Once the owner decides remote mutation (open question), accept intent.propose from an authenticated vendor caller with a minimal structured delta (statement, criteria, workspace reference), never a transcript, under an autonomy-per-work-class policy declared as data.

Proč

The owner wants to only ruminate in chat while the repository plans; the pull path already gets decisions in after the fact, and this is the only path that would make it immediate. Proposed in ADR 0211 (A record promoted from a workspace cites the message it came from by a typed reference that validates in every checkout and resolves only where the store is held) (proposed; it carries no authority until the owner accepts it). Sources: chatgpt-majordomus:c239#4, chatgpt-majordomus:c066#4.

Aktuální stav

intent.propose exists (ADR 0144, majordomus_intent_propose, effect repository_mutation) and is refused beyond loopback by ADR 0126.

Cílový stav

A signed or token-authenticated proposal path decided by an ADR amending ADR 0126, with the proposal's provenance a workspace: reference.

Rozsah

• apps/majordomus-cli/src/capability/builtin/intents.rs
• .ai/repo/adrs/0211-a-record-promoted-from-a-workspace-cites-the-message-it-came-fro.md
• .ai/repo/adrs/0144-an-intent-is-proposed-by-a-capability-and-its-stage-stays-derived.md
• .ai/repo/adrs/0126-a-caller-beyond-loopback-reads-and-changes-nothing-it-cannot-authenticate.md
• .ai/repo/policy.yaml

Mimo rozsah

• Any record written without a person accepting the proposal

Závislosti

• I3285✕BLOCKED A vendor workspace reads the plan through the authenticated remote MCP surface, and a tunnel never makes it look local
• I3281✕BLOCKED A workspace message is a typed provenance reference that validates in every checkout without the store

Kritéria přijetí

• A proposal from the vendor caller lands as a proposed intent whose provenance is the workspace reference
• A proposal carrying conversation text beyond the declared fields is refused
• Without the ADR amendment the call is refused as today

Validace

• cargo test --manifest-path apps/majordomus-cli/Cargo.toml --test intent
• cargo test --manifest-path apps/majordomus-cli/Cargo.toml --test remote_callers

Požadované důkazy

• case_a_workspace_proposes_an_intent

Důkazy

Nic nezaznamenáno. Za každým tokenem výše musí stát příkaz nebo artefakt, než lze tento úkol dokončit; vyprávění se odmítá.

Časová osa

zahájeno

—

ověřeno

—

dokončeno

—

Tato tři pole, důkazy výše a stav závislostí jsou vše, z čeho se stav skládá. Neexistuje žádné pole stavu, které by s nimi mohlo být v rozporu.

Canonical record: .ai/repo/project/issues/I3286.yaml. Read it back with majordomus plan show I3286.