I3408 — A captured prompt is answered, on this machine only, with the existing intents and issues it matches or with no match, and the answer carries identities and never the prompt's text

✕BLOCKED wave 1 · p2 · implementation profile · parallel safe

Part of a-prompt-reaches-the-work-it-serves — A captured prompt is matched to its existing intent and recorded on the task that follows, joined to its outcome and evidence, shown on /ui and the Cockpit, read only on its own machine and never published.

Objective

Add a read-only capability, intents.matched, that declares the checkout-private field I3434 adds. Given a captured prompt's identity (provider and prompt id) or an episode, it reads the record from .ai/local/prompts and runs the I3251 brief over its text through a new matcher in apps/majordomus-cli/src/devcontext/intent_match.rs. It answers each existing intent and issue above the floor with the shared title terms and a confidence. The verdict is matched (one candidate), ambiguous (several, all kept as candidates) or unmatched. It never proposes an intent, never calls a model and never acts on the text.

Why

The owner's 2026-10-19 Cognitive Fabric pack asks that existing intents be matched before any intent is proposed, that confidence not count as proof, and that ambiguous matches stay candidates (campaigns/prismatic-way-cognitive-fabric-prompt-pack/prompts/02_EVENTS_INTENTS.md, scenario A of prompts/00_MASTER.md, and the verification/ACCEPTANCE.md rows on an existing intent match and on provider prompt injection).

Current state

intents.propose refuses only an existing id (apps/majordomus-cli/src/capability/builtin/intents.rs:585-591). .claude/skills/intent/SKILL.md:13 proposes the typed text verbatim. devcontext/select.rs:1310-1360 already scores term share with named terms. No Rust code reads the prompt archive, and lib/capture.sh:52-53 states that nothing retrieves from it.

Desired state

One deterministic, explainable matcher, reused from the brief. Its answer holds record identities, the terms that occur in the matched record's own title, and a confidence. A prompt in a language no record uses is answered unmatched. Nothing is written, and a caller beyond loopback is refused.

Scope

• apps/majordomus-cli/src/devcontext
• apps/majordomus-cli/src/devcontext/mod.rs
• apps/majordomus-cli/src/capability/builtin/intents.rs
• apps/majordomus-cli/tests/intent.rs
• docs/generated/registry.json
• docs/generated/registry.yaml
• docs/generated/openapi.json
• docs/generated/openapi.yaml
• docs/generated/modules/intents.md
• site/data/generated/openapi.json
• site/data/registry/registry.json

Out of scope

• Running in the UserPromptSubmit hook or writing to its stdout
• Proposing or amending an intent (I3254)
• An LLM or embedding similarity (a later reasoning consultation through docs/REASONING.md)
• Publishing the answer to the site or to a snapshot

Dependencies

• I3251○READY A desired outcome is briefed with what the repository already holds about it
• I3406✕BLOCKED A prompt delivered again, concurrently, on the next day or after a resumed session is still one record, and capture status counts every identity that more than one record holds
• I3432✕BLOCKED The UI and Cockpit snapshots pass both privacy gates after they are placed and before anything is published, on CI and from a terminal
• I3434✕BLOCKED A capability declared as reading checkout-private records answers only this machine: a caller beyond loopback is refused on HTTP and MCP, and the refusal logs no input value

What waits on this

• I3409✕BLOCKED An episode answers, for each prompt it captured, the intent it matched, the task that recorded it, that task's outcome and the evidence of the criterion it serves, with the same identities on every surface and after any replay

Acceptance criteria

• A prompt that rephrases an existing intent's title answers that intent as matched and proposes nothing
• A prompt matching two intents above the floor answers ambiguous with both
• A prompt matching nothing answers unmatched
• A prompt asking to ignore governance and force-promote every candidate answers only identities and changes nothing
• The serialised answer contains no substring of the prompt longer than one matched title term
• An unknown identity is refused as not found
• A caller beyond loopback is refused through I3434's field

Validation

• cargo test --manifest-path apps/majordomus-cli/Cargo.toml --test intent
• cargo test --manifest-path apps/majordomus-cli/Cargo.toml --test remote_callers
• bin/majordomus-cli generate --check
• majordomus capabilities describe intents.matched

Evidence required

• test_a_prompt_meets_the_existing_intent

Evidence

None recorded. Every token above needs a command or an artifact behind it before this issue can be completed; narrative is refused.

Timeline

started

—

verified

—

completed

—

Those three fields, the evidence above and the state of the dependencies are all the status is made of. There is no status field to disagree with them.

Canonical record: .ai/repo/project/issues/I3408.yaml. Read it back with majordomus plan show I3408.