Specify OmegaFlow Envoy protocol v1 by omry · Pull Request #24 · omry/omegaflow

omry · 2026-08-23T04:01:11Z

Specify connection establishment, channels, framing, operation lifecycle, output attribution, presentation timing, action gates, cancellation and finalization, resize and drain behavior, the private Awsh protocol, controlled Bash launch, failure mapping, and conformance fixtures.

Documentation only.

omry · 2026-08-23T04:21:29Z

PR-cycle state — maintained automatically. Do not edit by hand.

{
  "approval_evidence": {
    "active_delivery_deferral_digest": "sha256:a995c7b438f8b7b732c77ab3558a7e688260a2041fe0072ffec77b82333c482e",
    "candidate_revision_fingerprint": "sha256:7f49f55551b4566cff592003be4a43540df805ff11b20fb2e4d17d65443aa717",
    "checks": [
      {
        "bucket": "pass",
        "link": "https://app.gitar.ai",
        "name": "Gitar",
        "state": "SUCCESS"
      },
      {
        "bucket": "pass",
        "link": "https://github.com/omry/omegaflow/actions/runs/32742193420/job/97479046927",
        "name": "Package build",
        "state": "SUCCESS"
      },
      {
        "bucket": "pass",
        "link": "https://github.com/omry/omegaflow/actions/runs/32742193420/job/97479047285",
        "name": "Python tests",
        "state": "SUCCESS"
      },
      {
        "bucket": "pass",
        "link": "https://github.com/omry/omegaflow/actions/runs/32742193420/job/97479046628",
        "name": "Recording integration",
        "state": "SUCCESS"
      },
      {
        "bucket": "pass",
        "link": "https://github.com/omry/omegaflow/actions/runs/32742193420/job/97479047121",
        "name": "Website docs",
        "state": "SUCCESS"
      }
    ],
    "finding_dispositions": [
      {
        "id": "R24-controlled-bash-trust",
        "resolved_at_head": "2a5a60129f4d5ac79af228b7041d45368087f56e",
        "status": "resolved",
        "thread_status": "resolved"
      },
      {
        "id": "R24-stable-produced-source",
        "resolved_at_head": "2a5a60129f4d5ac79af228b7041d45368087f56e",
        "status": "resolved",
        "thread_status": "resolved"
      }
    ],
    "review_request": {
      "body_digest": "sha256:18e240c0d741bd67c4cae671342c667ee1ff8c6edb9420fd72be92a01a79a059",
      "head_sha": "2a5a60129f4d5ac79af228b7041d45368087f56e",
      "id": 5397168338
    },
    "review_result": {
      "body_digest": "sha256:f7dea81633b0322a8f03b6bd663dabda961f69303296941166540e5c5776afd7",
      "head_sha": "2a5a60129f4d5ac79af228b7041d45368087f56e",
      "id": 5397231162,
      "state": "APPROVED"
    },
    "schema": "awd:swe:pr-cycle-approval-evidence:v1",
    "triggered_attestation_preservation": [],
    "unresolved_current_head_threads": []
  },
  "approval_fingerprint": "sha256:7e58f2ef4a7c724b113026f2845cb3d718918663202a27aa96ef5d3d070745e8",
  "approved": true,
  "candidate_revision_fingerprint": "sha256:7f49f55551b4566cff592003be4a43540df805ff11b20fb2e4d17d65443aa717",
  "checks": [
    {
      "bucket": "pass",
      "link": "https://app.gitar.ai",
      "name": "Gitar",
      "state": "SUCCESS"
    },
    {
      "bucket": "pass",
      "link": "https://github.com/omry/omegaflow/actions/runs/32742193420/job/97479046927",
      "name": "Package build",
      "state": "SUCCESS"
    },
    {
      "bucket": "pass",
      "link": "https://github.com/omry/omegaflow/actions/runs/32742193420/job/97479047285",
      "name": "Python tests",
      "state": "SUCCESS"
    },
    {
      "bucket": "pass",
      "link": "https://github.com/omry/omegaflow/actions/runs/32742193420/job/97479046628",
      "name": "Recording integration",
      "state": "SUCCESS"
    },
    {
      "bucket": "pass",
      "link": "https://github.com/omry/omegaflow/actions/runs/32742193420/job/97479047121",
      "name": "Website docs",
      "state": "SUCCESS"
    }
  ],
  "cycle_closed": true,
  "deferrals": [],
  "findings": [
    {
      "assessment": "real; one traversal can combine multiple states while a permitted setup service mutates the source",
      "claim": "Specify pre/post identity, metadata, and directory-membership checks and a typed instability failure.",
      "design_blocking": true,
      "fix_class": "produced-path-snapshot-stability",
      "id": "R24-stable-produced-source",
      "invariant": "produced-output evidence comes from one stable source state or fails without a digest",
      "proposed_fix": "Use descriptor-relative complete pre/post tree snapshots plus pre/post opened-file checks; reject any observed identity, metadata, membership, target, byte, or read-length change as inspection-unstable with no result.",
      "proposed_fix_classification": "current-slice truth fix restoring approved upstream protocol obligations; no new subsystem, package, or dependency",
      "proposed_fix_footprint": [
        "workload inspection algorithm",
        "failure mapping",
        "inspection fixtures"
      ],
      "resolution": "The protocol now requires retained no-follow path identity, complete pre/post snapshots, pre/post file checks, and typed inspection-unstable failure with no result.",
      "resolved_at_head": "2a5a60129f4d5ac79af228b7041d45368087f56e",
      "resulting_head": "2a5a60129f4d5ac79af228b7041d45368087f56e",
      "scope": "current-slice",
      "severity": "P1",
      "source": "codex",
      "source_body_digest": "sha256:4149a58e183d1ce3a0ace9a61ea75ec0af4111c04a3de8106fee405dfc8db198",
      "source_comment_id": 3844447706,
      "source_head": "218dcbcc5fdd9c13e82860cb90feda24e2b1ee6a",
      "source_review_id": 5008981307,
      "status": "resolved",
      "thread_id": "PRRT_kwDOTOFvvM6bu1fu",
      "thread_status": "resolved",
      "title": "Reject digests when the inspected source changes",
      "verification": "Attributable exact-head round 2 review approved with zero messages and zero unresolved PR #24 threads; focused checks and the complete 998-test repository CI passed.",
      "verified_at_head": "2a5a60129f4d5ac79af228b7041d45368087f56e",
      "where": "docs/design/envoy-protocol-v1.md:469-495"
    },
    {
      "assessment": "real; filtering INPUTRC without reinstalling the trusted value permits fallback to application HOME and the terminal/locale values are also unspecified",
      "claim": "Filter the complete forbidden environment, install the fixed trusted launch values, and verify their manifest assets before Bash starts.",
      "design_blocking": true,
      "fix_class": "launch-environment-trust",
      "id": "R24-controlled-bash-trust",
      "invariant": "controlled Bash cannot consult application terminal, Readline, or locale data before OmegaFlow control",
      "proposed_fix": "Match the upstream forbidden environment, reinstall fixed history, Readline, terminal, and locale values, and verify their manifest assets before Bash starts.",
      "proposed_fix_classification": "current-slice truth fix restoring approved upstream protocol obligations; no new subsystem, package, or dependency",
      "proposed_fix_footprint": [
        "controlled Bash launch",
        "launch failure mapping",
        "launch fixtures"
      ],
      "resolution": "The protocol now filters the complete forbidden launch environment, reinstalls fixed history, Readline, terminal, and locale values, and validates exact manifest-backed assets before Bash.",
      "resolved_at_head": "2a5a60129f4d5ac79af228b7041d45368087f56e",
      "resulting_head": "2a5a60129f4d5ac79af228b7041d45368087f56e",
      "scope": "current-slice",
      "severity": "P1",
      "source": "codex",
      "source_body_digest": "sha256:306a9b69faea03a1148cac4e225bb534b5216e033aaad9199ee718c7ad721bdf",
      "source_comment_id": 3844447717,
      "source_head": "218dcbcc5fdd9c13e82860cb90feda24e2b1ee6a",
      "source_review_id": 5008981307,
      "status": "resolved",
      "thread_id": "PRRT_kwDOTOFvvM6bu1f2",
      "thread_status": "resolved",
      "title": "Restore trusted launch data after filtering",
      "verification": "Attributable exact-head round 2 review approved with zero messages and zero unresolved PR #24 threads; focused checks and the complete 998-test repository CI passed.",
      "verified_at_head": "2a5a60129f4d5ac79af228b7041d45368087f56e",
      "where": "docs/design/envoy-protocol-v1.md:1200-1237"
    }
  ],
  "pr": {
    "base_ref": "pr21",
    "base_sha": "4e6716657c1ac78563740c36e4b04d30d9112e53",
    "body_digest": "sha256:3f7271198904e3a0a442e7d0665c3d9733234a97db2ca667719b5f9df80e3074",
    "diff_digest": "sha256:dac12e3946a61da91e92581dee89d4178775dbf3e3ee64f8a4a64acd996aba80",
    "head_ref": "pr22",
    "head_sha": "2a5a60129f4d5ac79af228b7041d45368087f56e",
    "pr": 24,
    "repository": "omry/omegaflow",
    "scope_authority": [
      {
        "digest": "sha256:a3fd7a68f5fafd31a30c97d7196c02e654cc2bc04736c84321ac210d1a0e0b46",
        "path": "docs/design/envoy-protocol-v1.md"
      },
      {
        "digest": "sha256:b8331b6d8aef344a7541cee06082cbc950559890767113c50a3ec5dca63dfadb",
        "path": "docs/design/omegaflow-envoy-design.md"
      },
      {
        "digest": "sha256:5f5d6c94c8d8e4d6f2df4b8d79f86e85e906c47366548011e7efe864be06d02b",
        "path": "docs/design/reploy-environments-design.md"
      }
    ],
    "title_digest": "sha256:19aee7eafc7684b4f0ab67c760aed9e782533e69d8a89ff1cdaec02a83dcc1be"
  },
  "record_version": 10,
  "review_request": {
    "body_digest": "sha256:18e240c0d741bd67c4cae671342c667ee1ff8c6edb9420fd72be92a01a79a059",
    "created_at": "2026-08-24T15:06:20Z",
    "head_sha": "2a5a60129f4d5ac79af228b7041d45368087f56e",
    "id": 5397168338,
    "url": "https://github.com/omry/omegaflow/pull/24#issuecomment-5397168338"
  },
  "review_result": {
    "author": "chatgpt-codex-connector[bot]",
    "body_digest": "sha256:f7dea81633b0322a8f03b6bd663dabda961f69303296941166540e5c5776afd7",
    "commit_id": "2a5a60129f4d5ac79af228b7041d45368087f56e",
    "id": 5397231162,
    "inline_messages": [],
    "kind": "clean-comment",
    "state": "APPROVED",
    "submitted_at": "2026-08-24T15:10:51Z",
    "url": "https://github.com/omry/omegaflow/pull/24#issuecomment-5397231162"
  },
  "revision_fingerprint": "sha256:7f49f55551b4566cff592003be4a43540df805ff11b20fb2e4d17d65443aa717",
  "rounds": [
    {
      "applied_fix_footprint": [
        "stable produced-path source snapshots and top-level path identity",
        "typed inspection-unstable failure mapping and conformance cases",
        "controlled-Bash forbidden environment and fixed reserved values",
        "manifest-exact Readline, terminal, and locale asset validation",
        "existing native stack #26 head synchronization"
      ],
      "checks": [
        "focused schema-doc and release-note checks passed",
        "protocol behavior-to-conformance-corpus assertions passed",
        "repository CI passed: 998 tests plus schema-doc and release-note checks",
        "both original review threads resolved after verified fixes",
        "native stack #26 synchronized with unchanged metadata and idempotent second classification"
      ],
      "effective_diff_digest": "sha256:dac12e3946a61da91e92581dee89d4178775dbf3e3ee64f8a4a64acd996aba80",
      "finding_ids": [
        "R24-controlled-bash-trust",
        "R24-stable-produced-source"
      ],
      "outcome": "findings",
      "proposed_fix_footprint": [
        "workload produced-output inspection algorithm and failure mapping",
        "controlled-Bash launch environment and trusted runtime assets",
        "protocol conformance fixtures for both contracts"
      ],
      "resulting_head": "2a5a60129f4d5ac79af228b7041d45368087f56e",
      "review_request_id": 5396656057,
      "review_result_id": 5008981307,
      "reviewed_head": "218dcbcc5fdd9c13e82860cb90feda24e2b1ee6a",
      "root_cause": "The protocol allowed produced-output hashing without proving one stable source state and filtered Bash launch controls without fully restoring and verifying the approved trusted values.",
      "round": 1
    },
    {
      "applied_fix_footprint": [],
      "checks": [
        "attributable exact-head regular review approved",
        "zero inline review messages",
        "zero unresolved PR #24 review threads",
        "focused schema-doc, release-note, and protocol-corpus checks passed",
        "repository CI passed: 998 tests plus schema-doc and release-note checks",
        "published PR #24 head and existing native stack metadata remain exact"
      ],
      "convergence": {
        "new_fix_footprint": [],
        "same_invariant_recurred": false,
        "status": "clean"
      },
      "effective_diff_digest": "sha256:dac12e3946a61da91e92581dee89d4178775dbf3e3ee64f8a4a64acd996aba80",
      "finding_ids": [],
      "outcome": "clean",
      "proposed_fix_footprint": [],
      "resulting_head": "2a5a60129f4d5ac79af228b7041d45368087f56e",
      "review_request_id": 5397168338,
      "review_result_id": 5397231162,
      "reviewed_head": "2a5a60129f4d5ac79af228b7041d45368087f56e",
      "root_cause": null,
      "round": 2
    }
  ],
  "schema": "awd:swe:pr-cycle-state",
  "version": 1
}

omry · 2026-08-24T14:28:19Z

@codex, regular review 218dcbc

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 218dcbcc5f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Specify connection establishment, channels, framing, operation lifecycle, output attribution, presentation timing, action gates, cancellation and finalization, resize and drain behavior, the private Awsh protocol, controlled Bash launch, failure mapping, and conformance fixtures. Documentation only.

gitar-bot · 2026-08-24T15:00:56Z

Code Review ✅ Approved

Adds comprehensive documentation specifying the OmegaFlow Envoy protocol v1, covering connection establishment, framing, operation lifecycle, and conformance fixtures. No issues found.

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

`Auto-apply`	`Compact`
`gitar auto-apply:on`	`gitar display:verbose`

_{Was this helpful? React with 👍 / 👎 | Powered by Gitar — free for open source}

omry · 2026-08-24T15:06:20Z

@codex, regular review 2a5a601

chatgpt-codex-connector · 2026-08-24T15:10:51Z

Codex Review: Didn't find any major issues. Keep it up!

Reviewed commit: 2a5a60129f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

This was referenced Aug 23, 2026

Plan Reploy integration delivery #25

Open

Define OmegaFlow workload Envoy design #23

Open

omry force-pushed the pr22 branch from aebf87c to 9e4151d Compare August 23, 2026 15:20

omry force-pushed the pr22 branch 2 times, most recently from 5d36975 to 9dd3624 Compare August 23, 2026 16:53

omry force-pushed the pr22 branch from 9dd3624 to 3b85cee Compare August 23, 2026 17:35

omry force-pushed the pr22 branch from 3b85cee to 4ba10f6 Compare August 23, 2026 18:00

omry force-pushed the pr22 branch from 4ba10f6 to e31727d Compare August 24, 2026 03:24

omry force-pushed the pr22 branch 2 times, most recently from 104fa09 to 0a065b3 Compare August 24, 2026 07:49

omry force-pushed the pr22 branch 2 times, most recently from 8d58233 to d1206e7 Compare August 24, 2026 11:23

omry force-pushed the pr22 branch 2 times, most recently from 0f28662 to 9b066f1 Compare August 24, 2026 13:01

omry force-pushed the pr22 branch from 9b066f1 to 218dcbc Compare August 24, 2026 14:03

omry marked this pull request as ready for review August 24, 2026 14:28

chatgpt-codex-connector Bot reviewed Aug 24, 2026

View reviewed changes

Comment thread docs/design/envoy-protocol-v1.md

Comment thread docs/design/envoy-protocol-v1.md Outdated

omry force-pushed the pr22 branch from 218dcbc to 2a5a601 Compare August 24, 2026 15:00

omry added the approved PR reviewed and approved label Aug 24, 2026

omry mentioned this pull request Aug 25, 2026

Amend Awsh supervisor architecture #27

Open

Navigation Menu

Specify OmegaFlow Envoy protocol v1 - #24

Specify OmegaFlow Envoy protocol v1#24
omry wants to merge 1 commit into
pr21from
pr22

omry commented Aug 23, 2026 •

edited

Loading

Uh oh!

omry commented Aug 23, 2026 •

edited

Loading

Uh oh!

omry commented Aug 24, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

Uh oh!

Uh oh!

gitar-bot Bot commented Aug 24, 2026

Uh oh!

omry commented Aug 24, 2026

Uh oh!

chatgpt-codex-connector Bot commented Aug 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

omry commented Aug 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

omry commented Aug 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

omry commented Aug 24, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

gitar-bot Bot commented Aug 24, 2026

Uh oh!

omry commented Aug 24, 2026

Uh oh!

chatgpt-codex-connector Bot commented Aug 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

omry commented Aug 23, 2026 •

edited

Loading

omry commented Aug 23, 2026 •

edited

Loading