Bind terminal-native agent ChatOps to SourceOS graph, policy, and capability leases

[mdheller]

Objective

Integrate agent-term with the SourceOS/SociOS governed local-first agentic graph foundation.

agent-term should support terminal-native agent ChatOps without bypassing Agent Registry, Policy Fabric, Memory Mesh, or SourceChannel.

Required work

• Add .sourceos/manifest.json.
• Bind slash commands and Matrix/topic routing to workspace graph context.
• Discover agents through Agent Registry manifests.
• Require capability leases for tool execution.
• Route memory writes to Memory Mesh as proposed memory, not direct durable mutation.
• Emit audit events for slash commands, agent handoff, policy denial, and memory proposal.
• Define SourceChannel envelopes for high-risk chat-driven actions.

Dangerous surfaces

• agent_term.slash.execute
• agent_term.agent.handoff
• agent_term.memory.propose
• agent_term.tool.invoke
• agent_term.workspace.bind
• agent_term.shell.bridge

Acceptance criteria

• agent-term cannot execute high-risk tools without a capability lease.
• Durable memory writes are proposed, not directly promoted.
• Workspace context is explicit and auditable.
• .sourceos/manifest.json validates against the sourceos-spec manifest contract once available.

Related

• M1: Governed local-first agentic graph foundation sourceos-spec#86
• Define local-first agentic graph foundation sourceos-spec#85
• Enforce agent capability leases and policy decisions in local agent runtime agent-machine#20
• Add signed agent manifest and capability lease contracts SocioProphet/agent-registry#15
• Implement governed memory lifecycle for agentic graph sync SocioProphet/memory-mesh#18
• Define policy decision contract and precedence for agentic graph sync SocioProphet/policy-fabric#50