Agent task: harden SourceOS AI carry proof toward installable CLI contract

[mdheller]

Agent-directed work package.

Target agent: OpenAI Codex via GitHub Agent HQ if enabled; otherwise GitHub Copilot coding agent.

Context:
sourceos-model-carry is the SourceOS carry-only boundary for AI service clients, signed service refs, launch profiles, cache policy, and mutable-model-state refusal gates. SourceOS may carry client references and launch policy; it must not carry mutable model update authority.

Scope:

1. Inspect the current repository state before editing.
2. Preserve the carry-only doctrine.
3. Add or harden a sourceos-ai CLI contract document covering --version, doctor, list, validate, and emit-evidence.
4. Ensure examples cover speech, OCR, image, video, translation, and embeddings carry refs.
5. Add a maturity record conforming to SocioProphet/functional-model-surfaces repo-maturity.v1 semantics.
6. Add validation commands in the Makefile so a human or agent can prove the carry refs are valid.

Acceptance criteria:

• The repo has a clear README/product boundary.
• make validate validates all carry examples.
• Documentation states that SourceOS refuses mutable model state and model lifecycle authority.
• A future Homebrew/Prophet CLI implementer can consume the documented sourceos-ai command contract without inventing semantics.

Boundary:
One PR only. Do not implement unrelated OS installer behavior here. Do not add model binaries or weights.

[mdheller]

@codex Please take this issue if OpenAI Codex is enabled for this repository through GitHub Agent HQ or the connected Codex environment.

Execution rules:

• Inspect the live repository before editing.
• Keep all work inside SourceOS-Linux/sourceos-model-carry.
• Preserve the SourceOS carry-only boundary: service refs, client refs, launch profiles, cache policy, evidence, refusal gates. No mutable model updates in SourceOS.
• Prefer small, reviewable changes. One PR only.
• Include validation evidence in the PR body.

Required proof:

make validate

Do not implement OS installer behavior here; that belongs in SourceOS boot/installer/devtools work.

[mdheller]

@copilot Please take this issue if Copilot coding agent is enabled for this repo.

Keep the work bounded:

• One copilot/... branch and one PR.
• No model binaries, weights, mutable adapters, or secrets.
• No OS installer behavior in this repository.
• The output should be a validated SourceOS carry-only proof and a documented sourceos-ai CLI contract.

Validation command:

make validate

Include the validation output summary in the PR body.

[chatgpt-codex-connector]

Summary

• Added a machine-readable maturity record at docs/repo-maturity.v1.json using repo-maturity.v1 semantics, including the carry-only boundary, explicit sourceos-ai CLI contract commands, validation entrypoint/checks, invariants, and evidence references across speech/OCR/image/video/translation/embeddings surfaces. docs/repo-maturity.v1.jsonL1-L59
• Updated README.md with a dedicated CLI contract and maturity section pointing to the CLI contract doc, maturity record, and required proof command (make validate) so implementers can consume consistent semantics without inventing behavior. README.mdL47-L52

Testing

• ✅ make validate
  (Build + Python validator + sourceos-ai carry validate + doctor + self-test + emit-evidence all passed.)

Committed on current branch:

• 33b7862 — Add repo maturity record and validation proof guidance

Also completed:

• Created PR via make_pr with title “Follow-up: add SourceOS AI maturity record and validate carry contract” and included make validate evidence in the PR body.

View task →