Skip to content

Define agentic graph foundation contracts#94

Open
mdheller wants to merge 18 commits intomainfrom
sourceos/agentic-graph-spec
Open

Define agentic graph foundation contracts#94
mdheller wants to merge 18 commits intomainfrom
sourceos/agentic-graph-spec

Conversation

@mdheller
Copy link
Copy Markdown
Contributor

@mdheller mdheller commented May 5, 2026

Summary

Adds the SourceOS/SociOS local-first agentic graph foundation as an additive architecture, security, integration, and machine-readable contract layer.

This PR establishes the control-plane spec for integrating SourceOS, Prophet Workspace, Memory Mesh, Agent Registry, Policy Fabric, TurtleTerm, BearBrowser, Mesh Rush, Sherlock, and related runtime repos around one governed graph substrate.

Added docs

  • docs/architecture/local-first-agentic-graph.md
    • Defines SourceIdentity, SourceGraph, SourceStore, SourceSync, SourcePolicy, SourceChannel, and SourceAudit.
  • docs/security/agentic-sync-threat-model.md
    • Threat model for remote graph poisoning, memory injection, shell profile injection, policy downgrade, browser-to-local bridge abuse, relay compromise, secret leakage, and agent capability escalation.
  • docs/specs/sync-engine-registry.md
    • Canonical sync engines, merge strategies, policy classes, encryption scopes, state machine, and reason codes.
  • docs/specs/sourcechannel.md
    • Privileged bridge contract for workspace UI, terminal, browser, MCP, agent runtime, daemon, and admin-console surfaces.
  • docs/integration/repo-map.md
    • Estate integration map and M1 manifest acceptance criteria.

Added schemas

  • schemas/SourceOSRepoManifest.json
  • schemas/SyncEngineManifest.json
  • schemas/SourceChannelEnvelope.json
  • schemas/SourceGraphWrite.json
  • schemas/AgentCapabilityLease.json
  • schemas/AuditEvent.json

Added examples and manifest

  • .sourceos/manifest.json
  • examples/sourceos-repo-manifest.json
  • examples/sync-engine-manifest.json
  • examples/sourcechannel-envelope.json
  • examples/agent-capability-lease.json
  • examples/audit-event.json

Design intent

This keeps sourceos-spec as the constitutional contract repo and prevents downstream implementation repos from inventing separate models for sync, policy, memory, agents, shell, browser, relay, and audit.

Notes

The branch is additive. It does not rewrite existing schemas or APIs.

One SourceGraphWrite example fixture was deferred because the connector safety layer blocked that synthetic fixture write. The schema itself is included.

Follow-up work

  • Extend schemas/README.md and examples/README.md index tables.
  • Add .sourceos/manifest.json across M1 repos.
  • Implement estate scanning and contract validation in sourceos-devtools.

Related

mdheller added a commit to SourceOS-Linux/sourceos-devtools that referenced this pull request May 6, 2026
Adds the first sourceosctl tooling slice for the SourceOS/SociOS local-first agentic graph foundation.

Includes:
- .sourceos/manifest.json for sourceos-devtools
- contract validate, repo scan, estate scan, graph doctor, sync doctor, and policy explain helpers
- entrypoint routing for new command groups
- tests for manifest validation and repo scanning
- integration documentation for M1 contract validation

Related: SourceOS-Linux/sourceos-spec#86, SourceOS-Linux/sourceos-spec#94, #18
mdheller added a commit to SocioProphet/policy-fabric that referenced this pull request May 6, 2026
Adds .sourceos/manifest.json so Policy Fabric is scanner-visible for SourceOS/SociOS governed local-first agentic graph M1.

Declares the policy domain, sourceos.sync.policy-fabric engine, critical policy class, strongest_policy_wins merge strategy, authority repos, audit events, and dangerous policy surfaces.

Related: SourceOS-Linux/sourceos-spec#86, SourceOS-Linux/sourceos-spec#94, SourceOS-Linux/sourceos-devtools#23, #50
mdheller added a commit to SocioProphet/agent-registry that referenced this pull request May 6, 2026
Adds .sourceos/manifest.json so Agent Registry is scanner-visible for SourceOS/SociOS governed local-first agentic graph M1.

Declares the agent domain, sourceos.sync.agent-registry engine, critical policy class, signed_authority_required merge strategy, authority repos, audit events, and dangerous agent surfaces.

Related: SourceOS-Linux/sourceos-spec#86, SourceOS-Linux/sourceos-spec#94, SourceOS-Linux/sourceos-devtools#23, #15
mdheller added a commit to SocioProphet/memory-mesh that referenced this pull request May 6, 2026
Adds .sourceos/manifest.json so Memory Mesh is scanner-visible for SourceOS/SociOS governed local-first agentic graph M1.

Declares the memory domain, sourceos.sync.memory-mesh engine, high policy class, manual_review merge strategy, authority repos, audit events, and dangerous memory surfaces.

Related: SourceOS-Linux/sourceos-spec#86, SourceOS-Linux/sourceos-spec#94, SourceOS-Linux/sourceos-devtools#23, #18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant