merge: retain Phase 3 foundation and add local Sanctum aid

AGENTS.md

@@ -3,6 +3,7 @@
 - Never edit `.benchwork/` state files directly.
 - Use Benchwork MCP tools for canonical research changes.
 - Use native Codex tools for repository inspection, patches, shell, Git, and review.
+- Request network permission before using `gh` commands that access the GitHub API or other remote resources; local-only `git` inspection does not require it.
 - Keep review local by default. Do not disclose a diff or source to an external reviewer without explicit approval for the exact Review Request.
 - Run the smallest relevant tests after code changes.
 - Run `/review` or an equivalent independent review before completing a core change.

README.md

@@ -69,6 +69,12 @@ for repository and execution work, while the Benchwork plugin's MCP server
 controls canonical research state. Alpha Grimoire installation remains local
 and data-only; publisher signatures and remote distribution remain future work.
 
+Phase 3 includes published execution contracts and an additional experimental
+in-memory Job/Lease conformance aid. The aid does not execute processes or
+containers, schedule remote or GPU work, provide production Artifact Storage,
+or promote patches automatically. See the
+[Phase 3 local framework](docs/en/architecture/PHASE3_LOCAL_FRAMEWORK.md).
+
 ## Integrity model
 
 Benchwork fails closed when it detects an invalid schema, broken event chain,

docs/en/README.md

@@ -51,6 +51,7 @@ English is the canonical source for all Benchwork documentation.
 - [Command Surface and Agent Handoff](architecture/COMMAND_SURFACE.md)
 - [Open Grimoire](architecture/OPEN_GRIMOIRE.md)
 - [Integrity Repair](architecture/INTEGRITY_REPAIR.md)
+- [Phase 3 local framework](architecture/PHASE3_LOCAL_FRAMEWORK.md)
 
 ## Project
 

docs/en/ROADMAP.md

@@ -199,6 +199,10 @@ Task Capsule
 Remote Workers, cluster scheduling, automatic Provider invocation, and broad
 GPU support are non-goals for `0.4`.
 
+`LocalSanctumRuntime` is an additional in-memory conformance aid for a bounded
+Job/Lease lifecycle. Its `sanctum-local-*/0.1` records do not replace the
+RFC-0012 execution contracts or grant canonical scientific authority.
+
 ### Exit gate
 
 All five RFCs, executable Schemas and examples, threat-model review,

docs/en/architecture/PHASE3_LOCAL_FRAMEWORK.md

@@ -0,0 +1,41 @@
+---
+language: en
+canonical: true
+---
+
+# Phase 3 local framework
+
+Status: **experimental scaffold, not Phase 3 acceptance**.
+
+`LocalSanctumRuntime` is an in-memory conformance aid that models a bounded
+Job/Lease lifecycle without executing commands. It uses the independent
+`sanctum-local-*/0.1` records, not the RFC-0012 `execution-*/1.0` contracts or
+the production-facing local-execution contracts. It can issue a bounded
+`sanctum-local-worker-result/0.1` Proposal, but it cannot create a scientific
+Run, Artifact, Assessment, or Decision. Only a separately authorised Athanor
+transition may do that.
+
+## Implemented framework boundary
+
+- Task Capsule and Circle Sigils are bound when a Job is submitted.
+- A Job has a fenced, expiring Lease and a monotonic local lifecycle.
+- Expired Leases fail closed; stale completion is rejected.
+- Worker outputs are schema-bounded Proposals.
+- `sanctum-local-patch-proposal/0.1` records a patch's base and validation
+  evidence; it does not apply or promote the patch.
+
+## Explicitly deferred
+
+The following are intentionally `DEFERRED`, not implied by this framework:
+
+| Capability | Status |
+| --- | --- |
+| Process, container, filesystem, and network execution | `DEFERRED` |
+| Remote Workers and transport | `DEFERRED` |
+| Queueing, scheduling, quotas, and GPU allocation | `DEFERRED` |
+| Persistent or production Artifact Storage | `DEFERRED` |
+| Automatic patch application or promotion | `DEFERRED` |
+| Automatic conversion of a Worker Result into science | `FORBIDDEN` |
+
+These features require the corresponding Phase 3 RFC, threat model, and
+conformance evidence before implementation.

schemas/sanctum-local-job-0.1.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://benchwork.dev/schemas/sanctum-local-job/0.1",
+  "title": "Sanctum Local Job",
+  "description": "Experimental in-memory conformance record; not the RFC-0012 execution-job/1.0 contract.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "job_id", "task_capsule_sigil", "circle_sigil", "status", "attempt", "created_at"],
+  "properties": {
+    "schema_version": {"const": "sanctum-local-job/0.1"},
+    "job_id": {"type": "string", "pattern": "^JB-[A-Za-z0-9][A-Za-z0-9_-]*$"},
+    "task_capsule_sigil": {"$ref": "https://benchwork.dev/schemas/common-definitions/1.0#/$defs/sigil"},
+    "circle_sigil": {"$ref": "https://benchwork.dev/schemas/common-definitions/1.0#/$defs/sigil"},
+    "status": {"enum": ["PENDING", "CLAIMED", "RUNNING", "COMPLETED", "FAILED", "CANCELLED", "EXPIRED"]},
+    "attempt": {"type": "integer", "minimum": 0},
+    "created_at": {"type": "string", "format": "date-time"},
+    "worker_id": {"type": ["string", "null"]},
+    "lease_id": {"type": ["string", "null"]}
+  }
+}

schemas/sanctum-local-lease-0.1.json

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://benchwork.dev/schemas/sanctum-local-lease/0.1",
+  "title": "Sanctum Local Lease",
+  "description": "Experimental in-memory conformance record; not the RFC-0012 execution-lease/1.0 contract.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "lease_id", "job_id", "worker_id", "fencing_token", "status", "expires_at"],
+  "properties": {
+    "schema_version": {"const": "sanctum-local-lease/0.1"},
+    "lease_id": {"type": "string", "pattern": "^LS-[A-Za-z0-9][A-Za-z0-9_-]*$"},
+    "job_id": {"type": "string", "pattern": "^JB-[A-Za-z0-9][A-Za-z0-9_-]*$"},
+    "worker_id": {"type": "string", "pattern": "^WK-[A-Za-z0-9][A-Za-z0-9_-]*$"},
+    "fencing_token": {"type": "integer", "minimum": 1},
+    "status": {"enum": ["ACTIVE", "RELEASED", "EXPIRED"]},
+    "expires_at": {"type": "string", "format": "date-time"}
+  }
+}

schemas/sanctum-local-patch-proposal-0.1.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://benchwork.dev/schemas/sanctum-local-patch-proposal/0.1",
+  "title": "Sanctum Local Patch Proposal",
+  "description": "An untrusted proposal from the experimental in-memory Sanctum conformance aid. Applying or promoting a patch requires separate explicit human authorization.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "proposal_id", "job_id", "base_sigil", "patch_sigil", "summary", "changed_files", "validation", "created_at"],
+  "properties": {
+    "schema_version": {"const": "sanctum-local-patch-proposal/0.1"},
+    "proposal_id": {"type": "string", "pattern": "^PP-[A-Za-z0-9][A-Za-z0-9_-]*$"},
+    "job_id": {"type": "string", "pattern": "^JB-"},
+    "base_sigil": {"$ref": "https://benchwork.dev/schemas/common-definitions/1.0#/$defs/sigil"},
+    "patch_sigil": {"$ref": "https://benchwork.dev/schemas/common-definitions/1.0#/$defs/sigil"},
+    "summary": {"type": "string", "minLength": 1},
+    "changed_files": {"type": "array", "uniqueItems": true, "items": {"type": "string", "minLength": 1}},
+    "validation": {"type": "array", "items": {"type": "string", "minLength": 1}},
+    "created_at": {"type": "string", "format": "date-time"}
+  }
+}

schemas/sanctum-local-worker-result-0.1.json

@@ -0,0 +1,21 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://benchwork.dev/schemas/sanctum-local-worker-result/0.1",
+  "title": "Sanctum Local Worker Result Proposal",
+  "description": "An untrusted output from the experimental in-memory Sanctum conformance aid. Athanor acceptance is separate.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "job_id", "attempt", "worker_id", "lease_id", "status", "summary", "outputs", "produced_at"],
+  "properties": {
+    "schema_version": {"const": "sanctum-local-worker-result/0.1"},
+    "job_id": {"type": "string", "pattern": "^JB-"},
+    "attempt": {"type": "integer", "minimum": 1},
+    "worker_id": {"type": "string", "pattern": "^WK-"},
+    "lease_id": {"type": "string", "pattern": "^LS-"},
+    "status": {"enum": ["COMPLETED", "FAILED", "CANCELLED"]},
+    "summary": {"type": "string", "minLength": 1},
+    "outputs": {"type": "array", "items": {"type": "object", "additionalProperties": false, "required": ["schema", "uri", "blob_sigil"], "properties": {"schema": {"type": "string", "minLength": 1}, "uri": {"type": "string", "minLength": 1}, "blob_sigil": {"$ref": "https://benchwork.dev/schemas/common-definitions/1.0#/$defs/sigil"}}}},
+    "produced_at": {"type": "string", "format": "date-time"}
+  },
+  "allOf": [{"if": {"properties": {"status": {"const": "COMPLETED"}}}, "then": {"properties": {"outputs": {"minItems": 1}}}}]
+}