Repository navigation
ADR-0025 grilled and locked (Accepted); Phase 6 planned, four issues filed - #89
Merged
Merged
Conversation
…filed Four decisions locked: (1) ADR-0009's 'a human is always the actual gate' stays absolute - auto-decide is a new, separate, opt-in layer, never the default, handling both directions (confident allow, confident block-with-reason), fully audited either way. (2) Policy engine: AWS Cedar - formally-verified semantics, official Python bindings, no external binary, purpose-built for authorization; lives in ephor.policy, in core, since it's free/local unlike the paid-vendor line ADR-0023 drew around ClaudeCritic. (3) The proxy is real v1 scope, not deferred - at least one working integration ships in this wave. (4) Positioning: 'the open-source, self-hostable, provably-exactly-once alternative to Salus' - a claim to more provable rigor on specific axes (openness, chaos-tested exactly-once, a scored security benchmark, formally-verified policy semantics), not a claim to more maturity or integrations than a funded team with real customers. ROADMAP gets a new Phase 6, sequenced: 6.1 the Cedar policy engine (#85), 6.2 the opt-in auto-decide layer on ephor.approvals (#86), 6.3 a synchronous decide-and-explain API - the actual retry-feedback loop (#87), 6.4 the OpenAI-compatible proxy shim (#88) - scoped as research first, not assumed, since the real question (how a pure base_url swap stops client-side tool execution) needs verifying against a real framework, not inferred from marketing copy. README's own positioning is untouched - it updates once phase 6 ships something to back it, not before.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Grills ADR-0025's four open questions with the maintainer, locking it to Accepted, and scopes the resulting work into a new Phase 6 in ROADMAP.md with four sequenced issues filed.
Answers
actor_role="policy"), never a silent default when the policy has no confident answer.ephor.policy, in core - free and local, not gated the wayClaudeCriticis.Phase 6, sequenced
ephor.policy, the Cedar-backed policy engine, in core.ephor.approvals.base_urlswap stops client-side tool execution, verified against a real framework's actual behaviour, not inferred from Salus's own marketing copy.README's own positioning is untouched - it updates once Phase 6 ships something to back it, not before.
No code changes -
docs/adr/0025-toward-open-source-salus.md,docs/adr/README.md,ROADMAP.mdonly.