2d88c9765b
Some checks are pending
CI / lint-and-test (push) Waiting to run
* Harden leoclean no-send staging runtime * Isolate GCP leoclean runtime adapters * Verify current-main leoclean context contracts * Constrain no-send operational contracts
168 lines
3.8 KiB
JSON
168 lines
3.8 KiB
JSON
{
|
|
"schema": "livingip.leocleanNoSendRuntimeContract.v1",
|
|
"runtime_mode": "gcp_staging_no_send",
|
|
"transport_authority": "absent",
|
|
"service_mode": "gateway_without_platform_adapters",
|
|
"handler_platform": "api_server",
|
|
"plugins": {
|
|
"allowed": [
|
|
{
|
|
"name": "leo-db-context",
|
|
"source": "user",
|
|
"tools": [],
|
|
"hooks": [
|
|
"post_llm_call",
|
|
"pre_llm_call"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"toolset": {
|
|
"name": "livingip-leoclean-nosend",
|
|
"allowed_tools": [
|
|
"skills_list",
|
|
"skill_view",
|
|
"terminal"
|
|
],
|
|
"terminal_commands": [
|
|
"context",
|
|
"decision-matrix-status",
|
|
"edges",
|
|
"evidence",
|
|
"list-proposals",
|
|
"propose-core-change",
|
|
"propose-edge",
|
|
"search",
|
|
"search-proposals",
|
|
"show",
|
|
"show-proposal",
|
|
"status"
|
|
],
|
|
"forbidden_tools": [
|
|
"cronjob",
|
|
"delegate_task",
|
|
"memory",
|
|
"process",
|
|
"send_message",
|
|
"skill_manage"
|
|
]
|
|
},
|
|
"profile": {
|
|
"template_entries": [
|
|
"bin",
|
|
"config.yaml",
|
|
"plugins",
|
|
"skills"
|
|
],
|
|
"required_runtime_entries": [
|
|
"SOUL.md",
|
|
"identity-lock.json",
|
|
"identity-manifest.json"
|
|
],
|
|
"allowed_runtime_state": {
|
|
"directories": [
|
|
"cache",
|
|
"cron",
|
|
"logs",
|
|
"memories",
|
|
"platforms",
|
|
"sessions",
|
|
"state"
|
|
],
|
|
"files": [
|
|
"channel_directory.json",
|
|
"gateway.pid",
|
|
"gateway_state.json",
|
|
"state.db",
|
|
"state.db-shm",
|
|
"state.db-wal"
|
|
]
|
|
},
|
|
"forbidden_entries": [
|
|
".env",
|
|
"BOOT.md",
|
|
"auth.json",
|
|
"gateway.json",
|
|
"hooks",
|
|
"processes.json",
|
|
"secrets"
|
|
],
|
|
"learning_policy": {
|
|
"automatic_memory_review_interval": 0,
|
|
"automatic_skill_review_interval": 0,
|
|
"memory_enabled": false,
|
|
"user_profile_enabled": false
|
|
},
|
|
"routing_policy": {
|
|
"cheap_model": "absent",
|
|
"smart_model_routing": false
|
|
}
|
|
},
|
|
"environment": {
|
|
"allowed_provider_credentials": [
|
|
"OPENROUTER_API_KEY"
|
|
],
|
|
"allowed_runtime_variables": [
|
|
"HERMES_HOME",
|
|
"PYTHONDONTWRITEBYTECODE",
|
|
"PYTHONNOUSERSITE",
|
|
"PYTHONSAFEPATH"
|
|
],
|
|
"forbidden_exact": [
|
|
"ALL_PROXY",
|
|
"BASH_ENV",
|
|
"BOT_TOKEN",
|
|
"ENV",
|
|
"GATEWAY_ALLOW_ALL_USERS",
|
|
"GATEWAY_ALLOWED_USERS",
|
|
"GOOGLE_APPLICATION_CREDENTIALS",
|
|
"HERMES_ENABLE_PROJECT_PLUGINS",
|
|
"HERMES_SESSION_PLATFORM",
|
|
"HTTP_PROXY",
|
|
"HTTPS_PROXY",
|
|
"LD_PRELOAD",
|
|
"PYTHONHOME",
|
|
"PYTHONPATH",
|
|
"TELEGRAM_BOT_TOKEN"
|
|
],
|
|
"forbidden_prefixes": [
|
|
"CLOUDSDK_",
|
|
"DINGTALK_",
|
|
"DISCORD_",
|
|
"EMAIL_",
|
|
"FEISHU_",
|
|
"HERMES_",
|
|
"LD_",
|
|
"MATRIX_",
|
|
"MATTERMOST_",
|
|
"SIGNAL_",
|
|
"SLACK_",
|
|
"SMS_",
|
|
"TELEGRAM_",
|
|
"TWILIO_",
|
|
"WEBCOM_",
|
|
"WEBHOOK_",
|
|
"WHATSAPP_"
|
|
],
|
|
"forbidden_suffixes": [
|
|
"_PASSWORD",
|
|
"_SECRET",
|
|
"_TOKEN",
|
|
"_API_KEY"
|
|
]
|
|
},
|
|
"database": {
|
|
"canonical_database": "teleo_canonical",
|
|
"runtime_role": "leoclean_kb_runtime",
|
|
"proposal_function": "kb_stage.stage_leoclean_proposal(text,text,text,text,jsonb)",
|
|
"direct_canonical_writes": "denied",
|
|
"direct_stage_table_writes": "denied",
|
|
"proposal_staging": "function_only",
|
|
"automatic_context_modes": [
|
|
"claim_evidence_challenge",
|
|
"review_only_candidate"
|
|
],
|
|
"unsupported_context_policy": "fail_closed"
|
|
},
|
|
"claim_ceiling": "This artifact proves reproducible source and a structurally no-send runtime surface. It does not prove live GCP IAM, Cloud SQL identity, model behavior, deployment, restart, parity, Telegram delivery, or production readiness."
|
|
}
|