Skip to content

application: admit evaluator-sealed research evaluations for strategy revisions - #56

Merged
0thernet merged 3 commits into
mainfrom
sponge/sealed-research-evaluation
Sep 23, 2026
Merged

0thernet merged 3 commits into
mainfrom
sponge/sealed-research-evaluation

Conversation

@0thernet

Copy link
Copy Markdown
Member

Summary

Adds an opt-in sealed research evaluation admission lane for strategy-only revisions — the upstream contract Sponge V2's evolution lane was designed against (src/evolution/algal-verifier.ts in hraness/spongev2 already bridges this shape).

  • New records: algal.application-research-policy.v1 (frozen evaluator/harness/corpus/entrypoints/attempt bound), algal.application-research-corpus.v1, algal.application-research-request.v1, algal.application-research-report.v1, algal.application-research-evaluation.v1 — documented in spec/v1/application.md.
  • Opt-in profile: sealed-research-evaluation.v1 runtime profile + evaluationPolicy.research naming the frozen policy; either without the other is denied; research mode admits no schema migration and no pure-case activation evidence.
  • Candidate restriction: only the manifest of one admitted strategy entrypoint may change; all other revision fields are preserved byte-for-byte; new manifest must be retained, pure (input/const/fn/expr), interface-identical, and budget-non-widening.
  • Verifier seam: the host requires an explicitly supplied ApplicationResearchVerifier pinned to the policy's evaluator identity — bounded local verification of the signed report/journal/receipts, never provider execution under custody. No verifier, no research revision.
  • Deterministic gates recompute the verdict: ordered attempts for both roles on every frozen case, distinct resolvable receipts, no uncertainty, holdout pass, no regression, strict development improvement, bounded work/model calls. verifyApplicationResearchEvaluation re-derives and compares the stored verdict; activation re-verifies against the exact expected parent state and requires an accepted verdict naming the candidate revision.
  • Native: kernel parses the new records but admits no research verifier — the native policy host refuses research profiles/policy fields rather than granting implied authority (fail-closed, not half-implemented).

Verification

  • bun run check components: typecheck, eslint, 826 pass / 20 skip / 0 fail, docs-diagrams, site build.
  • Native: cargo fmt --check, clippy -D warnings, cargo test --workspace --locked (all green), cargo build.
  • bun scripts/application-parity.ts: 191 steps identical across TypeScript and native.
  • New src/application-research.test.ts: 6 tests covering signed-record verification, re-verification at activation, reopen, verifier-authority denial, candidate restrictions, all rejection reasons, forgery, and legacy policy bytes.

Test plan

  • bun run check
  • cargo fmt/clippy/test/build --locked
  • bun scripts/application-parity.ts
  • CI matrix (ubuntu + macos)

Generated with Devin

@vercel

vercel Bot commented Sep 23, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
algal Ready Ready Preview Sep 23, 2026 9:31am UTC

Request Review

… revisions

Adds an opt-in sealed research evaluation lane beside foundry evidence.
A revision selects it with the sealed-research-evaluation.v1 runtime
profile and an evaluation policy naming a frozen research policy
(evaluator, harness, corpus, admitted strategy entrypoints, per-case
attempt bound); either without the other is denied.

The candidate revision may change only the manifest of one admitted
strategy entrypoint, preserving every other field byte-for-byte; the
new manifest must be retained, pure, interface-compatible and
budget-non-widening. Admission requires an explicitly supplied verifier
pinned to the policy's evaluator identity and recomputes acceptance
deterministically: ordered attempts for both roles on every frozen case,
distinct resolvable receipts, no uncertainty, holdout pass, no
regression, strict development improvement and bounded work/model calls.
Activation re-verifies against the exact expected parent state; a stored
evaluation whose recomputed verdict differs is refused. Pure-case
evidence cannot activate under a research profile, and research mode
admits no schema migration.

The native kernel parses the new records but admits no research
verifier: the native policy host refuses research profiles and research
policy fields rather than granting implied authority.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
@0thernet
0thernet merged commit 83e1abd into main Sep 23, 2026
10 checks passed

This branch was successfully deployed

1 active deployment
Preview aabad771 Deployed Sep 23, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant