fix(runtime): validate AgentProlog profile advertisement set #37

Closed

nsaspy wants to merge 0 commits from fix/zara-profile-closed-set into main

nsaspy commented

2026-09-19 13:28:04 +00:00

Owner

Summary

Tighten the optional AgentProlog profile boundary for lost-rob0t/zara#1046 S5.

Prolog-RLM remains the runtime authority and AgentProlog remains a downstream profile. The adapter no longer projects agentprolog from a malformed profiles descriptor merely because the array happens to contain the target string.

RED-first

0d01f8a6b52a883898aaa5905197e681750f64e3 adds the regression first. The exact-head Zara Runtime Profile workflow failed as expected.
172efc99d57078e80fed0ebc8493b90ecb652c65 implements closed-set validation.

Coverage rejects profile arrays containing null/empty/control-bearing identities and duplicate profile identities, while still allowing another well-formed profile alongside agentprolog.

Boundary

The change is limited to the AgentProlog profile validator and tests. It adds no runtime registry, provider/model/planner authority, Zara dependency, or dependency reversal. AgentProlog remains an optional profile over prolog-rlm.

Exact-head evidence

At 172efc99d57078e80fed0ebc8493b90ecb652c65:

Zara Runtime Profile: SUCCESS
full AgentProlog CI: SUCCESS (flake check, default-package build, default-app run)
review threads: none
base remains main@140f4f0091ffe6f933994fd89ab25276c6166309

Refs lost-rob0t/zara#1046.

## Summary Tighten the optional AgentProlog profile boundary for lost-rob0t/zara#1046 S5. Prolog-RLM remains the runtime authority and AgentProlog remains a downstream profile. The adapter no longer projects `agentprolog` from a malformed `profiles` descriptor merely because the array happens to contain the target string. ## RED-first 1. `0d01f8a6b52a883898aaa5905197e681750f64e3` adds the regression first. The exact-head `Zara Runtime Profile` workflow failed as expected. 2. `172efc99d57078e80fed0ebc8493b90ecb652c65` implements closed-set validation. Coverage rejects profile arrays containing null/empty/control-bearing identities and duplicate profile identities, while still allowing another well-formed profile alongside `agentprolog`. ## Boundary The change is limited to the AgentProlog profile validator and tests. It adds no runtime registry, provider/model/planner authority, Zara dependency, or dependency reversal. AgentProlog remains an optional profile over `prolog-rlm`. ## Exact-head evidence At `172efc99d57078e80fed0ebc8493b90ecb652c65`: - `Zara Runtime Profile`: SUCCESS - full AgentProlog `CI`: SUCCESS (flake check, default-package build, default-app run) - review threads: none - base remains `main@140f4f0091ffe6f933994fd89ab25276c6166309` Refs lost-rob0t/zara#1046.

nsaspy closed this pull request

2026-09-19 13:42:34 +00:00