Add typed delegation policy bridge #209

Merged

lost-rob0t merged 1 commit from rage/172-typed-delegation-policy into main

2026-08-25 12:12:24 +00:00

lost-rob0t commented

2026-08-25 11:18:39 +00:00

(Migrated from github.com)

Advances #172 without closing the parent issue.

Runtime invariant

Trusted KB prompt-command policy may select bounded generic subagent role/skill metadata, but it never grants capability, authority, a callable, or a second scheduler. The compiled policy must be fingerprinted and consumed only through the canonical rlm_subagent + ordinary tool mediation path.

TDD state

Exact red contract commit: c822204f3a1d39575dd25570e9a8262d76978f9c.

The red tests require:

optional prompt_role/2 + prompt_skill/2 metadata to compile into a fingerprinted delegation policy;
duplicate role metadata to fail explicitly;
conflicting host delegation options to fail instead of creating two policy authorities;
tampered compiled policy to fail fingerprint validation before registration;
the compiled policy to configure the existing rlm_subagent while its model-facing invocation remains query-only;
selected rlm-facts instructions to appear in the exact child planner request while capability possession remains narrowed.

Production implementation intentionally follows only after the red contract is observed.

Non-goals

no new scheduler or agent runtime;
no skill/role authority grants;
no product persona;
no arbitrary callable data;
no task-deadline work from #175.

Exact-head GitHub Actions is the execution oracle. Keep draft until the deterministic/runtime contract and all applicable required gates are green.

Advances #172 without closing the parent issue. ## Runtime invariant Trusted KB prompt-command policy may select bounded generic subagent role/skill metadata, but it never grants capability, authority, a callable, or a second scheduler. The compiled policy must be fingerprinted and consumed only through the canonical `rlm_subagent` + ordinary tool mediation path. ## TDD state Exact red contract commit: `c822204f3a1d39575dd25570e9a8262d76978f9c`. The red tests require: - optional `prompt_role/2` + `prompt_skill/2` metadata to compile into a fingerprinted delegation policy; - duplicate role metadata to fail explicitly; - conflicting host delegation options to fail instead of creating two policy authorities; - tampered compiled policy to fail fingerprint validation before registration; - the compiled policy to configure the existing `rlm_subagent` while its model-facing invocation remains query-only; - selected `rlm-facts` instructions to appear in the exact child planner request while capability possession remains narrowed. Production implementation intentionally follows only after the red contract is observed. ## Non-goals - no new scheduler or agent runtime; - no skill/role authority grants; - no product persona; - no arbitrary callable data; - no task-deadline work from #175. Exact-head GitHub Actions is the execution oracle. Keep draft until the deterministic/runtime contract and all applicable required gates are green.