aaronrene / knowtation public
docs flow feat/flow-projection-pilot #7 / 18
aaronrene · 2 days ago · Jun 21, 2026 · Diff

docs(flow): freeze external-agent gate contract (7A-L2a)

Scoped grants, vault tool allowlists, agent_bundle shape, and seven-tier test matrix — implements FLOW-V0-SPEC §6 item 3; SD-5; no impl, gates OFF.

sha256:942476bd56572cb1ff995ab405afecd751e616ee014b01f475b640a5f32bc2ca sha
sha256:ddc893a78f664ab720f61c08635ba698634b3d7377fc0ad551bd60ae2fc69e69 parent
+38 symbols
sha256:d3cac85f3bf239611de752bdf6d79ab8bcfcfac90868c14c6c5426d88e8f48da snapshot
+38
symbols added
0
dead code introduced
Semantic Changes 38 symbols
~ docs/FLOW-EXTERNAL-AGENT-CONTRACT-7A-L2.md .md 38 symbols added
+ Flow External-Agent Gate — Canonical Contract (Phase 7A, Step 7A-L2a) section Flow External-Agent Gate — Canonical Contract (Phase 7A, Step 7A-L2a) L1–418
+ Design decision (recorded as SD-5) section 0. Design decision (recorded as SD-5) L74–91
+ Surfaces (triple-exposed when gate is ON — design only in 7A-L2a) section 1. Surfaces (triple-exposed when gate is ON — design only in 7A-L2a) L91–140
+ 1 Request — grant mint (flow_external_grant_mint) section 1.1 Request — grant mint (flow_external_grant_mint) L107–125
+ code[jsonc] variable variable code[jsonc] L109–118
+ flow_external_grant_mint/v0) section 1.2 Response — mint (knowtation.flow_external_grant_mint/v0) L125–140
+ code[jsonc] variable variable code[jsonc] L127–135
+ table section table L96–101
+ Acceptance (7A-L2a) section 10. Acceptance (7A-L2a) L380–396
+ flow_external_grant/v0 section 2. Scoped grant model — knowtation.flow_external_grant/v0 L140–192
+ 1 Grant record (durable metadata — pointer-safe) section 2.1 Grant record (durable metadata — pointer-safe) L142–172
+ code[jsonc] variable variable code[jsonc] L144–162
+ table section table L163–171
+ 2 Grant authorization headers (invoke + grant-scoped bundle fetch) section 2.2 Grant authorization headers (invoke + grant-scoped bundle fetch) L172–192
+ code variable variable code L178–184
+ Vault tool allowlist model section 3. Vault tool allowlist model L192–219
+ code[yaml] variable variable code[yaml] L196–208
+ table section table L209–216
+ external_tool skill-ref activation rules section 4. external_tool skill-ref activation rules L219–247
+ table section table L224–232
+ agent_bundle harness — rendered shape section 5. agent_bundle harness — rendered shape L247–309
+ rendered) section 5.1 Inner payload — knowtation.agent_bundle/v0 (inside projection.rendered) L254–294
+ code[jsonc] variable variable code[jsonc] L258–286
+ table section table L287–293
+ 2 Hosted projection read (gateway parity) section 5.2 Hosted projection read (gateway parity) L294–309
+ table section table L299–303
+ Import sandboxing (ratifies FLOW-V0-SPEC §6 item 3) import section 6. Import sandboxing (ratifies FLOW-V0-SPEC §6 item 3) L309–323
+ table section table L313–320
+ Posture / gating (default off) section 7. Posture / gating (default off) L323–337
+ table section table L325–332
+ Error taxonomy (opaque codes; no scope/id/secret leak) section 8. Error taxonomy (opaque codes; no scope/id/secret leak) L337–361
+ table section table L341–356
+ Seven-tier test matrix (what each tier proves — design only) section 9. Seven-tier test matrix (what each tier proves — design only) L361–380
+ table section table L368–377
+ Handoff notes (for 7A-L2b — Auto) section Handoff notes (for 7A-L2b — Auto) L406–418
+ Non-goals (7A-L2) section Non-goals (7A-L2) L396–406
+ Simple summary section Simple summary L39–53
+ Technical summary section Technical summary L53–74
Older feat(flow): 7A-L1b authoring write-back (propose facade + routes) sha256:ddc893a78f664ab720f61c08635ba698634b3d7377fc0ad551bd60ae2fc69e69 All commits Newer feat(flow): implement external-agent gate (7A-L2b) sha256:1f885dbfff4d37a90b778092ee8f9cfb63054528eb669897a6806b1e52e4a118

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:942476bd56572cb1ff995ab405afecd751e616ee014b01f475b640a5f32bc2ca --body "your comment"