M1: Governed local-first agentic graph foundation

[mdheller]

Objective

Track M1 integration for the SourceOS/SociOS local-first agentic graph foundation.

This issue coordinates the initial estate-wide integration around the architecture introduced in PR #85.

M1 scope

• Treat SourceOS-Linux/sourceos-spec as the constitutional contract repo.
• Add contract schemas for the agentic graph foundation.
• Add .sourceos/manifest.json across primary implementation repos.
• Add validation/estate-scanning support in SourceOS-Linux/sourceos-devtools.
• Establish minimum contracts for SourceGraph, SourceChannel, SyncEngineManifest, AgentCapabilityLease, PolicyDecision, and AuditEvent.

Required schema work

• SourceOSRepoManifest.json
• SyncEngineManifest.json
• SourceChannelEnvelope.json
• SourceGraphWrite.json
• AgentCapabilityLease.json
• PolicyDecision.json
• AuditEvent.json

M1 repo manifest targets

• SourceOS-Linux/sourceos-spec
• SourceOS-Linux/sourceos-devtools
• SourceOS-Linux/sourceos-shell
• SourceOS-Linux/TurtleTerm
• SourceOS-Linux/agent-term
• SourceOS-Linux/agent-machine
• SourceOS-Linux/BearBrowser
• SocioProphet/agent-registry
• SocioProphet/policy-fabric
• SocioProphet/memory-mesh
• SocioProphet/prophet-workspace
• SocioProphet/sociosphere
• SocioProphet/meshrush
• SocioProphet/sherlock

Acceptance criteria

• PR Define local-first agentic graph foundation #85 merged or superseded by equivalent architecture docs.
• All M1 repos contain .sourceos/manifest.json.
• sourceos-devtools can scan manifests and report compliant, partial, invalid, or missing.
• Policy, memory, agent, shell, browser, relay, and workspace repos reference sourceos-spec as contract authority.
• High-risk sync surfaces declare policy class, merge strategy, and audit events.

Notes

This is coordination scaffolding only. Runtime rewrites should follow contract/schema validation, not precede it.

[mdheller]

TurtleTerm M1 work order

Could not create this directly in SourceOS-Linux/TurtleTerm because Issues are disabled in that repository.

Objective

Integrate TurtleTerm with the SourceOS/SociOS governed local-first agentic graph foundation.

TurtleTerm should become the terminal product surface for workspace-bound terminal state, safe shell profile sync, Neovim context, and agent handoff through SourceChannel.

Required work

• Add .sourceos/manifest.json.
• Declare TurtleTerm dangerous surfaces and audit events.
• Integrate with sourceos.sync.shell rather than inventing a separate shell sync model.
• Represent terminal panes, sessions, workspace bindings, and Neovim context as SourceGraph-compatible objects.
• Route agent handoff through Agent Registry capability leases.
• Route high-risk actions through SourceChannel and Policy Fabric.
• Ensure raw shell history and secret-bearing environment data are not synced by default.

Dangerous surfaces

• terminal.session.restore
• terminal.workspace.bind
• shell.profile.apply
• neovim.context.inject
• agent.handoff
• command_template.apply

Acceptance criteria

• TurtleTerm has a manifest that references SourceOS-Linux/sourceos-shell, SocioProphet/agent-registry, and SocioProphet/policy-fabric as authority layers.
• High-risk terminal actions use SourceChannel envelopes.
• Shell sync behavior follows SourceOS-Linux/sourceos-shell#8.
• .sourceos/manifest.json validates against the sourceos-spec manifest contract once available.

[mdheller]

Sherlock M1 work order

Could not create this directly in SocioProphet/sherlock because Issues are disabled in that repository.

Objective

Integrate Sherlock with the SourceOS/SociOS governed local-first agentic graph foundation.

Sherlock should explain graph writes, sync decisions, policy decisions, agent capability changes, memory lifecycle changes, shell/browser bridge requests, relay behavior, and quarantine events.

Required work

• Define audit ingestion fixtures for SourceAudit event classes.
• Define graph diff view requirements.
• Define policy explanation view requirements.
• Define quarantine inspection requirements.
• Define suspicious mutation detection requirements.
• Add search/index requirements for graph object metadata and audit events.
• Add .sourceos/manifest.json declaring owned schemas, observability surfaces, policy classes, dangerous surfaces, and audit events.

Required questions Sherlock should answer

• Why did this sync?
• Why was this blocked?
• Which agent changed this?
• Which device introduced this memory?
• Which policy won?
• Which relay carried this object?
• Which model/tool was used?
• What changed between graph revisions?
• What was quarantined?

Dangerous surfaces

• audit.export
• audit.redact
• graph.diff.privileged
• policy.decision.inspect
• memory.provenance.inspect
• relay.trace.inspect

Acceptance criteria

• Sherlock has fixtures for accepted, rejected, quarantined, and review-required events.
• Sherlock can explain policy reason codes and sync reason codes once emitted.
• .sourceos/manifest.json validates against the sourceos-spec manifest contract once available.

[mdheller]

Progress update: PR #94 supersedes closed PR #85

Opened SourceOS-Linux/sourceos-spec#94 with the expanded M1 contract scope.

Added in PR #94

Docs:

• docs/architecture/local-first-agentic-graph.md
• docs/security/agentic-sync-threat-model.md
• docs/specs/sync-engine-registry.md
• docs/specs/sourcechannel.md
• docs/integration/repo-map.md

Schemas:

• schemas/SourceOSRepoManifest.json
• schemas/SyncEngineManifest.json
• schemas/SourceChannelEnvelope.json
• schemas/SourceGraphWrite.json
• schemas/AgentCapabilityLease.json
• schemas/AuditEvent.json

Fixtures / manifest:

• .sourceos/manifest.json
• examples/sourceos-repo-manifest.json
• examples/sync-engine-manifest.json
• examples/sourcechannel-envelope.json
• examples/agent-capability-lease.json
• examples/audit-event.json

Notes

• PR Define local-first agentic graph foundation #85 was closed after the branch was temporarily reset to current main.
• PR Define agentic graph foundation contracts #94 is the active replacement.
• One SourceGraphWrite example fixture was deferred because the connector safety layer blocked that synthetic fixture write; the schema itself is included.
• PR Define agentic graph foundation contracts #94 is additive but currently non-mergeable because main moved again while the branch was being rebuilt. Next practical step is either update/rebase the branch locally or let the normal merge flow handle reconciliation.

M1 state

SourceOS-Linux/sourceos-spec now has the first .sourceos/manifest.json and contract schemas needed for downstream repo manifests and sourceos-devtools validation.