Skip to content

docs: agent-authorization thinking, agent-wallet ADR, roadmap v1-honest - #64

Merged
hellno merged 1 commit into
mainfrom
hellno/agent-session-keys-audit
Jun 15, 2026
Merged

docs: agent-authorization thinking, agent-wallet ADR, roadmap v1-honest#64
hellno merged 1 commit into
mainfrom
hellno/agent-session-keys-audit

Conversation

@hellno

@hellno hellno commented Jun 15, 2026

Copy link
Copy Markdown
Owner

Summary

Docs-only. Adds the agent-authorization thinking doc (the three authority models, the first-demo focus, what is deferred and why, the trust invariants) and ADR-0002 recording the agent-wallet / session-keys positioning (deferred until after the first agent demo and an audit), and reconciles roadmap.md to be v1-honest (limits are software-enforced, not chain-enforced; EIP-7702 session keys moved to LATER). It came out of a /plan-ceo-review that cut scope to one concrete first demo (auto-shield, LLM in the loop), now tracked as #60 and #61.

Linked issue

No issue is closed by this PR. It is the decision record and orientation behind #60 (activity feed + see-and-stop view), #61 (agent loop), and ADR-0002.

Definition of Done

Docs-only change — no .rs, Cargo.toml, or Cargo.lock is touched (the diff matches nothing in \.(rs|toml|lock)$), so the Rust build/test gates are not applicable and were not run.

  • No new or changed dependencies in Cargo.toml / Cargo.lock — confirmed, none touched
  • cargo fmt --all --check — N/A (no Rust changed)
  • just check (clippy -D warnings) — N/A (no compilable code changed)
  • cargo test --workspace — N/A (no compilable code changed)
  • Visual/UI follows DESIGN.md — N/A, no UI change (the docs describe the amber/cyan model, they do not change it)
  • Secrets stay in Zeroizing, never logged — N/A, no code change

Notes for reviewers

The map doc is deliberately the thinking only (three models, current focus, deferred + why, invariants); work items live in GitHub issues and build state in STATUS.md, so it does not mirror the tracker. ADR-0002 is marked Deferred, not Accepted, on purpose. The one change to an existing doc is the roadmap.md reconciliation, annotated rather than rewritten since it is a decision log.

- docs/agent-authorization-map.md: the three authority models, current focus
  (first demo = auto-shield, LLM in loop -> #60/#61), deferred work + why,
  invariants. Higher-level thinking, not a task tracker.
- docs/adr/0002-agent-wallet-and-session-keys.md: agent-wallet positioning
  (distinct agent address via #33 session keys); deferred until after the
  first agent demo + audit.
- docs/research/roadmap.md: reconcile to v1-honest -- limits are
  software-enforced, not chain-enforced; EIP-7702 session keys deferred.
@hellno
hellno merged commit 9747878 into main Jun 15, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant