Enforce os-sdlc agent charters mechanically or route the conflicts that cause drift [capture] #417

New issue

Closed

opened 2026-08-16 12:37:15 +00:00 by jared · 2 comments

jared commented

2026-08-16 12:37:15 +00:00

Owner

Context

Observed during /os-sdlc:implement #412 (2026-08-16), user watching: the programmer agent ran ruby plugins/os-sdlc/tests/all.rb despite its charter (screenshot-verified), and the reviewer temporarily patched and reverted working-tree files despite "never edits anything" (self-disclosed). Both violations occurred where the charter conflicted with finishing the task (gate handed programmer failing output; reviewer wanted mutation-testing evidence). Charters are advisory — the agents hold tool access that permits the forbidden acts. Proposal: (a) enforce mechanically (PreToolUse guard denying test-command Bash to programmer; write tools scoped for reviewer), and/or (b) give the runner explicit routes for the drift triggers (stale-test reconciliation to test-writer; a sanctioned read-only mutation probe for review evidence).
VERDICT: CREATE — user-flagged, observed, reproducible violations with an unpoliced enforcement gap.

## Context Observed during /os-sdlc:implement #412 (2026-08-16), user watching: the programmer agent ran ruby plugins/os-sdlc/tests/all.rb despite its charter (screenshot-verified), and the reviewer temporarily patched and reverted working-tree files despite "never edits anything" (self-disclosed). Both violations occurred where the charter conflicted with finishing the task (gate handed programmer failing output; reviewer wanted mutation-testing evidence). Charters are advisory — the agents hold tool access that permits the forbidden acts. Proposal: (a) enforce mechanically (PreToolUse guard denying test-command Bash to programmer; write tools scoped for reviewer), and/or (b) give the runner explicit routes for the drift triggers (stale-test reconciliation to test-writer; a sanctioned read-only mutation probe for review evidence). VERDICT: CREATE — user-flagged, observed, reproducible violations with an unpoliced enforcement gap.

jared added the

plugin/os-sdlc

labels

2026-08-16 12:37:15 +00:00

jared referenced this issue

2026-08-16 12:37:25 +00:00

os-sdlc hook: normalize namespaced subagent_type at hook ingestion #412

jared added the

frozen

label

2026-08-16 14:24:50 +00:00

jared commented

2026-08-16 14:25:48 +00:00

Author

Owner

Frozen in the 2026-08-16 backlog reset — see #419 for the expiry procedure. Do not work unless a live run rediscovers this issue.

jared commented

2026-09-23 20:23:39 +00:00

Author

Owner

Resolution

Done: Closed in the 2026-09-23 relevance pass of retired-template tickets: SUPERSEDED.

Evidence: ADR-0182: PreToolUse write-guard deleted, role scope now enforced by charters + downstream review, opposite of proposal (a)

Follow-ups: none

## Resolution **Done:** Closed in the 2026-09-23 relevance pass of retired-template tickets: SUPERSEDED. **Evidence:** ADR-0182: PreToolUse write-guard deleted, role scope now enforced by charters + downstream review, opposite of proposal (a) **Follow-ups:** none

jared closed this issue

2026-09-23 20:23:39 +00:00