872a53a3c7
feat: add T0-T6 shell tier context and governance layer mapping
...
gsh is the T2 Operator Runtime binary per DESIGN-TYPED-SHELL-HIERARCHY-0001.
Added shell tier context, NO_NEW_PRIVS enforcement note, and
Free/Observed/Governed → L1/L2/L3 governance layer mapping.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Tyler J King <tking@guildhouse.dev>
2026-05-28 09:31:47 -04:00
Tyler J King
3a2ed1ed42
feat: gsh governed shell — design exploration
...
DESIGN.md: complete architecture exploration for gsh,
the GCAP governed shell binary.
Two modes:
Machine: headless JSON I/O, GSAP AC consumption,
CR posting, exit code governance mapping.
Auto-detected: no TTY → machine mode.
What SK plugin and Logic Apps need now.
Human: interactive, [governed] prompt,
inline elevation, session-level AC.
What Sam needs for daily ops.
Architecture: gsh binary + libgsh library.
common/: AC validation, CR posting, Chronicle env.
machine/: headless executor.
human/: reedline shell, prompt, interceptor.
6 open design questions documented.
MVP: machine mode first (~200 lines Rust).
Before building: resolve Q2 (session vs per-command AC)
and Q6 (full shell vs bash wrapper).
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-30 23:20:27 -04:00
