Files
executor-config/allowlist.yaml
T
coreci-cairo 331809f014 executor-config: bump to v4.1; add MAILBOX_PATH_RE + Decision 6 exemption
Per CAIRO task brief 2026-09-26 [1] (D1-D6), Decision 6 mailbox
writes are ALWAYS AUTO_RUN against the sender's own home.
v4 did not implement this; v4.1 adds:

* MAILBOX_PATH_RE recognises <home-repo>/mailbox/(outbox|inbox)/<path>
  for both coreci-<role>/home (standard) and coreci/<role>/home
  (forward-compat).
* classify() extended with own-home gate: if every target is an
  own-home mailbox path and no non-mailbox write verb is present,
  classify AUTO_RUN.
* T18-T25 added; T8/T17 xfail preserved.
* deny_read_targets NOT implemented (per brief).

[1] CAIRO task brief - consolidated D1-D6
    (per-home mailbox + read_targets parser)
2026-10-04 17:58:12 +00:00

36 lines
1007 B
YAML

version: 4.1
# v4.1 (2026-10-04):
# - Append-only over v4. No schema breaks.
# - New MAILBOX_PATH_RE exemption in app/main.py: per-home mailbox writes
# (outbox/ + inbox/ under <agent>/home/mailbox/) classify AUTO_RUN
# when ALL targets are own-home mailbox paths. Encodes Decision 6 [1].
# - Cross-agent inbox mirror (CAIRO writes to coreci-coo/home/mailbox/inbox/)
# is still NEEDS_APPROVAL — explicit cross-agent grants land in v4.2.
# - Naming convention v2 preserved: agent = coreci-<role>.
defaults:
decision: NEEDS_APPROVAL
timeout_s: 900
read_targets:
- coreci/company
agents:
coreci-coo:
kinds:
bash_pack:
auto_run_targets:
- coreci-coo/home
coreci-executor:
kinds:
bash_pack:
auto_run_targets:
- coreci/executor-config
coreci-cpo:
kinds:
bash_pack:
auto_run_targets:
- coreci-cpo/home
coreci-cairo:
kinds:
bash_pack:
auto_run_targets:
- coreci-cairo/home