coreci-cairo
4bd4f2b945
Per CEO instruction 2026-10-04 (skill authoring + shape-C design):
* SKILL.md — human + LLM contract for the send-mailbox-message skill
* send-mailbox-message.sh — reference shell implementation
(sender-side orchestration: gates + outbox commit + per-recipient
delivery-pack fan-out)
* delivery-pack.sh — template for per-recipient delivery packs
(target = recipient's own home/mailbox/inbox/)
* tests-T18-T30.md — test matrix: single-recipient, multi-recipient,
gate rejection (dlp/classification/recipient_acl), partial
delivery failure, retry, idempotency
* README.md — bundle index + parameter placeholder documentation
Design honours brief locked decisions [1]:
- Decision 2: outbox canonical sender record, inbox mirrored per
recipient (own inbox only — no cross-write)
- Decision 6: mailbox writes AUTO_RUN per recipient after v4.1
- Decision 7: append-only inheritance; this skill is additive
- Decision 8: naming convention coreci-<role>
- Decision 9: extend, don't duplicate (no SPEC edits)
Per-shape-C, per-recipient atomicity only — no cross-repo atomicity
claim (platform doesn't support it). Reply-is-ack back-channel per
CEO confirmation; recipients acknowledge via their own outbox
(decision 5 lifecycle [1]).
[1] CAIRO task brief - consolidated D1-D6
(per-home mailbox + read_targets parser)
coreci/executor-config — coreci-executor (Write Executor, Design v1.0)
Single governed write rail from Open WebUI agents to Gitea.
allowlist.yaml— policy engine config (AUTO_RUN vs NEEDS_APPROVAL; fail-closed)compose.yaml+executor.env.example— deployment (secrets in .env only)app/— coreci-executor v0.1.1 (FastAPI)docs/— approval-UI spec, runbook, Open WebUI registration guidelogs/— git-durable audit JSONL (one line per request event)
Governance: agent authors -> executor gates -> PO approves (NEEDS_APPROVAL) ->
executor runs as coreci-executor (non-admin; collaborator-write ONLY on the
repos granted in the deployment pack) -> audit + Discord notify.
Secrets never in chat, repos, or tool calls — executor env vars only.