coreci/executor-config

T

coreci-coo a208eb36d3 coreci-executor: add SPEC v0.1 (per-agent instantiation; naming convention §4)

2026-10-04 16:34:22 +00:00

feat: executor v0.3.0: multi-credential named relay (CRED_<NAME>_USER/SECRET env; full secret scrub)

2026-10-04 01:30:12 +00:00

executor skeleton v0.1.1: complete app/docs; Dockerfile git+curl; main.py fixes (syntax, credential injection, cleanup); prohibit_login verified (pack 2026-10-03-E2)

2026-10-03 17:17:40 -04:00

executor skeleton v0.1.1: complete app/docs; Dockerfile git+curl; main.py fixes (syntax, credential injection, cleanup); prohibit_login verified (pack 2026-10-03-E2)

2026-10-03 17:17:40 -04:00

tools/coreci-executor

coreci-executor: add SPEC v0.1 (per-agent instantiation; naming convention §4)

2026-10-04 16:34:22 +00:00

.gitignore

executor skeleton v0.1.1: complete app/docs; Dockerfile git+curl; main.py fixes (syntax, credential injection, cleanup); prohibit_login verified (pack 2026-10-03-E2)

2026-10-03 17:17:40 -04:00

allowlist.yaml

allowlist: own-home AUTO_RUN for coreci-cpo + coreci-cairo (onboarding step 5; enables first-run acceptance jobs)

2026-10-04 04:59:37 +00:00

compose.yaml

Update compose.yaml

2026-10-03 21:41:01 +00:00

executor.env.example

executor skeleton v0.1.1: complete app/docs; Dockerfile git+curl; main.py fixes (syntax, credential injection, cleanup); prohibit_login verified (pack 2026-10-03-E2)

2026-10-03 17:17:40 -04:00

README.md

executor skeleton v0.1.1: complete app/docs; Dockerfile git+curl; main.py fixes (syntax, credential injection, cleanup); prohibit_login verified (pack 2026-10-03-E2)

2026-10-03 17:17:40 -04:00

README.md

coreci/executor-config — coreci-executor (Write Executor, Design v1.0)

Single governed write rail from Open WebUI agents to Gitea.

allowlist.yaml — policy engine config (AUTO_RUN vs NEEDS_APPROVAL; fail-closed)
compose.yaml + executor.env.example — deployment (secrets in .env only)
app/ — coreci-executor v0.1.1 (FastAPI)
docs/ — approval-UI spec, runbook, Open WebUI registration guide
logs/ — git-durable audit JSONL (one line per request event)

Governance: agent authors -> executor gates -> PO approves (NEEDS_APPROVAL) -> executor runs as coreci-executor (non-admin; collaborator-write ONLY on the repos granted in the deployment pack) -> audit + Discord notify. Secrets never in chat, repos, or tool calls — executor env vars only.