6be95cf2f6
ARCHITECTURE.md: - D-024 sandbox isolation via unshare Linux user/mount/pid/net namespaces (probe-verified: in-ns uid=0, network isolated, no container runtime/sudo on box) - D-025 sandbox scope = coding IDE only (design/sim deferred to v0.4) - D-026 telemetry = WebSocket ingest + SQLite ordered event log (seq gap detection) - D-027 first persistence = SQLite, protocol-wrapped stores (Trace/Grade/Variant/Defense) - D-028 trace grading = deterministic digest features + LLM rubric (LLM never sees raw trace) - D-029 variant generation = seeded template instantiation, seed persisted - D-030 voice = provider-agnostic mock-first STT/TTS + browser fallback (D-014 mirror) - D-031 extend ai-service (no new apps); D-032 single-box 1-5 concurrent sandboxes - New engine component tables + v0.3 build order PERSONAS.md (lead-developer assessment): - new sandbox-engineer + voice-engineer custom personas (phase-specific) - backend-engineer territory extended to engine persistence/APIs; ai-engineer re-scoped to model-facing grading/variant/voice logic; security-auditor stays inactive (KYC deferred) A-101 corrected post-probe: bwrap absent -> unshare namespaces (verified) .gitignore: ignore SQLite data + sandbox runtime dirs ---ci--- phase: 0 milestone: v0.3 status: research ---/ci---