cloudinit-bot
977d2a1d24
GRILL stage for v0.7. ci-griller red-teamed the plan across 9 axes + 7 specific probes. Overall verdict: CONDITIONAL PASS (confidence 0.72). 5 binding decisions applied to PLANS.md + ARCHITECTURE.md + oy-state + PROJECT.md: - D-086: P1 Factory functional for Phase-2 categories ONLY (FactoryAllowedPhases = [Phase2] in P1; P2 extends to [Phase2,Phase3,Phase4]); P1 simtest adds out-of-phase rejection negative case - D-087: PierCarriesVoice=false added as 12th locked const (was 11; now 12) in x/guild/types (FR-VOICE-6 mission-locked invariant) - D-088: lexicon_meta_cover uses new lexicon.CoverBannedTerms() helper (insurance/premium/claim/policy scoped to Cover surface, NOT project-wide); x/cover/firewall pinned to allow-list of routing destinations (string- equality check); optional x/pact insurance-like -> Cover-like doc-fix - D-089: StillKeeper satisfied by simtest-local stub (x/still NOT extended this milestone; x/still/keeper/ verified empty); x/bond -> x/cover CoverKeeper reverse edge added to dependency map (MsgDebitMABProceeds queries CoverKeeper.GetPoolReserveAccount; no import cycle, interface only) - D-090: Bill of Rights temporal-gap fix (RightID + 13 Waivable* consts + RightIsWaivable() + ValidateBasic gate land in P2, NOT P5 — closes the P2->P5 window where rights were waivable); Voucher cold-start fix (bond = max(10x avg, MinimumVoucherBond) — no zero-bond bypass); Standing- gate dual check (floor enforced at BOTH launch handler AND Params-amendment ValidateBasic); D-085 escalation window tightened to before P2 3 escalations to PO: D-085 (13th right identity, confidence 0.55), lexicon banned-term scope (griller recommends Cover-scoped helper), pen-test third party (this grill IS the self-administered review per oy-state §7 item 4). This grill IS the self-administered adversarial review (pen-test) per oy-state §7 remaining-open item 4. High/critical findings (D-090(1) temporal gap, D-088 lexicon paper tiger, D-090(2) Voucher cold-start) are remediated in P0 via binding decisions D-086..D-090. ---ci--- project: oy phase: 0 milestone: v0.7 status: grill ---/ci---
OpenYield
OpenYield is a jurisdiction-light, public-good mesh for real production — a protocol organized around Holders, Stands, and the Six Principles, designed to hold real value without the words or the shapes that invite capture. The mesh runs on OY Chain (Layer 1), a canonical state layer for the Bread unit, the Storage Pools (Stash, Vault, Root-Pool), Standing, Watcher attestations, and the Pact / Council / Partner surface. It is anti-greed by construction: Mission Lock fixes the Six Principles and fee covenant so no council can amend them, and the 8% coupon cap on bonds is a mission-locked ceiling, not a parameter.
The Six Principles
- Real value — the mesh holds real production, not speculation.
- Sustainability — fees are floored and capped; the protocol cannot drain its users.
- Mission-lock — the Six Principles and fee covenant are immutable; no council can amend them.
- Openness — anyone may join; the mesh is a public good.
- Ownership — Holders own their Stash and their Reach; custody is theirs.
- Self-service — a Holder can act without a custodian; the mesh is jurisdiction-light.
Bread unit & scale
The unit of value is Bread, scaled in 11 tiers: Grain → Crumb → Bread → Loaf → Batch → Cake → Bakery → Granary → Mill → Harvest → Earth.
Status
v0.6 (Nomad Web UI) — in progress. v0.5 shipped the Bearers Runtime
(simtest-grade keeper handlers for 8 x/ modules). v0.6 adds the project's
first UI: a Go html/template + HTMX prototype Web UI in web/ where a
visitor can sign up to be a Nomad (create a Reach + open a Stash) and
exercise basic functionality around Reach, Stash, Window, Standing, and
Bloom. All data is generated test fixtures — no real chain. See
.ciagent/oy/ROADMAP.md for the phase plan and .ciagent/oy/PROJECT.md
for governance.
Build & test
OpenYield is pure Go with zero external dependencies (go.mod has no
require lines; go 1.22). From the repo root:
go build ./...
go test ./...
Web UI
The Nomad Web UI (v0.6) is a Go html/template server with HTMX progressive
enhancement, served by a mock HTTP server in web/ that instantiates the
real x/*/types structs from in-memory fixtures. No node, no build step,
no real chain. To run it:
go run ./web
# opens on http://localhost:8080 (PORT env var overridable)
Five screens, all reachable from the home nav:
/reach— create a Reach (sign up to be a Nomad) + Reach list/detail/stash/{holderID}— Stash dashboard (Grain balance + Bread scale + 90-day maturity)/window— Window authorization (open/lifecycle/audit log)/standing/{reachID}— Standing + Freeholder signals progress/bloom/{stashID}— Bloom accrual view
HTMX is a single vendored JS file (web/static/htmx.min.js), NOT a Go
dependency — go.mod stays unchanged (G-006).
Docs
The docs site is MkDocs Material
(a build-only Python dep; not a Go dep — go.mod is unchanged). To
preview locally:
mkdocs serve
# or build to a static site/ dir:
mkdocs build
The site lives under docs/ (see mkdocs.yml for the nav). Publishing CI is
deferred to v0.4 (D-046); v0.3 ships the source.
Lexicon firewall
OpenYield bans 10 financial terms as standalone words (REQ-012) across all Go
source (x/**/*.go), all docs (README.md + docs/**/*.md), and all web UI
files (web/**/*.{html,js,go}). The banned terms are the words you would
expect a legacy financial institution to use; this README and the docs describe
them only by their safe replacements, so the firewall itself never trips.
The firewall is enforced in code by three sibling Go tests:
lexicon_meta_test.go(v0.2) — scansx/**/*.go.lexicon_meta_docs/lexicon_meta_docs_test.go(v0.3) — scansREADME.md+docs/**/*.md.lexicon_meta_web/lexicon_meta_web_test.go(v0.6) — scansweb/templates/**+web/static/**+web/**/*.go.
All three use lexicon.FindBannedTerm (word-boundary, case-insensitive), so
"OpenYield" is safe (word-boundary does not match the banned term inside an
identifier) but the standalone banned term is not — docs say "real
production" / "real return", and a Holder's identity is Holder /
Reach, never the banned word for a custodial position. See
docs/shared/lexicon.md for the glossary of safe replacements.
Governance
.ciagent/oy/PROJECT.md— full vision, decisions (D-0xx), assumptions..ciagent/oy/PLANS.md— phase plans (v0.1, v0.2, v0.3)..ciagent/oy/REQUIREMENTS.md— REQ coverage matrix..ciagent/oy/ROADMAP.md— release roadmap.