16 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
cayce	2423cd10b8	audit: pin audited commit d500d88 + disclose lint-gate gap and fix	2026-10-19 22:04:34 +00:00
cayce	d500d88870	Merge PR #7: lint-fix — make check fully green (E501/F841/F821/E731) ... Closes the gate gap flagged during final verification: prior per-branch runs read ruff tail lines incorrectly. This commit is the audited one.	2026-10-19 22:03:55 +00:00
cayce	a282aedb94	lint: wrap long lines (E501), fix F841/F821/E731 — make check fully green ... All 32 findings resolved: regex literals kept single-line with noqa (pattern IS the reviewed artifact), HTML rows string-concatenated for line length, walrus tuple in BIP-340 verify split into named generator, unused pytest import dropped. No behavior changes; 44/44 tests pass. Full-gate discipline restored: ruff exit 0.	2026-10-19 22:03:53 +00:00
cayce	abbaf7e4e2	Merge PR #6: audit — AUDIT.md for operator review	2026-10-19 21:58:47 +00:00
cayce	6d77b3eff6	audit: AUDIT.md for operator review ... Component map + data flow, every external call (where/what/trigger), human-gate vs AUTONOMOUS_MODE matrix, env+permissions per component, pinned deps with purpose, known risks (8, each with mitigation), test+stack instructions. Audited-commit hash lands in the issue.	2026-10-19 21:58:46 +00:00
cayce	3f07362b7a	Merge PR #5: monitor ... Static status page with privacy assertions and full escaping. 44 tests green.	2026-10-19 21:57:32 +00:00
cayce	f61372e28e	monitor: static status page — health, queue, gates, audit tail ... - self-contained HTML (no external assets/JS), everything html-escaped - daemon health from daemon_runs (last status + last run per daemon) - proposal queue counts by state; human-gate counters (mail drafts awaiting approval, content draft/approved) - audit tail: actor/action/result only — no detail payloads, no addresses, no subjects, no content bodies (tests assert the negatives) - DaemonRun bookkeeping like every other daemon tests: 3 new (sections render, leak-negatives, XSS escape) — 44 total	2026-10-19 21:57:31 +00:00
cayce	25c7db3a31	Merge PR #4: publisher ... Themed calendar + NIP-01 nostr (deterministic schnorr, self-verify), FB/IG adapters disabled by default, hard human gate. 41 tests green.	2026-10-19 21:54:48 +00:00
cayce	aabd6bafc7	publisher: themed calendar, NIP-01 nostr adapter, gated brand images ... - calendar: one draft per theme/channel (idempotent), rotated schedule - human gate: approve() audited; AUTONOMOUS_MODE has no effect here by design - nostr (primary): in-repo NIP-01 client (D4) — canonical serialization, sha256 id, BIP-340 schnorr sign via coincurve with zero aux randomness (deterministic), pure-python reference verification before publish, per-relay publish with isolated errors, event id stored as post_ref - facebook/instagram adapters: exist but refuse to run unless explicitly enabled via env (default deployment never touches Meta) - images: Pillow brand templates (bh gold / hc orange), 1080x1350, template-driven typeset design (not AI-generated media) - failure isolation: config errors audited, item stays approved tests: 12 new (event roundtrip+tamper, determinism, key validation, calendar idempotence, approve gate, nostr happy path, future schedule, clean config failure, disabled meta adapters, image render) — 41 total	2026-10-19 21:54:39 +00:00
cayce	15072a0cd2	Merge PR #3: mail-negotiator ... IMAP classification (rules + optional LLM), conservative needs_review, reply drafts gated on explicit human approval, SMTP approved-only, message-id threading, full audit chain. 29 tests green.	2026-10-19 21:47:29 +00:00
cayce	5b259bc663	mail-negotiator: classify merchant replies, draft gated, audited sends ... - IMAP poll (UNSEEN, stdlib imaplib) -> parse (bare address via email.utils) - threading: In-Reply-To -> outbound sent-draft message-id -> proposal - classify: deterministic rules; optional LLM behind provider interface; below-threshold confidence -> needs_review (never guessed) - unthreadable approvals flagged needs_review (suspicious by definition) - merchant_status recorded on proposal detail; proposal lifecycle untouched - reply drafts generated from templates (drafted), NEVER auto-sent - SMTP sends only draft_status=approved (human approve_draft, audited); sent drafts store their Message-ID for future threading - idempotent on Message-ID; DaemonRun wrapper for monitor tests: 9 new (classification rules, threshold->review, threading, idempotence, blocked send without approval, approve->send->audit chain, double approve) — 29 total passing	2026-10-19 21:47:18 +00:00
cayce	1b2c3cc1cf	Merge PR #2: scanner + executor ... Discovery (read-only) + approval-gated execution with plugin registry, audited autonomy policy, retry-then-fail. Gate: ruff clean, 20 tests green, migration smoke ok, no leaks (full history).	2026-10-19 21:42:41 +00:00
cayce	73ccdf7bdf	scanner + executor: discovery files proposals; execution gated on approval ... scanner (read-only): - sources from CAYCE_OPS_SCANNER_SOURCES JSON (rss + page types), stdlib only - keyword scoring -> risk_score; kind via heuristics (affiliate/partnership/content_gap) - idempotent: sha1 dedupe_key; repeated scans skip existing - every proposal audited (actor daemon:scanner); source errors recorded, never fatal executor (human gate): - approve/reject audited with operator identity; only proposed -> approved - AUTONOMOUS_MODE=true adds exactly one path: policy auto-approval (kinds allowlist + daily cap, actor auto:policy) — DECISIONS D5 - plugin registry by kind; unknown kinds fall back to log_action (D9) - retries with max_attempts, then failed; every transition audited - http_post plugin inert unless CAYCE_OPS_ENABLE_HTTP_ACTIONS=true tests: 13 new (dedupe, keyword filter, autonomy bounds, retry-then-fail, blocked http_post, fallback plugin) — 20 total passing	2026-10-19 21:42:34 +00:00
cayce	00fa3777ab	Merge PR #1: skeleton — structure, schema, CI, deploy ... Component wiring, ORM schema + state machines, env-only config, alembic 0001, Typer CLI, CI (ruff/pytest/alembic/gitleaks), compose + systemd, DECISIONS D1-D9. Gate: make check green (ruff 0 errors, 7 tests pass, migration smoke ok, no leaks).	2026-10-19 21:38:06 +00:00
cayce	34a5f331ac	skeleton: package, schema, config, CLI, alembic, CI, deploy, docs ... - cayceops core: env-only config (CAYCE_OPS_*), engine/session, ORM models with state machines (proposal/mail/content) and audited writes - provider-agnostic LLM interface (null provider default, stdlib openai-compat) - Typer CLI with lazy component loading (scanner/executor/maild/publisher/monitor) - alembic 0001 initial schema; sqlite-portable JSON columns - tests: 7 passing on throwaway sqlite; fixtures invented, never real data - ci: ruff + alembic smoke + pytest + gitleaks(full history) in .gitea/workflows + .github/workflows; local gate = make check - deploy: docker-compose (postgres 16) + hardened systemd units/timers - docs: DECISIONS D1-D9; README project (grant text retired)	2026-10-19 21:35:50 +00:00
cayce	dbabb26c22	OpenSats proposal v1 — Cayce autonomous entity v1	2026-10-19 19:29:50 +00:00