canon(architecture): the two-loop operating model (DRAFT — do not merge)#291
canon(architecture): the two-loop operating model (DRAFT — do not merge)#291git-repo-auth[bot] wants to merge 3 commits into
Conversation
Tier-1 canon frame: the collaboration loop (Operator<->CDO, decisions and ratifications, never code) and the production loop (gated agent pipeline, each stage consuming only ratified prior-stage output, every gate a fresh session), joined at the ratification seam. Design gates run the oddkit gauntlet as a refinement loop (findings fold back into the artifact before ratification); the build gate runs fresh-context validation plus tests. Reconciles with PR #288 (ratified-model-requires-reconciliation-and-enforcer), the model-operating-contract/four-modes/preflight, and the in-flight policy-precedes-build rule. Authored under, and passed through, the design gate it defines (oddkit_challenge; findings folded back). Captain's authorial voice — DO NOT MERGE without review of exact text.
Canon Quality — Frontmatter Schema ✅All 49 file(s) in Validator: |
Canon Quality — Homepage Surfacing ✅49 essay(s) scanned. Soft report — never blocks; the hard field gate is the Frontmatter Schema job. All published essays resolve to the homepage feed. Report: |
Canon Quality —
|
Canon Quality — P0010 Retrieval-Readiness
|
Epoch was stamped E0009 by inference; captain confirmed current epoch is E0010 (Flight Crew — costume->seat). Surgical single-field correction only.
Crew-model doc: kept 'captain' only in the two appositives that explicitly
define the operator<->CDO collaboration frame ('the human operator — the
captain —' and 'the human operator (the captain)'), where the crew metaphor is
the intended subject. Neutralized the 15 operational uses (rulings, the seam,
authorial-voice review) to 'operator', including captain-referring pronouns.
No rulings, thresholds, enforcement, or meaning changed.
1 participant
DRAFT — captain's pen. DO NOT MERGE until you review the exact text (authorial voice).
Adds one tier-1 canon document:
canon/architecture/two-loop-operating-model.md.What it encodes (captain-ratified model)
Loop 1 — the collaboration loop (Operator ↔ CDO). Direction, rulings, and ratifications flow down; translated intent and results flow back. Natural-language delegation, crew-not-clone. Produces decisions and ratifications, never code.
Loop 2 — the production loop (the agent pipeline), defined in policies. A gated pipeline: Director exploration → policies → gate; plan → PRDs → gate; build → gate; validate → gate. Each stage consumes only the ratified output of the prior stage; every gate spawns a fresh session so nothing self-certifies. Design gates run the oddkit gauntlet as a refinement loop — findings fold back into the artifact before ratification, so "clean" means findings were incorporated, not that none were found. The build gate runs fresh-context validation + tests.
The seam — ratification (bidirectional). Loop 2 gate outputs surface to Loop 1 for the captain's ruling; his rulings re-enter Loop 2 as the ratified inputs the next stage may consume. Nothing crosses except through ratification.
Template: enforceable-policy — WHAT / WHY / ENFORCEMENT / SCOPE / VERIFICATION, plus canon progressive-disclosure (blockquote + Summary) and a Confidence-and-Falsifiability section.
Reconciliation (extend, do not duplicate)
canon/constraints/ratified-model-requires-reconciliation-and-enforcer, DRAFT) — verified as the sibling filing the ARS-freeze lesson (reconciliation + enforcer). Different half of the same failure; cross-referenced, not duplicated.Self-application (it obeys the loop it defines)
Authored in Loop 1's mode; run through its own design gate —
oddkit_challenge(mode: canon-tier-1,governance_source: knowledge_base, non-blocking). Findings were folded back, not just recorded: prior-art reconciliation against "The Loop," a named-alternative + reversibility note in WHY, and the Confidence-and-Falsifiability section were all added in response to the challenge.Residuals / captain checks before merge
E0009by inference from the most-recently-observed canon; confirm current epoch.git attribution:
klappy <118073+klappy@users.noreply.github.com>.