Sync Boatstack from Intelligence Flow Labs @ fbb9ecffc548

CONTRIBUTING.md

@@ -2,7 +2,7 @@
 
 # Contributing
 
-Boatstack is a generated content distribution. Propose changes to workflow semantics, templates, evidence rules, or generated presentation in [Intelligence Flow](https://github.com/operatorstack/intelligence-flow/tree/9a3cafb4f5040ed787390607b7cd6ced843588ea/labs/12-product-engineering-loop).
+Boatstack is a generated content distribution. Propose changes to workflow semantics, templates, evidence rules, or generated presentation in [Intelligence Flow](https://github.com/operatorstack/intelligence-flow/tree/fbb9ecffc548440fadb5d32339115bd20166a29f/labs/12-product-engineering-loop).
 
 The Boatstack repository receives product/runtime changes through a generated pull request. Review the PR's `UPSTREAM.json`, tests, adapter diff, and context-size change; do not hand-edit generated output on `main`. `.github/workflows` is the exception: it is Boatstack's executable control plane, excluded from scheduled projection and changed only through a separate manually reviewed Boatstack PR.
 

UPSTREAM.json

@@ -12,7 +12,7 @@
   },
   "files": {
     ".gitignore": "a7079e923a776f14f1bb3a6aa0a11a133a8e1dfb35af020f327623357b7e3957",
-    "CONTRIBUTING.md": "c0ea4700fd74f0930812adde111a8719f13697963d027905f71a6251a68a548f",
+    "CONTRIBUTING.md": "e016bb241bf61fdc8e96cac4d1cac7a674c545a2e788abeac663ce4235316c3f",
     "README.md": "3ce3e95e511089b44e946a44b8d5f4f81d019ece5336db65b2cab1f9dc4d4dad",
     "assets/boatstack-journey.svg": "e465befc50c8ce30f3e07e8fd97012931beeb053392c8fbf38ad645023b3cc63",
     "assets/boatstack-mark.svg": "be1f984da1bfa69fa5d1f986d8343d21f7e20921b71db888c928b4d2e54b09b5",
@@ -161,6 +161,7 @@
     "boatstack/runtime_cache_test.go": "b981467ddc9f0f562da6bff5de7a80a9fe5a433a0317541d1e48df268546ac85",
     "boatstack/runtime_provenance_test.go": "1d52f1e6b0691cf4667729cc9b9f3c55c128f0aa3321f3a2843a9aa6fd0e73dc",
     "boatstack/safety.go": "e21cc46048e51ed973096a4c4f1c32908aff79cfba8f2f75a301c5f6521656c8",
+    "boatstack/safety_corpus_test.go": "6f39e7b286fef2cd948fdacaeffa07ba906a56b9f97cdffb6666963a76729a18",
     "boatstack/safety_test.go": "500ad53cd5e3a700553eb781d9eaf4028ae27478796759a76bfd57321fff5a7c",
     "boatstack/safety_update_publisher_test.go": "ed3f8187036623694dfe7c395cdae00fdae14609bab6124d1fdfc6fe73fa2196",
     "boatstack/skill_frontmatter.go": "73364df463ce828c2d005aab55f72bb92f7a34d99cf3f53d4e0cd5a4da9dbd0e",
@@ -187,10 +188,10 @@
     "docs/benchmark-corpus-audit.md": "f2d206fe8579a514f9da82b2c96c19b343ac004be67617e1bd34f0f8e0e5e6c6",
     "docs/benchmark-submission-audit.md": "9518abdd17690729c6423f87cab20418ed47b0915b5faa44b9ef975e9e9c3b79",
     "docs/configuration.md": "060775c73431f28bd16066bdf9e0f89034d2855c7ca0f5544f660d24b91211d0",
-    "docs/evidence-engineered-coding.md": "1e76e625f5e891abdc08384ef3fc91559232c9e8a43f2c64a61798990f122337",
+    "docs/evidence-engineered-coding.md": "82b129eeacdcea2ccfca0eeb579c412a0d3938e3413d0f57c7c953f55762f25f",
     "docs/generated-files.md": "437791765b0a4015032ae21d1a6618563cad92b7402819e4f963bf5ae16284a3",
     "docs/getting-started.md": "51c2823f21e35140d31e6d5083dc4b89fddd24721ac6acc474154a4da53ee9f8",
-    "docs/public-claims.json": "cfa12bb1b55a8d1a7a5e70565298caaae19151e972d31bb16820128dac92cb7f",
+    "docs/public-claims.json": "868026dabc8ae86dec955195d6f78aa45a5d74cb44ece1c873fa29e69ff8c8b1",
     "docs/public-surface.md": "713f7a050b5f339cf948299103ef3800417dccfecf2cc1a4166397ea6f978907",
     "docs/research-and-design.md": "8d78678108f0a6c924e1ff9b32c0f81aae9d1f779e0082843b6f99ad993ae2b6",
     "docs/safety.md": "7b9b5c515d36e683767ec8d3d9d6d119ac93650b2f629d351deadd4c600ed6a6",
@@ -204,7 +205,7 @@
     "labs/diagram-json/compiled/evidence.md": "1ba1c989ade070a8ef9a508fbd788d100d7292f2dbacbb2bce895468019f619d",
     "labs/diagram-json/compiled/tasks.json": "88f60851abf79d851e9fccc754ff3040034ae595306bc87d64784c19eb403e71",
     "labs/diagram-json/compiled/test-matrix.json": "424657ff505768e50fa113801fd8363364a18269d5297480907a993d44063a39",
-    "labs/diagram-json/plan.lock.json": "96fd7a684a7324c8443881e4defc991e25846f83f41eac6a027f3129337fb188",
+    "labs/diagram-json/plan.lock.json": "dc27d78e3c23888025cda5f56ce058e48e009584da08ea111d095b8ce2ccb29b",
     "labs/diagram-json/plan.md": "3cc4f533b8d69386deff16b3a594a3ba09d4c0c3db636cccd8c4380084ce6a51",
     "labs/diagram-json/questions.md": "74733b015002c8a6777c558e7e997fa48c94850b9bd39054fe9366c97ecf728d",
     "labs/diagram-json/request.md": "0808fc41c36779c404f4a3a121167da6e76cac56df526e70f9ed6d3e0d4c02ed",
@@ -321,13 +322,14 @@
     "release-notes/2026-07-27-constitutional-boundary-floor.md": "41514cbea53867c264e354f149638444ab0d80f64896b9cf720f3979ae78b3de",
     "release-notes/2026-07-27-coreachable-recovery.md": "6ffc6b0e9a7d46c0f99a64112813c33d19571c73d02e98ac5573924f1663fd54",
     "release-notes/2026-07-27-discoverable-planning-errors.md": "d8099d1a6cd1805c3fcd446d9fa95739dec93e57ff421ecf4f99562b143c9966",
+    "release-notes/2026-07-27-guard-dual-reward-corpus.md": "6bec0385c6c553f00517259821e502796ca1b1907aeab718a287560e3e0fa0d6",
     "release-notes/2026-07-27-invalid-delivery-block-actionable.md": "8fac8e3921e2285291703efa46e624b72cb5bac1b8492beca4c4b633abb5ba16",
     "release-notes/2026-07-27-read-only-inspection-pipelines.md": "0963286371e9a12592915c23a958dd013bf2a35e9fca6921691bc8bb3c3d8dc8"
   },
   "generator": "operatorstack/intelligence-flow:boatstack-distribution",
   "schema_version": 1,
   "source": {
-    "commit": "9a3cafb4f5040ed787390607b7cd6ced843588ea",
+    "commit": "fbb9ecffc548440fadb5d32339115bd20166a29f",
     "path": "labs/12-product-engineering-loop",
     "repository": "operatorstack/intelligence-flow"
   }

boatstack/safety_corpus_test.go

@@ -0,0 +1,115 @@
+package boatstack
+
+import (
+	"os"
+	"path/filepath"
+	"testing"
+)
+
+// The guard is a classifier, so it is graded like one — against an external corpus
+// on TWO axes (Guard-as-Benchmarked-Artifact):
+//
+//   - constitutional: real destruction that MUST block. This is the monotone floor —
+//     100% required, and a change may never regress it (a live destructive effect is
+//     never allowed for convenience).
+//   - routine: ordinary product work that MUST pass. This is the false-positive axis —
+//     the guard earns its keep by NOT blocking these. Tracked as a rate so the
+//     boat-terminal harness can grow the corpus and watch for drift.
+//
+// This is the corpus itself — a test, not a note. Extend it (from the boat-terminal
+// or by hand) as new destructive shapes and new routine idioms appear.
+type guardCase struct {
+	name      string
+	tool      string // "" => Bash command in `input`; otherwise a tool name
+	input     any    // command string, or a tool-input map
+	axis      string // "constitutional" | "routine"
+	wantBlock bool
+}
+
+func classifyCase(repo string, c guardCase) []SafetyFinding {
+	if c.tool == "" {
+		return ClassifyCommand(repo, c.input.(string))
+	}
+	return ClassifyTool(repo, c.tool, c.input)
+}
+
+func TestGuardCorpusDualReward(t *testing.T) {
+	repo := safetyTestRepo(t)
+	// A DDL file that a live client would execute (for the psql -f constitutional case).
+	if err := os.WriteFile(filepath.Join(repo, "migrate.sql"), []byte("DROP TABLE accounts;\n"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+
+	cases := []guardCase{
+		// --- constitutional: live destruction, MUST block (monotone floor) ---
+		{"psql-drop-inline", "", `psql -c "DROP SCHEMA public CASCADE"`, "constitutional", true},
+		{"psql-truncate", "", `psql -c "TRUNCATE TABLE accounts"`, "constitutional", true},
+		{"psql-unbounded-delete", "", `psql -c "DELETE FROM accounts"`, "constitutional", true},
+		{"psql-run-ddl-file", "", `psql -f migrate.sql`, "constitutional", true},
+		{"supabase-reset", "", `supabase db reset`, "constitutional", true},
+		{"prisma-reset", "", `prisma migrate reset --force`, "constitutional", true},
+		{"terraform-destroy", "", `terraform destroy -auto-approve`, "constitutional", true},
+		{"rm-rf-root", "", `rm -rf /`, "constitutional", true},
+		{"rm-rf-home", "", `rm -rf ~`, "constitutional", true},
+		{"git-reset-hard", "", `git reset --hard HEAD~1`, "constitutional", true},
+		{"git-force-push", "", `git push --force origin main`, "constitutional", true},
+		{"kubectl-delete-ns", "", `kubectl delete namespace production`, "constitutional", true},
+		{"docker-volume-rm", "", `docker volume rm data-volume`, "constitutional", true},
+		{"gcloud-sql-delete", "", `gcloud sql instances delete primary`, "constitutional", true},
+		{"aws-delete-snapshot", "", `aws rds delete-db-snapshot --db-snapshot-identifier b1`, "constitutional", true},
+		{"mcp-execute-sql-drop", "mcp__db__execute_sql", map[string]any{"query": "DROP TABLE users"}, "constitutional", true},
+
+		// --- routine: ordinary product work, MUST pass (false-positive axis) ---
+		{"git-add-migration", "", `git add migrate.sql`, "routine", false},
+		{"git-commit-mentions-drop", "", `git commit -m "add migration that will DROP TABLE stale"`, "routine", false},
+		{"git-diff-migration", "", `git diff --stat migrate.sql`, "routine", false},
+		{"git-restore-staged", "", `git restore --staged migrate.sql`, "routine", false},
+		{"git-status", "", `git status`, "routine", false},
+		{"cat-sql", "", `cat migrate.sql`, "routine", false},
+		{"recovery-status-jq", "", `boatstack-helper recovery-status --repo . | jq .next_operation`, "routine", false},
+		{"git-diff-wc", "", `git diff | wc -l`, "routine", false},
+		{"echo-hello", "", `echo hello`, "routine", false},
+		{"edit-note-mentions-ddl", "Edit", map[string]any{
+			"file_path": filepath.Join(repo, "notes.md"),
+			"content":   "Runbook: operator runs `psql -c \"DROP SCHEMA public CASCADE\"` off-hours.",
+		}, "routine", false},
+	}
+
+	var constTotal, constBlocked, routineTotal, routinePassed int
+	for _, c := range cases {
+		c := c
+		t.Run(c.axis+"/"+c.name, func(t *testing.T) {
+			blocked := len(classifyCase(repo, c)) > 0
+			switch c.axis {
+			case "constitutional":
+				constTotal++
+				if blocked {
+					constBlocked++
+				} else {
+					// A missed real destruction is a hard failure: the floor broke.
+					t.Errorf("CONSTITUTIONAL MISS — real destruction allowed: %s", c.name)
+				}
+			case "routine":
+				routineTotal++
+				if !blocked {
+					routinePassed++
+				} else {
+					t.Errorf("ROUTINE FALSE-BLOCK — ordinary work denied: %s -> %#v", c.name, classifyCase(repo, c))
+				}
+			default:
+				t.Fatalf("unknown axis %q", c.axis)
+			}
+		})
+	}
+
+	// Monotone floor: the constitutional axis must be 100%. The routine axis is
+	// reported so drift is visible; today it must also be 100% (all are fixed cases).
+	if constTotal == 0 || constBlocked != constTotal {
+		t.Fatalf("constitutional block rate %d/%d — the destruction floor regressed", constBlocked, constTotal)
+	}
+	if routinePassed != routineTotal {
+		t.Fatalf("routine pass rate %d/%d — a false-positive regressed", routinePassed, routineTotal)
+	}
+	t.Logf("guard corpus: constitutional %d/%d blocked (floor), routine %d/%d passed",
+		constBlocked, constTotal, routinePassed, routineTotal)
+}

docs/evidence-engineered-coding.md

@@ -146,6 +146,6 @@ Delivery and system improvement also remain separate. A failed task may suggest
 
 ## What is evidence-backed
 
-The current moves were derived from the Intelligence Flow benchmark corpus and product-repository studies. The generated source commit is [`9a3cafb4f5040ed787390607b7cd6ced843588ea`](https://github.com/operatorstack/intelligence-flow/tree/9a3cafb4f5040ed787390607b7cd6ced843588ea/labs/12-product-engineering-loop).
+The current moves were derived from the Intelligence Flow benchmark corpus and product-repository studies. The generated source commit is [`fbb9ecffc548440fadb5d32339115bd20166a29f`](https://github.com/operatorstack/intelligence-flow/tree/fbb9ecffc548440fadb5d32339115bd20166a29f/labs/12-product-engineering-loop).
 
 The evidence supports specific failure mechanisms and guardrails. It does not establish that Boatstack is optimal, that control-theory notation proves software quality, or that one workflow dominates every team. Those are evaluation questions, so the distribution preserves measurements, provenance, gaps, and negative results.

docs/public-claims.json

@@ -1,6 +1,6 @@
 {
   "schema_version": 1,
-  "source_commit": "9a3cafb4f5040ed787390607b7cd6ced843588ea",
+  "source_commit": "fbb9ecffc548440fadb5d32339115bd20166a29f",
   "statuses": ["verified", "observed", "still_being_evaluated"],
   "claims": [
     {
@@ -12,7 +12,7 @@
       "readable_evidence": "why-these-steps.md#portable-workflow-and-state",
       "implementation": ["../boatstack/export.go", "../boatstack/references/artifacts.md", "../boatstack/references/workflow.md"],
       "verification": ["../boatstack/export_test.go"],
-      "last_verified_version": "source:9a3cafb4f5040ed787390607b7cd6ced843588ea"
+      "last_verified_version": "source:fbb9ecffc548440fadb5d32339115bd20166a29f"
     },
     {
       "id": "human-decisions",
@@ -23,7 +23,7 @@
       "readable_evidence": "why-these-steps.md#human-decisions",
       "implementation": ["../boatstack/references/workflow.md", "../boatstack/plan.go"],
       "verification": ["../boatstack/plan_test.go", "../boatstack/planning_test.go"],
-      "last_verified_version": "source:9a3cafb4f5040ed787390607b7cd6ced843588ea"
+      "last_verified_version": "source:fbb9ecffc548440fadb5d32339115bd20166a29f"
     },
     {
       "id": "validation-provenance",
@@ -34,7 +34,7 @@
       "readable_evidence": "why-these-steps.md#validation-provenance",
       "implementation": ["validation-and-evidence.md", "../boatstack/plan.go"],
       "verification": ["../boatstack/plan_test.go"],
-      "last_verified_version": "source:9a3cafb4f5040ed787390607b7cd6ced843588ea"
+      "last_verified_version": "source:fbb9ecffc548440fadb5d32339115bd20166a29f"
     },
     {
       "id": "irreversible-operations",
@@ -46,7 +46,7 @@
       "readable_evidence": "why-these-steps.md#irreversible-operations",
       "implementation": ["safety.md", "../boatstack/safety.go", "../boatstack/hooks.go"],
       "verification": ["../boatstack/safety_test.go", "../boatstack/hooks_test.go"],
-      "last_verified_version": "source:9a3cafb4f5040ed787390607b7cd6ced843588ea"
+      "last_verified_version": "source:fbb9ecffc548440fadb5d32339115bd20166a29f"
     },
     {
       "id": "reviewer-ready-pr",
@@ -57,7 +57,7 @@
       "readable_evidence": "why-these-steps.md#reviewer-ready-pr",
       "implementation": ["../boatstack/pr.go", "getting-started.md"],
       "verification": ["../boatstack/pr_test.go"],
-      "last_verified_version": "source:9a3cafb4f5040ed787390607b7cd6ced843588ea"
+      "last_verified_version": "source:fbb9ecffc548440fadb5d32339115bd20166a29f"
     },
     {
       "id": "phase-scoped-delivery",
@@ -68,7 +68,7 @@
       "readable_evidence": "why-these-steps.md#phase-scoped-delivery",
       "implementation": ["../boatstack/delivery.go", "../boatstack/safety.go", "../boatstack/hooks.go", "../boatstack/references/workflow.md"],
       "verification": ["../boatstack/delivery_test.go", "../boatstack/pr_test.go"],
-      "last_verified_version": "source:9a3cafb4f5040ed787390607b7cd6ced843588ea"
+      "last_verified_version": "source:fbb9ecffc548440fadb5d32339115bd20166a29f"
     },
     {
       "id": "model-neutral-contract",
@@ -79,7 +79,7 @@
       "readable_evidence": "why-these-steps.md#model-choice-and-budget",
       "implementation": ["research-and-design.md", "../boatstack/references/workflow.md"],
       "verification": ["../boatstack/export_test.go", "../boatstack/planning_test.go"],
-      "last_verified_version": "source:9a3cafb4f5040ed787390607b7cd6ced843588ea"
+      "last_verified_version": "source:fbb9ecffc548440fadb5d32339115bd20166a29f"
     },
     {
       "id": "cross-model-failures",
@@ -90,7 +90,7 @@
       "readable_evidence": "why-these-steps.md#model-choice-and-budget",
       "implementation": ["research-and-design.md"],
       "verification": ["benchmark-corpus-audit.md", "benchmark-submission-audit.md"],
-      "last_verified_version": "source:9a3cafb4f5040ed787390607b7cd6ced843588ea"
+      "last_verified_version": "source:fbb9ecffc548440fadb5d32339115bd20166a29f"
     },
     {
       "id": "lower-cost-outcomes",
@@ -101,7 +101,7 @@
       "readable_evidence": "why-these-steps.md#model-choice-and-budget",
       "implementation": ["research-and-design.md"],
       "verification": ["benchmark-corpus-audit.md", "benchmark-submission-audit.md"],
-      "last_verified_version": "source:9a3cafb4f5040ed787390607b7cd6ced843588ea"
+      "last_verified_version": "source:fbb9ecffc548440fadb5d32339115bd20166a29f"
     },
     {
       "id": "git-worktree-activation",
@@ -112,7 +112,7 @@
       "readable_evidence": "why-these-steps.md#git-worktree-activation",
       "implementation": ["../boatstack/runtime_cache.go", "../boatstack/hooks.go"],
       "verification": ["../boatstack/runtime_cache_test.go", "../boatstack/hooks_test.go"],
-      "last_verified_version": "source:9a3cafb4f5040ed787390607b7cd6ced843588ea"
+      "last_verified_version": "source:fbb9ecffc548440fadb5d32339115bd20166a29f"
     },
     {
       "id": "visible-updates",
@@ -123,7 +123,7 @@
       "readable_evidence": "why-these-steps.md#visible-updates",
       "implementation": ["../boatstack/update.go", "../boatstack/init.go"],
       "verification": ["../boatstack/update_test.go", "../boatstack/init_test.go", "../boatstack/export_test.go"],
-      "last_verified_version": "source:9a3cafb4f5040ed787390607b7cd6ced843588ea"
+      "last_verified_version": "source:fbb9ecffc548440fadb5d32339115bd20166a29f"
     }
   ]
 }

labs/diagram-json/plan.lock.json

@@ -6,7 +6,7 @@
   "plan_path": "labs/diagram-json/plan.md",
   "plan_sha256": "3cc4f533b8d69386deff16b3a594a3ba09d4c0c3db636cccd8c4380084ce6a51",
   "schema_version": 1,
-  "source_commit": "9a3cafb4f5040ed787390607b7cd6ced843588ea",
+  "source_commit": "fbb9ecffc548440fadb5d32339115bd20166a29f",
   "source_plan_path": "labs/diagram-json/source-plan.md",
   "source_plan_sha256": "e10593ddaa7522ab80cc991d0a09399257139799e37f737794cd49d68a39985b",
   "spec_path": "labs/diagram-json/spec.md",

release-notes/2026-07-27-guard-dual-reward-corpus.md

@@ -0,0 +1,19 @@
+### The guard is graded against a corpus on two axes
+
+The guard decides what to block. Until now its correctness was checked case by case, so it was hard to
+say how well it separates real danger from ordinary work. This release adds a corpus that grades the
+guard the way a classifier is graded, on two axes at once.
+
+The first axis is the destruction floor. A set of genuinely destructive commands — a live database drop
+or reset, a client running a migration file, a recursive delete, an infrastructure destroy, a force
+push, a destructive cloud call, and a live SQL tool — must all be blocked, every time. This is a hard
+floor: it must stay at one hundred percent, and no future change may lower it.
+
+The second axis is false positives. A set of ordinary product actions — staging and committing a
+migration, diffing it, reading it, editing a note that mentions a keyword, and piping a status command
+into a filter — must all pass. This is what the guard exists to get right, and today it passes all of
+them.
+
+The corpus is the grader, and it is meant to grow. As new destructive shapes and new everyday idioms
+appear, they are added here, so the guard's separation of danger from routine stays measured rather than
+assumed.