Skip to content

docs: point org-contract-map at wasmagent-protocol as canonical SSOT - #131

Merged
telleroutlook merged 1 commit into
mainfrom
protocol-ssot-contract-map
Jul 27, 2026
Merged

docs: point org-contract-map at wasmagent-protocol as canonical SSOT#131
telleroutlook merged 1 commit into
mainfrom
protocol-ssot-contract-map

Conversation

@telleroutlook

Copy link
Copy Markdown
Contributor

Root cause

docs/org-contract-map.md calls itself "the authoritative reference — individual repo CLAUDE.md files should agree with this table", but it was last updated 2026-07-21, two days before wasmagent-protocol was created (2026-07-23) as the canonical source of truth for all cross-repo schemas.

The stale map still listed wasmagent-js, agent-trust-infra, symkernel, and bscode as canonical schema owners and never mentioned wasmagent-protocol at all. It was therefore actively directing downstream repos to keep local schema copies — the exact drift wasmagent-protocol exists to prevent.

An org-wide audit (2026-07-27) found real drift traceable to this: trace-pipeline (7 forked schemas + local-only fields), agent-trust-infra (agentbom/mcp-posture copies), open-agent-audit (trust-passport copy + a competing schemas/index.json), and wasmagent-js (generated aep-record copy). Follow-up issues track each repo's cleanup.

Change

  • All cross-repo schemas now have wasmagent-protocol as the canonical source, with versions taken from its schemas/index.json.
  • The old owner column becomes Domain steward (design ownership only) — stewards propose changes through the protocol contract-change process; the JSON lives only in wasmagent-protocol.
  • New explicit repo-local schema table for single-consumer schemas that intentionally stay local (EpochEvidenceBundle, training records, audit report, FAEP, bench-task, admission decision).
  • Coupling rules tightened: never copy/fork schema JSON; if a package is unavailable, vendor verbatim from the published package + add a CI drift gate (symkernel's make sync-schemas is the reference); no local-only field extensions.

The contract map (self-described 'authoritative reference') was last updated
2026-07-21, before wasmagent-protocol was created (2026-07-23) as the canonical
source of truth for all cross-repo schemas. It still listed wasmagent-js,
agent-trust-infra, symkernel, and bscode as canonical schema owners and had no
mention of wasmagent-protocol — so it was actively directing downstream repos to
keep local schema copies, causing drift.

Rewrite so that:
- All cross-repo schemas are owned by wasmagent-protocol (single source), with
  the versions from its schemas/index.json.
- The old 'owner' becomes 'Domain steward' (design ownership), which proposes
  changes through the protocol contract-change process; the JSON lives only in
  wasmagent-protocol.
- Explicit repo-local schema table (single-consumer, intentionally not centralized).
- Coupling rules updated: never copy/fork schema JSON; vendor verbatim + CI drift
  gate if a package is unavailable (symkernel make sync-schemas as reference); no
  local-only field extensions.
@telleroutlook
telleroutlook merged commit 215aedd into main Jul 27, 2026
1 check passed
@telleroutlook
telleroutlook deleted the protocol-ssot-contract-map branch July 27, 2026 00:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant