Skip to content

Main Navigation Overview Docs Planning Changelog GitHub

Sidebar Navigation

Planning

Milestones

Realm

Requirements: Realm

Roadmap: Realm

Project State

Planning

API Surface

intel

milestones

Milestone v1.0 Audit (provisional)

Requirements Archive: v1.0 v1.0

Roadmap: Realm

01-01-PLAN

Plan 01-01 summary: FOUND-03 integration gate notes (hosts, AgentOS, Podman, OpenShell)

01-02-PLAN

01-02 Summary: integration gate notes (anda, omp, mcp, acp)

01-03-PLAN

Plan 01-03 summary: strict ESM scaffold and approved toolchain (FOUND-01, QUAL-01)

01-04-PLAN

Plan 01-04 summary: frozen state table and typed error catalogue (FOUND-02, QUAL-01)

01-05-PLAN

Plan 01-05 summary: frozen schemas and SCHEMA_INVALID validation wrapper (FOUND-02, QUAL-01)

Plan 01-06 summary: PODMAN_UNSUPPORTED_VERSION code and the Podman integration gate

Phase 1: Scaffold and Frozen Contracts - Context

Phase 1: Scaffold and Frozen Contracts - Discussion Log

Phase 1: Scaffold and Frozen Contracts - Pattern Map

Phase 1 QA Report (re-gate after rework): Scaffold and Frozen Contracts

Phase 1 Re-review: Scaffold and Frozen Contracts (after Rework 1)

Phase 1 Verification Report: Scaffold and Frozen Contracts

Walking Skeleton — Realm

01-scaffold-and-frozen-contracts

02-01-PLAN

Plan 02-01 Summary: Tracer slice (state machine, events, port, pinned root, canonicalizer, atomic replace, session store, lifecycle create)

02-02-PLAN

Plan 02-02 Summary: Policy, Mode Decision, Exec Gate, Display Mapping, Timeout

02-03-PLAN

Plan 02-03 Summary: Filesystem enforcement (glob, credential denial, locks, capped read and list, locked write, race test)

02-04-PLAN

Plan 02-04 summary: audit redaction, append-only audit log, tool-input gate gaps (AUD-01, TOOL-01)

02-05-PLAN

Plan 02-05 Summary: Lifecycle completion, budgets, lock release, no-host-env proof, doctor core

02-06-PLAN

Plan 02-06 Summary: Suite taxonomy gate and requirement-to-test coverage

Phase 2: Policy, State, and Filesystem Lockdown - Context

Phase 2: Policy, State, and Filesystem Lockdown - Discussion Log

Phase 2: Policy, State, and Filesystem Lockdown - Pattern Map

Phase 2 review: lifecycle, fs lockdown, audit

Phase 2: Policy, State, and Filesystem Lockdown — Verification Report

02-policy-state-and-filesystem-lockdown

03-01-PLAN

Plan 03-01 Summary: Backoff schedule and BridgePort contract

03-02-PLAN

Plan 03-02 Summary: Podman version parser, prerequisite probe, RuntimeConfig validation

03-03-PLAN

Plan 03-03 summary: Anda shape check and Phase 3 decision notes

03-04-PLAN

Plan 03-04 Summary: Libpod route table, closed client, fake libpod server

03-05-PLAN

Plan 03-05 Summary: OpenShell adapter, argv, policy document, fake

03-06-PLAN

Plan 03-06 summary: Anda bridge, fakes, handshake and reconnect

03-07-PLAN

Plan 03-07 Summary: AgentOS port, crash-loop supervisor, hardening verifier

03-08-PLAN

Plan 03-08 Summary: Session execution, down sweep, no-bypass proof

03-09-PLAN

Plan 03-09 Summary: Mutation gate and controller bridge wiring

03-10-PLAN

Plan 03-10 Summary: Doctor Phase 3 checks, gated live bodies, taxonomy

Phase 3: Container Runtime and Bridges - Context

Phase 3: Container Runtime and Bridges - Discussion Log

Phase 3: Container Runtime and Bridges - Pattern Map

Phase 3: Container Runtime and Bridges — Verification Report

03-container-runtime-and-bridges

04-01-PLAN

Plan 04-01 Summary: Egress guard core (RT-05, D-77, D-78)

04-02-PLAN

Plan 04-02 Summary: Sweep move, SessionStore.list, startup reaper (RT-08)

04-03-PLAN

Plan 04-03 Summary: OpenShell egress wiring, exec argv, runner types (RT-05, D-79, D-80, D-81, D-92, D-94)

04-04-PLAN

Plan 04-04 Summary: workspace handlers, audit phase marker, no-bypass guard (TOOL-03)

04-05-PLAN

Plan 04-05 Summary: bounded exec capture, egress plumbing at create, execution-layer argv refusals (TOOL-03, RT-05)

04-06-PLAN

04-06 Summary: dispatcher unit surface (TOOL-03, TOOL-04)

04-07-PLAN

Phase 04 Plan 07: Gated Live Bodies, Taxonomy, and Decision Record — Summary

Phase 4: Reaper, Egress Guard, and Shared Dispatcher - Context

Phase 4: Reaper, Egress Guard, and Shared Dispatcher - Discussion Log

Phase 4: Reaper, Egress Guard, and Shared Dispatcher - Pattern Map

Phase 4 Code Review Report

Phase 4: Reaper, Egress Guard, and Shared Dispatcher — Verification Report

04-reaper-egress-guard-and-shared-dispatcher

05-01-PLAN

Phase 05 Plan 01: Composition Root Summary

05-02-PLAN

Phase 05 Plan 02: Integration Decision Records Summary

05-03-PLAN

Phase 05 Plan 03: MCP Stdio Server Summary

05-04-PLAN

Phase 05 Plan 04: ACP v1 Stdio Adapter Summary

05-05-PLAN

Phase 05 Plan 05-05: Omp Extension Surface Summary

05-06-PLAN

Phase 05 Plan 06: Surface Equivalence and No-Logic Guard Summary

Phase 5: Omp Plugin, MCP, and ACP Surfaces - Context

Phase 5 Code Review Report

Phase 5: Omp Plugin, MCP, and ACP Surfaces — Verification Report

05-omp-plugin-mcp-and-acp-surfaces

06-01-PLAN

Phase 06 Plan 01: Control Channel Summary

06-02-PLAN

Phase 06 Plan 02: Host Snippets from Documented Fields — Summary

06-03-PLAN

Phase 06 Plan 03: Daemon Summary

06-04-PLAN

Phase 06 Plan 04: CLI Summary

06-05-PLAN

Phase 06 Plan 05: Doctor Control-Channel and AgentOS Items plus bin Entry Summary

06-06-PLAN

Phase 06 Plan 06: End-to-End Proof with Fakes Summary

Phase 6: CLI, Daemon, and Host Packaging - Context

Phase 6: CLI, Daemon, and Host Packaging — Verification Report

06-cli-daemon-and-host-packaging

Phase 7 Security Review: Realm

Phase 7 supply-chain review (QUAL-03)

Phase 7: Policy Reference and Security Review — Verification Report

07-policy-reference-and-security-review

v1.0-phases

On this page

07-policy-reference-and-security-review

Phase 7 Security Review: Realm
Phase 7 supply-chain review (QUAL-03)
Phase 7: Policy Reference and Security Review — Verification Report

Pager

Previous pagePhase 7: Policy Reference and Security Review — Verification Report

Next pagev1.0-phases

AGPL-3.0-only. Copyright (C) 2026 Spectrum Web Co/swcstudiospace.