Files
admin/.tasks/policy.toml
vitya 949724729d task(agents-task-runner-vds-deploy): take + DRY_RUN validated + .admin claim-guard
- Take task to 🔴, create per-task file (was on board w/o file).
- DRY_RUN smoke passed end-to-end on this workstation (host task-runner :3000,
  one tick via POST/GET). Real shared-board read; preview candidate
  OpeItcLoc03/MoreThenCms/cms-maljarka-https-mode-bug-fix; no claim/spawn.
- Finding: .admin had NO policy.toml; claim gate ignores consult_policy, so the
  HARD ".admin excluded from autonomous claim" guard was UNENFORCED. Add
  .tasks/policy.toml default_weight="needs-human" → every .admin task fails the
  L3 needs-human claim gate. Gates autonomous poller only; INERT until pushed
  (claim reads policy.toml via Gitea backend, not local disk).
- Build-prereq in task Next-action was a phantom: runner is plain JS (no tsc);
  only projects-meta-mcp needs build and its dist/ already exists.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-08 15:32:35 +03:00

22 lines
1.1 KiB
TOML

# Project claim-policy for `.admin` (projects-meta agent-orchestration #7).
#
# Read by `tasks_claim_next` once per project per call; overlaid onto each
# candidate via `effectiveClaimFields` BEFORE the claim gate. Override rule is
# TOTAL, not intersect — a task that sets a field outright ignores the default
# for that field. Affects ONLY the autonomous poller; interactive sessions and
# manual claims do not pass through this gate.
#
# WHY needs-human: `.admin` is ops/infra (SSH, DB, panel, prod cutover, secret
# handling). Until execution-policy governance L2/L3 lands (see
# `agents-task-runner-vds-deploy` task § blocker), NO `.admin` task may be
# claimed + spawned autonomously. `default_weight = "needs-human"` makes every
# `.admin` task fail the L3 claim gate (claim.ts `selectClaimableTask`) → it is
# never handed to an autonomous runtime and always surfaces to a human.
#
# A specific `.admin` task that IS safe for autonomy can opt back in by setting
# its own `weight:` to something other than `needs-human` (total override).
#
# RELAX THIS when governance L2/L3 ships: drop default_weight (or set per-task).
default_weight = "needs-human"