mirror of
https://github.com/razzant/ouroboros.git
synced 2026-08-11 11:43:18 +00:00
5d4f75110b
Subagents can now be mutative ("acting"), not only read-only — evolving Ouroboros
into a parallel best-of-N self-improver and external-project builder while keeping
the immune system fully intact.
schedule_subagent(write_surface=...) spawns an acting child that writes inside ONE
isolated surface — self_worktree (a git worktree of THIS repo from the parent's
base commit, under OUROBOROS_SUBAGENT_WORKTREE_ROOT, outside repo/ and data/) or
external_workspace (an external git project) — gated by the owner-only master
toggle OUROBOROS_ALLOW_MUTATIVE_SUBAGENTS (default ON in advanced/pro, OFF in
light). Children return a workspace.patch; the parent reviews and integrates a
chosen patch with the new integrate_subagent_patch tool and remains the SOLE
COMMITTER of the live body (accept one, synthesize several, or reject).
Authority is machine-enforced and fail-closed everywhere (active_tool_profile +
registry + core + browser): a delegated subagent never inherits self_modification
or operator_control; an invalid/missing constraint resolves to read-only. Acting
children CANNOT commit, run review/runtime/skills lifecycle, enable tools, write
cognitive memory, read owner secrets (via read_file OR shell), spawn acting
children when themselves read-only, or write/shell outside their isolated surface
(even in pro). integrate_subagent_patch is manifest-first, sha256-verified, 3-way,
derives protected paths from the patch itself (rename-safe), enforces top-only
lineage and target for all callers, holds the repo git lock, and counts as a
reviewable effect. Worktrees are root-confined, cleaned up on reject, pruned on
startup, and use the shared atomic-write/file-lock SSOT.
- config: OUROBOROS_ALLOW_MUTATIVE_SUBAGENTS (owner-only across shell/CLI/browser/
SAFETY.md), OUROBOROS_SUBAGENT_WORKTREE_ROOT / RETENTION_DAYS; active-child cap 3->6.
- New modules: ouroboros/subagent_worktrees.py, ouroboros/tools/subagent_integration.py.
- Docs synced: ARCHITECTURE (invariant + module map + settings), DEVELOPMENT,
prompts/SYSTEM.md, prompts/SAFETY.md; registry.py/events.py grandfathered (documented).
- Tests: tests/test_acting_subagents.py (53) + full regression green.
- Version carriers -> 6.20.0.
Reviewed via 2 adversarial multi-model rounds (GPT/Gemini/Opus) + 13 simulated
triad+scope rounds; ~47 verified findings fixed (authority escalation, top-only
lineage, manifest honesty, shell/secret reads, owner-only toggle channels, worktree
safety, schema/policy alignment).
|
||
|---|---|---|
| .. | ||
| ARCHITECTURE.md | ||
| CHECKLISTS.md | ||
| CREATING_SKILLS.md | ||
| DEPLOYMENT.md | ||
| DEVELOPMENT.md | ||