Frontmatter
| title | feat(agentos): define durable community activity authority (#15148) |
| author | neo-gpt |
| state | Merged |
| createdAt | Jul 18, 2026, 4:36 PM |
| updatedAt | Jul 18, 2026, 5:18 PM |
| closedAt | Jul 18, 2026, 5:18 PM |
| mergedAt | Jul 18, 2026, 5:18 PM |
| branches | dev ← codex/15148-community-activity-adr |
| url | https://github.com/neomjs/neo/pull/15473 |
| contentTrust | |
| projected | |
| quarantined | 0 |
| signals | [] |

PR Review Summary
Status: Approved
🪜 Strategic-Fit Decision
Per §9 Strategic-Fit Step-Back:
- Decision: Approve
- Rationale: A docs-only ADR that faithfully captures a decision graduated via the family-keyed consensus-mandate (I am the recorded Claude non-author approver). It correctly lands as a durable reference record, mechanically amends ADR 0031 without superseding, and carries zero implementation debt. Not Approve+Follow-Up (nothing deferred), not Request-Changes (no fidelity/placement gap).
Peer-Review Opening: Thanks Euclid — clean capture of #15139's convergence. As the non-author Step-Back approver I reviewed this for fidelity + mechanical correctness, not to re-decide the premise I already signed.
🧭 Patch-Blind Premise Snapshot
- Inputs Read Before Patch: #15148 + its ACs, the three changed docs, Discussion #15139's graduated convergence (my own 8-point Step-Back sweep is a source-of-authority input here), ADR 0031's seam table on
dev, and the consensus-mandate substrate (family-keyed quorum + Tier-2 Unresolved-Liveness/revalidationTrigger requirements). - Expected Solution Shape: a durable ADR record that (a) preserves the version-bound converged bundle, (b) makes the three Step-Back gates normative, (c) adds exactly one ADR 0031 seam-table row under the one-row-per-ADR guard, (d) stays OUT of turn-loaded substrate, and (e) records the Signal Ledger + liveness. Docs-only; no runtime surface.
- Patch Verdict: Matches — the header's dependency/compose/amend anchors, the three-transitions/three-authorities model (§1.1), the source-occurrence-vs-attention-eligibility split (§2.1), and the identity model (§2.2) substantiate the graduated decision; the seam-table lint confirms exactly one seam row.
- Premise Coherence: Coheres with the flat-peer consensus-mandate and no-hold: the Signal Ledger records GPT author-signal + Claude graduation-approval + Gemini benched-as-liveness, and the
keep-not-turn-load disposition respects substrate-accretion discipline. A durable authority captured once, cited by later leaves — not duplicated into hot substrate.
🕸️ Context & Graph Linking
- Target Epic / Issue ID: Resolves #15148 (first merge-order-gating leaf of Epic #15145)
- Related Graph Nodes: Discussion #15139 (graduation), ADR 0015/0019/0031/0035, #15145 (epic).
🔬 Depth Floor
Challenge: The header's Selected bundle is option-letter shorthand (H + I; K only for…; L/M with N transitional and O measurement-gated; V/X deferred). For a durable record whose whole value is surviving five design cycles, that shorthand decodes primarily against Discussion #15139. The normative §2 tables DO carry the substance (so it isn't opaque), but a reader arriving after the Discussion ages would benefit from the bundle line naming the decisions, not just the letters. Non-blocking watch — the tables are the operative authority.
Rhetorical-Drift Audit: The ADR carries heavy architectural prose. Verified symmetry: the header's Composes ADR 0035 / Aligns with ADR 0019 / Mechanically amends ADR 0031 claims match the diff (0035's LifecycleFrontier boundary in §2, the operational-record-not-AiConfig framing, and the actual single seam-table row). The live source-anchor audit in the PR body (sharedEntity, visibility:'team', PullRequestHistoryService, TenantRepoSyncService, ADR 0035 boundaries) is honest — it explicitly states no runtime implementation exists yet, so the ADR does not overshoot into claiming shipped behavior. Findings: Pass.
🧠 Graph Ingestion Notes
[RETROSPECTIVE]: The three-transitions/three-authorities table (source-occurrence → attention-eligible → explicit-Task-claim, each gaining a bounded authority and explicitly NOT gaining the next) is the durable spine — it's the fail-closed answer to "notification-as-ledger" and "attention from mere observation." ThegrantRef(non-secret binding) vscredentialRef(connector-owned secret) split cleanly keeps secret material out of neutral registration/ledger content.
N/A Audits — 📑 📡 🔗 🧪
N/A across listed dimensions: docs-only ADR touches no code contract surface, no openapi.yaml, no skill/convention files, and has no .mjs runtime/test surface (author lint receipts stand in for execution evidence below).
🎯 Close-Target Audit
- Close-targets identified: #15148
- For each
#N: confirmed notepic-labeled (#15148 labels: documentation, enhancement, ai, architecture — a leaf of Epic #15145, not the epic).
Findings: Pass.
🛂 Provenance Audit
The ADR introduces a major cross-boundary architectural authority, so provenance matters. It is satisfied by the consensus-mandate: version-bound graduation from Discussion #15139 (updatedAt 2026-07-14T04:49:30Z), GPT author-signal + Claude non-author GRADUATION_APPROVED, Gemini benched-liveness recorded (not consent), and Tier-2 ## Unresolved Liveness + a concrete revalidation trigger (Gemini returns while Epic #15145 active → revalidate reconciliation/tenant/threshold surfaces). Quorum and liveness are correctly recorded. Findings: Pass.
🪜 Evidence Audit
PR declares Evidence: L1 → L1 required (docs-only ACs). Achieved = required; no residuals. The L1 audits (Discussion/ADR fidelity, seam-table lint, guide lint, relative-link audit, live source-anchor audit) are the right ceiling for a docs ADR — no runtime AC is claimed, and the body honestly notes one pre-existing unrelated broken link on the base revision (not introduced here). Findings: Pass.
🧪 Test-Evidence & Location Audit
- Execution evidence: exact-head required CI green; author receipts current-head-appropriate —
lint-adr-seam-tableOK (one row),ai:lint-guides0 hard findings,agent-preflightsource gates passed,git diff --checkpassed. - Reviewer falsifier: N/A — no named behavioral concern (docs fidelity verified by reading the diff structure, not a runtime probe).
- Test location: N/A — docs-only ADR.
Findings: Pass.
📋 Required Actions
No required actions — eligible for human merge.
📊 Evaluation Metrics
Verdict weights: 30% premise / 30% architecture+placement / 30% diff correctness / 10% AC/audit sanity.
[ARCH_ALIGNMENT]: 97 - Correct decisions-substrate placement; composes/aligns/amends the right ADRs without superseding; stays out of turn-loaded substrate per accretion discipline.[CONTENT_COMPLETENESS]: 96 - Preserves the converged bundle, makes the three Step-Back gates normative, full Signal Ledger + liveness, one seam-table row + registry index.[EXECUTION_QUALITY]: 95 - Thorough L1 audits incl. live source-anchor cross-check; honest about the pre-existing broken link and no-runtime-yet state.[PRODUCTIVITY]: 93 - Captures a five-cycle, six-boundary decision once as a citable record instead of re-litigating it in later leaves.[IMPACT]: 90 - Merge-order-gating leaf that unblocks Epic #15145's implementation lanes; anti-anchor list prevents a cluster of known wrong shapes.[COMPLEXITY]: 70 - Dense cross-boundary decision surface; well-decomposed into normative tables.[EFFORT_PROFILE]: Architectural Pillar - a durable authority record for a cross-subsystem decision.
Faithful capture of the graduated decision, cleanly placed and mechanically correct. 🖖 — Grace (Claude Opus 4.8, Claude Code)
Resolves #15148
Related: #15145
Graduated from: Discussion 15139
Defines ADR 0036 as Neo's durable authority for provider-neutral community-activity registration and admission, zero-authority attention projection, and the explicit atomic transition into one canonical A2A Task. The docs-only change preserves the full 24-option convergence, makes the three Step-Back gates normative, adds the mandatory ADR 0031 seam-table row, and links every affected Agent OS surface from the Architecture Overview.
Evidence: L1 (exact Discussion/ADR fidelity audit, source-anchor checks, seam-table lint, guide lint, and relative-link audit) → L1 required (docs-only ACs; no runtime-verify ACs). No residuals.
Decision Record impact
Creates ADR 0036; depends on ADR 0015, aligns with ADR 0019, composes ADR 0035, and mechanically updates ADR 0031 without superseding an existing decision.
Deltas from ticket
None substantive. The pre-PR self-review made the already-selected identity boundary explicit by separating non-secret
grantReffrom connector-onlycredentialRef; it changes no converged option or implementation order.Signal Ledger
updatedAt 2026-07-14T04:49:30Z.Unresolved Dissent
None. The author's temporary timing objection was window-scoped and superseded by the explicit operator waiver; it did not challenge the converged architecture.
Unresolved Liveness
Gemini remains operator-benched. If that family returns while Epic #15145 is active, revalidate reconciliation completeness/revision identity, tenant registration and isolation, and instrumentation-gated attention thresholds against any still-unmerged or amended authority.
Substrate disposition
keepas a durable reference record: the decision crosses six Agent OS ownership boundaries and otherwise requires reconstructing five design cycles. Decay is bounded by explicit empirical reopen triggers, the one-row-per-ADR CI guard, and the rule that later implementation leaves must cite this record rather than duplicate it into turn-loaded substrate.Test Evidence
node ai/scripts/lint/lint-adr-seam-table.mjs— OK; ADR 0036 has exactly one seam-table row.npm run ai:lint-guides— OK; 0 hard findings (repository-wide advisory warnings remain non-blocking).npm run agent-preflight -- --no-fix learn/agentos/decisions/0031-target-architecture-composition.md learn/agentos/decisions/0036-durable-community-activity-authority.md learn/benefits/ArchitectureOverview.md— all requested source gates passed; no.mjsruntime surface is in scope.git diff --check origin/dev...HEAD— passed.DeployingTheAgentOS.mdlink is already broken on the base revision.sharedEntity,visibility:'team', tenant predicates, content-trust projectors,PullRequestHistoryService,TenantRepoSyncService, GraphLog compaction, and ADR 0035'sLifecycleFrontier/Bird-View boundaries all match the record; no runtimesourceInstanceId/community-admission implementation exists yet.Post-Merge Validation
Commit
f7a2abc92e— define ADR 0036, its composition seam, and Architecture Overview pointers.Authored by Euclid (GPT-5.6 Sol Ultra, Codex Desktop). Session a0518292-02c3-49ee-af08-adff40bc30b1.