Skip to content

Added: Seed bounded AI-authored tool lifecycle - #17

Draft
tjXJNOOBIE wants to merge 2 commits into
staging/platformfrom
working/tj-215-ai-authored-tool-lifecycle
Draft

tjXJNOOBIE wants to merge 2 commits into
staging/platformfrom
working/tj-215-ai-authored-tool-lifecycle

Conversation

@tjXJNOOBIE

@tjXJNOOBIE tjXJNOOBIE commented Aug 16, 2026 •

Copy link
Copy Markdown
Contributor

Scope

TJ-215 is a Draft Function Catalog engineering lane beneath persistent Platform Staging #10 for a bounded AI-authored capability lifecycle: proposal, generated candidate, isolated build/test/review, versioned registration or quarantine, bounded publication, regression surveillance, and rollback/retirement. Generated tools never grant themselves authority.

Relationship

TJ-215 -> Function Catalog Platform Staging #10 -> main promotion -> separately authorized deployment/publication

The design reuses AIFunctionCatalogView, provider-neutral AIAgentRuntime, runtime budgets/revocation, and Tavall Cloud development-only execution placement instead of creating a second capability/authority plane.

Current engineering state

Current exact head: 1148c7b8ad4238e792309a19d2b95fd9ff1c2535.

State: PLANNED_IMPLEMENTATION_NEEDS_CURRENT_REGISTRATION_AND_RUNTIME_CHARACTERIZATION.

This head contains the corrected architecture/design objective only. No generated capability implementation or execution is claimed.

Template/language, sandbox-image, signing/versioning, promotion, protected-data, integration-environment, graduation-policy, and UX questions remain named decisions rather than engineering lifecycle state.

Architecture boundaries

  • Function Catalog remains schema/policy/audit/invocation/version/registration authority;
  • generated code cannot broaden its own catalog view or invocation authority;
  • AIFunctionCatalogView remains the publication/discovery constraint rather than a second MCP-only authority;
  • provider-neutral agent runtime budgets/revocation remain in force;
  • candidate execution happens only in explicitly authorized disposable development placement;
  • registration never implies production/Cloud mutation permission;
  • failed versions retain evidence and can be quarantined/rolled back.

Engineering / testing discipline

Characterize current registration/view/provider/runtime/versioning/sandbox seams first. Then implement the smallest typed lifecycle + evidence + quarantine boundary with matching behavior/integration coverage. Existing registered tools can become regression fixtures. Testing validates behavior but does not prescribe whether coverage or production implementation is authored first, and no intermediate test state is an engineering lifecycle gate.

Validation truth

Current Function Catalog/runtime architecture and staging lineage were inspected. No exact-head Java 25, candidate execution, sandbox run, registration, MCP publication, or runtime acceptance is claimed.

Next action

Characterize current registration/view/provider seams, then implement typed proposal/package/lifecycle/evidence contracts plus versioned registration/quarantine behavior and matching tests. Add sandbox/publication integration only through existing authority boundaries.

Keep Draft. No generated-code execution, catalog registration, publication, staging fan-in, main promotion, release, or deployment is authorized.

Refs TJ-215

State: PLANNED_IMPLEMENTATION_NEEDS_CURRENT_REGISTRATION_AND_RUNTIME_CHARACTERIZATION
Owner: TJ
Parent: #10
ExactHead: 1148c7b
Validation: SOURCE_POLICY_REPAIRED; IMPLEMENTATION_PENDING; RUNTIME_VALIDATION_PENDING
Next Action: characterize current catalog/runtime seams, implement the real typed lifecycle/evidence/quarantine boundary with matching tests, then validate candidate sandbox/publication behavior.

Reason:
- Promote TJ-215 into a durable Function Catalog engineering lane.

Changes:
- Added the generated-tool proposal, independent review, registration, quarantine, rollback, and regression lifecycle design.

Validation:
- Inspected current Function Catalog workflow and agent/catalog runtime architecture on `staging/platform`.
- Not run: implementation, Java 25, sandbox, registration, or publication validation.
Reason:
- Remove traffic-light and generic failure-first semantics from an engineering design.
- Preserve the existing catalog, runtime, sandbox, and authority boundaries.

Changes:
- Replaced YELLOW open edges with named unresolved architecture decisions.
- Made planned lifecycle implementation and matching validation one coherent boundary.
- Clarified that the design document is not implementation or publication authorization.

Validation:
- Reviewed the PR's current Function Catalog/runtime architecture boundaries and staging lineage.
- Documentation-only correction; no candidate execution or runtime validation run.
@tjXJNOOBIE tjXJNOOBIE self-assigned this Sep 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant