Fetching metadata from the HF Docker repository...
Apr 7 11:25 Harden spec executor: edit_file tool, shell_allowlist, workspace override Executor-Tyrant-Framework +1: Claude Opus 4.6 (1M context) Gap 1: Spec-declared workspace now bypasses tool-level path checks for
filesystem ops. Direct filesystem operations when workspace differs from
default, executor's own PolicyEngine check is sufficient.
Gap 2: shell_allowlist in spec constraints extends PolicyEngine's base
allowlist per-spec. Specs can allow additional commands without weakening
global security.
Gap 3: New edit_file tool — targeted find-and-replace. Reads file, verifies
old_text exists exactly once, replaces with new_text. Safer than full
overwrite for cross-repo work. Wired through PolicyEngine, TOOL_REGISTRY,
facade, and spec schema.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Apr 6 00:49 Dial in Codemine chassis for OpenRouter + HF Spaces deployment Executor-Tyrant-Framework +1: Claude Opus 4.6 (1M context) - Fix NG singleton race: worker_ng owns instance, facade shares it
- Fix ingest_workspace TypeError (wrong API call to can_access_path)
- Fix read_file off-by-one (1-based docs, 0-based code)
- Add stats cache (30s TTL) — was doing 3 full disk scans per turn
- Wire recall_context results into agent context (was thrown away)
- Fix shell: 60s timeout (was 10s), shell=True for pipes/redirects
- Fix list_files silent truncation (shows "50 of N")
- Fix push_to_github to actually push when remote exists
- Add OpenRouter message format conversion (Anthropic→OpenAI tool blocks)
- Add dotenv loading for .env config
- Fix concept extraction lazy config (env vars read at call time, not import)
- Reduce checkpoint frequency (100 msgs, explicit save at turn end)
- Add python-dotenv to requirements
- Update Dockerfile cache buster
- Add data/ and .neurograph/ to gitignore
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Mar 30 11:18 Fix gate loop, metadata sanitization, and write confirmation Executor-Tyrant-Framework +1: Claude Opus 4.6 (1M context) - Kill auto_continue_after_approval loop (caused infinite gate restaging)
- Sanitize message dicts for Anthropic API (strip Gradio metadata field)
- Write confirmation shows full resolved path + file size
- args.get() uses 'or' pattern for null safety
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Mar 29 17:48 QB First Blood: TQB Worker Chassis refactoring — 7 Lego blocks Executor-Tyrant-Framework +1: Claude Opus 4.6 (1M context) PRD: Faux_Clawdbot_Refactoring_PRD_v0.1
Build: Queen Bitch orchestrated, TQB agents built
Blocks:
- B (Anvil): PolicyEngine — Cricket-shaped rim + mesh + audit JSONL
- C (Chisel): Tool class split — RecursiveContextManager → tools/ facade
- E (Switchblade): Model swap — Kimi K2.5 → Claude native tool_use
- F (Forge): Worker NeuroGraph — code-judgment SNN, three-factor learning
- A (Razor): Security hardening — path traversal, shell=False, ZIP bomb, file size guard
- D (Torch): Error handling — zero bare except, structured logging
- G (Hammer): Agent loop — tool registry, PolicyEngine gates, token-aware context
System-level acceptance:
- Zero bare except in any Python file
- Zero regex in tool call parsing
- Zero Kimi/K2.5 references
- Zero shell=True
- Foundation layer (neuro_foundation.py, universal_ingestor.py, openclaw_hook.py) untouched
- Substrate validation passed (17 nodes, 45 synapses, 2 hyperedges)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> 
