From adc798debbf019497e019494a59f34695ec57386 Mon Sep 17 00:00:00 2001 From: Paul Bakaus Date: Wed, 29 Jul 2026 21:46:35 -0700 Subject: [PATCH] Arm the degraded-roll rerun with its own safety case Codex's risk reviewer rejected the network-escalated roll rerun for 'contacting an unspecified external domain' and the assumed export of project context, so the run degraded to no challengers. Both concerns are answerable: the script's only network contact is one GET to impeccable.style/api/roll carrying scope, mode, an eight-hex key, and a re-roll counter, nothing project-derived. The degraded message now states that verbatim and tells the model to put the URL and payload in its approval request, so the reviewer judges the real action instead of an unknown. Co-Authored-By: Claude Fable 5 --- skill/scripts/concept-seed.mjs | 19 ++++++++++++------- 1 file changed, 12 insertions(+), 7 deletions(-) diff --git a/skill/scripts/concept-seed.mjs b/skill/scripts/concept-seed.mjs index 78c13ebc9..aab9e8911 100644 --- a/skill/scripts/concept-seed.mjs +++ b/skill/scripts/concept-seed.mjs @@ -405,13 +405,18 @@ ASSIGNED INDEX: ${buildIndex} The assignment exists to refuse the model's ranking rut, never to outrank the user or the brief. Never expose assignment metadata in user-facing labels. No challengers this run: the roll service was unreachable and no local -catalog exists. A sandboxed exec tool with no network access causes exactly -this; before accepting degradation, rerun this command once through the -harness's network-enabled command tool. A sandboxed shell without network egress is the most common -cause: if this harness can rerun the command with network access granted, -do that once before proceeding. Otherwise proceed with the grounded -candidates alone; the assignment -above still applies at full strength. Tell the user plainly that this roll +catalog exists. A sandboxed shell without network egress is the most common +cause; before accepting degradation, rerun this command once through the +harness's network-enabled or escalated command tool. When that rerun needs +an approval, state exactly what the approver must know: this script's only +network contact is one GET to https://impeccable.style/api/roll whose query +carries scope, mode, an eight-hex seed key, and a re-roll counter; no +project files, prompts, code, or conversation context are transmitted, and +nothing is written. An approval request naming that URL and payload judges +the real action; a bare "run with network" invites rejection for contacting +an unspecified domain. If the rerun is still refused, proceed with the +grounded candidates alone; the assignment above still applies at full +strength. Tell the user plainly that this roll ran degraded, with no challengers and no quality-bar boards; do not present the outcome as a full roll. A degraded roll changes the cards, not the channel: when a browser can open, present the direction on the decision page