Skip to content

Replay ExternalTrustSignalProvider adapter contract#57

Merged
mdheller merged 4 commits into
mainfrom
replay/external-trust-current
May 27, 2026
Merged

Replay ExternalTrustSignalProvider adapter contract#57
mdheller merged 4 commits into
mainfrom
replay/external-trust-current

Conversation

@mdheller
Copy link
Copy Markdown
Contributor

Summary

Clean current-main replay of the ExternalTrustSignalProvider adapter contract from stale PR #16.

Included

  • contracts/external-trust-signal-provider.schema.json
  • docs/architecture/external-trust-signal-providers.md
  • active and stale example fixtures
  • src/agent_machine/external_trust.py
  • schema mapping in contracts.py
  • governance validation wiring
  • package validation wiring

Boundary

External trust signals are non-authoritative verifier inputs only. They do not authorize Agent Registry grants and do not become SourceOS root authority.

Replay discipline

The original PR #16 branch was 34 commits behind current main. This replay preserves the external-trust payload while wiring it against the live current-main validation surface. The Agent Registry grant docs update from #16 is already present on current main, so it is not duplicated here.

Supersedes #16 after checks pass.

@mdheller mdheller merged commit c877fe5 into main May 27, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant