open/ktg-plugin-marketplace
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity Actions

feat(ultraplan-local): add autonomy-gate state machine + manifest schema extensions for skip_commit_check + memory_write

Browse source 
Step 4 of plan-v2 (ultra-pipeline-speedup).

lib/util/autonomy-gate.mjs (NEW)
  5-state machine {idle, gates_on, auto_running, paused_for_gate, completed}
  honoring the --gates flag intent. Re-entry to completed is idempotent.
  Includes CLI shim:
    node lib/util/autonomy-gate.mjs --state X --event Y [--gates true|false]
  → JSON: { ok, next_state | error }, exit 0 on success / 1 on invalid.

lib/parsers/manifest-yaml.mjs (EXTENDED)
  OPTIONAL_KEYS list adds skip_commit_check and memory_write — both boolean,
  default false when absent, MANIFEST_OPTIONAL_TYPE when non-boolean.
  Existing REQUIRED_KEYS contract untouched; existing 9 manifest tests
  still pass.

Tests: 19 (autonomy-gate) + 8 (manifest-schema-extensions) = 27 new.

[skip-docs]
This commit is contained in:
Kjell Tore Guttormsen 2026-05-04 06:28:47 +02:00
commit 645f01625b
6 changed files with 602 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

23
plugins/ms-ai-architect/playground/test-fixtures/security.md
View file

@ -36,6 +36,29 @@ Rammeverk: NSM Grunnprinsipper + Microsoft Cloud Security + EU AI Act Art. 15
| S-05 | medium | Logging | Implementer ML-basert avviksdeteksjon på AI-output-rate |
| S-06 | medium | Vendor | Bestilt third-party penetrasjons-test for Q3 2026 |
## Top-risikoer
| ID | Risiko | Score | Severity |
|----|--------|-------|----------|
| R-01 | Lekkasje av treningsdata | 10 | high |
| R-02 | Insider-trussel (unauthorized inference) | 10 | high |
| R-03 | Prompt injection i forklaringsmodell | 9 | high |
| R-04 | Adversarielt eksempel forgifter output | 8 | medium |
| R-05 | Cloud-leverandør-utilgjengelighet | 8 | medium |
## Kategori-snitt
| Kategori | Snitt |
|----------|-------|
| Identitet og tilgang | 4 |
| Datasikkerhet og personvern | 3 |
| Modell- og prompt-sikkerhet | 3 |
| Nettverk og perimeter | 5 |
| Logging og hendelseshåndtering | 4 |
| Operasjonell og leverandørsikkerhet | 3 |
Restrisiko: 5×4 → 2×3
## Aggregat
Totalscore: 22/30 (73%) — modent men ikke best-i-klassen. Modell- og prompt-sikkerhet er svakeste dimensjon.