Cockpit C1 — Repair Job Authority Envelope & Merge Barrier

[LogicDuke]

Purpose

C1 establishes the pure TypeScript repair-job authority boundary for the future AgentBridge Cockpit.

It models:

• bounded repair-job authorization;
• exact operation operands;
• one-execution permit records;
• protected-parent / repair-branch separation;
• independent-validator separation;
• ordinary-job hard denial of merge and auto-merge;
• the structural shape of future operator merge authorization.

C1 performs no filesystem, Git, GitHub, subprocess, network, persistence, workflow-state, or merge execution.

The historical V1 read-only boundary remains preserved. Future write authority is explicitly job-scoped and is not granted by this PR itself.

Status

DRAFT — BLOCKED BY CURRENT INDEPENDENT-AUDIT FINDINGS.

This PR is the protected C1 parent integration branch.

Known CURRENT findings at this baseline:

C1-A01 — P2

resolveJobOperation uses uncaptured Map.prototype.get; hostile prototype mutation can corrupt operation resolution and potentially turn forbidden/unknown operations into an allowed modeled operation.

File: src/domain/job-operation.ts

C1-A02 — P2

OperatorMergeAuthorization / operatorMergeAuthorizes documentation overstates what is proven. Current C1 performs structural binding checks but does not authenticate operator identity/origin and does not enforce one-time consumption.

Files: src/domain/execution-permit.ts, docs/architecture/C1-repair-job-authority.md

C1-A03 — P3

readList uses ordinary indexed reads; a sparse authorization list plus a prototype-planted numeric property can fabricate authorization scope.

File: src/domain/repair-job.ts

These findings MUST NOT be repaired directly on this protected parent branch.

Each finding will enter an isolated repair branch/worktree and stacked validation PR targeting this branch.

Quarantine rule

Finding
→ verify against CURRENT C1 HEAD
→ isolated repair branch/worktree
→ bounded repair
→ stacked validation PR
→ independent review
→ complete validation
→ operator merge decision
→ re-audit parent HEAD

No implementing agent is its own sole validator.

Merge boundary

MERGE IS OPERATOR-ONLY.

No AI agent is authorized to merge this PR or any stacked repair PR.

No auto-merge.

Baseline verification

Re-run against this exact baseline commit immediately before it was created:

Check	Command	Result
Typecheck	npm run typecheck	PASS (exit 0)
Lint	npm run lint	PASS (exit 0, eslint strictTypeChecked)
Tests	npm test	PASS — 839 passed, 15 test files, 0 failed
Build	npm run build	PASS (exit 0)
Audit	npm audit	0 vulnerabilities
Whitespace	git diff --check / git diff --cached --check	clean (exit 0)

Passing tests are evidence, not proof; the independent audit findings above remain blocking.

Baseline scope

Exactly ten files, 4614 insertions, 0 deletions. No dependency, package.json, package-lock.json, CI, tsconfig, eslint, or vitest change. No PR #9 or PR #10 content.

• src/domain/index.ts (additive re-exports only)
• src/domain/repair-job.ts
• src/domain/job-operation.ts
• src/domain/execution-permit.ts
• src/domain/job-authorization.ts
• tests/domain/repair-job-fixtures.ts
• tests/domain/job-authorization.test.ts
• tests/domain/job-authorization-invariants.test.ts
• tests/domain/execution-permit.test.ts
• docs/architecture/C1-repair-job-authority.md

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: e4910f4c-3865-40d3-b774-0e9b83aff66e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}