From 52a59a1ebab4503e0f548e61661a92e2bc5cfcf5 Mon Sep 17 00:00:00 2001 From: ejclaw Date: Wed, 8 Apr 2026 05:42:43 +0900 Subject: [PATCH] Refresh verification runtime docs --- README.md | 2 +- docs/architecture.md | 2 +- runners/agent-runner/src/ipc-mcp-stdio.ts | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index dbfc392..0c54364 100644 --- a/README.md +++ b/README.md @@ -156,7 +156,7 @@ bun run build ## Documentation -- [Architecture](docs/architecture.md) — Data flow, room model, verification isolation, key files +- [Architecture](docs/architecture.md) — Data flow, room model, verification execution, key files - [Configuration](docs/configuration.md) — Full `.env` reference, debugging paths ### Environment diff --git a/docs/architecture.md b/docs/architecture.md index cfc9322..60ef9bd 100644 --- a/docs/architecture.md +++ b/docs/architecture.md @@ -77,7 +77,7 @@ User message → Arbiter summoned → binding verdict → loop resumes ``` -## Verification Isolation +## Verification Execution Reviewer and arbiter now run as host processes with role-scoped read-only guards and sandbox settings. Verification profiles run directly on the host with diff --git a/runners/agent-runner/src/ipc-mcp-stdio.ts b/runners/agent-runner/src/ipc-mcp-stdio.ts index 9129caf..f45627b 100644 --- a/runners/agent-runner/src/ipc-mcp-stdio.ts +++ b/runners/agent-runner/src/ipc-mcp-stdio.ts @@ -422,7 +422,7 @@ server.tool( server.tool( 'run_verification', - 'Run a fixed verification profile against the current repo snapshot using an isolated scratch workspace and the reviewer runtime image. Use this instead of broad shell write access for test/typecheck/build verification.', + 'Run a fixed verification profile directly on the host against the current repo snapshot using a restricted environment and snapshot checks. Use this instead of broad shell write access for test/typecheck/build verification.', { profile: z .enum(VERIFICATION_PROFILES)