Current source-derived state
One honest screen for the whole Actionist programme.
Light implementation is active; one block is host-mounted, and no block is qualified or admitted.
North starWe are building an owned, rated, integrated library of code — UI components and capability blocks — that makes every future application fast to assemble. The library is the asset. Any given app is a demo of it.
Programme
Work, sequence, and acceptance
PM task state is a timeline projection. The acceptance sentence—not motion—defines done.
Orient and audit existing machinery
ACTION-MODEL-PM
Machine, project, run, repositories, Herdr lanes, Great Library, maintenance and sync machinery are source-mapped.
Source status
completeEstablish fallback PM control plane
ACTION-MODEL-PM
Required PM files exist and parse; callbacks record the milestone.
Source status
completeComplete Mini storage maintenance
MINI-MAINTENANCE-SOL
Phase 2 PASS/READY is historical. Later Phase 3 callbacks and two verified batches require a refreshed final handoff; a later nine-path historical-copy delete batch stopped before deleting anything when one candidate changed concurrently. Protected Oracle/dirty worktrees remain preserve-only and no heavy start is eligible while fresh disk fails.
Source status
runtime_idle_awaiting_reaudit_direction_phase3_final_handoff_stale_later_nine_path_batch_stopped_before_delete_preservation_hold_fresh_disk_FAIL_not_resumed_by_PMComplete laptop cleanup and quiesce canonical live delta
LAPTOP-CLEANUP-SOL
Cleanup is terminal and the current planning pin is proven clean/aligned at bb5c353 across three stable reads spanning 446 seconds. Any transfer still requires an immediate execution-time source/destination re-probe and aborts on drift or dirt.
Source status
cleanup_complete_source_planning_pin_current_clean_aligned_bb5c353_three_stable_reads_execution_reprobe_requiredDesign cross-machine workspace reconciliation
WORKSPACE-SYNC-SOL
Ten validated design artifacts; no movement performed.
Source status
complete_design_onlyPrepare canonical transfer manifest
ACTION-MODEL-PM
Every payload is repo-identity-aware, source-backed, gated and independently verifiable.
Source status
reviewable_source_pin_current_preservation_required_not_executionMaterialize canonical Mini repositories and run
unassigned_until_exact_execution_authority
Exact revisions and overlays are present at canonical paths with PASS receipts and no dirty conflict.
Source status
partial_parent_present_domain_worktrees_assigned_reconciliation_blockedProduce reviewed 20-30 donor portfolio
BLOCK-PORTFOLIO-SOL
DATA PASS: 30 unique cards, 25 primary plus 5 alternates, 14/14 families, required fields, exact JSON/projection parity and score arithmetic all verify. PROGRAMME HOLD: Shaan has not selected Buzz identity, accepted ranking weights, resolved Teable versus Twenty in the top five, or approved Wave 1. No conversions.
Source status
data_pass_runtime_done_programme_decisions_holdLaunch AFFiNE Release domain
AFFINE-RELEASE-SOL
One admitted owner receives exact project/repo/worktree paths, callbacks, acceptance and stop rules.
Source status
complete_owner_and_isolated_worktrees_admitted_as_AM_020Launch Repo-to-Block Framework domain
FRAMEWORK-SOL
FW-CB-015 plus direct Git proof register clean unpushed commits bed61f3, 52699a1 and 5fc01be for opt-in seven-record semantics, portable P12 evidence closure and deterministic Stage-0 source intake. The Framework goal is paused before FR-04. FR-02/FR-03/FR-06 closure and any further implementation, qualification, admission, promotion or release require independent verifier PASS and a new exact PM task.
Source status
three_clean_local_commits_first_verifier_FAIL_correction_1_complete_fresh_AM_024_reverification_activeApprove and start conversion fleet
none
Explicit relevant authority, approved wave and capacity plan exist.
Source status
forbidden_not_authorizedPublish whole-program coverage and elastic team control source
ACTION-MODEL-PM
DOMAIN-COVERAGE, DEPENDENCY-GRAPH, RESPONSIBILITY-MATRIX, AGENT-PROTOCOL, TEAM-STATE and schema validate; Front Door records source receipt.
Source status
whole_program_control_and_elastic_team_projection_validated_currentProgramme Front Door truth contract and local projection
FRONTDOOR-SOL
PASS for the bounded local task: exact head 5d909956, three scoped unpushed commits, clean commit-bound inputs, 144 Front Door and 30 bundle checks, browser PASS, 13/13 sources, screenshots and fail-closed approval expiry are preserved. Publication was not accepted or attempted and is a separate future task requiring new explicit authority.
Source status
complete_local_implementation_and_handoff_expired_review_preserved_no_publication_authorityIndependently verify Framework commits bed61f3, 52699a1 and 5fc01be
FRAMEWORK-VERIFIER-LUNA-01
FAIL preserved. W1-RS-01 parsed the schema filename as a jq expression and a trailing semicolon masked the failure. No closure, promotion or push follows from the otherwise-green checks.
Source status
failed_fail_closed_W1_RS_01_command_evidence_falsified_all_other_checks_passedReview separately versioned Runtime Pack corrective launcher contract
AGENT-RUNTIME-PACK-SOL_reserved_owner_runtime_done
The owner may submit only a source-backed CORRECTIVE-LAUNCHER-CONTRACT.json plus compact run-state/callback/handoff evidence. PM must return APPROVE at ACTION-MODEL-PM-CORRECTIVE-LAUNCHER-REVIEW.json before any Project OS source edit or lane reactivation; Great Library work additionally requires a green independent baseline and later exact order-4 review.
Source status
AMEND_design_evidence_contract_pending_not_runtime_admittedRegenerate exact Front Door preview and approval request
FRONTDOOR-SOL
At exact local HEAD 47ae4c9, consume one stable fresh PM TEAM/schema and current durable owner sources, rehash canonical sources through sealing, preserve expired history, pass contradiction/disclosure/bundle/browser gates, produce fresh loopback screenshots plus an exact non-executed publish receipt and one approval request. No parent write, push, deploy, publication or approval fabrication.
Source status
active_scoped_light_regeneration_publication_heldImplement Project OS v0.5.1 corrective launcher
AGENT-RUNTIME-PACK-SOL
One clean local candidate commit from exact f19387f within the 19-path contract plus four fixture/dog-food paths; all regression, schema, smoke, dog-food, package and privacy gates pass. No external action.
Source status
complete_local_candidate_6adc9cc_23_paths_independent_AM_018_active_all_external_actions_heldIndependently verify Runtime Pack v0.5.1 candidate
RUNTIME-PACK-VERIFIER-LUNA-01
Independent exact commit/tree/diff/scope/regression/restore-boundary PASS with no implementation authority.
Source status
active_read_only_exact_candidate_6adc9cc_independent_verificationPublish conversion economics receipt schema and coordinate dog-food measurements
BLOCK-ECONOMICS-SOL
Machine-valid receipt schema keeps value, readiness and economics separate and records wall time, model/effort, observable tokens, attempts/failures, files/lines, services/resources, human intervention, acceptance, one-shot result and framework defects; unknown remains unknown.
Source status
verified_checkpoint_schema_published_owner_adoption_and_domain_receipts_activeAFFiNE immutable block release, installer and clean sample-app proof
AFFINE-RELEASE-SOL
Content-addressed release plus deterministic genuinely empty sample install, reopen, tamper refusal, upgrade and rollback pass; heavy artifact build and runtime replay remain separate gates; economics receipt and AM-022 independent PASS are required before any closure claim.
Source status
complete_light_candidate_69d4005_handoff_heavy_and_runtime_HOLD_independent_AM_022_activeTeable host assertion bridge and reusable service block package
TEABLE-BLOCK-SOL
Inspect existing SISOCRM Teable work first; distinguish full service from honest extractable sub-blocks; implement short-lived host assertion, principal/base/workspace/capability readback, wrong-workspace and revoke tests within exact scopes; economics receipt and AM-023 independent PASS required. Current compute remains HOLD.
Source status
active_phase_0_2_checkpoint_PASS_exact_scoped_source_mutation_compute_HOLD_economics_bound_AM_023_reservedIndependently verify AFFiNE release
AFFINE-RELEASE-VERIFIER-LUNA-01
Independent source identity, release bytes, installer, clean sample, negative cases, rollback, economics and boundary PASS; verifier cannot implement.
Source status
immediate_critical_gate_active_read_only_exact_69d4005_named_receipt_pending_no_duplicate_relaunchIndependently verify Teable block family
TEABLE-BLOCK-VERIFIER-LUNA-01
Independent donor and package identity, auth/session isolation, wrong-workspace, revoke, decomposition honesty, economics and boundary PASS; verifier cannot implement.
Source status
reserved_held_until_owner_handoffFresh independent reverification of Framework commits after Correction 1
FRAMEWORK-REVERIFIER-LUNA-02
Repeat the entire three-commit verification, independently reproduce the corrected fail-closed chain, preserve the first FAIL, prove scope and non-mutation, and emit one PM-owned PASS/FAIL receipt. No repair authority.
Source status
complete_PASS_accepted_first_FAIL_preserved_scope_and_nonmutation_provenFramework FR-04 capability and reuse-shape decision packet
FRAMEWORK-SOL
Replace silent absorbed_native default with a deterministic source-backed capability and reuse-shape decision packet; record boundaries, selected shape, rights, maintenance, alternatives and fail-closed HOLD/REJECT reasons; provide accepted and adversarial fixtures plus Wave 1/P12/FR-03/P04 regressions; return one clean local child commit for a new independent verifier.
Source status
active_one_light_local_commit_after_exact_branch_preservation_PASSReconcile accepted product, outcome and economics contract
unassigned
Versioned OutcomeSpec/ProductSpec defines user job, measurable outcome, non-goals and economic/learning measures.
Source status
ready_but_spawn_heldBase shell, host, identity, tenancy and data contracts
unassigned
Clean Base boot plus host, authority, tenant, data, migration and secret conformance with independent security PASS.
Source status
blocked_not_admittedDependency graph
What gates what
- AM-001AM-002grounds
- AM-005AM-006constrains
- AM-003AM-007gates
- AM-004AM-007gates
- AM-006AM-007specifies
- AM-007AM-009gates
- AM-007AM-010gates
- AM-008AM-011recommends but does not authorize
- AM-009AM-011provides release evidence
- AM-010AM-011provides framework evidence
- AM-012AM-013provides source contract
- AM-012AM-014defines verification scope
- AM-012AM-015governs adjacent compatibility review
- AM-012AM-016provides current source contract
- AM-012AM-017admits bounded local corrective implementation
- AM-017AM-018produces candidate for independent verification
- AM-012AM-019assigns economics schema authority
- AM-019AM-020defines required conversion receipt
- AM-019AM-021defines required conversion receipt
- AM-020AM-022requires independent domain verification
- AM-021AM-023requires independent domain verification
- AM-014AM-024failed evidence corrected requires full fresh reverification
- AM-024AM-025independent PASS and exact branch preservation admit next light framework wave
- AM-PRODUCTAM-BASE-HOSTspecifies outcome
- AM-007AM-BASE-HOSTgates source work
- AM-014AM-BASE-HOSTprovides independent acceptance
TEAM · PM source only
Elastic capacity and accountable ownership
Operational projection, not completion proof. No transcript or pane text is consumed.
0 live slots available · hard ceiling 6
78% memory free · heavy prerequisite fails
Spawn 0; target 3 working.
Active non-external agents are absent from keep_live and retiring lists: FRAMEWORK-SOL, AGENT-RUNTIME-PACK-SOL, BLOCK-ECONOMICS-SOL, TEABLE-BLOCK-SOL, AFFINE-RELEASE-VERIFIER-LUNA-01, RUNTIME-PACK-VERIFIER-LUNA-01.
programme PM, architect and admission authority
TASK-023 remains in progress. Framework AM-024 PASS and exact branch preservation are reconciled; AM-025 is one light local commit only. AM-022 is the immediate critical gate with its exact Luna verifier running and named receipt pending, so no duplicate was relaunched. Teable remains isolated under AM-021/AM-023 with compute HOLD; Front Door stays bound to 47ae4c9 with publication held; no additional conversion owner is admitted.
- Runtime
- working
- Liveness
- healthy
- Checkpoint
- 30 Aug, 08:50 UTC
- Worktree
- PM_ROOT
Acceptance and recommended action
JSON/schema/HTML validation plus durable callback and Front Door feed.
keep_liveportfolio evidence and ranking owner
The canonical portfolio now contains 35 primary cards including ten HALO primaries. PM retains separate human decisions for Buzz identity, ranking weights and conversion ordering; no additional conversion owner is authorized.
- Runtime
- done
- Liveness
- complete_resident
- Checkpoint
- 30 Aug, 04:40 UTC
- Worktree
- PORTFOLIO_ROOT
Acceptance and recommended action
Data verification is PASS; Buzz identity, ranking weights and Wave 1 require explicit human decision receipts.
remain_done_resident_no_wake_or_conversion_until_human_decisiongeneric repo-to-block framework owner
Fresh independent reverification PASS is accepted while the first FAIL remains preserved. The sole authorized remote branch resolves exactly to 5fc01be, local and parent identities are unchanged, and AM-025 permits one light FR-04 capability/reuse-shape child commit only. Second push, heavy work, promotion, release, qualification and admission remain held.
- Runtime
- working
- Liveness
- healthy
- Checkpoint
- 30 Aug, 08:44 UTC
- Worktree
- FRAMEWORK_WORKTREE_B930C54
Acceptance and recommended action
Canonical isolated worktree, invalid-fixture tests and independent verifier PASS before generic release.
keep_live_for_AM_025_one_light_commit_then_independent_verifyindependent read-only verifier for Framework commits bed61f3, 52699a1 and 5fc01be
The first independent verifier failed only the malformed W1-RS-01 command chain. Its FAIL remains durable and was not overwritten by the later correction or fresh PASS.
- Runtime
- done
- Liveness
- dormant
- Checkpoint
- 30 Aug, 07:39 UTC
- Worktree
- FRAMEWORK_WORKTREE_B930C54
Acceptance and recommended action
Independent PASS/FAIL over exact identity, diff, tests, fixtures, boundaries and non-mutation.
remain_retired_first_FAIL_preservedprogramme viewer, derivation and publication-pipeline owner
The source-stability and exact-35-card fix is committed at 47ae4c9 and independently rebound by PM. Generated outputs are preserved locally. Final regeneration may begin only after this PM source is sealed; parent writes, push, deploy, publication and approval fabrication remain forbidden.
- Runtime
- done
- Liveness
- complete_resident
- Checkpoint
- 30 Aug, 07:56 UTC
- Worktree
- FRONTDOOR_WORKTREE_B930C54
Acceptance and recommended action
Fail-closed source projection, privacy allowlist, local preview/screenshots and explicit publication approval.
keep_live_for_one_final_regeneration_after_PM_source_freeze_no_publishMini storage/readiness owner
Phase 2 issued historical PASS/READY. Later callbacks reopened Phase 3 and completed two verified batches; a still later nine-path historical-copy batch stopped before deleting anything when one candidate changed concurrently. Protected Oracle/dirty worktrees remain preserve-only, no refreshed final handoff exists, and current free space is below the heavy-start floor.
- Runtime
- idle
- Liveness
- complete_resident
- Checkpoint
- 30 Aug, 02:00 UTC
- Worktree
- MAINTENANCE_ROOT
Acceptance and recommended action
Refresh the final handoff against Phase 3 callbacks, preserve all owner-gated worktrees, and re-probe current capacity; historical Phase 2 PASS alone is not current readiness.
preserve_owner_gated_paths_keep_done_until_handoff_reconciledadjacent reusable fleet runtime-pack owner
Project OS v0.5.1 has one clean 23-path candidate at 6adc9cc/tree efb6051 with local 101/101 and all package/restore/dog-food gates reported PASS. AM-018 independently verifies the detached exact candidate. Immutable v0.5.0 remains restore-FAIL/unregistered; push, tag, remote restore, Great Library and all external release actions remain held.
- Runtime
- working
- Liveness
- healthy
- Checkpoint
- 30 Aug, 08:39 UTC
- Worktree
- RUNTIME_PACK_V0_5_1_WORKTREE
Acceptance and recommended action
AM-018 independent exact-candidate PASS, then a distinct PM release checkpoint; no inherited external authority.
retire_after_AM_018_receipt_preserve_candidate_no_external_actionexternal programme coordinator and escalation owner
Current priority packets originated from Agent Zero on Shaan's behalf.
- Runtime
- external
- Liveness
- external
- Checkpoint
- not observed
- Worktree
- none
Acceptance and recommended action
Not applicable; authority and message receipts are durable inputs.
monitor_pm_callbacksMacBook cleanup/source-quiescence owner
Direct MacBook proof shows clean main at exact bb5c353, 0/0 to upstream, across three identical reads spanning 446 seconds. Cleanup STATE is terminal with retained decisions and its run/state/callback hashes are stable. This is a current planning pin only; any authorized transfer still requires an immediate execution-time source/destination re-probe.
- Runtime
- not_live
- Liveness
- dormant
- Checkpoint
- 30 Aug, 03:36 UTC
- Worktree
- MACBOOK_CANONICAL
Acceptance and recommended action
Complete; re-probe source immediately before transfer.
remain_retiredcross-machine reconciliation architect
Source-backed reconciliation design exists; no transfer execution was performed.
- Runtime
- not_live
- Liveness
- dormant
- Checkpoint
- 30 Aug, 01:06 UTC
- Worktree
- none_design_only
Acceptance and recommended action
Complete design-only; must not be interpreted as transfer execution.
remain_retiredAFFiNE light release/install implementer
The implementer returned one clean content-addressed light candidate with empty-sample install, reopen, upgrade, rollback and reinstall evidence. It is not self-verifying. Heavy dependency/build commands and runtime replay remain held; the candidate is NOT_QUALIFIED and NOT_ADMITTED.
- Runtime
- not_live
- Liveness
- dormant
- Checkpoint
- 30 Aug, 08:41 UTC
- Worktree
- AFFINE_ACTION_MODEL_WORKTREE
Acceptance and recommended action
AM-022 independent bounded-light PASS; heavy/runtime evidence remains separately required and no qualification/admission follows.
remain_retired_preserve_candidate_during_AM_022completed Runtime Pack release-evidence adversarial reviewer
Confirmed immutable v0.5.0 restore failure and absence of a v0.5.1 candidate or inherited continuation authority; no future candidate was verified.
- Runtime
- done
- Liveness
- dormant
- Checkpoint
- 30 Aug, 07:10 UTC
- Worktree
- none_read_only_complete
Acceptance and recommended action
Complete for proposal review only; cannot verify a future candidate.
remain_retiredcompleted Great Library collision and successor-snapshot reviewer
Confirmed Great Library order 4/V37 remains held because the current baseline has eight pre-existing Work-schema failures and no corrective release evidence exists.
- Runtime
- done
- Liveness
- dormant
- Checkpoint
- 30 Aug, 07:10 UTC
- Worktree
- none_read_only_complete
Acceptance and recommended action
Complete for proposal review only; Great Library repair and a future candidate require separate owners and evidence.
remain_retiredcompleted persisted-launcher and migration-scope reviewer
Confirmed the correction must cover every persisted launcher consumer and an immutable v0.5.0 migration baseline; a bootstrap-documentation change alone is insufficient.
- Runtime
- done
- Liveness
- dormant
- Checkpoint
- 30 Aug, 07:10 UTC
- Worktree
- none_read_only_complete
Acceptance and recommended action
Complete for proposal scope only; a later exact candidate still requires an independent implementer-excluded verifier.
remain_retiredfresh independent Framework reverifier
Fresh independent reverification passed exact identity, ancestry, 24-path scope, all fixtures and falsifiers, corrected command chain and pre/post non-mutation. The first verifier FAIL remains preserved.
- Runtime
- done
- Liveness
- dormant
- Checkpoint
- 30 Aug, 08:34 UTC
- Worktree
- FRAMEWORK_WORKTREE_B930C54
Acceptance and recommended action
Complete PASS accepted by PM; no qualification or admission effect.
remain_retired_PASS_receipt_preservedcanonical conversion economics schema and calibration owner
The canonical Draft 2020-12 conversion receipt passes 2 positive and 6 negative fixtures. RATINGS covers 35/35. AFFiNE and Teable now each have schema-bound prospective receipts; the AFFiNE prior-work retrospective remains separate and unavailable metrics stay unknown. No value, readiness, compute, portfolio or admission gate is changed.
- Runtime
- working
- Liveness
- healthy
- Checkpoint
- 30 Aug, 08:48 UTC
- Worktree
- ECONOMICS_ROOT
Acceptance and recommended action
Schema and ratings checkpoint PASS; domain owners adopt exact instances while unknown metrics remain unknown.
retire_after_owner_adoption_checkpointTeable host assertion and reusable service-block owner
Existing-work, service-shape, capability, boundary and session contracts are sealed. Full intact service is selected with honest host-session/API-adapter and MIT renderer component candidates. Source writes are limited to already authorized and censused paths. Economics validates; dependency install, tests, services, adjacent paths, qualification and admission remain held.
- Runtime
- working
- Liveness
- healthy
- Checkpoint
- 30 Aug, 08:46 UTC
- Worktree
- TEABLE_DUAL_WORKTREES
Acceptance and recommended action
Exact source handoff, prospective economics, compute-gated focused tests and independent AM-023 PASS; NOT_QUALIFIED and NOT_ADMITTED.
keep_live_AM_021_only_no_adjacent_paths_or_computeindependent AFFiNE bounded-light release verifier
The verifier alone owns AM-022 and may write only the named PM result receipt. It is proving exact identity, manifest bytes, installer/sample lifecycle, negative cases, economics, hold preservation and non-mutation. It cannot implement, repair, run heavy work, qualify or admit.
- Runtime
- working
- Liveness
- healthy
- Checkpoint
- 30 Aug, 08:50 UTC
- Worktree
- AFFINE_ACTION_MODEL_WORKTREE
Acceptance and recommended action
Named independent PASS/FAIL receipt; PASS covers bounded light candidate only and preserves heavy/runtime holds plus NOT_QUALIFIED/NOT_ADMITTED.
keep_live_until_named_AM_022_receipt_then_retireindependent Project OS v0.5.1 candidate verifier
AM-018 independently verifies exact commit/tree/diff, 23-path scope, regressions, source-checkout restore, upgrade/rollback, Actionist rehearsal and clean-state proof. No implementation, push, tag, remote restore or Library action is allowed.
- Runtime
- working
- Liveness
- healthy
- Checkpoint
- 30 Aug, 08:39 UTC
- Worktree
- RUNTIME_PACK_V0_5_1_VERIFIER_WORKTREE
Acceptance and recommended action
Named independent PASS/FAIL receipt; any later external action requires a new PM release checkpoint.
keep_live_until_named_AM_018_receipt_then_retirereserved independent Teable verifier
One independent verifier identity is reserved for the Teable domain, but no verifier is launched until the source owner returns an exact handoff. Reservation creates no compute or admission authority.
- Runtime
- not_live
- Liveness
- dormant
- Checkpoint
- not observed
- Worktree
- TEABLE_VERIFIER_FUTURE_WORKTREE
Acceptance and recommended action
Launch only against an exact Teable candidate after PM admission; verifier cannot implement.
remain_reserved_not_liveTEAM task graph
Tasks, dependencies, evidence
Mini storage/readiness
MINI-MAINTENANCE-SOL · light compute
Historical Phase 2 PASS/READY is preserved, but later Phase 3 callbacks overtake the final handoff and a still later exact delete batch stopped before mutation on concurrent filesystem change. Current acceptance requires a reconciled terminal handoff; fresh capacity fails, so every heavy start remains held.
Portfolio review and decisions
BLOCK-PORTFOLIO-SOL · read_only compute
Data PASS is recorded. Completion of programme adoption requires explicit Buzz identity, ranking weights/top-five reconciliation and Wave 1 decision receipts; no conversion authority is implied.
Framework orientation and validator reconciliation
FRAMEWORK-SOL · light compute
Exact commits bed61f3, 52699a1 and 5fc01be are independently PASS after preserving the first FAIL and correction chain; the exact branch-preservation push is complete. This acceptance does not qualify, admit, promote or release anything.
Whole-program coverage and elastic team source
ACTION-MODEL-PM · light compute
The requested coverage, dependency, responsibility, protocol and elastic TEAM artifacts are present, source-backed and validator-gated; supported central root task TASK-023 is in progress under agency.pm, and Front Door remains a read-only allowlisted consumer.
Programme Front Door source audit and local implementation
FRONTDOOR-SOL · light compute
The scoped source-stability and exact-35-card fix is committed at exact unpushed 47ae4c9 and PM head-rebind verification passes. Publication and deployment remain separate held actions.
Canonical Mini materialization
Unassigned · heavy compute
The source planning pin is current at clean aligned bb5c353, but checkout materialization remains partial. PASS still requires preserved Front Door files, exact pin parity or explicit isolated-baseline decision, clean scoped worktrees, canonical PM merge, current capacity PASS, named executor/verifier, explicit transfer authority and an immediate execution-time source/destination re-probe.
Reconcile accepted OutcomeSpec/ProductSpec
Unassigned · read_only compute
Versioned, measurable product/outcome contract accepted by PM.
First independent verification of Framework commits
FRAMEWORK-VERIFIER-LUNA-01 · read_only compute
First independent receipt is durably FAIL for malformed W1-RS-01; it remains preserved and was not rewritten by later evidence.
Front Door current-source regeneration and approval request
FRONTDOOR-SOL · light compute
Consume one frozen TEAM/schema at exact 47ae4c9, rehash canonical sources through sealing, preserve history, pass contradiction/disclosure/bundle/browser gates, produce loopback screenshots and one exact non-executed publish receipt plus approval request. No parent write, push, deploy, publication or fabricated approval.
Runtime Pack v0.5.0 immutable closure and corrective ownership review
AGENT-RUNTIME-PACK-SOL · read_only compute
v0.5.0 is immutable restore-FAIL/unregistered and the bounded v0.5.1 owner/scope contract is accepted; later candidate and release gates are separate tasks.
Historical AFFiNE release preparation
AFFINE-RELEASE-SOL · read_only compute
Superseded by active dog-food tasks AM-020 and AM-022; no independent acceptance inherited.
Project OS v0.5.1 corrective launcher implementation
AGENT-RUNTIME-PACK-SOL · light compute
One clean exact candidate 6adc9cc/tree efb6051, 23 approved paths and local 101/101 plus schema/restore/package/dog-food PASS; no external action.
Independent verification of Runtime Pack v0.5.1
RUNTIME-PACK-VERIFIER-LUNA-01 · read_only compute
Named independent exact commit/tree/diff/scope/regression/restore PASS with no implementation or external authority.
Canonical conversion economics receipt and calibration evidence
BLOCK-ECONOMICS-SOL · light compute
Strict schema fixtures PASS, 35/35 ratings complete and domain prospective receipts bind exact schema while value/readiness/economics remain separate and unknowns remain unknown.
AFFiNE immutable light release and clean sample install
AFFINE-RELEASE-SOL · light compute
Exact content-addressed light candidate 69d4005 plus empty-sample install/reopen/upgrade/rollback/reinstall evidence and schema-bound prospective economics; AM-022 independent PASS required. Heavy/runtime remain separate holds.
Teable host assertion and reusable service-block package
TEABLE-BLOCK-SOL · light compute
Phase 0-2 decomposition/economics PASS; exact authorized source-first host assertion/session negatives, later compute-gated tests and AM-023 independent PASS. Adjacent paths require amendment; NOT_QUALIFIED and NOT_ADMITTED.
Independent verification of AFFiNE bounded-light candidate
AFFINE-RELEASE-VERIFIER-LUNA-01 · read_only compute
Immediate critical gate: named independent PASS/FAIL over exact 69d4005 identity, bytes, installer lifecycle, negative cases, economics, holds and non-mutation; NOT_QUALIFIED and NOT_ADMITTED.
Independent verification of Teable block family
TEABLE-BLOCK-VERIFIER-LUNA-01 · read_only compute
Reserved only; launch against exact owner handoff to verify auth/session isolation, decomposition honesty, economics and boundaries independently.
Fresh independent Framework reverification after Correction 1
FRAMEWORK-REVERIFIER-LUNA-02 · read_only compute
PASS accepted over exact three commits, 24 paths, correction chain, all fixtures and non-mutation; first FAIL preserved.
Framework FR-04 capability and reuse-shape decision packet
FRAMEWORK-SOL · light compute
One source-backed light local child commit with explicit capability/reuse-shape, rights, maintenance, alternatives, fail-closed fixtures and regressions; new independent verifier required. No second push or release action.
Base shell, host, identity and data contracts
Unassigned · heavy compute
Base/host/data conformance and security tests plus independent PASS.
Conversion fleet
Unassigned · heavy compute
No current acceptance path; requires a new authority decision.
Domain and file ownership
Symbolic scopes, collision state
OWN-PMACTION-MODEL-PMOWN-PORTFOLIOBLOCK-PORTFOLIO-SOLOWN-FRAMEWORKFRAMEWORK-SOLOWN-FRONTDOORFRONTDOOR-SOLOWN-FRAMEWORK-VERIFICATION-RECEIPTFRAMEWORK-VERIFIER-LUNA-01OWN-MAINTENANCEMINI-MAINTENANCE-SOLOWN-AFFINEAFFINE-RELEASE-SOLOWN-RUNTIME-PACKAGENT-RUNTIME-PACK-SOLOWN-FRAMEWORK-REVERIFICATION-2FRAMEWORK-REVERIFIER-LUNA-02OWN-ECONOMICSBLOCK-ECONOMICS-SOLOWN-TEABLETEABLE-BLOCK-SOLOWN-AFFINE-VERIFICATIONAFFINE-RELEASE-VERIFIER-LUNA-01OWN-RUNTIME-PACK-VERIFICATIONRUNTIME-PACK-VERIFIER-LUNA-01OWN-TEABLE-VERIFICATIONTEABLE-BLOCK-VERIFIER-LUNA-01Throughput
Delivered is not accepted
1maintenance pass handoffs
30portfolio candidate cards
25portfolio primary
5portfolio alternates
2framework validator falsifications
1frontdoor source maps
3frontdoor clean local commits
144frontdoor latest frontdoor checks pass
30frontdoor latest bundle checks pass
1pm transfer manifests reviewable
1frontdoor team schema consumer receipts
1framework reproducibility failures
1framework shared record gates local pass
20framework intended semantic corruptions proved
3framework clean local commits
5framework source intake falsifiers pass
41framework p12 pinned repository inputs
2maintenance phase3 verified batches
1portfolio data reviews pass
1runtime pack feature branches published
1runtime pack annotated tags published
2runtime pack documented restore attempts
2runtime pack documented restore failures
1runtime pack corrective PM reviews
3runtime pack corrective read only support reviews
1framework independent verifier admissions
1frontdoor reopened regeneration assignments
0runtime pack corrective design contracts
0runtime pack great library events
1maintenance handoffs
0portfolio handoffs
1portfolio data reviews
0runtime pack releases
0framework releases
0frontdoor publications
0materializations
0conversions
0qualified blocks
0admitted blocks
0deployments
Scale up / down
hold
- This source-backed pre-wave heartbeat has three active assignments: PM, the independent Framework verifier and reopened Front Door AM-016. It does not infer other process state from panes or transcripts.
- SystemDB root task TASK-023 now tracks the persistent programme under PRJ-SISO-AGENCY and agency.pm. It is coordination state only, creates no domain execution authority and does not justify another runtime lane.
- Maintenance runtime is idle at an unanswered re-audit prompt; its final handoff predates Phase 3 and a later nine-path delete batch stopped before mutation on a concurrent filesystem change. PM did not answer or resume it; preserve all owner-gated Oracle/dirty worktrees and require new exact authority before maintenance continues.
- Portfolio data is independently PASS and its owner remains done; Buzz identity, weights, top-five reconciliation and Wave 1 are human decisions, not reasons to wake or spawn a lane.
- FRAMEWORK-VERIFIER-LUNA-01 is admitted independently and read-only against bed61f3, 52699a1 and 5fc01be; Framework owner state is fresh and explicitly non-participating.
- Front Door AM-016 is active at exact HEAD 5d909956 for one light regeneration window; publication and approval remain held.
- Runtime Pack is done fail-closed: the exact branch and immutable v0.5.0 tag are published and restore-FAIL/unregistered. PM amended the proposed v0.5.1 continuation to a bounded design/evidence contract only; the contract is absent, the owner was not reactivated, and no Project OS or Great Library source action is authorized.
- Three bounded read-only corrective reviewers are complete and now durably registered with zero write ownership. Their evidence, Library and launcher-scope findings support AM-D-032 but do not satisfy independent verification for any future candidate and do not create live capacity demand.
- Internal free space is 45,427,347,456 bytes and still fails the 50,000,000,000-byte heavy-start floor. The external Actionist-Compute vault is verified and has 4,024,239,624,192 bytes free, but this heartbeat predates and does not itself admit the requested AFFiNE/Teable worktrees or heavy execution.
Keep live
- ACTION-MODEL-PM
- FRAMEWORK-VERIFIER-LUNA-01
- FRONTDOOR-SOL
Missing lanes
Capacity is not authority
NOWPRODUCT-OUTCOME-SOLmissing task ready spawn held · spawn held
NOWPROGRAM-VERIFIER-SOLframework specific independent verifier active remaining programme scope unassigned · spawn held
NOWMATERIALIZATION-SOLmissing task blocked on execution authority · spawn held
NEXTBASE-HOST-SOLmissing blocked on materialization and product spec · spawn held
LATEREXPERIENCE-SOLmissing deferred · spawn held
LATERRELEASE-OPS-SOLmissing deferred · spawn held
Block pipeline
Eight gates. No “built” shortcut.
Manifest presence is not a working block. Each later stage requires the named positive gate.
Discovered
A canonical capability-source row exists.
canonical source rowsUnderstood / rated
The source row carries at least one direct observed fact. Stars, tags, age, and README claims do not satisfy this gate.
−2907 at this gatePackaged
The donor maps to a block whose central structural validator passes and whose seven linked records resolve. Manifest existence alone does not satisfy this gate.
−102 at this gateBooted
An exact pinned artifact or donor revision has a reproducible start and semantic-health receipt. Process presence and package smoke do not satisfy this gate.
−0 at this gateHost-mounted
A host-owned route, identity boundary, and mount/readback receipt exist for the exact artifact. A planned BindingPlan does not satisfy this gate.
−0 at this gateWorkflow-proven
The declared user workflow completes with semantic readback, persistence, and required negative probes. Synthetic contract fixtures alone do not satisfy this gate.
−1 at this gateQualified
An independent dossier positively allowlists QUALIFIED for exact artifact and environment digests, with every required evidence family passing.
−0 at this gateAdmitted
An authorized human decision admits the exact qualified release for at least one named tenant, application, or environment scope.
−0 at this gateAFFiNE
Last full gate host mounted
Next workflow proven
Teable
Last full gate understood rated
Next packaged
Chatwoot
Last full gate understood rated
Next packaged
Block portfolio
35 candidates; 35 Shaan decisions still pending
Portfolio recommendations are proposals. Only a durable Shaan or Agent Zero Accept / Hold / Reject record changes the decision column.
Proposed Wave 1
proposed not approved
Replay toeverything/AFFiNE, then teableio/teable, chatwoot/chatwoot, activepieces/activepieces, metabase/metabase. Conversion authorized: no.
01ChatwootSupport / shared inboxPortfolio ACCEPTShaan PENDING
One tenant-scoped place to receive, assign, answer, and audit customer conversations across support channels.
- Reuse shape
- intact_service_same_origin_proxy
- Evidence
- observed · runtime_browser_observed
Next proof. Replay the smallest workflow against a fresh pinned revision and record tenant-denial, worker/realtime, attachment namespace, restart, and visual-state receipts.
Why top 35. Broad service outcome, mature operator UX, and the strongest service-shaped falsifier with an authenticated historical runtime precedent.
USER_NOMINATED User nomination is not an A/H/R decision.
Open public repository ↗02AFFiNEKnowledge / docs / wikiPortfolio ACCEPTShaan PENDING
Create, organize, and reopen collaborative documents and canvases inside an Actionist workspace.
- Reuse shape
- assimilated_package_plus_sidecar_service
- Evidence
- observed · accepted_local_baseline
Next proof. Replay the accepted package from a clean host fixture and pin source, patch, browser-state, denial, restart, and unmount hashes as the calibration anchor.
Why top 35. Accepted baseline and the most complete local proof of the assimilated-package plus sidecar shape; it anchors what good evidence looks like.
USER_NOMINATED User nomination is not an A/H/R decision.
Open public repository ↗03PlaneProjects / cases / workflowPortfolio ACCEPTShaan PENDING
Plan and deliver client or internal work through projects, issues, states, assignees, and cycles.
- Reuse shape
- intact_service_same_origin_web_and_api_proxy
- Evidence
- observed · runtime_browser_observed
Next proof. Fresh pinned replay with cross-tenant enumeration denial, event/read-back checks, mobile capture, and no donor-bundle mutation.
Why top 35. Complete project UX, broad reusable workflow, and a strong historical same-origin service proof with create/move/restart/delete coverage.
Open public repository ↗04TeableStructured data / internal toolsPortfolio ACCEPTShaan PENDING
Give a host-selected workspace an Airtable-like grid for typed records, views, filters, sorting, and attachments.
- Reuse shape
- contextual_native_service_surface
- Evidence
- observed · native_grid_runtime_observed
Next proof. Close the host-session contract, then capture native desktop/mobile selected-base CRUD, attachment namespace, wrong-tenant/revoked denial, restart, and unmount receipts.
Why top 35. HALO makes the Airtable-class structured-data block strategically required. Fresh SISOCRM evidence proves the native grid is real; unfinished Actionist host binding remains a readiness issue, not a reason to lower its portfolio value.
USER_NOMINATED User nomination is not an A/H/R decision.
Open public repository ↗05TwentyCRM / salesPortfolio ACCEPTShaan PENDING
Run accounts, contacts, opportunities, activities, and a revenue pipeline in one tenant-scoped CRM.
- Reuse shape
- intact_service_named_host_route
- Evidence
- observed · runtime_precedent_recorded
Next proof. Bind the newer SISOCRM runtime receipt to a pinned revision and replay account/opportunity CRUD, enterprise-marker absence, tenant denial, restart, and unmount.
Why top 35. Best dedicated modern CRM donor in the existing set and already exercised as a native SISOCRM donor runtime.
Open public repository ↗06ActivepiecesAutomation / integrationsPortfolio ACCEPTShaan PENDING
Let operators connect systems and run repeatable automations with visible triggers, steps, credentials, runs, and approvals.
- Reuse shape
- embedded_module_with_worker_service
- Evidence
- inspected · source_read_not_runtime
Next proof. Pin and read the credential store, piece catalogue, webhook, worker, retry, audit, and approval seams; then run only a synthetic no-egress workflow after PM authorization.
Why top 35. Very broad cross-recipe leverage and one of the best tests of catalogue boundaries, secret ownership, queued execution, and safe side effects.
USER_NOMINATED User nomination is not an A/H/R decision.
Open public repository ↗07UmamiAnalytics / BI / product analyticsPortfolio ACCEPTShaan PENDING
Give teams privacy-focused web and product analytics with a focused, understandable dashboard.
- Reuse shape
- intact_service_with_isolated_database
- Evidence
- observed · runtime_browser_observed
Next proof. Replay deterministic event ingestion with host tenant claims, metric export/read-back, cross-tenant denial, restart, and captured empty/error/loading states.
Why top 35. Narrower than Superset but materially easier to reason about, with an authenticated desktop/mobile runtime and restart receipt already present.
Open public repository ↗08FlowableProjects / cases / workflowPortfolio ACCEPTShaan PENDING
Run durable business processes, human tasks, cases, rules, approvals, timers, and audit while Actionist owns the operator surface.
- Reuse shape
- engine_plus_actionist_owned_surface
- Evidence
- inspected · engine_source_inspected
Next proof. Pin and read REST/event/job/tenant seams, then—only after PM authorization—run a one-case fixture with negative actor/tenant and restart replay.
Why top 35. Highest framework-learning diversity: it tests engine-plus-owned-surface reuse, durable human authority, replay, and a non-JavaScript runtime.
Open public repository ↗09DocumensoE-sign / documents / formsPortfolio ACCEPTShaan PENDING
Prepare a document, collect signatures, and retain signer state and an audit trail without making email delivery the acceptance dependency.
- Reuse shape
- intact_service_or_reference_service
- Evidence
- observed · synthetic_lifecycle_precedent
Next proof. Bind the historical lifecycle receipt to a pinned source and replay PDF/envelope/signer/audit/restart with no external email and explicit wrong-signer/tenant denial.
Why top 35. A highly legible end-to-end business workflow with files, external participants, status transitions, and audit evidence; prior SISOCRM work reduced first-runtime uncertainty.
USER_NOMINATED User nomination is not an A/H/R decision.
Open public repository ↗10MetabaseAnalytics / BI / product analyticsPortfolio ACCEPTShaan PENDING
Let operators and clients ask questions, build governed dashboards, schedule alerts, and embed tenant-scoped analytics over business data.
- Reuse shape
- embedded_analytics_service_boundary
- Evidence
- inspected · official_product_and_source_inspected
Next proof. Pin a revision and read the open-source embed/API, permissions, row-security, database-credential, alert/worker, export, and edition seams; request PM authorization separately before any runtime.
Why top 35. HALO's general BI choice combines unusually complete self-service UX, governed permissions, alerts/subscriptions, and multiple embedding seams. It is broader than Umami and more product-accessible than Superset.
USER_NOMINATED User nomination is not an A/H/R decision.
Open public repository ↗11PostizMarketing / social / contentPortfolio ACCEPTShaan PENDING
Plan, approve, schedule, and audit content across social channels from a shared calendar.
- Reuse shape
- intact_service_with_channel_adapters
- Evidence
- observed · runtime_precedent_recorded
Next proof. Attach the pinned runtime receipt, read the public API/credential/queue seams, and replay a no-egress scheduled approval with idempotency, restart, and tenant denial.
Why top 35. Strong category coverage, polished calendar/publishing UX, channel credential complexity, and a recorded SISOCRM persisted-runtime proof.
USER_NOMINATED User nomination is not an A/H/R decision.
Open public repository ↗12ListmonkMarketing / social / contentPortfolio ACCEPTShaan PENDING
Run newsletter audiences, lists, templates, campaigns, and transactional messages from a compact self-hosted service.
- Reuse shape
- native_binary_intact_service
- Evidence
- observed · runtime_and_official_product_observed
Next proof. Replay a fresh pinned no-send workflow with tenant denial, consent/unsubscribe, queue idempotency, bounce/provider isolation, backup/restart and host-session evidence.
Why top 35. It adds a proven, low-footprint audience-operation shape that is materially different from Postiz social publishing and Mautic lifecycle automation.
Open public repository ↗13Hi.EventsScheduling / eventsPortfolio ACCEPTShaan PENDING
Create branded events, sell or issue tickets, manage attendees and check-in, communicate, refund, and report on event revenue and operations.
- Reuse shape
- intact_event_ticketing_service
- Evidence
- observed · runtime_and_official_product_observed
Next proof. Replay a fresh free-ticket workflow with provider/payment disabled, organizer and attendee auth, QR one-time/replay denial, tenant isolation, restart, export, cancel/refund state and file deletion.
Why top 35. It turns the thin scheduling category into a distinct end-to-end event/ticketing workflow and brings an existing local runtime precedent, rather than duplicating Cal.com's appointment outcome.
Open public repository ↗14ERPNextFinance / invoicing / accountingPortfolio ACCEPTShaan PENDING
Move a customer from quote to order, invoice, payment state, and stock movement with one auditable operational model.
- Reuse shape
- intact_service_or_generated_domain_pattern
- Evidence
- inspected · metadata_and_product_source_inspected
Next proof. Read company/site, document lifecycle, ledger, scheduler, API/event, and reversal seams for the quote-to-invoice fixture before any runtime.
Why top 35. Exceptional cross-business breadth and a strong composite-system falsifier, while forcing discipline about choosing one bounded workflow instead of absorbing an ERP.
Open public repository ↗15Cal.comScheduling / eventsPortfolio ACCEPTShaan PENDING
Publish availability and book a tenant-owned appointment correctly across time zones without double booking.
- Reuse shape
- embedded_scheduling_engine_or_intact_service
- Evidence
- inspected · product_metadata_inspected
Next proof. Pin and inspect availability, booking transaction, timezone, idempotency, OAuth, webhook, and cancellation seams; define a no-provider-write fixture.
Why top 35. Scheduling is a ubiquitous business block with crisp correctness tests around timezone, availability, provider calendars, and irreversible side effects.
Open public repository ↗16PocketBaseStructured data / internal toolsPortfolio ACCEPTShaan PENDING
Supply a compact tenant-bound backend for records, authentication, realtime subscriptions, and files when a full product donor is excessive.
- Reuse shape
- compact_backend_service_adapter
- Evidence
- inspected · metadata_inspected
Next proof. Read auth/rule/hook/migration/file APIs at a pinned revision and prove tenant-scoped record, realtime, file, restart, backup, and rollback behavior.
Why top 35. A radically different one-binary backend shape that can falsify whether Actionist needs a large service for every stateful block.
Open public repository ↗17FormbricksE-sign / documents / formsPortfolio ACCEPTShaan PENDING
Collect targeted in-app, website, link, and email feedback, collaborate on surveys, and analyze customer experience signals.
- Reuse shape
- embedded_feedback_product_service
- Evidence
- inspected · official_product_and_source_inspected
Next proof. Pin a revision and source-read SDK/event targeting, identity attributes, response tenancy, consent/deletion, analytics derivation, email/integration workers and edition boundary.
Why top 35. It adds a complete feedback/experience product, not another generic form renderer: targeting, delivery channels, collaboration and analysis make it a stronger business workflow counterpoint to SurveyJS and Open Forms.
Open public repository ↗18Kitsu + ZouProjects / cases / workflowPortfolio ACCEPTShaan PENDING
Coordinate creative productions across projects, shots, assets, tasks, artists, previews, versions, reviews, deliveries, files, and synchronized pipeline events.
- Reuse shape
- paired_product_ui_plus_domain_api_service
- Evidence
- inspected · official_product_pair_inspected
Next proof. Pin both revisions as one module and source-read their version compatibility, auth/roles, project tenancy, event stream, preview/file storage, migrations, workers and deployment contract; runtime requires separate PM authorization.
Why top 35. HALO deliberately selects the complete Kitsu product together with its Zou API. It is the portfolio's strongest vertical production/review module and a valuable two-repository product-plus-service boundary.
USER_NOMINATED User nomination is not an A/H/R decision.
Open public repository ↗19Frappe HRMSHR / peoplePortfolio ACCEPTShaan PENDING
Manage employee records, leave, attendance, team calendar, and people workflows with an auditable roster.
- Reuse shape
- intact_frappe_app_service
- Evidence
- observed · runtime_precedent_recorded
Next proof. Attach the prior pinned receipt and replay synthetic employee/leave/team-calendar flow with company/site denial, scheduler, restart, file namespace, and privacy-safe teardown.
Why top 35. Closes a required capability gap and has a prior native app/scheduler/Redis/team/calendar roster PASS in SISOCRM work.
Open public repository ↗20InvenTreeCommerce / inventory / operationsPortfolio ACCEPTShaan PENDING
Track parts, stock locations, quantities, movements, and low-stock state for operational teams.
- Reuse shape
- intact_service
- Evidence
- inspected · metadata_inspected
Next proof. Read stock transaction, permissions, location, API/event, file, migration, and reversal seams at a pinned revision.
Why top 35. A focused operational system with concrete physical-world state, clearer boundaries than ERPNext, and strong negative tests around stock isolation and movement history.
Open public repository ↗21MedusaCommerce / inventory / operationsPortfolio ACCEPTShaan PENDING
Compose catalogue, cart, order, payment, fulfillment, and inventory capabilities behind an owned commerce surface.
- Reuse shape
- embedded_domain_modules_plus_owned_surface
- Evidence
- inspected · metadata_inspected
Next proof. Pin and read catalogue/order/inventory workflow, module/event, tenancy, idempotency, provider, migration, and cancellation seams.
Why top 35. A modular commerce donor that tests embedded services and event-driven domain boundaries instead of importing a full storefront.
Open public repository ↗22GhostMarketing / social / contentPortfolio ACCEPTShaan PENDING
Publish content, newsletters, memberships, and subscriptions from a mature editorial product.
- Reuse shape
- intact_publishing_service_or_pattern_reference
- Evidence
- inspected · metadata_and_product_scope_inspected
Next proof. Read Admin/Content APIs, site/member authority, scheduler, email/billing provider, file/theme, export, and deletion seams at a pinned revision.
Why top 35. Combines polished editorial UX with membership and notification patterns, giving content coverage that Postiz does not.
Open public repository ↗23NovuAutomation / integrationsPortfolio ACCEPTShaan PENDING
Define and audit multichannel notification workflows while Actionist controls tenant, recipient, template, and credential authority.
- Reuse shape
- notification_service_adapter
- Evidence
- inspected · metadata_inspected
Next proof. Pin and inspect subscriber, tenant, preference, template, credential, worker, retry, idempotency, audit, and in-app-feed seams.
Why top 35. A distinct notification-infrastructure shape with broad reuse and hard lessons around preferences, provider credentials, queues, retries, and audit.
Open public repository ↗24BlnkFinance / invoicing / accountingPortfolio ACCEPTShaan PENDING
Give transaction-heavy products a double-entry ledger that records value movement, manages balances and identities, preserves history, and reconciles external records.
- Reuse shape
- ledger_engine_service_adapter
- Evidence
- inspected · official_api_product_inspected
Next proof. Pin a revision and perform a source-only invariant audit covering postings, balance history, reversal, idempotency, reconciliation, tenant/API authority, webhooks, migrations and backup; runtime requires separate PM authorization.
Why top 35. HALO selects the cleanest adapter-shaped financial core in the inspected pack. It adds invariant-heavy engine learning that ERPNext and Lago cannot provide, without pretending to be an AP/AR user product.
USER_NOMINATED User nomination is not an A/H/R decision.
Open public repository ↗25LagoFinance / invoicing / accountingPortfolio ACCEPTShaan PENDING
Meter usage, apply pricing, generate invoices, and retain an auditable billing lifecycle.
- Reuse shape
- intact_billing_service
- Evidence
- inspected · metadata_inspected
Next proof. Read event ingestion, idempotency, aggregation, invoice immutability, credit, tenant, webhook, export, migration, and rollback seams.
Why top 35. Adds usage-based billing rather than generic accounting and provides sharp tests for immutability, idempotency, corrections, and financial authority.
Open public repository ↗26SurveyJS Form LibraryE-sign / documents / formsPortfolio ACCEPTShaan PENDING
Render validated multi-step forms and capture structured intake inside an Actionist-owned data and authority boundary.
- Reuse shape
- extracted_ui_package
- Evidence
- inspected · metadata_inspected
Next proof. Pin package exports and inspect schema, validation, accessibility, upload, CSS isolation, dependencies, build, and unmount behavior.
Why top 35. A lightweight extracted-package shape that counterbalances large services and provides a clean renderer/schema/validation falsifier.
Open public repository ↗27Buzz (Block)Marketing / social / contentPortfolio ACCEPTShaan PENDING
Put humans and agents in shared rooms where conversations, canvases, workflows, approvals, git events, search, and audit share one signed event model.
- Reuse shape
- desktop_client_plus_event_relay_service
- Evidence
- inspected · official_readme_and_images_inspected
Next proof. Pin a revision and perform source-only reads of identity/community/event/workflow/file/deployment seams; request PM authorization separately before any checkout or runtime.
Why top 35. Shaan and HALO confirmed block/buzz. It offers unusually high learning value around human-agent parity, signed event logs, community/room authority, workflows, canvases, git events and a desktop-plus-relay boundary.
USER_NOMINATED User nomination is not an A/H/R decision.
Open public repository ↗28PayloadStructured data / internal toolsPortfolio ACCEPTShaan PENDING
Define typed collections, admin workflows, access control, files, and APIs inside a Next.js-native host.
- Reuse shape
- embedded_framework_and_generated_admin_surface
- Evidence
- inferred · discovery_metadata_only
Next proof. Read config, auth/access, collection, migration, admin, hook/job, upload, and plugin seams against the actual Actionist Next host before any build.
Why top 35. A host-native embedded framework shape that contrasts with intact donor services and can generate many bounded internal-tool blocks.
Open public repository ↗29BookStackKnowledge / docs / wikiPortfolio ACCEPTShaan PENDING
Give teams a simple shelf/book/chapter/page model for durable internal documentation and client-facing knowledge.
- Reuse shape
- intact_service
- Evidence
- inspected · official_product_scope_and_screenshot_link_inspected
Next proof. Update the source registry to the Codeberg identity after PM merge, then read auth/role/API/revision/file/export/backup seams at a pinned revision.
Why top 35. A focused, approachable knowledge product that contrasts with AFFiNE's broader canvas/workspace complexity and provides a simpler intact-service option.
Open public repository ↗30Open FormsE-sign / documents / formsPortfolio ACCEPTShaan PENDING
Publish dynamic forms, collect client intake, and move submissions into a traceable portal/case workflow.
- Reuse shape
- intact_portal_service_or_domain_pattern
- Evidence
- inspected · metadata_inspected
Next proof. Read form definition, resume token, auth, file, submission/case, integration, tenant, export/delete, and deployment seams at a pinned revision.
Why top 35. A stronger end-to-end intake/case falsifier than a renderer alone and useful for client portal workflows, despite thin current evidence.
Open public repository ↗31DiscourseClient portal / community / LMSPortfolio ACCEPTShaan PENDING
Host durable client or member discussion, moderation, searchable knowledge, and trust/role workflows.
- Reuse shape
- intact_community_service
- Evidence
- inferred · discovery_metadata_only
Next proof. Pin and read SSO, group/category, trust/moderation, API/webhook, upload, search, worker, tenant/site, backup, and unmount seams.
Why top 35. Ensures the initial set contains a real community product rather than treating a portal as a form page; it also stress-tests a mature Ruby/realtime/moderation service.
Open public repository ↗32Apache SupersetAnalytics / BI / product analyticsPortfolio ACCEPTShaan PENDING
Explore datasets, build dashboards, and deliver tenant-scoped BI.
- Reuse shape
- intact_bi_service
- Evidence
- inspected · metadata_inspected
Next proof. Promote only if Shaan needs full BI beyond Umami; then read tenant filters, roles, database credentials, scheduled reports, workers, and export seams.
Why top 35. The expanded top 35 retains Superset as the analyst-heavy, permissively licensed BI counterfactual to HALO-selected Metabase and the lighter proven Umami runtime.
Open public repository ↗33MauticMarketing / social / contentPortfolio ACCEPTShaan PENDING
Run segments, campaigns, lead scoring, and lifecycle marketing automation.
- Reuse shape
- intact_marketing_service
- Evidence
- inspected · metadata_inspected
Next proof. Promote only if lifecycle marketing is a Wave need; first read tenant/contact/segment/campaign/credential/queue/provider seams.
Why top 35. The expanded top 35 retains lifecycle marketing automation as a distinct outcome from Postiz social publishing, Listmonk newsletters, Ghost publishing and Buzz collaboration.
Open public repository ↗34Paperless-ngxE-sign / documents / formsPortfolio ACCEPTShaan PENDING
Ingest, OCR, classify, search, and archive operational documents.
- Reuse shape
- intact_document_processing_service
- Evidence
- inspected · metadata_inspected
Next proof. Promote when OCR/archive is a named requirement; inspect file lifecycle, OCR workers, index, retention, tenant, backup, and deletion seams.
Why top 35. The expanded top 35 retains document ingestion, OCR, classification, search and archive as a separate lifecycle from Documenso signing and form products.
Open public repository ↗35MeilisearchStructured data / internal toolsPortfolio ACCEPTShaan PENDING
Add fast tenant-filtered search to blocks that own their primary data elsewhere.
- Reuse shape
- search_service_adapter
- Evidence
- inspected · metadata_inspected
Next proof. Promote only with a named search consumer; then inspect mandatory filters, keys, index tasks, delete, backup, and upgrade seams.
Why top 35. The expanded top 35 keeps one compact search-service adapter to test mandatory tenant filters, replicated-data deletion and consumer-owned indexing boundaries.
Open public repository ↗Existing blocks
Proof, falsification, and the next donor
A package may be structurally valid while workflow, qualification, release, and admission remain held.
Host-mounted; workflow proof held
11 of 12 gates are full PASS; 1 carries a hold. Safe for user verification: no.
A1-auth-topology-and-readbackPASS
Host session established issuer context; client, principal, workspace, expiry and capabilities were validated; backend auth and GraphQL workspace read-back returned 200 and semantic health was healthy.
A2-same-document-mountPASS
Compiled AFFiNE mounted into the host block target on the non-root workspace route; DOM contained no iframe and no donor login/marketing/download chrome.
A3-create-edit-savePASS
A uniquely named document was created and its title and body were edited in the fresh positive browser context; host health remained healthy.
A4-reload-find-reopenPASS
Browser reload returned All docs, the unique title/body were found, the document was reopened, and both inline editors matched the saved values.
A5-backend-restart-persistencePASS
Backend wrapper 95831 was terminated; wrapper 50454 and listener 50486 served port 3012; reload/find/reopen returned the same unique title/body with healthy semantic health.
A6-page-assets-and-backend-prefixPASS
Positive browser network captured issuer 200, backend auth/GraphQL/document 200, nested module paths, and 30 nested font requests with 200; no root /fonts failure occurred.
A7-worker-asset-and-rewritePASS_WITH_HOLD
Worker asset loaded at the nested module path; generated worker JavaScript contains the backend request/socket bridge and the completed CRUD workflow depended on it.
Hold. A separate worker-only request/response trace was not captured by the browser CLI and remains unproven.
A8-wrong-workspace-denialPASS
Fresh wrong-workspace context rendered Workspace denied, made no issuer/backend API request, and showed no donor login/chrome; console had zero errors and warnings.
A9-missing-and-revoked-sessionPASS
Settings revoke action returned the host to Knowledge; context fetch then failed closed as Block error / 401. Direct missing and revoked issuer context/session and donor auth-method probes all returned 401.
A10-donor-login-unreachablePASS
Positive, wrong-workspace and revoked terminal states presented no donor sign-in/login/download/marketing surface; the host owns the only tested session/revoke action.
A11-ordered-cleanupPASS
Host and SDK regression tests prove donor unmount observes populated DOM before host clearing; clearing occurs in finally and session revoke follows teardown. Browser route teardown produced no removeChild crash.
A12-clean-positive-browserPASS
Fresh positive browser context completed final create/edit/reload/restart flow with zero console errors and zero warnings.
Open evidence families
- direct worker/realtime request trace
- two-identity cross-workspace/data isolation
- browser wrong-client/expired/missing-capability probes
- rights/provenance, mobile/accessibility, donor upgrade replay, rollback rehearsal and human admission
Fails packaged
FAIL: intact service is missing required service evidence.
Holds
- The intact-service manifest has no required service_evidence object.
- Authenticated native desktop/mobile, attachments, host session, independent isolation, restore, and rights proof remain open.
Future service-shaped donor
No current package exists and conversion is not authorized.
Next gate
Portfolio and PM authorization, then fresh pinned source proof.
Base + framework
The shell is proven; the factory is not released
Fixture evidence, generic semantics, and release readiness stay separate.
Host shell and token contract
- Token contract
- actionist-host-v1
- Desktop overflow
- clean
- Mobile overflow
- clean
- Console errors
- 0
Session broker
Disposable issuer fixture only; no production authentication or session broker is admitted.
Registry acceptance
No block registry admission exists for an explicit product scope.
Generic factory / SDK / schema readiness
- Implementation started
- yes
- Generic promotions
- 0
- Second shape
- not proven
- P12
- FAIL · 87 checks
Shared validator
Dog-food lessons
- Manifest presence is not a working-block claim.
- Structural validation does not prove record semantics or qualification.
- A verifier is not independent when it shares the producer's input assumption.
- Empty tenant or application scope means admitted nowhere.
Second donor gate
A service-shaped donor starts only after portfolio and PM authority, invalid fixtures, and an independent verifier slot.
Decisions + blockers
Authority is visible at the gate
Compute readiness, permission, acceptance, and publication are independent decisions.
Framework and Front Door may make scoped light writes only in their assigned worktrees.
A passing compute prerequisite does not grant task-specific heavy-build authority.
No conversion fleet is authorized.
Current screenshots and the gate report require explicit Agent Zero or Shaan approval before deployment.
Human gates
Record Accept, Hold, or Reject separately from portfolio recommendations.
ShaanConfirm whether block/buzz is the intended nomination.
ShaanApprove an evidence wave before any conversion.
Shaan / PMReview current screenshots and gate report, then issue an explicit publication receipt.
Shaan / Agent ZeroContradiction gates
What the snapshot refuses to smooth over
FD-C01Required sources exist and parse.
FD-C02PM TEAM schema validated with 0 finding(s).
FD-C03TEAM runtime or active semantic checkpoints exceed a declared freshness budget.
FD-C04Active non-external agents are absent from keep_live and retiring lists: FRAMEWORK-SOL, AGENT-RUNTIME-PACK-SOL, BLOCK-ECONOMICS-SOL, TEABLE-BLOCK-SOL, AFFINE-RELEASE-VERIFIER-LUNA-01, RUNTIME-PACK-VERIFIER-LUNA-01.
FD-C05Public stages do not use manifest presence as a working-block claim.
FD-C06Block stages carry current structural validation and explicit holds.
FD-C07Qualification and admission use positive allowlists and explicit scope.
FD-C08Exactly 35 source-backed cards keep portfolio proposals and Shaan decisions separate.
FD-C09Pipeline counts are monotone with aggregate drop reasons.
FD-C10The public-bundle disclosure scan runs after snapshot packaging.
FD-C11Route and HTML closure runs after page generation.
FD-C12Rendered labels are checked against this projection after page generation.
FD-C13Snapshot carries build, commit, source observation, hash, and verdict fields.
FD-C14Great Library candidate inventory is not represented as an Actionist Work or Release.
FD-C15The reviewed commit identifies every scoped projection input.
Outward publication
FAIL until every blocker and approval gate clears
FD-C03Publish source framework is stale.FD-C03TEAM runtime snapshot is outside its declared freshness budget.FD-C04TEAM scale recommendation omits active agents: FRAMEWORK-SOL, AGENT-RUNTIME-PACK-SOL, BLOCK-ECONOMICS-SOL, TEABLE-BLOCK-SOL, AFFINE-RELEASE-VERIFIER-LUNA-01, RUNTIME-PACK-VERIFIER-LUNA-01.PUBLICATION_APPROVAL_MISSINGExplicit screenshot-review publication approval is absent.
Evidence + library
Receipts, source hashes, and public identities
Machine locators are never published. Source IDs, observations, hashes, public repositories, and Great Library identities are.
Great Library
Candidate inventory, not an Actionist Work or Release
gls:source-inventory:4f6c3a98-6e45-4e26-9e1b-2a9b0c3f7d41 · read stage · owner unassigned
- Observed
- 30 Aug, 09:02 UTC
- Source time
- 30 Aug, 07:55 UTC
- Hash
47ae4c9f640b- Publish required
- yes
- Observed
- 30 Aug, 01:53 UTC
- Source time
- 30 Aug, 07:55 UTC
- Hash
13db0f29b179- Publish required
- yes
- Observed
- 30 Aug, 08:52 UTC
- Source time
- 30 Aug, 08:50 UTC
- Hash
7fa32dd70536- Publish required
- yes
- Observed
- 30 Aug, 08:53 UTC
- Source time
- 30 Aug, 08:50 UTC
- Hash
3d54880d089c- Publish required
- yes
- Observed
- 30 Aug, 08:51 UTC
- Source time
- 30 Aug, 08:51 UTC
- Hash
ef1f3fa3eea4- Publish required
- yes
- Observed
- 30 Aug, 09:02 UTC
- Source time
- 30 Aug, 08:55 UTC
- Hash
43e4cb9c5255- Publish required
- yes
- Observed
- 30 Aug, 07:46 UTC
- Source time
- 30 Aug, 07:33 UTC
- Hash
6fdefb777ff5- Publish required
- yes
- Observed
- 30 Aug, 08:31 UTC
- Source time
- 30 Aug, 08:31 UTC
- Hash
1061d1fce664- Publish required
- yes
- Observed
- 30 Aug, 01:15 UTC
- Source time
- 30 Aug, 01:15 UTC
- Hash
d261fecdab0d- Publish required
- yes
- Observed
- 30 Aug, 01:53 UTC
- Source time
- 30 Aug, 07:55 UTC
- Hash
17fa58e6d0ee- Publish required
- yes
- Observed
- 30 Aug, 01:53 UTC
- Source time
- 29 Aug, 00:00 UTC
- Hash
c8c4cf5264ac- Publish required
- yes
- Observed
- 04 Aug, 04:02 UTC
- Source time
- 02 Aug, 19:10 UTC
- Hash
b53761cabc20- Publish required
- yes
- Observed
- 30 Aug, 09:02 UTC
- Source time
- 30 Aug, 07:55 UTC
- Hash
47ae4c9f640b- Publish required
- yes