Phase 1 — legal/licence gate and adapter hardening

[thebeastagi]

Scope (ROADMAP.md, Phase 1)

• Obtain explicit licences/permissions for any ASTRA-family code reuse before extraction.
• Replace synthetic-only adapter gate with a trust-tiered adapter registry.
• Add subprocess isolation and OS-level resource limits for untrusted adapters.
• Add signed ledger checkpoints or external anchoring.

Owner-task addition (Robin, 2026-07-19): an explicit owner-permission/licence manifest mechanism — no third-party code without a recorded permission entry.

Acceptance checklist

• Trust-tiered adapter registry replaces the Phase-0 synthetic-only gate (validate_adapter); tiers distinguish synthetic / first-party real-data / untrusted third-party adapters.
• Subprocess isolation with OS-level resource limits (rlimit CPU/address-space/files, wall-clock timeout) available for untrusted adapters; contained failure on limit violation.
• Signed ledger checkpoints (HMAC-SHA256, key from environment only, never stored) and/or external anchor export; ledger verifier validates checkpoint continuity.
• Permission manifest mechanism: machine-readable owner-permission entries; adapters declaring third-party provenance cannot register without a matching entry. Repo ships with zero ASTRA-family permissions (licensing unresolved — clean-room invariant stands).
• Tests green (ruff + pytest 3.10/3.11/3.12). Docs (README/ROADMAP/ARCHITECTURE) updated truthfully.
• Invariants: L4 human-gated; no discovery claims; no secrets; $0 spend.

Dependencies

None (first phase after shipped Phase 0).

Tasks

• P1-T1: permission/licence manifest mechanism #12 permission/licence manifest mechanism
• P1-T2: trust-tiered adapter registry #13 trust-tiered adapter registry
• P1-T3: subprocess isolation + OS resource limits for untrusted adapters #14 subprocess isolation + OS resource limits
• P1-T4: signed ledger checkpoints + external anchor export #15 signed ledger checkpoints + external anchor export
• P1-T5: Phase 1 docs + version 0.2.0 #16 Phase 1 docs + version 0.2.0

[thebeastagi]

All tasks complete and merged in #35. Trust-tiered registry, permission manifest (empty — clean-room enforced), rlimit isolation, HMAC checkpoints/anchors shipped in v0.2.0.

• All task issues closed (see checklist above)
• CI green on merge (3.10/3.11/3.12)
• Invariants verified: L4 human-gated, no discovery claims, clean-room, no secrets