3 people ce0501b93e refactor(cmdcore): split Safety into its own enum tier with Risk default ...

Risk (runtime confirmation) and Safety (schema metadata) are two
independent enums composed at embed time: explicit SafetyDecl fields >
CommandSpec.Safety tier > Risk.SafetyDefault(). The tier fill now also
covers idempotency, so an enum-only declaration is self-sufficient and
validateSchemaDecl no longer needs safety completeness checks.

devapp reclassifies its write leaves by reversibility: reversible
mutations declare LeafSafetyWrite (risk high->medium), create/robot
submit/version create declare LeafSafetyHighWrite, and delete/version
publish declare LeafSafetyDestructive (publish effect
write->destructive). Shared hand-written safety constants are deleted.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Cursor <cursoragent@cursor.com>

2026-07-30 20:37:40 +08:00

..

cmdcore_test.go

feat(cmdcore): declare-or-annotate homology with full ToolSpec authority

2026-07-30 20:36:31 +08:00

cmdcore.go

refactor(cmdcore): split Safety into its own enum tier with Risk default

2026-07-30 20:37:40 +08:00

framework_declare_doc_test.go

feat(cmdcore): typed SchemaDecl final source with assembly guards

2026-07-30 20:36:33 +08:00

schema_decl_test.go

refactor(cmdcore): split Safety into its own enum tier with Risk default

2026-07-30 20:37:40 +08:00

schema_decl.go

refactor(cmdcore): split Safety into its own enum tier with Risk default

2026-07-30 20:37:40 +08:00