mirror of https://github.com/garrytan/gstack.git
f7bde4391d
Ships an opt-in stakeholder-lens layer on /review that runs after the
technical Review Army completes. Zero --lens = zero behavior change.
Core framing: a lens is a loss function, an evidence model, a
materiality threshold, and an escalation policy applied to a bounded
evidence set. Not stakeholder impersonation.
Two lenses in this release:
- insider-abuse (READY) — legitimate authority converted to unauthorized
outcome without attribution, detection, or approval
- enterprise-readiness (DRAFT) — deployability under CISO / procurement /
operations governance; ships as DRAFT pending its own Go/No-Go eval
Four additional lens specifications ship in DRAFT / DEFERRED status for
future evaluation: incentive-abuse, regulatory-defensibility,
investor-diligence, competitive-durability.
Design guarantees:
- Preserves Review Army unchanged (P1); no touching of review-army.ts,
review/specialists/, or review/checklist.md
- Independent lens dispatch (Stage A, no tech findings) followed by
deterministic reconciliation (Stage B) — clean incremental-value
measurement
- CTO synthesis as a third stage (not another lens): identifies shared
technical primitives across independently derived lens findings
without collapsing distinct perspectives
- Evidence clustering (SHARED_EVIDENCE / MULTI_LENS / EVIDENCE_CLUSTER)
replaces cross-lens 'confirmation'; production exact-match misses are
not marked NOVEL
- Read-only tool boundary; lens subagents receive a bounded evidence
bundle, never repository browse tools
- All stakeholder findings default to ASK / INVESTIGATE; autofix_policy
ask_always on every lens (no stakeholder auto-fix)
- Append-only event log at ~/.gstack/projects/<slug>/lens-events.jsonl
with stable finding IDs; sensitive-data controls (local-only,
owner-only permissions, secret-scanned, GBrain opt-in only)
- Per-lens regression harness (9 fixture types per lens) and per-lens
Go/No-Go criteria for lens graduation to READY
Insider-abuse ships as the Phase 1 validation lens. Enterprise-readiness
remains DRAFT until its own evaluation gate runs. No Phase 1 lens is
claimed as empirically validated in this PR — validation happens
post-merge per REVIEW_LENSES_V0.md Go/No-Go criteria.
Includes:
- review/lenses/{shared-behavior, registry, insider-abuse, enterprise-readiness,
incentive-abuse, regulatory-defensibility, investor-diligence,
competitive-durability}.md
- scripts/lenses/{bundle, events, parser, reconcile, registry, routing,
synthesis, types, yaml-subset, index}.ts
- scripts/resolvers/lens-layer.ts + gen-skill-docs wiring in
scripts/gen-skill-docs.ts and scripts/resolvers/index.ts
- bin/gstack-lens-{bundle, event, parse, reconcile, registry, route,
stats, synthesis-validate}
- hosts/claude/agents/{gstack-cto-synthesizer, gstack-lens-output-validator,
gstack-lens-reviewer}.md
- test/fixtures/lens-regression/{insider-abuse, enterprise-readiness}/cases.json
- test/lens-{registry, bundle, events, layer-resolver, regression-fixtures}.test.ts
- docs/designs/REVIEW_LENSES_V0.md + docs/{product-context, lens-policy}.yaml.example
- setup and bin/gstack-uninstall wired for lens artifacts
|
||
|---|---|---|
| .. | ||
| designs | ||
| evals | ||
| images | ||
| spikes | ||
| ADDING_A_HOST.md | ||
| ON_THE_LOC_CONTROVERSY.md | ||
| OPENCLAW.md | ||
| REMOTE_BROWSER_ACCESS.md | ||
| askuserquestion-cjk.md | ||
| askuserquestion-split.md | ||
| domain-skills.md | ||
| explanation-diataxis-in-gstack.md | ||
| gbrain-sync-errors.md | ||
| gbrain-sync.md | ||
| gbrain-write-surfaces.md | ||
| howto-diagrams-and-formats.md | ||
| howto-document-a-shipped-feature.md | ||
| howto-ios-testing-with-gstack.md | ||
| lens-policy.yaml.example | ||
| product-context.yaml.example | ||
| skills.md | ||
| tutorial-document-generate.md | ||