mirror of https://github.com/garrytan/gstack.git
f7bde4391d
Ships an opt-in stakeholder-lens layer on /review that runs after the
technical Review Army completes. Zero --lens = zero behavior change.
Core framing: a lens is a loss function, an evidence model, a
materiality threshold, and an escalation policy applied to a bounded
evidence set. Not stakeholder impersonation.
Two lenses in this release:
- insider-abuse (READY) — legitimate authority converted to unauthorized
outcome without attribution, detection, or approval
- enterprise-readiness (DRAFT) — deployability under CISO / procurement /
operations governance; ships as DRAFT pending its own Go/No-Go eval
Four additional lens specifications ship in DRAFT / DEFERRED status for
future evaluation: incentive-abuse, regulatory-defensibility,
investor-diligence, competitive-durability.
Design guarantees:
- Preserves Review Army unchanged (P1); no touching of review-army.ts,
review/specialists/, or review/checklist.md
- Independent lens dispatch (Stage A, no tech findings) followed by
deterministic reconciliation (Stage B) — clean incremental-value
measurement
- CTO synthesis as a third stage (not another lens): identifies shared
technical primitives across independently derived lens findings
without collapsing distinct perspectives
- Evidence clustering (SHARED_EVIDENCE / MULTI_LENS / EVIDENCE_CLUSTER)
replaces cross-lens 'confirmation'; production exact-match misses are
not marked NOVEL
- Read-only tool boundary; lens subagents receive a bounded evidence
bundle, never repository browse tools
- All stakeholder findings default to ASK / INVESTIGATE; autofix_policy
ask_always on every lens (no stakeholder auto-fix)
- Append-only event log at ~/.gstack/projects/<slug>/lens-events.jsonl
with stable finding IDs; sensitive-data controls (local-only,
owner-only permissions, secret-scanned, GBrain opt-in only)
- Per-lens regression harness (9 fixture types per lens) and per-lens
Go/No-Go criteria for lens graduation to READY
Insider-abuse ships as the Phase 1 validation lens. Enterprise-readiness
remains DRAFT until its own evaluation gate runs. No Phase 1 lens is
claimed as empirically validated in this PR — validation happens
post-merge per REVIEW_LENSES_V0.md Go/No-Go criteria.
Includes:
- review/lenses/{shared-behavior, registry, insider-abuse, enterprise-readiness,
incentive-abuse, regulatory-defensibility, investor-diligence,
competitive-durability}.md
- scripts/lenses/{bundle, events, parser, reconcile, registry, routing,
synthesis, types, yaml-subset, index}.ts
- scripts/resolvers/lens-layer.ts + gen-skill-docs wiring in
scripts/gen-skill-docs.ts and scripts/resolvers/index.ts
- bin/gstack-lens-{bundle, event, parse, reconcile, registry, route,
stats, synthesis-validate}
- hosts/claude/agents/{gstack-cto-synthesizer, gstack-lens-output-validator,
gstack-lens-reviewer}.md
- test/fixtures/lens-regression/{insider-abuse, enterprise-readiness}/cases.json
- test/lens-{registry, bundle, events, layer-resolver, regression-fixtures}.test.ts
- docs/designs/REVIEW_LENSES_V0.md + docs/{product-context, lens-policy}.yaml.example
- setup and bin/gstack-uninstall wired for lens artifacts
|
||
|---|---|---|
| .. | ||
| app | ||
| host-adapters | ||
| lenses | ||
| resolvers | ||
| analytics.ts | ||
| archetypes.ts | ||
| brain-cache-spec.ts | ||
| build-app.sh | ||
| build.sh | ||
| capture-baseline.ts | ||
| compare-pr-version.ts | ||
| declared-annotation.ts | ||
| detect-bump.ts | ||
| dev-skill.ts | ||
| discover-skills.ts | ||
| eval-compare.ts | ||
| eval-list.ts | ||
| eval-select.ts | ||
| eval-summary.ts | ||
| eval-watch.ts | ||
| garry-output-comparison.ts | ||
| gen-llms-txt.ts | ||
| gen-skill-docs.ts | ||
| gstack-schema-pack.ts | ||
| host-config-export.ts | ||
| host-config.ts | ||
| jargon-list.json | ||
| models.ts | ||
| one-way-doors.ts | ||
| preflight-agent-sdk.ts | ||
| proactive-suggestions.json | ||
| psychographic-signals.ts | ||
| question-registry.ts | ||
| setup-scc.sh | ||
| skill-check.ts | ||
| slop-diff.ts | ||
| task-emission-schema.ts | ||
| test-free-shards.ts | ||
| update-readme-throughput.ts | ||
| write-version-files.sh | ||