zonggong and multica-agent
31970c4dd3
HEL-870 assembly: memory/persona/mood/life/proactive-contact joined into one runnable candidate on an additive R4 migration (no existing table or row replaced; no visual changes beyond mechanical proactive flag passthrough) - src/cybergril/memory/semantic.py productizes the audited Mem0 path per plan-next-HEL-869: input-side pre-grouping sends only public rows outbound (user rows always; companion rows only judged+acked with all-told candidates), every batch anchor turn_ids/turn_roles/input_sha256 equals that exact input set, and the read-time gate independently recomputes the fingerprint against the live archive and re-checks every companion row's share state, fail-closed rejecting no_payload/unknown_source/archive_missing/source_mismatch/hit_text_mismatch/anchor_turn_mismatch/role_text_conflict/companion_unshared with honest row_verbatim/row_anchor/batch provenance; main archive chat_message remains the ONLY permanent quote layer; sem_batch/sem_covered carry a lease-recovered idempotent job loop; EmbedLedgerGuard continues the single authoritative embed ledger and with embed_cap=0 (no approved budget) refuses every real embedding so the frozen 498/500 and 39/60 accounts and the HEL-835 gate stay untouched; fixed Mem0 2c81af3 is lazily imported with zero upstream fork, a deterministic stub backend exists for engineering verification and is never claimed semantic; MoodRuntime makes core.mood live (event impulses scaled by bazi strength sensitivity, heartbeat decay, state_snapshot persistence, restart recovery, model sees one word only); DyadRuntime makes the relationship ledger live (completed exchanges are rituals, daily regression, behavior hints stay instructions); life_activity adds start/continue/interrupt/resume/finish continuity across slots and restarts with chat-completion interrupts; reach_out implements the approved R4 scope from character.yaml (>=6h interval, hours 8-23, salience>=0.6, arousal>=0.5, intimacy>=0.4) with traceable already-public bases only, UNIQUE(basis) so restarts and duplicate tasks can never multiply messages, night suppression, absence-rule fail-closed, phi projection, and messages persisted as companion rows (proactive=1) fully synced on reopen; API health reports R4-assembly with per-capability honesty (voice/vision/weather/materials/backup stay false, semantic_memory names its backend); config/semantic.example.yaml sanitized config and docs/runbook-hel870.md (startup, locked deps, health, independent data dir, disable/rollback, experience chain list, budget request, R1-R7 seams); verification: 250 python tests pass on 3.11 venv + requirements.lock (61 new deterministic/fake-provider cases covering every gate negative, restart recovery, dedupe, red line and the full entry chain incl. reopen epoch sync), ruff clean, web typecheck + 42 vitest + build pass with the original author frontend untouched except the one-line proactive passthrough; dual-target requirement checks 4/4 pass vs origin/main and origin/agent/agent/de8874a3803b with handoff-HEL-870.json; zero real model calls, zero embeddings, zero outbound network this card; local unified-instance smoke on port 8360 (stub semantic) serves the built web and reports the life loop waiting; read-only server check recorded in the runbook (existing 8300-8350 services and voice ports observed, end-to-end voice availability NOT verified); not merged, not deployed, no production or shared services touched
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 21:03:42 +08:00
zonggong and multica-agent
5671946267
HEL-869: read-only remediation evidence per manager independent review of 81d50f2 - recheck869.py reproduces the upstream rolling 10-message window from the fixed mem0 storage source (SHA256 5f5ecdad, byte-identical to the isolated venv install) in an independent in-memory SQLite with zero LLM zero embedding zero network (single 15-message batch truncates to 10; the real 9,1,1,2,2 add pattern keeps batch1 first-4 + later-6, dropping batch1 last-5) and verifies read-only that this round's mem0 messages hold 10/15 missing exactly t3 user/companion, t4 user/companion, t5 user with the restored public copy identical at 10, while the baseline main archive chat_message keeps all 15 verbatim per-role rows and the original calls inputs still carry all 15 - SDK messages is a rolling window, not a permanent quote archive, and no real user data was lost; erratum_HEL-869.json records six report-corrections without touching any original JSON (E1 S1 frozen criterion sampled only mem0 t1 so full-15 retention cannot be claimed, E2 this round used 46004 tokens = 44735+1269 while 163041 is the cumulative 39-call total, E3 raw QA6-13 map in order to plan QA1-8, E4 calls headline 'answered blue' is a stale run2 note vs this round's honest unknown answer, E5 in-process llm_calls_real=0/embed 39 are not authoritative vs persistent ledgers' 13 sent/40 dense, E6 S9 re-verified only the public instance with full private+public recovery reused from gate2 P5); README HEL-868 record annotated in place at the three corrected conclusions plus a HEL-869 section; plan-next-HEL-869.md delivers the decision-only minimal follow-up (main archive stays the permanent quote layer with reread via turn_ids anchors, mem0 interfaces reused, no upstream fork; batch-extraction line-level provenance proven by input-side pre-grouping where each add's anchor equals its actual input set with gate-side sha256 recompute - no gate bypass, no anchor trimming, no prompt-only promises; S6 verified via explicit-status questioning under the same frozen bounded grammar with no wording amnesty; Chinese custom_instructions deferred; upstream/ours responsibilities, risks incl. embed budget 498/500 remaining 2 as the hard blocker, and a staged minimal retest: stage0 offline zero-cost audit then stage1 ~14 requests/~40-46 embeddings pending quota decision); all three ledgers byte-identical before/after (03f92557/c9871277/9716c722), every e06dcaf result blob unchanged, no criteria/fixtures/orchestration edits, no real requests, no embeddings, no merge, no deploy; dual-target requirement checks 4/4 pass vs origin/main and origin/agent/agent/de8874a3803b with/without handoff-HEL-869.json
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 04:09:58 +08:00
zonggong and multica-agent
81d50f28af
HEL-868: fixed 13-call real A/B retest executed in one bounded round per rework860 _retest_plan under the original '同意测试' authorization after manager HEL-867 review lifted the stop gate - criteria/fixtures/orchestration untouched at e06dcaf (driver only captures per-call raw input/sent-context/answers and writes per-scenario outputs, never overwriting ab_scenarios.json); preflight zero-embed zero-network audit861_reuse868 + audit867_reuse868 both exit 0 with prior evidence and ledgers unchanged; 13/13 calls sent HTTP 200 (ADD1-5 anchored real extraction + QA1-8), real ledger continued on a SQLite-consistent backup of the original 26-row ledger (prefix line digest 03f92557 identical, original read-only preserved) now 39/60, embed ledger 458->498/500 (+40 dense, pre-computed debit guard held), usage 163041 tokens recorded per call; honest per-scenario results: S1/S4/S5/S8/S9 pass, S2/S3 mem0 side and S7 fail fail-closed because base-group batch-anchored infer hits carry the unshared t1 companion row in the group anchor and companion_unshared rejects them at every exit (zero leak markers in all sent contexts - the gate holds; row-level provenance for batch extractions is our adaptation gap, not visible to offline row-anchored fake payloads), S3 retrieval layer strictly better re-confirmed (11:11 target hits vs baseline 0:0) but model-use verdict fails without the gated content, S6 orchestration/status-in-block/unresolved-contrast all pass while both real answers are descriptive '资料里说...' unsupported by the pre-declared bounded grammar and honestly fail closed; no rerun, no criteria relaxation, no debug requests, no merge, no deploy; dual-target requirement checks 4/4 pass with handoff-HEL-868.json
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 03:49:33 +08:00
zonggong and multica-agent
e06dcaf889
HEL-867 handoff: deliverable/acceptance/deferred/verification JSON; audit867_prefix reproduced at 5e90136 worktree (manager minimal unresolved positive 'you haven't received the result yet' + I/omitted subject + the notification family + 30 negation-aux x received x object cells + 3 overlapping receive-matrix rows all mis-rejected through the same real s6_result while parse open+bound and affirms_promise_state true - mis-rejection in the overall predicate layer) + audit867_postfix at code commit 454e54c (all previously mis-rejected correct unresolved forms pass; 120-row grammar x predicate matrix and manager receive matrix match expectations; double-phase negatives - false resolution clauses incl. I have received the notification, mixed polarity, maybe/foreign object/question/conditional, resolved side says open - all stay failed; resolved-side positives incl. EN recipient-subject received forms kept passing) + manager original review866.py rerun 740/740 exit 0 + audit861_reuse867 full rerun (8 share-gate calls all supplied, t1 unshared/t4 unknown companion raw text never enters sent context, S8/S9 recovery exits, unresolved-block self-consistency, anchor negatives no regression); per-case flip self-check proves exit code depends on every positive and negative; zero-embed zero-network, ledger 458/500 read-only unchanged with identical line digest 8037cbfb (word-surface 160, 181 rows), prior evidence hashes untouched, real 26/60 and 13-request retest plan frozen; dual-target requirement checks 4/4 pass vs origin/main and origin/agent/agent/de8874a3803b with/without handoff
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 03:35:21 +08:00
zonggong and multica-agent
454e54cb59
HEL-867: make the S6 overall predicate honor parsed polarity - per manager independent review of 5e90136: s6_result's resolved_affirms_closed/unresolved_affirms_open/unresolved_no_false_resolution now share the same parse_supported_answer as affirms_promise_state (same-source polarity) instead of whole-text bare-substring exclusion with PROMISE_CLOSED/OPEN word lists (retained as historical declaration, unwired) - the bare substring ignored negation context and read 'received the result' inside 'haven't received the result yet' as a resolution claim, rejecting correct unresolved answers the declared grammar already supported (present since 5ebe407, exposed by the manager's expanded 740-row independent check: 33 failures = 30 negation-aux x received x object combos + 3 overlapping receive-matrix rows); opposite polarity and no-false-resolution now judged by closed/open clause polarity binding the same scene declaration - a closed clause (incl. mixed open+closed) still fails, negated positive substrings no longer trigger; uncertain whole-text exclusion kept (uncertain forms are structurally unconsumable, belt-and-braces); audit867 prefix at 5e90136 worktree reproduces all mis-rejections through the same real s6_result (parse open+bound, affirms_promise_state true, gate false), postfix passes minimal family + 120-row grammar x predicate matrix + manager receive matrix; double-phase negatives (false resolution incl. I have received the notification, mixed polarity, maybe/foreign object/question/conditional, resolved side says open) stay failed; HEL-866 six + person-object matrix cells + canonical positives + haven't received it yet three readings + omission inheritance + 140 role combos + audit861-866 all held S6/S2/S3 sets unchanged; manager's original review866.py rerun 740/740 exit 0; audit861_reuse867 real orchestration + fake externals exit 0 (8 share gates supplied, unshared/unknown never in sent context, S8/S9 exits, unresolved block self-consistent, anchors); per-case flip self-check; zero-embed zero-network, ledger 458/500 read-only unchanged with identical line digest, prior evidence hashes untouched, real 26/60 and 13-request retest plan frozen; no new semantic engine, no sentence amnesty/banned words, no fixture or model-answer changes, supported surface unchanged
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 03:34:30 +08:00
zonggong and multica-agent
5e90136f90
HEL-866 handoff: deliverable/acceptance/deferred/verification JSON; audit866_prefix reproduced at 5ebe407 worktree (manager six receive/fulfill person-object wrong-answer groups - resolved side fixed to canonical positive, only unresolved side replaced - all pass=true; per-class subject x post-verb-slot matrix person cells incl. recipient-subject 'I haven't received me yet' reading all reproduced) + audit866_postfix at code commit cf3423d (all six plus person-object matrix cells and structural variants judged fail through the same real s6_result; canonical positives incl. 我还没有收到, haven't received it yet three readings, 还没兑现 omission, topic form and tell-with-receiver+object all kept; 140 role combos and audit861-865 held S6/S2/S3 sets unchanged) + audit861_reuse866 full rerun (8 share-gate calls all supplied, t1 unshared/t4 unknown companion raw text never enters sent context, S8/S9 recovery exits, unresolved-block self-consistency, anchor negatives no regression); per-case flip self-check proves exit code depends on every positive and negative; zero-embed zero-network, ledger 458/500 read-only unchanged with identical line digest (word-surface 160, 181 rows), prior evidence hashes untouched, real 26/60 and 13-request retest plan frozen; dual-target requirement checks 4/4 pass vs origin/main and origin/agent/agent/de8874a3803b with/without handoff
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 03:15:06 +08:00
zonggong and multica-agent
cf3423d44c
HEL-866: validate the post-verb slot by verb class - per manager independent review of 5ebe407: _bind_state_clause no longer treats the slot after receive/fulfill verbs as tell's receiver; tell-verb post-verb slot = told receiver (scene receiver 我/me, omitted inherits, object NP may follow); receive-verb (收到/拿到/received/got) post-verb slot = the received object (interview result, omitted inherits per declared anaphora; explicit person pronoun 收到我/received me = receiving a person not the result, received me the interview result = extra person parameter, all fail conservatively); fulfill-verb (兑现/解决) post-verb slot = the fulfilled matter (promise/appointment, omitted inherits; 兑现我 fails); subject-slot rules unchanged from HEL-865 (tell/fulfill subject=promisor or omitted, receive closed recipient=scene receiver or omitted, open receive subject compatible with both readings); manager six negatives (haven't received me yet / haven't got me yet / haven't received me the interview result yet / 还没有收到我 / 还没拿到我 / 还没兑现我) all fail through the same real s6_result; per-class subject x post-verb-slot matrix covers subjects/direct objects/receivers/multi-param conflicts for tell/receive/fulfill in both languages, not just six sentences; canonical positives incl. 我还没有收到, haven't received it yet three readings (omitted/promisor/recipient subject), 还没兑现 omission, topic form and tell-with-receiver+object kept passing; no six-sentence or pronoun blacklist, no new model, no generic NLU engine, supported surface unchanged
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 03:14:24 +08:00
zonggong and multica-agent
5ebe407d3f
HEL-865 handoff: deliverable/acceptance/deferred/verification JSON; audit865_prefix reproduced at 070f4fd worktree (manager eight role-crossed wrong-answer groups - each replacing only one side with the other side the canonical positive - all pass=true) + audit865_postfix at code commit c0cb540 (all eight judged fail through the same real s6_result; structural variants incl. other pronouns/other promise verb/EN her-us-we-I/mixed multi-promise clauses all fail, both-period negatives honestly kept; omission-inheritance positives incl. wo-hai-mei-you-shou-dao all kept) + audit861_reuse865 full rerun (share gates/real exits/S8/S9/unresolved-block self-consistency/anchor negatives no regression); per-case flip self-check proves exit code depends on every positive and negative; zero-embed zero-network, ledger 458/500 read-only unchanged with identical line digest (word-surface 160, 181 rows), prior evidence hashes untouched, real 26/60 and 13-request retest plan frozen; dual-target requirement checks 4/4 pass vs origin/main and origin/agent/agent/de8874a3803b with/without handoff
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 02:56:16 +08:00
zonggong and multica-agent
c0cb540c9f
HEL-865: bind same-promise roles (promisor/receiver/action/object/status) to the one scene declaration - per manager independent review of 070f4fd: parse_supported_answer now captures and validates role slots per clause instead of discarding subject/receiver after regex consumption; pre-declared scene target from p1 user quote (promisor=user '你/you', told-receiver=companion '我/me', object=interview result) with declared anaphora for omitted slots (promise clause omitted subject->promisor, omitted receiver->scene receiver; state clauses by verb class: tell-verb subject=promisor, receive-verb recipient=scene receiver with open-side receive subject compatible with both receiver-not-told and promisor-not-received readings, fulfill-verb subject=promisor); explicit different recipient (现在已经告诉你了/told them), promise to someone else (告诉她/her), reversed promisor (我答应/我承诺/I promised...), multi-clause role conflicts and unknown roles (we/我们/他) all fail conservatively; canonical positives incl. 我还没有收到 and omission-inheritance forms kept passing; no eight-sentence or pronoun blacklist, no new model, no generic NLU engine, supported surface unchanged (EN closed-receive subject slot still excludes promisor pronouns)
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 02:54:40 +08:00
zonggong and multica-agent
070f4fd89b
HEL-864 handoff: deliverable/acceptance/deferred/verification JSON; audit864_prefix reproduced at 7aa9280 worktree (manager seven wrong-answer groups plus seven unresolved-side mirrors all pass=true) + audit864_postfix at code commit c65de00 (all fourteen judged fail through the same real s6_result - full-grammar whole-answer parse: declarative mood gate + every clause fully consumed as promise/closed/open structure; positives, HEL-862 four groups, HEL-863 three groups, audit861 held sets, S2/S3 no regression; EN equally verified 3 positives pass 6 negatives fail, old-code EN positive failure honestly recorded) + audit861_reuse864 full rerun (share gates/real exits/S8/S9/unresolved-block self-consistency/anchor negatives no regression); per-case flip self-check proves exit code depends on every positive and negative; zero-embed zero-network, ledger 458/500 read-only unchanged with identical line digest (word-surface 160, 181 rows), prior evidence hashes untouched, real 26/60 and 13-request retest plan frozen; dual-target requirement checks 4/4 pass vs origin/main and origin/agent/agent/de8874a3803b with/without handoff
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 02:30:54 +08:00
zonggong and multica-agent
c65de003a1
HEL-864: full-grammar whole-answer parsing for S6 affirmative verification - per manager independent review of 7aa9280: (1) affirms_promise_claim/affirms_promise_state rewritten as bounded-grammar full-parse (parse_supported_answer): the entire answer must be declarative (no question marks, no sentence-final 吗/呢/吧/嘛/呗) and EVERY clause must be fully consumed (fullmatch) as exactly one of P promise clause (subject? -> promise verb -> aspect 过/了? -> 周五(晚)? -> tell action -> receiver pronoun? -> correct object 面试结果, nothing further) / C closed-state clause / O open-state clause; whole answer needs >=1 P clause, state affirmation needs >=1 clause of required polarity and 0 of the opposite; (2) manager seven wrong-answer groups all now judged fail through the same real s6_result: foreign object without 结果 suffix (体检报告现在已经告诉我了), post-state object (现在已经告诉我了体检情况), bare-noun clause in earlier position (体检结果，现在已经告诉我了), whole-answer conflicting tail (但面试结果仍待告知), question mood (……吗？), conditional (如果你答应……), suffix denial (已经告诉我了是假的) - plus the same seven mirrored on the unresolved side; (3) EN equally verified with the same clause structure (old code failed even the EN positive with 'the interview result'; now 3 EN positives pass, 6 EN negatives fail); substring-assembly judges (clause_affirms_promise/clause_affirms_state/clause_foreign_object/_prefix_negated) removed - no per-sentence blacklists, no 报告/吗/假 forbidden words, no new model, no generic semantic engine
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 02:29:18 +08:00
zonggong and multica-agent
7aa928025b
HEL-863 handoff: deliverable/acceptance/deferred/verification JSON; audit863_prefix reproduced at 6859696 worktree (manager three new wrong-answer groups all pass=true) + audit863_postfix at code commit fcda71e (all three judged fail through same real s6_result - negated tell action and same-clause object mis-binding fail at promise binding layer, state bound to medical result fails at closed-state binding layer; positives, HEL-862 four groups, audit861 held sets, S2/S3 no regression; per-case flip self-check proves exit code depends on every positive and negative) + audit861_reuse863 full rerun (share gates/real exits/S8/S9/unresolved-block self-consistency/anchor negatives no regression); zero-embed zero-network, ledger 458/500 read-only unchanged (word-surface 160, 181 rows), prior evidence hashes untouched, real 26/60 and 13-request retest plan frozen; dual-target requirement checks 4/4 pass vs origin/main and origin/agent/agent/de8874a3803b with/without handoff
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 02:08:47 +08:00
zonggong and multica-agent
fcda71e6a2
HEL-863: bind tell-action polarity, state and object to the same promise claim - per manager independent review of 6859696: (1) clause_affirms_promise now enforces the full supported grammar in one pass - promise verb with non-negated prefix -> tell action whose connecting span is negation-free (答应不告诉我面试结果 is a promise NOT to tell, rejected) -> optional closed-class receiver pronoun -> correct object immediately following (告诉我体检结果而面试结果是另一件事 mis-binds the promise object, rejected); (2) clause_foreign_object structural class: a clause mentioning any other ...结果 object (体检结果) cannot support promise OR state affirmation for the interview promise - 体检结果现在已经告诉我了 no longer proves the interview promise closed; bare anaphor 结果已收到 and 面试结果已经告诉我了 still bind correctly; conservative fail for unparsable extra objects/predicates/negations, no per-sentence blacklists, no new model
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 02:03:12 +08:00
zonggong and multica-agent
6859696075
HEL-862 handoff: deliverable/acceptance/deferred/verification JSON; audit862_prefix reproduced at a5ef23f worktree (manager four wrong-answer groups all pass=true) + audit862_postfix at code commit 60cd7fd (all four judged fail through same real s6_result, positives kept, per-case flip self-check proves exit code depends on every positive and negative) + audit861_reuse862 full rerun (share gates/real exits/S8/S9/held criteria no regression); zero-embed zero-network, ledger 458/500 read-only unchanged, prior evidence hashes untouched; remote delivery fix noted in README (pending push)
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 01:40:57 +08:00
zonggong and multica-agent
60cd7fd70d
HEL-862: bind promise object/action/polarity/status to one clause-scoped claim - per manager independent review of a5ef23f: (1) affirms_promise_claim rewritten as clause-structural grammar (single clause must chain promise verb with no negation morpheme in prefix -> tell action -> correct object interview-result; object word appearing in another clause no longer counts, negated promise (未曾答应) rejected structurally, telling-only statement without promise verb no longer passes on 告诉 keyword, mixed action word list and enumerated claim-negation blacklist dropped); (2) resolved/unresolved state affirmation via affirms_promise_state/clause_affirms_state (declared closed/open phrase sets scored clause-locally with negation-morpheme prefix polarity - 并非已经告诉我 no longer counts as affirmed closed); manager review four wrong-answer groups (negated promise / negated closed / object bound to other action / no promise asserted) all judged fail through the same real s6_result, correct interview resolved/unresolved positives and declared-equivalent open synonym kept passing; no new model, no generic semantic engine, supported-expression restriction fails conservatively
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 01:38:04 +08:00
zonggong and multica-agent
a5ef23f5b5
HEL-861 handoff: deliverable/acceptance/deferred/verification JSON; audit861_prefix reproduced at 22472e4 worktree + audit861_postfix regenerated at final code commit efaa3c2 (zero-embed, zero-network, ledger 458/500 read-only unchanged, prior evidence hashes untouched); dual-target requirement checks pass vs origin/main and origin/agent/agent/de8874a3803b with handoff (4/4)
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 01:21:39 +08:00
zonggong and multica-agent
efaa3c27be
HEL-861 cleanup: drop superseded mixed PROMISE_TERMS word lists (split into object/action/negation/uncertainty sets by affirms_promise_claim)
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 01:21:30 +08:00
zonggong and multica-agent
ffd8cdf7cf
HEL-861: thread explicit share-state source through all real exits and affirmatively validate promise object/action/state - per manager independent review of 22472e4: (1) run() builds explicit synthetic share-state store (t1 told=0 negative, t2/t3 told=1 verifiable positives, t4 unrecorded=unknown) and passes the same CompanionShareGate through S2/S3/S4/S6/S7 plus recovery exits S8/S9 (8 gate calls all supplied); CompanionShareGate fail-closed (no db/missing file/no record/told=0 all denied, None no longer defaults True, missing-db no longer raises); companion-anchored hit without gate rejected share_gate_missing; (2) s6_result affirmative validation via affirms_promise_claim pure function (correct object interview-result AND action term AND claim not negated AND no uncertainty) - wrong object/unknown/negated answers no longer pass on keywords; evidence audit861_prefix (both gaps reproduced at 22472e4 worktree) + audit861_postfix (zero-embed, zero-network, all rejected/positives kept, ledger 458/500 unchanged, prior evidence hashes untouched)
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 01:20:29 +08:00
zonggong and multica-agent
22472e4b92
HEL-860 handoff: deliverable/acceptance/deferred/verification JSON; audit860_postfix regenerated at final commit 6595153 (zero-embed); dual-target requirement checks pass vs origin/main and origin/agent/agent/de8874a3803b with handoff (4/4)
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 00:50:04 +08:00
zonggong and multica-agent
6595153473
HEL-860: close all real Q&A exits behind the source gate and judge promise status affirmatively - per manager independent review of 9f3e6a3: (1) ungated assemble_block removed, S2/S3/S4/S6/S7 mem0-side final assembly all through s7_gated_assembly per-hit chain (S6 status annotation rides the same gate via annotator; unresolved contrast excludes result-claim entries for self-consistency), fake full-run captures 8 QA exits/5 gated with poison never sent; (2) anchor cross-validation rejects anchor_turn_mismatch and role_text_conflict (verbatim companion raw mis-anchored as user row, t2/t1 list disagreement) while same-turn user positive kept; (3) S6 criteria affirm closed on resolved side and open on unresolved side with request-ok, unknown/identical/says-open/claims-received all fail; (4) S2 total criterion uses actually-sent contexts plus request success, hitword-without-context fails; audit859 fixed (status_annotation_in_block key, exit code reflects negatives+positives, AUDIT859_REUSE_STORE mode); evidence audit860_prefix/postfix (zero-embed) + rework860_offline 26/26 + audit859_reuse860; unified ledger 390->458/500 (suite 66 + audit859 reuse 2), card new embeds 68<=70 keep 42>=40, zero real model calls, run1/run2 and 26/60 untouched
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 00:49:21 +08:00
zonggong and multica-agent
9f3e6a33c7
HEL-859 evidence: pre/post negative audit (prefix reproduces all manager-audit bypasses on 892d0d2, postfix @192d959 all rejected via real exits with same-turn user positive kept), full offline suite rework859_offline.json 22/22 exit 0, README revision record with old/new table, handoff HEL-859; dual-target requirement checks pass vs origin/main and origin/agent/agent/de8874a3803b; new evidence independently named, run1/run2 and 26/60 real ledger untouched
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 00:19:27 +08:00
zonggong and multica-agent
192d959d97
HEL-859: fail-closed source chain + layered acceptance criteria per manager audit - s7 resolver/assembly cross-validate hit text vs payload vs history derivation, turn membership in group, row-level turn_roles share gate (same-turn unshared companion hit rejected through real resolver+assembly, same-turn user positive kept; wrong-turn/forged-text/no-history/missing-anchor all rejected); S2/S3/S6 criteria layered retrieval/detail-in-context/model-use with wrong answers judged fail (S2 gated reread enters model context, gist-only explicit subtest; S6 resolved status annotated into block + unresolved counterfactual); unified embed ledger continues manager audit debit 165+65=230/500 keyword 86; itemized 13-call retest plan (5 adds + 8 QA); zero real model calls, run1/run2 evidence untouched
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-26 00:17:53 +08:00
zonggong and multica-agent
892d0d2e30
HEL-858: rework per manager independent review - fixture (turn,role) integrity gate, spoken-text share bridge with partial/missing negatives + full restored P1-P5/F1-F8, known-id S4/S6 orchestration with readback and post-update re-retrieval, S7 anchor chain (input fingerprint) with wrong/unknown-source rejection, card-level persistent embed ledger (history rebuilt <=100), _flat/exit-code fixes; zero real model calls, run1/run2 evidence and 26/60 ledger untouched
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-25 23:53:10 +08:00
zonggong and multica-agent
e31ae2d946
HEL-857: approved Mem0 isolation spike - zero-model gates all pass, A/B synthetic scenarios within 26/60 real-call budget
...
- Fixed mem0 source commit 2c81af3 (2.2.1) in isolated venv, qdrant embedded + fastembed local zh embeddings (95.3MB, within 500MB cap)
- Gate0 transport-level persistent debit ledger: 61st call blocked pre-send, failures count, cross-process persistence, retries disabled+counted (fake transport, zero network)
- Gate1 qdrant embedded checks: keyword_search functional (Chinese segmentation gap recorded honestly), restart subprocess, clean-copy restore, no telemetry collections
- Gate2 privacy with stub LLM: P1-P5 zero leak, first-share timing F1-F6 (failed/cancel/unconfirmed no migration, ack+judged migrates told content with anchors, duplicate receipt idempotent), full backup incl. unshared internal memories restores clean
- A/B same-material same-criteria: Mem0 paraphrase recall strictly better than current lexical path (S3, model answers in Chinese), S1-S9 all pass, no regression
- Headline findings: Chinese input extracted as English memories (default upstream prompt), BM25 lexical channel inert for Chinese, ADD-only infer confirmed with our update orchestration, custom metadata needs direct payload read
- 26/60 real outbound via persistent ledger (incl. one parse-failure retry), usage/latency per row; embeddings 28/500; HEL-835 quota untouched
- Experiment branch only: no merge to main/product, no deploy, no real-profile access; handoff JSON + dual-base requirement checks pass
Co-authored-by: multica-agent <github@multica.ai >
2026-10-25 23:19:26 +08:00
zonggong and multica-agent
bb9cbe915e
HEL-847 v4: Mem0 capability corrections per manager review - additive-only infer, backend filter/BM25 facts, pre-isolation privacy design, concrete spike spec
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-25 22:23:53 +08:00
zonggong and multica-agent
800d3b75b6
HEL-847 v3: GOV-006 reweighing - Mem0 embedded SDK as primary candidate, 8-mechanism adaptation matrix
...
- Bounded source review of mem0ai/mem0 @2c81af3 (embedded lib, Apache-2.0,
upstream-maintained extract/consolidate/hybrid-search; SQLite history)
- Zep CE screened out (4-container stack, legacy/docker-compose.ce.yaml:5-71)
- 8-mechanism matrix from discussion takeaways: requirement/current/candidate/
thin-adapter/to-verify per mechanism
- Recommendation shifts from v2 Option C (self-maintained port) to Route E
(direct SDK adoption + thin product adapters); Option C kept as verified
fallback; spike-first with acceptance gates, no claim of final selection
- v2 report carried in verbatim as evidence base
Co-authored-by: multica-agent <github@multica.ai >
2026-10-25 22:06:31 +08:00
zonggong and multica-agent
575f2acfc5
HEL-847: apply v1.11 governance patch (GOV-006 mature-reuse principle, 60 items)
...
Audited manager handoff against af28ffdgithub@multica.ai >
2026-10-25 21:56:31 +08:00
zonggong and multica-agent
af28ffdcb5
HEL-835: evidence corrections per third review - 23 calls, day2 conclusion downgraded, old probe downgraded, null-fingerprint withdrawn, probe start deviation disclosed; 15/15 paired-window correction proof; real follow-up plan
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-25 09:17:34 +08:00
zonggong and multica-agent
c5167ca7c5
HEL-835: day2 handoff, dual-target requirement checks with handoff
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-25 09:06:59 +08:00
zonggong and multica-agent
65df25271e
HEL-835: guard v3 - done-delta streams settle ok on early close; 36/36
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-25 09:03:09 +08:00
zonggong and multica-agent
b98ab6ab50
HEL-835: deploy record updated for guard v2, restored service, prepared probe
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 14:53:01 +08:00
zonggong and multica-agent
96cdf07d73
HEL-835: probe seed backfills message_id provenance
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 14:52:15 +08:00
zonggong and multica-agent
468f0bbb6c
HEL-835: probe seed upsert memory_search flag
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 14:50:39 +08:00
zonggong and multica-agent
87afc34cd3
HEL-835: fix probe seed insert columns
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 14:50:26 +08:00
zonggong and multica-agent
e27274448d
HEL-835: fix probe seed companion identity_json shape
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 14:49:47 +08:00
zonggong and multica-agent
0b24fefc5d
HEL-835: synthetic retrieval probe seed script and runbook (approved plan, zero model calls)
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 14:49:06 +08:00
zonggong and multica-agent
d57ab77732
HEL-835: fix guard entrypoint main() invocation
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 14:47:34 +08:00
zonggong and multica-agent
9039311e29
HEL-835: guard v2 - unique call_id settlement, scene-bound categories, ledger validation, upstream close on cancel; 34/34 isolation proof
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 14:46:14 +08:00
zonggong and multica-agent
1fdca48153
HEL-835: guarded deploy record, audited call ledger, synthetic-retrieval plan (pending approval)
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 14:36:36 +08:00
zonggong and multica-agent
d7e5c00e80
HEL-835: deploy-layer durable call guard (caps 8 gist/6 turns/1 persona) + isolation proof 17/17 and assembly smoke
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 14:31:41 +08:00
zonggong and multica-agent
2ec9392aad
HEL-835: deploy record and rollback plan for isolated R3 instance on 8350
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 14:16:17 +08:00
zonggong and multica-agent
fc5e29469c
HEL-835: independent review evidence - rerun 225 pytest, web build/lint/42 vitest, 23/23 browser checks (chromium CDP), 30/30 e2e ControlledLLM isolated DB
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 13:58:13 +08:00
zonggong and multica-agent
2288471445
HEL-834: apply visual director memories page source package (6 modified + 9 new, verified against MANIFEST)
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 13:35:48 +08:00
白栖知 and multica-agent
89d53b6c53
HEL-833: restore runtime factory and verify R3 memory contracts
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 13:07:43 +08:00
白栖知 and multica-agent
78cab0456c
HEL-833: preserve R3 draft and regression stop evidence
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 12:55:58 +08:00
Chief Engineer and multica-agent
ee4459433c
HEL-832: R3 real-memory integration verification report, FTS probe evidence, handoff and follow-up construction cards (docs only)
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 12:46:53 +08:00
白栖知 and multica-agent
c285a0fd07
fix(r2): keep her self-narration and life within the approved room
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 12:03:08 +08:00
Chief Engineer and multica-agent
64a47f35d0
HEL-829 review: mechanical lint fix in ManagePanel (U+3000 -> space, drop unused eslint-disable directives, trailing ws)
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 11:14:22 +08:00
Chief Engineer and multica-agent
58d65aea05
HEL-828: wire life/persona/receipt confirmation onto 4575b275 (original author delivery, 12 files per MANIFEST in HEL-828-source-4575b275.zip)
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 11:08:53 +08:00
白栖知 and multica-agent
4575b27515
HEL-827: implement durable life, receipt-gated disclosure and persona layers
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 09:04:40 +08:00
Chief Engineer and multica-agent
2d97050c7e
HEL-825: review handoff (verified build/tests/browser checks/requirements; deploying 8320)
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 08:27:33 +08:00
Chief Engineer and multica-agent
e32a1ac0d2
HEL-825 review: link-card accessible-name selector fix (browser_check), evidence scripts, regenerated screenshots/recordings
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 08:27:06 +08:00
Chief Engineer and multica-agent
0bc4a9e68e
HEL-823 A3: days/memories, creation wizard, settings pages on cef8ae5 (author delivery, 15 modified + 1 handoff per CHANGES-HEL-823.json)
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 08:26:54 +08:00
白栖知 and multica-agent
cef8ae5581
HEL-824: land verified fixes on 4321aeb (small-screen first-press, real-time reading clock)
...
- 6 modified + handoff JSON per CHANGES-HEL-824.json, all hashes verified against git 4321aebgithub@multica.ai >
2026-10-24 07:39:26 +08:00
白栖知 and multica-agent
4321aebfdc
HEL-822: fix handoff read_commit format
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 06:59:18 +08:00
白栖知 and multica-agent
e5fe01bfd1
HEL-822: review handoff JSON
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-24 06:59:07 +08:00
白栖知 and multica-agent
7db6677234
HEL-822: run all four browser checks; minimal mechanical check fixes + fresh run evidence
...
- browser_check.py: 视觉观察 → 视觉观察（模拟） (author renamed the aria-label, selector not migrated)
- import_check.py: handle the dirty-settings leave confirmation before opening the record (pre-existing gap, fails at base db571bagithub@multica.ai >
2026-10-24 06:58:20 +08:00
白栖知 and multica-agent
003d8c2cae
HEL-822: land HEL-821 A1+A2 source onto PR#4 base ( db571ba)
...
- 13 modified / 8 added / 1 deleted per CHANGES.json (author package 76bc120b)
- docs/requirements v1.10 + prototypes/hel-799 + PROVENANCE from bundle, verified byte-identical to 63799f063799f0github@multica.ai >
2026-10-24 06:10:53 +08:00
白栖知 and multica-agent
db571ba204
HEL-783: repair readable dialogue, birth explanations and complete real page layouts
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-22 17:55:05 +08:00
白栖知 and multica-agent
f6614d4bf9
HEL-780: connect persistent companion and real streaming text chat
...
Co-authored-by: multica-agent <github@multica.ai >
2026-10-22 16:25:35 +08:00
