Protect consumer-owned classifications in offline autonomy assessments #453
Description
🤖 Generated by the Agentic Engineer
Agentic method replacement needs an explicit boundary between protected authority and replaceable defaults. Provide a conservative contract that preserves protected domains and rejects attempted self-classification.
Acceptance: protected authority categories are mandatory; the declared authority owner is human with a decision reference; only explicitly replaceable methods can receive a recommendation; malformed or contradictory classification never grants permission. Offline reports do not authenticate the owner. Size: M.
Part of #223.
Metadata
Metadata
Assignees
Type
Fields
Priority
None yet
Start date
None yet
Target date
None yet
Effort
None yet
Projects
- Status
Activity
chore: agent-claim #453 nonce=6db266268285061a3b1e114d6162524c
devantler commentedon Oct 4, 2026
Delivered through PR #462, merged as 89ec0f1. Fresh fetch and an isolated main checkout confirmed HEAD equals origin/main; the Go assessment suite, independently copied installed consumer and manifest validation all pass on that commit.
Protected classifications retain the declared default. The contract requires a reported human owner and decision reference, all eight protected domains, and an explicit replaceable-default classification before any candidate recommendation.
All outputs remain assessment-only: executionAdmitted, mutationPerformed and reportedEvidenceAuthenticated are false. These are offline reported-fact assessments, not authenticated native enforcement. Parent #223 remains open for that integration.