eukhe by gildrb.com · Tangled

Coding agent with a memory of all things

Commits on bend/all-docs

docs: the writer's choices run as the compiled core (new entry doc_commit id

committed 2w ago

docs: grep's tag choice for each shown file runs as the compiled core (new entry doc_tags id

committed 2w ago

dashboard: the pairing gate's choices run as the compiled core (new entry dash id

committed 2w ago

tiny: each choice of a process's worker election runs as the compiled core (new entry tiny_elect id

committed 2w ago

ci: a push to a branch other than main runs only fmt and the secrets scan (integration branches); main keeps the full pre-push gate

committed 2w ago

laws: lines_carry_is_first_end (the carry is the file's first ending scanned byte by byte; a fresh adversary's last-line carry passed bend/mv3

committed 2w ago

grep: its scope, walk, page and match limit decided by the compiled core (new doc_search entry id 40, a call and a

committed 2w ago

docs: line endings and read views decided by the compiled core on a per-line projection (doc_lines id 9, new doc_rows id

committed 2w ago

github-actions[bot]

nix: release.json for eukhe-v0.10.53

committed 2w ago

laws: re-lock with kernel_local, launcher, fsmode, skill_load as compiled Bend (34 laws added; entry ids 35-38) eukhe-v0.10.53 bend/mv2

committed 2w ago

skill_load: the loaded list is pinned (skill_loaded_exact) and the membership the reporting law reads has witnesses (skill_in_first_example, skill_in_later_example): a blind adversary's empty membership made skill_failure_reported vacuous

committed 2w ago

kernel_local, launcher: the models' own terms are pinned (kernel_terms_exact, kernel_sweep_terms_exact, launcher_adoption_exact), so the laws that read them say what they claim

committed 2w ago

fsmode: the model's own terms are pinned (fsmode_socket_dir_exact, fsmode_safe_exact, fsmode_modes_exact): a blind adversary's socket_dir that ignored the owner passed socket_dir_owned through its own Seen.safe

committed 2w ago

skill_load: runs as compiled Bend (ffi_skill_load, spec-speller entry laws); the Rust copy, its bridge and the law-covered tests go

committed 2w ago

kernel_local, launcher, fsmode: a malformed request gets exactly 'E <area>: malformed request' (laws *_ffi_malformed_exact): a blind adversary's bare 'E' passed the laws that read only the first char

committed 2w ago

fsmode: runs as compiled Bend (ffi_fsmode, spec-speller entry laws); the Rust copy, its bridge and the law-covered tests go

committed 2w ago

launcher: the replacement's simulation is pinned step by step to the rule (launcher_step_exact, launcher_stop_counts_runs, launcher_closed_gate_waits_example): a blind adversary's run that starts at a closed gate passed idle_shutdown_never_aborts

committed 2w ago

launcher: runs as compiled Bend (ffi_launcher, spec-speller entry laws); the Rust copy, its bridge and the law-covered tests go

committed 2w ago

kernel_local: runs as compiled Bend (ffi_kernel_local, spec-speller entry laws); the Rust copy, its bridge and the law-covered tests go

committed 2w ago

AGENTS.md: the agent re-locks LAWS.lock with each law change, never asks bend/mv1 bend/mv3-glob

committed 2w ago

laws: re-lock with semver, notice, log, staging as compiled Bend (89 laws added, the user's approval of 2026-10-24)

committed 2w ago

bend core: regenerated with Bend 2.0.39 after the rebase onto the pin (semver, notice, log, staging entries)

committed 2w ago

staging: runs as compiled Bend (ffi_staging, spec-speller entry laws); the Rust copy, its bridge and the law-covered tests go

committed 2w ago

semver: the entry reads only lengths and counts that fit the wire (semver_ffi_exact_fits), the gap a blind adversary found in the log entry

committed 2w ago

log: the entry reads only numbers that fit the wire (log_ffi_reads_only_fitting_requests, log_stepper_reads_only_fitting_commits): a blind adversary read a 15-digit length

committed 2w ago

log: runs as compiled Bend (ffi_log, spec-speller entry laws); the Rust copy, its bridge and the law-covered tests go

committed 2w ago

semver: the order is pinned (semver_le_exact): a blind adversary passed every law with minor-before-major

committed 2w ago

notice: runs as compiled Bend (ffi_notice, spec-speller entry laws); the Rust copy, its bridge and the law-covered tests go

committed 2w ago

semver: runs as compiled Bend (ffi_semver, spec-speller entry laws); the Rust copy, its bridge and the law-covered tests go

committed 2w ago

github-actions[bot]

nix: release.json for eukhe-v0.10.52

committed 2w ago

passivation: a parked child keeps its kernel while a background job runs (the release killed a running bash() build with exit -15) eukhe-v0.10.52 feat/approve

committed 2w ago

agents block: the '... N more' row names only keys that expand it (Space with the dock focused; Alt+A, Space from the editor, where Space is text; none while the dock refuses the focus)

committed 2w ago

shell approvals: a question the daemon no longer holds leaves every client (shell_approval_settled on answer, cancellation or release; answer to a gone question refused as shell_approval_gone, TUI shows one muted note)

committed 2w ago

github-actions[bot]

nix: release.json for eukhe-v0.10.51

committed 2w ago

ci: pre-push scales with the change (laws, proofs and LAWS.lock select no crate; proofs only when a Bend input changed; gate.py --lock-only when a law or the lock changed) eukhe-v0.10.51 fix/noask

committed 2w ago

laws: commit LAWS.lock (977 laws, the user's approval of 2026-10-23); allowlist it in the secrets scan; AGENTS.md: re-lock only after the user approves

committed 2w ago

approvals: nothing asks but a secret, like omp (default shell.autoEffects = read, write, exec, net, outside, protected; secret never

committed 2w ago

bend: pin 2.0.39 (selfcheck 14 ok; runtime functions the shim mirrors byte-identical; core.c regenerated; both proof gates and every bridge pass) bend/2.0.39

committed 2w ago

laws: one comment form, # LAW <name>: <plain words> (requirement ids and tags in parentheses after the name); comment lines only laws/comment-form

committed 2w ago

proofs: no misc files: a claim that calls nothing is logic (proof/base/logic/), every other topic keeps its function name; comments cite laws/ and bend/skill-layout

committed 2w ago

bend: run.bend, optchat.bend, theme.bend past 1,000 lines become folders, one module per

committed 2w ago

proofs: files past 1,000 lines become folders by topic (proof/base/, proof/<area>/base/, proof/optchat/push_agrees_always/); P1 binders

committed 2w ago

bridge/: the Rust-vs-Bend test drivers leave bend/, which holds only the code the laws import

committed 2w ago

AGENTS.md: Bend files past 1,000 lines become a folder; LAWS.bend and PROOF.bend hold only imports

committed 2w ago

laws: one laws/<area>.bend per area, shared spec helpers in laws/base.bend, LAWS.bend imports only; fills re-aliased def

committed 2w ago

proofs: the Bend Bank layout per area: proof/<area>/<law>.bend per law, proof/<area>/base.bend and proof/base.bend for shared lemmas, PROOF.bend imports

committed 2w ago

github-actions[bot]

nix: release.json for eukhe-v0.10.50

committed 2w ago

slash commands: /tier and /effort keep their handlers' value errors (free text); e2e tests drive the /model role hub (/model chat, ctrl+l roles -> models, Esc after a pick) eukhe-v0.10.50 feat/cmd

committed 2w ago

slash commands: subcommand paths run as the compiled command model; Space/Tab/Enter descend, ghost usage hint, a path never runs its parent; /memory-model -> /memory model, /workflow-size -> /workflows size; /model <role> from ModelRole; argument lists (tier, effort, workflows size, dynamic-workflow --size) on the table

committed 2w ago

bend: the slash-command paths (bend/command.bend resolve, menu, key), LAWS.bend section commands (22 laws), proofs in proof/ (bank layout; the wire proofs move to proof/wire.bend), entry bend/ffi_command.bend (id 30)

committed 2w ago

/model role hub: every model role with its value and source, global role writes, chat switches the feat/hub

committed 2w ago

eukhe-types: ModelRole, the /model hub's roles

committed 2w ago

docs: the compiled Bend core's facts (screen entry and paint decision, run, tree, orphan and restart budget, replace, edge rules, retry, admission, default model) in the hardened text bend/integrate

committed 2w ago

integrate W1: the identical-theme clash filter (main 810ebac1f) formatted

committed 2w ago

bend core W9 phase B: the edge rules run as their compiled

committed 2w ago

bend core W9 phase A: the edge rules as one pure call each, models fit to the real

committed 2w ago

integrate W8b: the paint decision (resync of present) runs as the compiled core (bend/ffi_screen.bend request 3, law screen_ffi_paint): Rust sends the checks run so far and builds a redraw only when the core asks for its check; present, resync and the table test go

committed 2w ago

bend: the transcript ledger, the pace, the stack and the replacement verdict run as their compiled Bend models (bend/ffi_screen.bend, bend/ffi_replace.bend); the bridges and the Rust rule bodies are gone

committed 2w ago

bend: screen and replace models fit the real rules (tail-only ledger, guarded share, a bounded version reader, native rank compares, string build ids)

committed 2w ago

daemon: the orphan exit and the restart budget run as their compiled Bend models (bend/ffi_orphan.bend, bend/ffi_supervise.bend); their codec laws; the orphan bridge and the restart half of the supervise bridge are gone

committed 2w ago