Jannik/PaperClipAI
1
0 Fork 0
mirror of https://github.com/paperclipai/paperclip.git synced 2026-11-03 01:27:09 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
4e97daafa06a54f02027335437c4f48e50b84236
PaperClipAI/doc/plans/2026-10-19-copilot-qualification-v46.json
T
DottaandPaperclip 7c247243e5 Qualify and package Copilot for ordinary installations (#15706) 
## Thinking Path

> - Paperclip is the open source app people use to manage AI agents for
work.
> - A provider must work through normal installed packages on local and
Daytona environments.
> - Candidate-only success does not prove that the shipped package
contains the manifest and native runtime needed for Daytona.
> - The release must preserve saved-token access and task lifecycle
guarantees.
> - This pull request will qualify Copilot and include the exact-source
remote manifest in normal release archives.
> - The benefit is a reviewable part of the Copilot production release.

## Linked Issues or Issue Description

Refs #15701, #15703 and #15705. Supersedes qualification work in #15563
and the original candidate in #14434. Base: #15705.

## What Changed

- Keep Copilot discovery passive during reconnect reconciliation;
refresh on explicit opening, account/environment changes and reconnect.

- Retain the selected Product cases, permission/continuity evidence and
cleanup checks.
- Build the Linux provider manifest from the existing pinned Docker
stage in the cloud.
- Join all four native daemon receipts with that manifest before server
packing.
- Reject missing or incompatible remote authority during normal release
assembly; retain historical workflow compatibility.
- Promote the completed profile47 qualification marker, publish the
current qualification record and preserve every failed attempt.
- Keep one current release checklist and the shipped-canary gates
explicit.

## Verification

Runtime #15701 is merged at `d855e550ad8d2a267312983f26457aabf5393c3a`.
History #15703 is merged at `df80616d98119cbf5abd40549794d9980a5fabf6`.
Remaining source
[`42bcbd61299655f7e37aabe6bb5f19bba770ad1d`](https://github.com/paperclipai/paperclip/commit/42bcbd61299655f7e37aabe6bb5f19bba770ad1d)
contains the four-file authorization repair. The remaining PR trees
preserve six nonoverlapping files from the newer public mainline
managed-settings fix and the CI-owned lockfile. No unrelated provider is
enabled.

The security finding is repaired: existing-agent discovery requires
`agent_config:update` before connection selection or token resolution.
The saved environment is the default. Authorized editors can select a
prospective environment. Both denied board-viewer and agent-reader
regressions fail on the original source. All49 route tests and server
typecheck pass with the fix. Denied requests perform no connection
selection, credential resolution or probe. Current-head security scans
pass on both remaining PRs; the repaired thread is resolved.

Copilot CLI1.0.88 and profile47 retain digest
`sha256:55044aa235e88b3fe36ec8a556ee1e3382590870aab907e4462ef7d64af49cea`.
The [qualification
record](https://github.com/paperclipai/paperclip/blob/42bcbd61299655f7e37aabe6bb5f19bba770ad1d/doc/plans/2026-10-20-copilot-qualification-v47.json)
reports20/20 Product cells,154 assertions and7/7 protocol cases,46
assertions against frozen normal installed source
`c2616370800f5f6df45246b0890ba35a7cd2faab`. The exact qualification
model is `gpt-5.6-luna`. Every passing Product case confirms cleanup.
Original failures remain recorded; automatic behavior retries are
disabled. The route-only authorization repair changes no bound
runtime/profile bytes and does not relabel the frozen campaign.

The ordinary installed remote journey passed saved-token selection,
model discovery, normal UI save/reopen, metadata-only Test, completed
task, accepted receipt and exact19-byte browser download. An open model
catalog caused no additional discovery requests during117seconds. Actual
installed runtime smokes passed on macOS ARM64, macOS x64 under Rosetta
and native Linux x64 on Daytona. Raw token browser entry was not
exercised; encrypted connection creation used the normal API.

The first Daytona file attempt timed out during delayed semantic
dispatch; its precise stalled layer remains unresolved. Independent
ordinary remote delivery and the other19 Product cells passed before one
instrumented recheck passed8/8 with unchanged source,prompt,assertions
and deadlines. No causal latency repair is claimed.

Before the authorization repair, all four final PR heads passed required
verify/E2E and fresh Greptile5/5 reviews with zero unresolved threads.
Current-head CI/review is running for the two repaired heads. Local
focused checks retain129 connection,59 runner,72 shared-eval and88
recovery/workspace passes, plus migration safety and token gates. The
additive Copilot migration is361; released master history is preserved.

[Cloud normal-package
run39414239704](https://github.com/paperclipai/paperclip/actions/runs/39414239704)
builds the pre-security source4f3f. All four native producers and Linux
package assembly pass; the final clean installed consumers are
finishing. All18 retained archives match their hashes;37,863 regular
files contain zero selected credentials. That package does not contain
the later route repair. The actual final published package must include
it and pass the local/Daytona live canaries. The frozen Daytona image
remains published and independently verified. No separate full-image
scan is claimed. Docker builds run in the cloud.

**Remaining:** current-head CI/review, setup and qualification merges,
final publication, and ordinary local/Daytona canaries against the
actual shipped package. The user explicitly authorizes the maintainer
review override; CI remains a merge gate. No production deployment is
claimed. Provider USD remains unknown and GitHub-attributed.

## Risks

An omitted or mismatched image manifest prevents ordinary Daytona
startup. Final normal archives must contain the matching image authority
and platform daemons. The completed runtime campaign remains bound to
its original source; the final UI-only repair needs its own
normal-install setup proof. Credit notices are not measured USD
receipts. Native steering, native plan mode and detached work remain
outside this release.

## Model Used

OpenAI Codex, based on GPT-6. The exact serving model ID and context
window are not exposed in this task. Used for code changes, review and
tool-assisted verification.

## Checklist

- [x] I have included a thinking path that traces from project context
to this change
- [x] I have specified the model used (with version and capability
details)
- [x] I have checked ROADMAP.md and confirmed this PR does not duplicate
planned core work
- [x] I have searched GitHub for duplicate or related PRs and linked
them above
- [x] I have either (a) linked existing issues with `Fixes: #` / `Closes
#` / `Refs #` OR (b) described the issue in-PR following the relevant
issue template
- [x] I have not referenced internal/instance-local Paperclip issues or
links (only public GitHub `#NNN` / `github.com/paperclipai/paperclip`
URLs)
- [x] My branch name describes the change (e.g. `docs/...`, `fix/...`)
and contains no internal Paperclip ticket id or instance-derived details
- [x] I have run tests locally and they pass
- [x] I have added or updated tests where applicable
- [x] I have updated relevant documentation to reflect my changes
- [x] I have considered and documented any risks above
- [ ] All Paperclip CI gates are green
- [ ] Greptile is 5/5 with no open P2s, recommendations, or follow-ups
- [x] I will address all Greptile and reviewer comments before
requesting merge

---------

Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-10-20 07:33:14 -05:00

377 lines
16 KiB
JSON
Raw Blame History

{
"schema": "paperclip.copilot.production-qualification.v1",
"recordedAt": "2026-10-19",
"productionReady": false,
"merged": false,
"deployed": false,
"runtimeSource": "e6b9cbdee04de8d33857c1709da877369bfd9497",
"runtimeVersion": "1.0.88",
"profile": 46,
"profileDigest": "sha256:b93823e6fa44a9f9a8ed1b03f371d15db54ee4c4f3b1d2bbfeea97a634c23e91",
"model": "gpt-5.6-luna",
"product": {
"schema": "paperclip.copilot.frozen-product-qualification/v1",
"sourceRevision": "e6b9cbdee04de8d33857c1709da877369bfd9497",
"profile": 46,
"profileDigest": "sha256:b93823e6fa44a9f9a8ed1b03f371d15db54ee4c4f3b1d2bbfeea97a634c23e91",
"runtimeVersion": "1.0.88",
"model": "gpt-5.6-luna",
"status": "passed",
"cellsPassed": 20,
"cellsRequired": 20,
"environments": {
"local": 10,
"daytona": 10
},
"assertionsPassed": 154,
"automaticRetries": 0,
"behaviorFailures": 0,
"qualificationOverrides": false,
"installation": "normal cloud-produced public CLI/server archives and separately installed packaged Daytona plugin",
"image": "ghcr.io/paperclipai/paperclip-daytona-runner@sha256:2dae5d07e522b4ea937f7681d8689a4e392feaa1a53f75bed9a8df53d7e6e927",
"nativeUsd": null,
"billingProvider": "github",
"includedCreditsAreNotMeasuredUsd": true,
"results": [
{
"executionId": "copilot-protection.runner-acpx-copilot.local.attached-async-settlement",
"environment": "local",
"suiteDefinitionHash": "00557e886d2e8cac1166de0869c446bf8df0add2f5d9f903329e998754e65139",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 11,
"durationMs": 62651,
"nativeRunRecords": 1,
"resultSha256": "f49d069585d73efb892c9b5b8d8707dde7f93ddec621f0dbc046ea858920d807"
},
{
"executionId": "copilot-protection.runner-acpx-copilot.daytona.attached-async-settlement",
"environment": "daytona",
"suiteDefinitionHash": "00557e886d2e8cac1166de0869c446bf8df0add2f5d9f903329e998754e65139",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 12,
"durationMs": 160722,
"nativeRunRecords": 1,
"resultSha256": "90c5b2d38349b7aaca88b237cb079993e3fd4d67739248e3bf63bbd6e480bbcb"
},
{
"executionId": "copilot-protection.runner-acpx-copilot.local.native-permission-deny-write",
"environment": "local",
"suiteDefinitionHash": "00557e886d2e8cac1166de0869c446bf8df0add2f5d9f903329e998754e65139",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 10,
"durationMs": 40471,
"nativeRunRecords": 1,
"resultSha256": "ba81c32a7fdaabb5b41bb4d62e4eb7862ed29d88c3d9c2066984b74cb60ce380"
},
{
"executionId": "copilot-protection.runner-acpx-copilot.daytona.native-permission-deny-write",
"environment": "daytona",
"suiteDefinitionHash": "00557e886d2e8cac1166de0869c446bf8df0add2f5d9f903329e998754e65139",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 11,
"durationMs": 75902,
"nativeRunRecords": 1,
"resultSha256": "73e02727d6044f8eaf7d74c925556381f33afa1a09cca86a11b7686249518e78"
},
{
"executionId": "native-active-stop.runner-acpx-copilot.local.pending-permission-stop",
"environment": "local",
"suiteDefinitionHash": "4654a2169bff96cf8377fdd62441f5cabea5c613f447e518830f6b1efd82c051",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 8,
"durationMs": 58477,
"nativeRunRecords": 1,
"resultSha256": "d0131ebe7c33754fe8b46b9901fbe39b026d2fe1ab0635a472523c28a2ae86ba"
},
{
"executionId": "native-active-stop.runner-acpx-copilot.daytona.pending-permission-stop",
"environment": "daytona",
"suiteDefinitionHash": "4654a2169bff96cf8377fdd62441f5cabea5c613f447e518830f6b1efd82c051",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 6,
"durationMs": 95388,
"nativeRunRecords": 1,
"resultSha256": "08aa9acd8079bb921cb48a668e20a7ed7941dcc9377b04f72d599f93693c2014"
},
{
"executionId": "copilot-provider-death.runner-acpx-copilot.local.pending-permission-provider-death",
"environment": "local",
"suiteDefinitionHash": "f21b45952e1fe3598e7db1434cfd4b688dbd0632565a78ecc63b72757a4f7b38",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 8,
"durationMs": 88778,
"nativeRunRecords": 1,
"resultSha256": "c3a51bd08e63b70c83417818ce1177fa841d61350b9a22cec401767003e87862"
},
{
"executionId": "copilot-provider-death.runner-acpx-copilot.daytona.pending-permission-provider-death",
"environment": "daytona",
"suiteDefinitionHash": "f21b45952e1fe3598e7db1434cfd4b688dbd0632565a78ecc63b72757a4f7b38",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 6,
"durationMs": 91731,
"nativeRunRecords": 1,
"resultSha256": "94ccb22b0e564df26332963b5493b7c851160e7f0f11ecec8aeec313939ae742"
},
{
"executionId": "extended-harnesses.runner-acpx-copilot.local.hello-complete",
"environment": "local",
"suiteDefinitionHash": "d5bcf5de0ade3a54e4e1560e76feb5d8a787039d56d2379cd501626d85ed7418",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 6,
"durationMs": 50823,
"nativeRunRecords": 1,
"resultSha256": "91aab11a671b9c83aa2664ba5a8a7f32dc40fc9eee31ee9d89a4a104e173e325"
},
{
"executionId": "extended-harnesses.runner-acpx-copilot.daytona.hello-complete",
"environment": "daytona",
"suiteDefinitionHash": "d5bcf5de0ade3a54e4e1560e76feb5d8a787039d56d2379cd501626d85ed7418",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 6,
"durationMs": 76455,
"nativeRunRecords": 1,
"resultSha256": "d0313c509cc0a4cfda14605b7e217c5ac76eb9a4dbfa78fc6705d470ce56418a"
},
{
"executionId": "extended-harnesses.runner-acpx-copilot.local.file-edit-validate",
"environment": "local",
"suiteDefinitionHash": "d5bcf5de0ade3a54e4e1560e76feb5d8a787039d56d2379cd501626d85ed7418",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 8,
"durationMs": 71939,
"nativeRunRecords": 1,
"resultSha256": "91cfd3e7744ca09b6003723c3bc6ec744da4e1db44e4650806033949c314d7d0"
},
{
"executionId": "extended-harnesses.runner-acpx-copilot.daytona.file-edit-validate",
"environment": "daytona",
"suiteDefinitionHash": "d5bcf5de0ade3a54e4e1560e76feb5d8a787039d56d2379cd501626d85ed7418",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 8,
"durationMs": 108277,
"nativeRunRecords": 1,
"resultSha256": "621a757697e3ca0a29368fa4960de17a73ee066908afb4d106a0a6562a596509"
},
{
"executionId": "extended-harnesses.runner-acpx-copilot.local.question-resume-complete",
"environment": "local",
"suiteDefinitionHash": "d5bcf5de0ade3a54e4e1560e76feb5d8a787039d56d2379cd501626d85ed7418",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 6,
"durationMs": 74099,
"nativeRunRecords": 2,
"resultSha256": "843bc228a07d50c4b3dd08bf580e77f44528118ef18e595712b2e53a3b98c935"
},
{
"executionId": "extended-harnesses.runner-acpx-copilot.daytona.question-resume-complete",
"environment": "daytona",
"suiteDefinitionHash": "d5bcf5de0ade3a54e4e1560e76feb5d8a787039d56d2379cd501626d85ed7418",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 6,
"durationMs": 138843,
"nativeRunRecords": 2,
"resultSha256": "ce7629ebab2facb4520a06f242ee7ee010a2ffb3cedd50963cec8c835dc03ea9"
},
{
"executionId": "extended-harnesses.runner-acpx-copilot.local.plan-approve-complete",
"environment": "local",
"suiteDefinitionHash": "d5bcf5de0ade3a54e4e1560e76feb5d8a787039d56d2379cd501626d85ed7418",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 6,
"durationMs": 82100,
"nativeRunRecords": 2,
"resultSha256": "1f1765072229c9faf7cbf0e490f6c1490173a2e26d513b5819893f4d3468a938"
},
{
"executionId": "extended-harnesses.runner-acpx-copilot.daytona.plan-approve-complete",
"environment": "daytona",
"suiteDefinitionHash": "d5bcf5de0ade3a54e4e1560e76feb5d8a787039d56d2379cd501626d85ed7418",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 6,
"durationMs": 151324,
"nativeRunRecords": 2,
"resultSha256": "6079523413f92782227754c69e8addd146d55a5605139c5a29d59ec3e487ebfa"
},
{
"executionId": "extended-harnesses.runner-acpx-copilot.local.structured-question-restart-resume",
"environment": "local",
"suiteDefinitionHash": "d5bcf5de0ade3a54e4e1560e76feb5d8a787039d56d2379cd501626d85ed7418",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 6,
"durationMs": 65070,
"nativeRunRecords": 2,
"resultSha256": "b072c1cc275beb26205d1638bee9909e855aea584086cfecaa78088d362e58ed"
},
{
"executionId": "extended-harnesses.runner-acpx-copilot.daytona.structured-question-restart-resume",
"environment": "daytona",
"suiteDefinitionHash": "d5bcf5de0ade3a54e4e1560e76feb5d8a787039d56d2379cd501626d85ed7418",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 6,
"durationMs": 177284,
"nativeRunRecords": 2,
"resultSha256": "40cf89350fe703853af2f302507647b19516dddc32258342e815d59a6addc2a9"
},
{
"executionId": "rich-acp-warm-continuity.runner-acpx-copilot.local.warm-three-turn",
"environment": "local",
"suiteDefinitionHash": "7e8a0012f2f67fba03cd94403b096a07cfc95cdb7aa568b4c3fd18b852d735f3",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 9,
"durationMs": 134534,
"nativeRunRecords": 3,
"resultSha256": "07a4bafc27334d909d4897cfa9be59f7836c63adbfcdfd9835747e7e94df0d72"
},
{
"executionId": "rich-acp-warm-continuity.runner-acpx-copilot.daytona.warm-three-turn",
"environment": "daytona",
"suiteDefinitionHash": "7e8a0012f2f67fba03cd94403b096a07cfc95cdb7aa568b4c3fd18b852d735f3",
"status": "passed",
"cleanup": "passed",
"assertionsPassed": 9,
"durationMs": 163653,
"nativeRunRecords": 3,
"resultSha256": "ace855f0251563c8aa1da804edd29b6569f4a299f4a885b219bd4e607e766b3f"
}
]
},
"protocol": {
"passed": 7,
"required": 7,
"assertionsPassed": 46,
"definitionRevision": "36aeac86b4975af7edd34717d396e7a692bffd38",
"automaticRetries": 0,
"cases": [
"context-before-action",
"get-task-context",
"create-task-document",
"finish-task",
"request-human-confirmation",
"workflow-context-document-progress",
"workflow-governed-wait"
]
},
"ordinaryInstalledCanaries": {
"passed": 2,
"qualificationOverrides": false,
"local": {
"taskSucceeded": true,
"artifactExactBytes": 62,
"oneAcceptedResult": true,
"nativeProcessRetirementConfirmed": true
},
"daytona": {
"taskSucceeded": true,
"artifactExactBytes": 77,
"artifactSha256": "21f8e3b02c3af899dc315c84507a08e1e23877e9573588e5327eee233c944ea3",
"oneAcceptedResult": true,
"ownedCanaryAndProbeSandboxesDeleted": 6
},
"uiCoverage": "Local onboarding, authenticated model choices, save/reopen, metadata Test, task creation and browser downloads. Existing token was saved through the normal encrypted connection API. Remote configuration/save and task creation used the normal API/installed CLI after browser input stopped changing visible state.",
"unverifiedUiInteractions": [
"raw token paste",
"remote environment edit through the browser"
]
},
"platforms": {
"darwin-arm64": "actual normal-installed Product native startup, completion and cleanup",
"darwin-x64": "actual installed CLI1.0.88 version/ACP smoke under Rosetta, no model prompt",
"linux-x64": "actual normal-installed Daytona Product native startup, completion and cleanup"
},
"cloudBuilds": {
"image": "ghcr.io/paperclipai/paperclip-daytona-runner@sha256:2dae5d07e522b4ea937f7681d8689a4e392feaa1a53f75bed9a8df53d7e6e927",
"imagePublication": "https://github.com/paperclipai/paperclip/actions/runs/39289860734",
"normalPackages": "https://github.com/paperclipai/paperclip/actions/runs/39284194338",
"selectedCredentialScanFindings": 0,
"scanLayers": 42,
"scanRegularFiles": 247824,
"anonymousDigestVerified": true,
"imageBuild": "https://github.com/paperclipai/paperclip/actions/runs/39284189969"
},
"onboardingReconnectRepair": {
"source": "ec68f27b33208ce34319f3299770abf45e772e1b",
"productionFilesChanged": [
"ui/src/components/OnboardingWizard.tsx"
],
"failingRegressionStates": [
"cached model choices",
"cached authentication error"
],
"affectedOnboardingTestsPassed": 137,
"tokenGates": "passed",
"runtimeAndBackendUnchanged": true,
"profileIdentityCheck": "passed unchanged",
"packagingAndFinalSetupProof": "passed on source f1e4d852d32a7756ece224bfafc9b2b40a6e2056: normal installed startup, ordinary browser onboarding/save/reopen/metadata Test, exact 51-byte downloaded artifact; raw token paste not exercised"
},
"billing": {
"provider": "github",
"nativeUsd": null,
"includedCreditsAreMeasuredUsd": false,
"billingSettingsChanged": false
},
"retainedFailures": [
"startup structural root assertion; portal-aware fixture treatment passes without changing visible UX, zero-company or cleanup assertions",
"two Intel test preparation attempts executed no tests; actual ARM reconnect baseline fails both required states",
"original CI runner shutdown failures retained; only failed jobs retried",
"one archived canary metadata-probe sandbox was explicitly deleted; all six owned IDs independently return404",
"Idle authenticated model discovery created 122 disposable leases; all exact owned IDs independently return404. Failing idle-discovery regression retained; 375 affected component tests pass after Copilot-only query repair."
],
"remainingGates": [
"Normal package and matching image for the UI-only passive-discovery repair; installed idle/open/reconnect proof and final ordinary remote canary",
"Fresh current-head CI and review for changed setup/qualification PRs",
"Independent required code-owner approval and protected merge",
"Named shipped canary and verification before broader rollout"
],
"pullRequests": [
"https://github.com/paperclipai/paperclip/pull/15701",
"https://github.com/paperclipai/paperclip/pull/15703",
"https://github.com/paperclipai/paperclip/pull/15705",
"https://github.com/paperclipai/paperclip/pull/15706"
],
"supersededWork": "https://github.com/paperclipai/paperclip/pull/14434",
"deferred": [
"native steering",
"native plan mode",
"detached work",
"additional native event presentation"
],
"passiveModelDiscoveryRepair": {
"observedFailure": "Active-query reconciliation repeatedly performed remote Copilot model discovery while the user was idle, creating 122 disposable environment leases",
"scope": "Copilot-only static authenticated catalog queries; task selectors discover on opening; explicit account/environment/open/reconnect refresh remains supported",
"failingBaselineRetained": true,
"affectedComponentTestsPassed": 375,
"uiTypecheck": "passed",
"tokenGates": "passed",
"runtimeProfileIdentity": "passed unchanged",
"runtimeAndBackendChanged": false,
"ownedSandboxAudit": {
"checked": 122,
"absent": 122,
"present": 0,
"errors": 0
},
"finalInstalledUiAndRemoteCanary": "pending",
"infrastructureUsd": null
}
}
Reference in new issue View Git Blame Copy Permalink