Bind terminal-native agent ChatOps to SourceOS graph, policy, and capability leases

[mdheller]

Objective

Integrate agent-term with the SourceOS/SociOS governed local-first agentic graph foundation.

agent-term should support terminal-native agent ChatOps without bypassing Agent Registry, Policy Fabric, Memory Mesh, or SourceChannel.

Required work

• Add .sourceos/manifest.json.
• Bind slash commands and Matrix/topic routing to workspace graph context.
• Discover agents through Agent Registry manifests.
• Require capability leases for tool execution.
• Route memory writes to Memory Mesh as proposed memory, not direct durable mutation.
• Emit audit events for slash commands, agent handoff, policy denial, and memory proposal.
• Define SourceChannel envelopes for high-risk chat-driven actions.

Dangerous surfaces

• agent_term.slash.execute
• agent_term.agent.handoff
• agent_term.memory.propose
• agent_term.tool.invoke
• agent_term.workspace.bind
• agent_term.shell.bridge

Acceptance criteria

• agent-term cannot execute high-risk tools without a capability lease.
• Durable memory writes are proposed, not directly promoted.
• Workspace context is explicit and auditable.
• .sourceos/manifest.json validates against the sourceos-spec manifest contract once available.

Related

• M1: Governed local-first agentic graph foundation sourceos-spec#86
• Define local-first agentic graph foundation sourceos-spec#85
• Enforce agent capability leases and policy decisions in local agent runtime agent-machine#20
• Add signed agent manifest and capability lease contracts SocioProphet/agent-registry#15
• Implement governed memory lifecycle for agentic graph sync SocioProphet/memory-mesh#18
• Define policy decision contract and precedence for agentic graph sync SocioProphet/policy-fabric#50

[mdheller]

Status update 2026-07-18: No PR has delivered the .sourceos/manifest.json binding, SourceChannel envelope integration, or workspace-graph-context routing for agent-term slash commands. The pre-dispatch boundary (PR #45) and Agent Registry adapter (PR #58) provide admission and identity gating, but the broader SourceOS graph binding — slash commands routed through workspace graph context, SourceChannel envelopes for high-risk actions, Memory Mesh proposal-only writes — has not yet landed. This is substantial future work. Leaving open.

[mdheller]

Implemented in PR #89 (feat/state-integrity-graph-reasoning-stubs, now merged).

Issue #37 addressed by:

• state_integrity.py: StateIntegrityStatus + ConflictQueue stubs, agent-term state-integrity status|conflicts
• graph_binding.py: GraphSnapshot + AgentRegistryEntry + CapabilityLease stubs, agent-term graph status|agents|leases
• reasoning_run.py: ReasoningRunTrace + ReasoningStep stubs, agent-term reasoning-run list|show
• cli.py: ops-history policy (--profile) + context-pack subcommands wired in

All stubs return well-typed data and upgrade to live service calls when sourceos-syncd/agentplane/evidence store are reachable.