Spaces:
Running
Running
Gate 0 and Gate 1 evidence
Checked on 2026-08-28 against Codex CLI 0.150.0-alpha.8 and current official documentation.
Status terms: Confirmed has direct documentation or an executed probe; Unsupported has direct negative evidence; Unverified remains an explicit implementation or end-to-end risk.
Gate 0: repository and scope
| Check | Status | Direct evidence |
|---|---|---|
| Canonical location | Confirmed | Release work used one canonical repository checkout; project commands were not split across placeholder workspaces. |
| Existing same-name project | Confirmed absent | The target repository was initialized as a new project rather than layered over another implementation. |
| Existing user assets or uncommitted changes | Confirmed absent | The new project path did not exist. Empty, unrelated experimental directories were not reused. |
| Repo instructions | Confirmed | Workspace instructions were read before implementation. No prior project contribution or plugin structure existed to preserve. |
| MVP scope | Confirmed | The original MVP was Codex-only. On 2026-08-31 the user explicitly authorized one bounded DeepSeek Harness adapter as transport research; it carries no efficacy claim and does not authorize further host ports. |
Gate 0 result: PASS. There was no prior implementation whose direction could conflict with the frozen baseline.
Gate 1: Codex capabilities
| Required capability | Status | Direct evidence and boundary |
|---|---|---|
| Package Skill + bundled MCP + Hooks | Confirmed | Official plugin packaging supports skills/, .mcp.json, and hooks/hooks.json. The official plugin-creator validator accepted a local package containing all three. |
| Hook events and real I/O | Confirmed | A minimal hook received sanitized SessionStart, UserPromptSubmit, PostCompact, Stop, and SessionEnd fixtures and returned valid fail-open JSON. Official schemas define each event. |
| Non-blocking hooks | Confirmed | continue: true is supported. Stop blocking would make Codex continue, so the product never emits it. SessionEnd is advisory only. |
| Writable local plugin state | Confirmed with host limitation | Official packaging defines PLUGIN_DATA for Hooks. The installed MCP child uses the shared ${CODEX_HOME}/plugin-data/intent-loop/v1 compatibility root because Hook-only variables are not forwarded to the MCP process. A new Codex process recovered an earlier task/claim from that root, and a later process confirmed physical deletion. |
| Skill reads state and calls MCP | Confirmed with compatibility fallback | A clean-workspace $intent show run discovered the installed Skill. Direct cache reads were blocked by the Windows sandbox, so Codex read the actual bundled file through static MCP resource intent-loop://skill/intent, then called intent_status without mutation. Real installed write/read/delete calls also pass with normal approvals. |
| Current project scope reaches MCP | Confirmed | The server advertises experimental codex/sandbox-state-meta; Codex 0.150.0-alpha.8 injected a file-URI sandboxCwd on real calls. A fresh start plus later snapshot/correction/evidence/export/off calls all omitted project_root and resolved the same project ID. Contract tests reject a conflicting explicit root. |
| Structured user input in current surface | Partly supported | Plan-mode structured questions and MCP elicitation exist. default_mode_request_user_input is disabled on this build, so the MVP must use ordinary conversation in the normal/headless path. |
| Hook review and disable controls | Confirmed | Plugin hooks are not trusted automatically; the user must review them. Plugins, bundled MCP servers, and hooks can be disabled, and global hooks can be switched off. |
| MCP App / rich UI | Unsupported as an MVP dependency | enable_mcp_apps is false on this build. The core and Skill therefore expose a complete headless path. |
| Stable task history access inside a plugin | Unsupported | Full history is available through Codex App Server to a client, not as a documented plugin API. Transcript files are explicitly unstable. Pre-install history is explicit-import only. |
| App Server or independent client required | Confirmed no | The bounded architecture needs neither. App Server was inspected only to establish the history boundary. |
Installed feature probe:
plugins stable true
hooks stable true
apps stable true
enable_mcp_apps under development false
default_mode_request_user_input under development false
skill_mcp_dependency_install stable true
auth_elicitation stable true
tool_call_mcp_elicitation stable true
goals stable true
Gate 1 result: PASS FOR THE BOUNDED TECHNICAL MVP. The installed headless path works and does not depend on a forbidden surface. Real installed MCP calls, approval behavior, restart persistence, deletion, and one-invocation SessionStart Hook delivery were verified. A naturally triggered PostCompact plus resume cycle remains a controlled-pilot check; it is not required to justify a new client or transcript parser.
Gate 1b: DeepSeek Harness developer-preview adapter
Checked on 2026-08-31 against the official DeepSeek Harness repository and documentation plus local package 0.1.2-alpha.2.
| Required capability | Status | Direct evidence and boundary |
|---|---|---|
| Plugin tool registration | Confirmed | The Harness plugin API registers raw tool definitions through ctx.tools.register; the adapter contributes all fifteen generated Intent Loop tools and one compact guidance section. |
| Active workspace/session identity | Confirmed | Harness exposes the active agent session's cwd and session ID. The adapter removes caller-facing selectors, canonicalizes the host cwd, and privately hashes/injects session ownership. |
| Git package installation | Confirmed locally | Official plugin management accepts package or Git specs. A packed repository bundle was added to a temporary headless profile, composed, booted through the help path, removed, and confirmed absent. |
| Prebuilt package requirement | Confirmed | The root package ships prebuilt adapter JavaScript, the shared MCP runtime, generated tool catalog, Skill, notices, and SBOM; no install-time build is required. |
| Session-private MCP memory | Confirmed | A bounded pool creates one MCP child per active Harness session, preserves in-session private semantics, isolates another session, serializes concurrent creation, enforces a hard capacity, and closes every child on eviction or unload. The suite passes on all three public runner systems. |
| Credential boundary | Confirmed | Child environment tests show model-provider API keys/tokens are omitted. The state runtime contains no outbound network client. The adapter suite passes on all three public runner systems. |
| Windows/Linux/macOS | Confirmed for the headless candidate | Repaired code commit d0fba7103c7999ce4f47b3ee6602380b7ead7932 passed all 18 jobs in public run 33377049544, including adapter tests and a real temporary Harness package/add/compose/boot-help/remove lifecycle on each system. Native GUI-specific behavior is outside this claim. |
Gate 1b result: PASS FOR THE REPAIRED BOUNDED ADAPTER ON THE THREE HEADLESS RUNNER SYSTEMS. This is transport evidence and does not change the frozen NO RESULT efficacy status or authorize more host ports. Exact-tag public installation remains a separate release check.