Skip to content

feat(compass-agent): SEA-1732 jj skill adapted for Compass (T8) - #226

Open
seal-agent wants to merge 4 commits into
mainfrom
seal-1732-jj-skill
Open

feat(compass-agent): SEA-1732 jj skill adapted for Compass (T8)#226
seal-agent wants to merge 4 commits into
mainfrom
seal-1732-jj-skill

Conversation

@seal-agent

Copy link
Copy Markdown
Contributor

Adapts Matt's jj skill to Compass as config/skills/jj/SKILL.md (GC-7: keep
invariants, re-ground mechanics). This is the riskiest adaptation of the SEA-1732
skill set, shipped as its own review cycle per the design record.

Shipped at config/skills/jj/ with name: jj per DL-142 (Active, Matt 2026-08-05):
Compass names the adapted skill jj, not the wave's jj-stacking, and folds
stacking into the one jj skill (no separate stacking skill). DL-142 explicitly
supersedes the frozen SEA-1732 record's jj-stacking naming.

KEPT invariants: never push/force-push main, never merge (human operator gate),
always non-interactive, review-fixes-are-a-new-commit-never-amend, the
jj-new-before-edit auto-amend footgun, rebase-onto-main-before-submit,
stack-aggressively-but-re-verify-each-head. RE-GROUNDED to Compass: per-agent
colocated clone (jj git clone --colocate), per-worker jj workspaces for parallel
task subagents, commit-message-IS-the-PR via jj-vine submit (kept as Compass's
stacked-PR tool per DL-142), CI gate = the hk pre-push hook running moon ci
(grounded in CONTRIBUTING.md + AGENTS.md).

DESIGN GAP (flagged, not fabricated): the concrete push-authorization guard
(sealed's jj-hp equivalent) is not established for Compass -- DL-142 defers the
push-guard mechanism to this task but the sources do not define the command.
Kept the never-push-main invariant as behavioral and marked the guard a
plain-text TODO rather than inventing a wrapper. Forge PR/review-state read tools
deferred as TODO SEA-1734. This gap is surfaced to Matt.

GC-3: only live tools/commands named; no fabricated push command. config/skills/**
is linted -- verified whole-repo markdownlint clean.

Refs SEA-1732 (SEA-1758)

Co-authored-by: Matt Wilkinson matt@sealedsecurity.com

@linear-code

linear-code Bot commented Aug 7, 2026

Copy link
Copy Markdown

SEA-1732

seal-agent and others added 4 commits August 7, 2026 20:25
Adapts Matt's jj skill to Compass as config/skills/jj/SKILL.md (GC-7: keep
invariants, re-ground mechanics). This is the riskiest adaptation of the SEA-1732
skill set, shipped as its own review cycle per the design record.

Shipped at config/skills/jj/ with name: jj per DL-142 (Active, Matt 2026-08-05):
Compass names the adapted skill `jj`, not the wave's `jj-stacking`, and folds
stacking into the one jj skill (no separate `stacking` skill). DL-142 explicitly
supersedes the frozen SEA-1732 record's `jj-stacking` naming.

KEPT invariants: never push/force-push main, never merge (human operator gate),
always non-interactive, review-fixes-are-a-new-commit-never-amend, the
jj-new-before-edit auto-amend footgun, rebase-onto-main-before-submit,
stack-aggressively-but-re-verify-each-head. RE-GROUNDED to Compass: per-agent
colocated clone (jj git clone --colocate), per-worker jj workspaces for parallel
task subagents, commit-message-IS-the-PR via jj-vine submit (kept as Compass's
stacked-PR tool per DL-142), CI gate = the hk pre-push hook running moon ci
(grounded in CONTRIBUTING.md + AGENTS.md).

DESIGN GAP (flagged, not fabricated): the concrete push-authorization guard
(sealed's jj-hp equivalent) is not established for Compass -- DL-142 defers the
push-guard mechanism to this task but the sources do not define the command.
Kept the never-push-main invariant as behavioral and marked the guard a
plain-text TODO rather than inventing a wrapper. Forge PR/review-state read tools
deferred as TODO SEA-1734. This gap is surfaced to Matt.

GC-3: only live tools/commands named; no fabricated push command. config/skills/**
is linted -- verified whole-repo markdownlint clean.

Refs SEA-1732 (SEA-1758)

Co-authored-by: Matt Wilkinson <matt@sealedsecurity.com>
…iew low)

CONTRIBUTING.md distinguishes 'moon ci' (moon's affected-aware subset the hk
pre-push hook runs) from 'moon run :ci' (the whole gate). The jj skill's pre-push
line named the latter with the former's parenthetical; align to 'moon ci'.

Refs SEA-1732 (SEA-1758)

Co-authored-by: Matt Wilkinson <matt@sealedsecurity.com>
…ll (SEA-1882)

Matt ruled the Compass push-authorization guard (2026-08-07): a bundled OMP
extension that intercepts push/merge in-container is LOAD-BEARING, because
Compass cannot rely on a user's own GitHub repo branch protection (server-side
backstop only, never guaranteed). Refine the jj skill's push-guard note from an
open '[TODO] not yet established' to the decided design tracked in SEA-1882;
invariant stays behavioral until the extension ships.

Refs SEA-1732 (SEA-1758) · SEA-1882 (the guard follow-up)

Co-authored-by: Matt Wilkinson <matt@sealedsecurity.com>
… the jj skill (SEA-1882)

Closes the push-guard gap flagged on the original PR: the skill described the
local CI gate as an `hk` pre-push hook, but jj runs no git hooks, so a native
pre-push hook never fires. Name `jj-hp push` as the mechanism that runs the `hk`
/ `moon ci` gate then pushes, and note that `jj-vine`'s own push routes through
it (`jj-vine.push`), so `jj-vine submit` is itself gated.

Keeps the `jj-hp` CI gate distinct from the push-*authorization* guard
(never-push-main / owner-allowlist), which remains a separate `[TODO SEA-1882]`
OMP extension — the two mechanisms are not the same, and the earlier text
conflated them.

Adds a `jj-hp push` row to the command reference.

Refs SEA-1732 (SEA-1758)

Co-authored-by: Matt Wilkinson <matt@sealedsecurity.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant