Submit io.pilot.asdecided v0.26.2

[tcballard]

App submission

App id: io.pilot.asdecided
Version: 0.26.2
Publisher: ed25519:0S7jw2iREaLHUZl5JCH/egFGwkRTBJ+sifR1ofJ+7wY=

What this adds

As Decided retrieves and validates the engineering decisions stored in a local repository. This submission wraps the published native Rust v0.26.2 engine and exposes four methods:

• asdecided.help
• asdecided.retrieve
• asdecided.validate
• asdecided.relationships

It includes publisher-signed adapter bundles for macOS and Linux on arm64 and amd64, catalogue metadata, a product demo, a next-steps graph, and an A/B fixture covering every curated method.

Permission and surface decisions

• The app requests read-only fs.read $HOME because repository paths are caller-selected and cannot be predicted at install time. Repository contents stay on the Pilot node.
• It deliberately omits arbitrary CLI passthrough, mutation methods, and a model/hosted fallback. This is narrower than the publishing playbook default and keeps the broad filesystem grant paired with a constrained, deterministic surface.
• fs.write $APP and net.dial github.com are used only to stage the SHA-pinned native release asset under the app directory.

Local evidence

• all four v0.26.2 adapter bundles passed pilot-app verify
• every tarball contains manifest.json, install.json, install.sh, and the platform adapter binary
• publisher identity is unchanged from the original submission
• pilot-app verify-update: new app ID accepted
• product demo score: 100/100
• go vet ./...: passed
• go test ./...: passed
• product-demo and next-steps gates: passed
• the original installed help-contract proof exposed exactly the four methods above
• the original local A/B proof covered all three curated command pairs; current CI independently repeats the Linux A/B run against v0.26.2

Disclosures

• The four committed signed bundles are approximately 4.9–5.5 MB each; committed bundles are required by this pointer submission and its A/B workflow.
• The pointer-form demo scorer cannot infer a method set, so its deterministic first-call subscore is marked skipped; the demo itself scores 100 and its methods were exercised through the installed adapter.
• No linked issue; this is a new catalogue submission.

Automated gate

• submission-validate CI is green (bundle sha, manifest valid + signed, <ns>.help, id/version).
• A/B CI is green for the v0.26.2 Linux bundle.

Maintainer checklist (SPEC §7.2 — do not merge until all checked)

• Publisher identity is known / added to the registry.
• Grants are proportional to the described function. Scrutinize any proc.exec, fs.write, key.sign, or broad net.dial target.
• submission.json description accurately reflects the app.
• Backend host (for net.dial) is one the publisher controls.

Authored under my direction with Codex.