feat: finalize DGAF v1 governed control plane with TGL hardening by ndrorchestration · Pull Request #139 · ndrorchestration/DGAF-Framework

ndrorchestration · 2026-08-29T07:48:34Z

Purpose

Finalize the viable Governed Recursive Control Plane subset as a clean DGAF v1 integration candidate.

Included

immutable GovernanceEnvelope with downward-only authority/tool/data/risk/budget inheritance;
deterministic ControlPlane lifecycle, active-parent child creation, bounded depth, and fail-closed budget/concurrency handling;
exact state identity and cycle detection;
append-oriented branch provenance registry;
explicit proposal/authorization/commit barrier;
deterministic control-plane and TGL lifecycle integration tests;
capability-boundary regression coverage;
hardened TGL status reduction and complete audit sealing;
dedicated CI lane with exact PR-head checkout assertion and pinned CI dependencies;
deployment workflow hardened to attest READY production deployments against the exact Git SHA;
architecture, file-tree, canonical agent-role mapping, and finalization-gate documentation;
current-state and Notion/GitHub governance reconciliation.

Cross-surface reconciliation

PR #139 is the canonical current engineering lane. PRs #132/#133/#134 are historical/superseded remediation records. Issue #137 remains the canonical deployment/source-provenance gate.

The candidate was reconciled to current main with a two-parent commit so the merged TGL remediation is part of the candidate lineage without force-moving either historical parent.

Boundary

This PR is non-authorizing. It does not rebind PDMAL, create a freeze, grant pilot authorization, unblind data, or change empirical N. PDMAL remains an optional governed execution substrate.

The separate ndrorchestration/agent-control-plane repository remains reference material for contract comparison, not a dependency.

Verification

Authoritative candidate identity is the live GitHub PR head; narrative SHA fields in this body are intentionally avoided to prevent provenance churn.

The reconciled candidate has passed the substantive DGAF v1 Control-Plane Contract, Governance CI, Python Tests & Quality, DGAF Regression, PDMAL Pre-Authorization Security, PDMAL Pre-Freeze Runner Validation, PDMAL Harness, PDMAL Instrumentation, Truth Layer, Epistemic Evidence, PPTL, coverage, propagation, IP Hygiene, Claim Hygiene, and PR-scope documentation checks at the reconciled validation boundary. Repository-wide generic Doc Lint remains a separate legacy documentation-quality lane; the candidate workflow now scopes presentation lint to current/public surfaces while preserving historical/provenance surfaces separately.

Vercel reports SUCCESS for the reconciled candidate preview. Production source identity remains a separate post-merge predicate tracked by Issue #137.

Experimental boundary

Current experimental state remains PRE-FREEZE / FAIL-CLOSED / NOT AUTHORIZED / N=0. No freeze was created, no pilot was authorized, no data were unblinded, and no empirical result was generated by this engineering PR.

…role boundary

vercel · 2026-08-29T07:48:38Z

Deployment failed for project dynamicgovernanceagenticformation with the following error:

Resource is limited - try again in 24 hours (more than 100, code: "api-deployments-free-per-day").

Learn More: https://vercel.com/ndrorchestration?upgradeToPro=build-rate-limit

vercel · 2026-08-29T08:04:43Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
dynamicgovernanceagenticformation	Ready	Preview	Aug 30, 2026 5:10am

ndrorchestration

Current-stage verification @ current PR head d7ae64dc3251c25f5736b7d4e84c619645ebd6ca: (1) exact-head GitHub Vercel status is SUCCESS; (2) Vercel deployment dpl_EuQ3Gv7thBgQJYcNWPq4vSoux7Qf is READY and carries exact Git SHA d7ae64dc...; (3) /api/health on the exact candidate preview returns HTTP 200; (4) no runtime errors are observed in the selected window; (5) no unresolved review threads are present. This closes preview/source/runtime evidence only. It does not close production-target provenance, P2/P6a, P3-P6, P7-P9, freeze, authorization, or empirical N. No merge or experimental authorization is inferred from this comment.

ndrorchestration

Current-stage verification @ current PR head d7ae64dc3251c25f5736b7d4e84c619645ebd6ca: (1) exact-head GitHub Vercel status is SUCCESS; (2) Vercel deployment dpl_EuQ3Gv7thBgQJYcNWPq4vSoux7Qf is READY and carries exact Git SHA d7ae64dc...; (3) /api/health on the exact candidate preview returns HTTP 200; (4) no runtime errors are observed in the selected window; (5) no unresolved review threads are present. This closes preview/source/runtime evidence only. It does not close production-target provenance, P2/P6a, P3-P6, P7-P9, freeze, authorization, or empirical N. No merge or experimental authorization is inferred from this comment.

ndrorchestration

Correction note: the two identical current-stage review comments reflect the same verification event and should be treated as a single evidence record, not independent evidence. Exact current-head preview provenance remains: d7ae64dc... -> Vercel READY deployment dpl_EuQ3Gv7thBgQJYcNWPq4vSoux7Qf -> /api/health HTTP 200 -> no observed runtime errors. This remains preview-only and non-authorizing.

ndrorchestration · 2026-08-30T03:12:35Z

Current-stage provenance update (2026-08-30): Vercel now reports a READY preview deployment dpl_EuQ3Gv7thBgQJYcNWPq4vSoux7Qf whose Git source SHA exactly matches the current PR #139 head d7ae64dc3251c25f5736b7d4e84c619645ebd6ca. The deployment's /api/health endpoint returns HTTP 200 with the expected DGAF runtime metadata. This is valid exact-source preview/runtime evidence only; target is still null, so it does not satisfy the post-merge production predicate or authorize P2/P6a/experimental execution. The candidate remains non-authorizing and empirical N remains 0.

ndrorchestration

Current-head reconciliation note (2026-08-30): GitHub PR metadata is authoritative for candidate identity. The live PR head is d7ae64d. The older dad96fc reference remaining in the PR body is historical/stale narrative text and must not be interpreted as the current candidate SHA. No code-changing verification claim is being promoted from the older SHA. The current head has corresponding preview deployment provenance and substantive control-plane/pre-freeze validation from the current engineering lane. Experimental boundary remains PRE-FREEZE / FAIL-CLOSED / NOT AUTHORIZED / N=0.

ndrorchestration

Current exact-head checkpoint: PR #139 head d7ae64dc3251c25f5736b7d4e84c619645ebd6ca. Exact-head validation is green for DGAF v1 Control-Plane Contract, Governance CI, PDMAL Pre-Authorization Security, PDMAL Pre-Freeze Runner Validation, PDMAL Harness Validation, PDMAL Instrumentation Dry Run, Python Tests & Quality, DGAF Regression, Truth Layer Tests/Validation, Epistemic Evidence Validation, PPTL, Full Repository Coverage, Propagation Consistency, Claim Hygiene, IP Hygiene, and PR-scoped Doc Lint. Repository-wide Doc Lint remains the only failing lane and is separate documentation baseline debt. The experimental state remains PRE-FREEZE / FAIL-CLOSED / NOT AUTHORIZED / N=0. Ready-for-review transition is currently blocked by the GitHub connector GraphQL field error on Repository.fullDatabaseId, not by a PR validation failure.

ndrorchestration · 2026-08-30T03:43:13Z

Current checkpoint: live PR head remains d7ae64dc3251c25f5736b7d4e84c619645ebd6ca. Exact-head CI evidence includes successful DGAF v1 Control-Plane Contract, Governance CI, PDMAL Pre-Authorization Security, PDMAL Pre-Freeze Runner Validation, PDMAL Harness Validation, PDMAL Instrumentation Dry Run, DGAF Regression, Truth Layer Tests/Validation, Epistemic Evidence Validation, PPTL, Coverage, Propagation, Claim/IP hygiene, and PR-scoped Doc Lint. Governance CI run 33289255211 retained E2b/M6, evaluation, and freeze-control evidence plus TLC containment evidence. Current remaining merge-level issue is the adversarial current-main TGL finding; this is being treated as a separate remediation/integration boundary. Experimental state remains PRE-FREEZE / FAIL-CLOSED / NOT AUTHORIZED / N=0.

ndrorchestration · 2026-08-30T03:45:52Z

Critical-path update: current PR #139 head is d7ae64d. Exact-head CI remains green across substantive control-plane, Governance CI, PDMAL pre-freeze/security/harness/instrumentation, PPTL, regression, Truth Layer, epistemic evidence, claim/IP/coverage, and PR-scope doc-lint lanes; repository-wide Doc Lint remains the isolated failure. The historical TGL remediation PR #134 is closed/unmerged, so its SKIP-reduction and complete-seal fixes are not present in main. A fresh current-main TGL remediation lane is therefore required before any merge-level claim. The connector could not create the needed source branch in this turn, so no candidate or experimental state was changed. PRE-FREEZE / FAIL-CLOSED / NOT AUTHORIZED / N=0.

…hority

…-mainline-20260830 fix(tgl): restore current-main governance contract semantics

ndrorchestration · 2026-08-30T05:32:13Z

Production provenance is now CLOSED independently via Issue #137: main merge 303f4424d2198f0d0cf76305c589263dd1e417dc is deployed at Vercel deployment dpl_FbPSc3K9VFWESXuUuWDepBKwKra8, target production, state READY, with exact Vercel Git SHA equality. /api/health returned HTTP 200 on that exact deployment. This closes deployment/source provenance only; P2/P6a authenticated runtime predicates, P3–P6, P7/P8/P9, freeze, authorization, and empirical N remain separate.

ndrorchestration added 14 commits August 29, 2026 03:46

feat: add DGAF v1 governance envelope

469dfa3

feat: add deterministic v1 state identity

75697aa

feat: add v1 resource and concurrency ledger

b69c2b2

feat: add v1 branch provenance registry

2f1a529

feat: add explicit v1 commit authorization gate

0e41bae

feat: add v1 deterministic control-plane lifecycle

c958275

docs: map canonical DGAF agents to v1 control-plane roles

7f2e107

test: add deterministic DGAF v1 control-plane contracts

c28b789

test: add DGAF v1 TGL lifecycle integration contracts

8f5967a

ci: add deterministic DGAF v1 control-plane validation lane

5ec710a

feat: export DGAF v1 control-plane contracts

99cf0e5

docs: add canonical DGAF v1 control-plane architecture

342c3be

docs: add DGAF v1 file-tree ownership plan

4626b66

docs: reconcile current state with v1 finalization and latest Notion …

089014f

…role boundary

docs: add DGAF v1 finalization gate record

878f1ad

ndrorchestration added 13 commits August 29, 2026 04:05

docs: add DGAF v1 execution readiness criteria

9f4c7f5

ci: include adversarial v1 contracts in control-plane lane

24f9174

test: add DGAF v1 adversarial control-plane contracts

04551a9

fix: release active control-plane resources on escalation

e3ce2fc

test: enforce immediate resource release on escalation

f96383a

docs: record Notion GitHub reconciliation for v1

5445ac1

docs: add PR139 review packet

554e852

docs: record PR139 status snapshot

4bce22a

docs: record PR139 hardening closure notes

ea5ccf1

docs: add exact-head CI execution record for PR139

9dea8b0

test: add branch registry count contract

2ceca4f

test: align TGL fixture with established hook contract

0b9e314

test: align adversarial TGL fixture contract

b606aa3

ndrorchestration added 2 commits August 29, 2026 22:59

docs: stabilize PR139 status summary

19471a8

docs: remove mutable current-head field from PR139 status

d7ae64d

vercel Bot deployed to Preview August 30, 2026 03:00 View deployment

ndrorchestration commented Aug 30, 2026

View reviewed changes

ndrorchestration mentioned this pull request Aug 30, 2026

docs: close current-surface markdownlint debt #146

Closed

ndrorchestration commented Aug 30, 2026

View reviewed changes

ndrorchestration added 2 commits August 29, 2026 23:49

fix(tgl): restore required SKIP escalation and complete audit seal

a93fe62

test(tgl): enforce required SKIP escalation and gate-set seal coverage

3d79c3c

ndrorchestration mentioned this pull request Aug 30, 2026

fix(tgl): restore current-main governance contract semantics #148

Merged

ndrorchestration added 5 commits August 30, 2026 00:02

fix(governance): scope historical agent alias assertion to active aut…

58a6964

…hority

fix(ci): include numpy for repository test collection

f560996

fix(ci): pin numpy for supported Python test matrix

764973d

Merge pull request #148 from ndrorchestration/fix/tgl-contract-repair…

7bd5ff3

…-mainline-20260830 fix(tgl): restore current-main governance contract semantics

merge mainline TGL remediation into DGAF v1 candidate

3d3676d

vercel Bot deployed to Preview August 30, 2026 04:47 View deployment

ci: scope doc lint to current public surfaces

7443786

vercel Bot deployed to Preview August 30, 2026 04:53 View deployment

ci: bound doc lint to public entry-point surfaces

9e0c85c

vercel Bot deployed to Preview August 30, 2026 04:54 View deployment

docs: fix README technical public-surface lint

bd625dc

vercel Bot deployed to Preview August 30, 2026 05:10 View deployment

ndrorchestration mentioned this pull request Aug 30, 2026

feat: finalize DGAF v1 governed control plane — review-ready candidate #149

Merged

ndrorchestration merged commit 303f442 into main Aug 30, 2026
65 of 66 checks passed

Navigation Menu

feat: finalize DGAF v1 governed control plane with TGL hardening - #139

feat: finalize DGAF v1 governed control plane with TGL hardening#139
ndrorchestration merged 171 commits into
mainfrom
feat/dgaf-v1-control-plane-finalize-20260829

ndrorchestration commented Aug 29, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Aug 29, 2026

Uh oh!

vercel Bot commented Aug 29, 2026 •

edited

Loading

Uh oh!

ndrorchestration left a comment

Uh oh!

ndrorchestration left a comment

Uh oh!

ndrorchestration left a comment

Uh oh!

ndrorchestration commented Aug 30, 2026

Uh oh!

ndrorchestration left a comment

Uh oh!

ndrorchestration left a comment

Uh oh!

ndrorchestration commented Aug 30, 2026

Uh oh!

ndrorchestration commented Aug 30, 2026

Uh oh!

Uh oh!

ndrorchestration commented Aug 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

ndrorchestration commented Aug 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Purpose

Included

Cross-surface reconciliation

Boundary

Verification

Experimental boundary

Uh oh!

vercel Bot commented Aug 29, 2026

Uh oh!

vercel Bot commented Aug 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

ndrorchestration left a comment

Choose a reason for hiding this comment

Uh oh!

ndrorchestration left a comment

Choose a reason for hiding this comment

Uh oh!

ndrorchestration left a comment

Choose a reason for hiding this comment

Uh oh!

ndrorchestration commented Aug 30, 2026

Uh oh!

ndrorchestration left a comment

Choose a reason for hiding this comment

Uh oh!

ndrorchestration left a comment

Choose a reason for hiding this comment

Uh oh!

ndrorchestration commented Aug 30, 2026

Uh oh!

ndrorchestration commented Aug 30, 2026

Uh oh!

Uh oh!

ndrorchestration commented Aug 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

ndrorchestration commented Aug 29, 2026 •

edited

Loading

vercel Bot commented Aug 29, 2026 •

edited

Loading