feat: MIT reference Execute server with self-signed local receipts - #442
Merged
Conversation
abrichr
force-pushed
the
feat/serve-execute-ref-2026-08-30
branch
from
September 1, 2026 23:00
171b808 to
9e88ca8
Compare
Host the public Execute v1 HTTP+MCP contract in-process so one operator can submit the same request schema on this machine. Receipts are self-signed with a local Ed25519 key and are not OpenAdapt production Seals.
The execute extra still required openadapt-types 0.10.x. Core, console, and interop extras require 0.13.x, so `uv lock --locked` could not resolve. Pin the extra to the same range and refresh uv.lock.
ExecuteEvidenceReceiptV1 now requires workflow_version, qualification_id, environment_id, runner_id, nonce, and oracle_tier. Pass them from the request and derive oracle_tier from observed effect strength.
abrichr
force-pushed
the
feat/serve-execute-ref-2026-08-30
branch
from
September 1, 2026 23:28
833bb60 to
a34e9b8
Compare
Member
Author
|
Merged by an agent session, not the founder. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
openadapt-flow serve-executehosts the public Execute v1 contract on loopback. Same request schema as the documentedPOST /v1/executionspath. The runner is this process.Receipts are self-signed with an Ed25519 key under
~/.openadapt/execute-ref/. Issuer isself_signedandproduction_sealis false. Meter is $0.GET /seals/{id}is the local verify page. Counterparties that need an OpenAdapt Seal still go through Cloud.Admitted bundles live as digest-pinned JSON in that data dir.
--seed-mockmedwrites the synthetic MockMed ok and banner-lie admissions used by the tests.What to check:
tests/test_execute_ref.pycovers a verified receipt, the banner-lie halt, idempotency, extra-key refusal, no screenshot fields, and no tenant/billing modules.openadapt_flow/execute/is MIT engine code. Don't copy Cloud control-plane modules into it.Run:
pip install 'openadapt-flow[execute]' openadapt-flow serve-execute --port 8787 --seed-mockmedOpened by an agent session, not the founder.