RedinGhost/intent-loop

1# Decision log2 3## 2026-08-28: freeze the product boundary4 5Accepted: one Codex Plugin, one intervention Skill, one local MCP state service, and optional fail-open Hooks. Codex keeps all planning and execution ownership.6 7Rejected: a prompt pack, intake form, PRD generator, completion gate, full user profile, Agent Harness, independent chat client, App Server client, transcript parser, or cross-agent adapters in this MVP.8 9## 2026-08-28: use outcome evidence10 11Accepted: paired deliverables, blinded final-match grading, causally attributed rework, user corrections, interruption burden, latency, privacy scans, export round-trip, and physical deletion.12 13Rejected: tool calls, question counts, populated fields, protocol text, build success, or test invocation as proof of efficacy.14 15## 2026-08-28: local append ledger16 17Accepted: per-project hash-chained JSONL with a serialized append lock, ledger-derived projections, explicit supersession/invalidation, and privacy deletion through a verified atomic rewrite.18 19Deferred: SQLite or a remote database. The MVP has no network and no native database dependency; the JSONL design is covered by corruption and concurrency tests.20 21## 2026-08-28: no rich UI dependency22 23Accepted: ordinary Codex dialogue and a manual Skill path. Structured input is opportunistic only.24 25Deferred: MCP App UI because it is disabled on the installed surface and is not needed for the core loop.26 27## 2026-08-28: honest release state28 29The implementation can become technically usable after E2E. It cannot become a product Go until the frozen 80-task paired evaluation clears every threshold. Until then the release judgment is Iterate.30 31## 2026-08-28: public beta distribution32 33Accepted: an opt-in GitHub repo marketplace beta with committed self-contained Node runtime bundles, Apache-2.0 licensing, public privacy/terms/security/support documents, CI, and tagged releases.34 35Accepted evidence language: public beta distribution is technically Go while product efficacy remains Iterate. Installation, runtime, privacy, and deletion evidence cannot be relabeled as lower rework or better final-match evidence.36 37Deferred: OpenAI universal-directory submission. A plugin with MCP currently requires a public HTTPS server, domain verification, platform identity and permissions, and reviewer materials. Moving local intent data to a hosted service would materially change the frozen privacy boundary.38