Merge Orchestration · Bag-of-Actions execution-substrate design doc

[hyperpolymath]

Bag-of-Actions — execution-substrate design (item #2 of the four you picked)

You pointed me at bag-of-actions, and it's an apt pointer: not a "bag of CI actions" but a "distributed OS for mobile continuations" (Batons, capability routing, Ephapax linear types, trust-attestation proof-chains, Freeze/Thaw, Bag.Mesh.submit). This doc records how the merge-orchestration runtime maps onto it — a near one-to-one structural fit — so the integration is ready to build the moment the repo is in scope.

docs/design/merge-orchestration/05-execution-substrate-bag-of-actions.adoc covers:

• The mapping — lease → capability route · in-cycle/lease no-double-merge → Ephapax linear type (type-level, not a MapSet+lock) · a3 attestation → trust proof-chain · sense→actuate hand-off → Freeze/Thaw migration · self-hosted BEAM mesh → runs off GitHub-hosted Actions minutes.
• The integration sketch — a BatonEmitter on the hypatia side that submits each armed decision as a Baton whose required capability is {repo, :github_merge_token} (which the brain doesn't hold, so it must migrate to the farm); a merge_pr action + capability facts on the BoA side. The JSONL manifest stays as the durable record/fallback; this is additive.
• Why it bears on billing — self-hosted execution makes the farm Actions-billing fix moot rather than a workaround. (You've deferred the billing fix; this is the longer arc it sits on.)

Status / honesty

DESIGN ONLY. bag-of-actions is not in this session's scope — the add_repo tool my setup references isn't available here, so I could only read its metadata + README (via public web), not its files. So I can't read the real Baton format / Bag.Mesh surface or build the integration from here. The doc says so plainly and lists exactly what's needed to build it once the repo is added.

Scope

• Pure docs (1 .adoc + the LEDGER, now v0.8.0). Not armed — it's a design you specifically asked about, so it's for your read.

The LEDGER also now records the P3 + mass_squash farm landing (.git-private-farm #79, 10/10 conformance, admin-merge pending its dead CI), the a5 standards draft-pending status (I'll show it for your sign-off, not push), and a flagged manifest-shape seam between Dispatcher's output and actuate.sh's input.

---

Generated by Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 42 issues detected

Severity	Count
🔴 Critical	0
🟠 High	0
🟡 Medium	42

View findings

[
  {
    "reason": "Repository has 5 non-main remote branch(es). Policy: single main branch only.",
    "type": "GS007",
    "file": ".",
    "action": "delete_remote_branches",
    "rule_module": "git_state",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "src/ui/gossamer/README.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "scripts/ci-tools/Cargo.toml",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "scripts/bench-tools/Cargo.toml",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "ffi/zig/README.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "docs/reports/audit/audit-2026-04-15-post.md",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "docs/integration/github-registry.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "docs/integration/github-registry.adoc",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "docs/integration/a2ml-k9.md",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 11 day(s) old",
    "type": "CSA001",
    "file": "docs/architecture/system-integration.md",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence