docs: align isolation-profile claims with implementation (#900) - #992
Merged
Conversation
…ce capability status (#900) - README/memory.md described CCC_NODE_ISOLATION_PROFILE=external as a non-bypassable PreToolUse Family-resource guard, but that hook was removed (TM-1306); service-control.md already documents the real split. Both docs now describe the actual behavior (memory-source gate forcing Family Wiki paths off) and link the enforcement boundary to service-control.md. - Per-provider feature status is owned by provider-capability-matrix.md; the README memory-hooks row links there instead of generalizing PostCompact support across providers (Codex/crush/Piri reinjection is degraded in the matrix). - README env table now exposes CCC_CODEX_MEMORY_LOADER and the default-on CCC_CODEX_SKILL_COLLECTOR opt-out.
seoseo-ai
approved these changes
Aug 6, 2026
seoseo-ai
left a comment
seoseo-ai
left a comment
Collaborator
There was a problem hiding this comment.
Approved after explicit operator authorization using the local seoseo-ai credential.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
#900 대응 — 문서 상충 해소
이슈 지적 3건을 구현 대조로 확정 후 수정했습니다 (문서만, +14/-3).
1. 🔴 보안: 격리 경계 과대 서술 정정
external은 load-memory/refresh-memory/distill 경로에서 Family Wiki 메모리만 끕니다(WIKI_ENABLED=0). PreToolUse guard는 TM-1306으로 제거됨 — 코드베이스 어디에도 isolation 연동 PreToolUse 훅 없음non-bypassable external-node Family-resource guard, memory.mdthe PreToolUse guard rejects Family/internal paths, URLs, commands, and MCP calls— 운영자가 경계를 과신할 수 있는 스테일 서술2. 기능 상태 단일 소유
provider-capability-matrix.md단일 소유 원칙대로 링크로 교체 (행렬상 Codex/crush/Piri의 reinjection은 degraded)3. README 옵트아웃 노출
CCC_CODEX_MEMORY_LOADER(materializer 선택) +CCC_CODEX_SKILL_COLLECTOR(기본 on,=false옵트아웃) 행 추가검증: ccc-provenance.test.sh 21/21, git diff --check 통과.