IDKMesh · architecture

Four pipelines, and where authority stops

IDKMesh separates proposal, execution, verification, and integration into distinct stages. Evidence flows forward along every arrow below. Authority does not.

Each diagram was read off the executable code named in its caption, not off a design sketch.

claim — worker self-report evidence — independent authority — integrates denied — fail-closed
01 — canonical path

The work and evidence path

A goal becomes a bounded Work Unit, a worker produces a candidate and a self-report, an independent verifier produces evidence about that self-report, and a human integrates. The two dashed rules mark where a stage's output stops being able to speak for the next one.

worker success ≠ acceptance verifier recommendation ≠ merge authority Goal / project policy WorkUnit v0.2 bounded · capability-typed · spend-capped Admitted worker adapter Candidate + ResultManifest v0.1 worker self-report, not a verdict CLAIM Verifier-owned EvaluatorPlan VerificationResult v0.1 checks, findings, independence metadata EVIDENCE Report / evidence aggregation Human or governance decision the only stage that integrates AUTHORITY
Evidence moves down; authority never moves up. Stages 5–7 produce evidence about stage 4's claim and cannot accept it. Only stage 8 integrates. Source: experiments/two_attempt_orchestrator.py and the WorkUnit, ResultManifest, and VerificationResult schemas.
worker successacceptance
verifier recommendationmerge authority
CI successindependent human approval
benchmark fixturescientific outcome
02 — orchestrator

Attempts fail independently

The orchestrator is a control-plane MVP, not a worker runtime — it executes no candidate code. Each attempt reaches exactly one of four terminal states, and a failure in one attempt never aborts the others. The three tokens below travel at the same time to show that isolation.

collect adapter load manifest verify plan / policy verified accept / reject worker_error result_manifest_error verification_error attempt three of the four terminal states are counted as control_failures
One attempt's failure does not abort the run. The three error states are summed as control_failures, which sets the run to completed_with_failures. Only verified carries a recommendation of accept_candidate or reject_candidate. Source: orchestrate() in experiments/two_attempt_orchestrator.py.

Every run report declares the same authority block, and all four values are constant:

"authority": {
  "canonical_state_write": false,
  "git_push": false,
  "merge": false,
  "automatic_candidate_selection": false
}

A verified, accepted candidate therefore still changes nothing on its own.

03 — compute admission

Zero project spend, enforced fail-closed

Repository policy is applied first and acts as a hard ceiling. A Work Unit may tighten the spend constraint but can never relax it, so a task cannot ask its way into authority the project does not have. Watch the paid token: it reaches the gate and stops.

config/compute-policy.json project_spend_usd_max = 0 · paid_providers_enabled = false · donor_costs_must_be_opt_in = true applied first — hard ceiling offer pool local_owned donated public_project_ci grant free_tier paid policy gate fail-closed cost class check eligible offer selector trust · capabilities · resources wait · success · independence admitted worker adapter rejected schema-representable, policy-disabled
paid exists in the offer schema for interoperability and testing only. Repository policy disables it, so it never becomes an eligible offer. Donated capacity must additionally be opt-in, and must stay voluntary, visible, capped, and easy to stop. Source: config/compute-policy.json and experiments/local_compute_offer.py.
04 — continuous integration

The one check that always runs

Every other workflow in the repository is path-filtered, so none of them runs on every pull request. PR Gate is deliberately unfiltered so it can serve as the single stable required check on main — a required check that never runs would leave a pull request permanently blocked.

trigger pull_request push · dispatch matrix · fail-fast: false PYTHON 3.11 PYTHON 3.13 checkout exact head SHA closing-keyword guard — stdlib only install deps pytest -q link integrity idkgraph_link_check checkout exact head SHA closing-keyword guard — stdlib only install deps pytest -q link integrity idkgraph_link_check the guard runs before the install, so an accidental issue auto-closure fails fast with no packages
Untrusted pull request text never reaches the shell as code. The title and body are passed to the guard through the environment and argv only. The link step runs tools/idkgraph_link_check.py inline and fails on any finding outside tests/fixtures/, where negative fixtures are seeded deliberately. Source: .github/workflows/pr-gate.yml.

Where the authority actually lives

These renderings add no new contract. Where a diagram and a schema disagree, the machine-readable schema is authoritative.