Make every external action reviewable
one move: make authority explicit
Open the code pane immediately, then use the Spec tab, optional design question, tests, and artifact when you want them.
Finish each move before carrying the artifact forward.
Tools, resources, and prompts have different control surfaces; sensitive tool calls require consent and an audit record.
Deliverable: State the system invariant in one sentence.Authorize a tool call from an allowlist, require confirmation for sensitive actions, and append a redacted audit event.
Deliverable: Type the deterministic core.Denied calls produce no side effect, approved calls carry a stable actor/tool/request ID, and secrets never appear in the log.
Deliverable: Record a normal case and a boundary case.Try a sensitive action without consent, duplicate a request ID, and pass a secret-looking argument.
Deliverable: Name the failure signal and its guard.A consent policy, append-only audit log, and replayable authorization trace.
Deliverable: Save the contract, evidence, and handoff note.Denied calls produce no side effect, approved calls carry a stable actor/tool/request ID, and secrets never appear in the log.
Try a sensitive action without consent, duplicate a request ID, and pass a secret-looking argument.
A consent policy, append-only audit log, and replayable authorization trace.
Deriva-authored extension beyond the supplied PDF. The five moves are Deriva’s implementation contract for this project.