A repository delivery system with four constrained roles

active agents · durable proof

Gepetto coordinates the tree. Pinocchio owns one implementation leaf. Review validates the live pull-request head. Jiminy rechecks every gate, merges, and verifies the integrated result.

@dylanmccavitt/skills · main @ 88e51f7 View repository ↗
Codex roles4coordinator, worker, gatekeeper, continuation
Typed handoffs7packets checked against live state
Verified tests115plus a valid delivery graph
Codex orchestration delivery flow Gepetto turns a request into approved research. Pinocchio implements one leaf. Review validates the exact pull-request head, sending findings through a bounded fixer loop. Jiminy merges and verifies integration. Checkpoint can replace any long-running task without changing lane ownership. Research Gepetto defines the leaf RESEARCH_PACKET Implementation Pinocchio · one writer one branch · one PR HEAD-BOUND PROOF Review validate exact head fix → re-review ≤ 3 REVIEW_PACKET Merge + integration Jiminy rechecks live gates JIMINY_COMPLETE Checkpoint preserves the role while replacing the task state registry · continuation journal · heartbeats · restart budget

Authority stays narrow

one owner per decision
GepettoCoordinates delivery and refreshes live state; never implements, reviews, or merges.
PinocchioImplements one approved leaf and produces a tested, linked pull request; never reshapes scope.
ReviewerCollects findings, controls one fixer at a time, and invalidates proof when the head moves.
JiminyReapplies merge gates at the live head and verifies the combined default branch; never fixes code.

Coordination becomes state, not chat

recoverable by design
Single writerEach leaf owns one branch and worktree.
Exact-head proofReview, CI, and merge authority expire when the PR SHA changes.
Atomic stateLocks, expected revisions, replacement, and journals prevent split-brain transitions.
Content refsSHA-256 addresses stable context; unchanged instructions are not reloaded.
SupervisionHeartbeats and measured pressure drive checkpoint or escalation.

What the repository has learned

July 16–22, 2026
Roles → graph

Durable skills, persisted lane artifacts, lifecycle hooks, Pinocchio, and machine-readable transitions.

Graph → runtime

npm distribution, safe install/uninstall, CI, ledger, doctor, liveness supervision, and restart budgets.

Runtime → safety

CAS updates, crash-recoverable continuations, coordinator-bound runners, and exact-head enforcement.

Safety → contracts

Typed packet schemas validate every role handoff before the delivery graph advances.

Still improving

live GitHub work
In progress · PR #19

Atomically accept orchestration events

Collapse packet validation and state mutation into one consistent operation.

Open pull request ↗
In progress · PR #21

Invalidate stale delivery proof

Prevent stored evidence from surviving a moving branch or pull-request head.

Open pull request ↗

The system’s bet: useful autonomy comes from constrained authority, current evidence, and recoverable state—not from letting every agent do everything.

Evidence boundary: repository history, open GitHub work, and the test suite were checked against main @ 88e51f7 on July 22, 2026. View the source repository ↗