Uh oh!
There was an error while loading. Please reload this page.
Enrollment privacy review: deferred first sync + hypaware-privacy skill (LLP 0100-0107) - #308
Merged
Merged
Conversation
…ll (LLP 0100-0107) Accepts the redesign LLP 0094 suspended the enrollment picker for: instead of an in-login TUI racing the first backfill, an enrolling login holds all export ticks until a printed deadline (next local 11:59pm, LLP 0101) and directs the user to a hypaware-privacy client skill that reviews captured history after backfill settles (LLP 0100). Supporting decisions: the machine-local usage-policy store gains per-entry classes ignore/local-only/ explicit-full (LLP 0103), retroactive deletion ships as an explicit cache-only hyp purge verb (LLP 0104), query/graph/MCP results filter local-only rows by the caller's usage class to close the transcript leak (LLP 0105), unclassified folders are classified by a session-start hook on enrolled machines (LLP 0106), and skill materialization rides every attach under reconciler ownership (LLP 0107). Marks LLP 0080/0093/0094 Superseded and appends Extended-by forward-refs to LLP 0049/0069/0070/0071. Docs only; implementation follows in design/plan docs that reference this set. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Docs-only PR: eight Accepted LLPs designing the enrollment privacy flow, grilled against the corpus on 2026-07-13. This is the redesign LLP 0094 suspended the enrollment picker for.
The flow (LLP 0100, spec):
hyp remote loginenrolls fast and unchanged, but no export tick runs until a printed deadline; the user reviews their captured history afterwards, in their own agent session, via a newhypaware-privacyclient skill that runs after backfill settles, finds sensitive content, explainslocal-onlyvsignore, and applies confirmed choices throughhypverbs.Supporting decisions:
ignore|local-only| explicitfull(v2 format, v1 reads as local-only), so "completely ignored" never requires dropping a dotfile into the user's repos. Extends LLP 0049/0071.hyp purgeships the retroactive deletion LLP 0049 deferred:<path>/--session <id>/--ignored/--all, cache-only, never touches sinks or the remote; marking verbs stay non-destructive. Per-session privacy is purge-only.local-onlyrows when the caller's own cwd is a synced context, closing the transcript leak around the export seam (local-only content surfacing as tool results inside a synced session's captured transcript). Unknown caller excludes; explicit--include-local-onlyoverride.hyp leavevia markers; this is what makes "login installs the skills" true.Corpus maintenance: LLP 0080/0093/0094 marked Superseded with forward-refs; Extended-by notes appended to LLP 0049 (#classes, non-goal 2), 0069 (#trigger), 0070, 0071.
No code changes; design/plan docs and implementation follow against this set. Deliberately open questions are recorded in the docs (explicit-sync CLI spelling, graph projection cwd provenance, per-client hook mechanics, purge partition-rewrite mechanics).
🤖 Generated with Claude Code