Adaptive Grok Build Pro v2.0.15
Governed Agentic Software Factory — pre-pilot technical preview.
Delivered
- PR #27 adds the separate
pilot/single-operator capability: one allowlisted GitHub issue snapshot, an exact private source clone, one pinned Codex app-server turn, a sealed candidate, one configured test command plus independent semantic validation, and separately delegated non-force branch/draft-PR publication. - A closed
pilot_confinedcommand profile is checked by real no-model sandbox probes. Durable SQLite intents make ambiguous external-effect recovery observation-only; automatic model retries remain disabled. - Review repairs cover CSP digest validation, actual pilot-test discovery, command read isolation and architecture ownership. The downstream OpenClaw workspace-path discovery report is preserved under
engineering/backlog/20260905-openclaw-workspace-path-discovery.mdfor a separate repair. - M0–M9 repository source delivered in v2.0.13 and the v2.0.14 offline multimodal artifact remain included. This release does not claim operational M8/M9 activation.
Exact delivery evidence
- Pull request: #27
- Checked head:
9fcc9d943c74260c02a920a59490143f91cb38b2. - Protected squash merge:
fd51dcfed6b33f4a8707c0db602328146df17cc9at2026-09-05T20:14:37Z. - Identical checked/merged tree:
f01e9b0d1f80fb6731c68079540fd98e5c1f64ac. - GitHub App
4694114, checkadaptive-trust-ci/verified@06ecf1c875bc, run101365945968: SUCCESS at2026-09-05T20:08:36Z. Attestation4a13e71c-25e7-4272-80fa-8153590edc84, signer0519cf1d47436f2e. - GitGuardian run
101365931711: SKIPPED after the operator marked incident36975026as a false positive. The value is a public CSP fixture digest, not a credential. This is not represented as a fresh successful secret scan. - Local affected-continuation verification and all three independent reviews passed on the checked head. The original PostgreSQL timeout and subsequent targeted successful recovery remain preserved; this does not claim a second complete local test run.
- The source-parent build was reproduced in two private no-local clones. The ZIP was then reproduced byte-for-byte from the exact protected merged commit before publication.
- ZIP SHA-256:
1f0f64557fd258df7e533f674bb4e7c55d4a1a51454d48bcfecfa5487d08e9d7. - Sidecar SHA-256:
8f3ed4b8eb96f7984eb38b0c988bd8a8cee8cdc789bca52527084b78fd791c6d.
Explicit limits and next step
No real model attempt, target-repository change, automatically created target PR, deployment, hosted-site publication, M8 accepted cohort or M9 live qualification is claimed. The pilot is default-unavailable. Its first live attempt is blocked because the pinned landing base 6990103 advanced to observed 80d6215; refresh the trusted target scope while preserving the newer analytics and deployment-archive coherence before spending one model attempt. The target repository has no configured App-owned Trust CI profile, so a future proposal cannot claim merge eligibility.
The tag preserves the reviewed pre-publication source snapshot: its README/START_HERE/PROJECT_STATE candidate wording is historical, and these release notes record the completed delivery. A separate documentation-only successor will synchronize current-main handoff without replacing the immutable ZIP or retagging this release. Older PRs #12/#13/#15 are being reconciled for unique work, not silently discarded.
Rollback is selection of the immutable v2.0.14 package/tag; this publication performs no runtime or database mutation. Published v2.0.13/v2.0.14 artifacts are unchanged.