Repository navigation
T73 — Surface the host's classifier verdict on the create response and in the CLI #1806
Description
Task
| slice | size | difficulty | model | who | estimated lines |
|---|---|---|---|---|---|
| Host-address boxes under deny-all | S | needs care | standard | an agent | 240 (120 code, 120 tests) |
On a host that cannot decide per box, session start names the cause, prints the install command only when the missing step is the cause, never prompts, and the box's listing and spec show egress enforcement none until the host can decide.
Covers:
- none
Layers:
- daemon:
- crates/minimald-rpc/src/lib.rs: the create response gains a defaulted classifier advisory and the per-box enforcement attribute; an old client decodes a reply without them
- crates/minimald/src/rpc.rs: fills the advisory and the per-box enforcement attribute on the create response from the start-up fact T48 records (a deny-all box running unenforced shows egress enforcement none in its listing and spec while the host cannot decide per box; the state outlives the activate message)
cargo nextest run -p minimald native_host_advises_classifier_install_without_promptcargo nextest run -p minimald create_response_shows_enforcement_none_while_the_host_cannot_decide
- cli:
- crates/minimal/src/cmd/session.rs: prints the advisory with the install command when the missing privileged step is the cause, and never prompts
cargo nextest run -p minimal activate_prints_classifier_advisory
Waits on:
Plan block
### T73 — Surface the host's classifier verdict on the create response and in the CLI
slice: S11
kind: task
covers: none
size: S
est: 120 code, 120 tests
executor: agent
difficulty: needs care
model: standard
diagnostics: the bundle's daemon log tail carries the advisory each create response carried and the enforcement attribute recorded for each host-address box
observability: one info log line per create response that carries the advisory, naming the cause
layers:
- daemon:
- crates/minimald-rpc/src/lib.rs: the create response gains a defaulted classifier advisory and the per-box enforcement attribute; an old client decodes a reply without them
- crates/minimald/src/rpc.rs: fills the advisory and the per-box enforcement attribute on the create response from the start-up fact T48 records (a deny-all box running unenforced shows egress enforcement none in its listing and spec while the host cannot decide per box; the state outlives the activate message)
test: cargo nextest run -p minimald native_host_advises_classifier_install_without_prompt
test: cargo nextest run -p minimald create_response_shows_enforcement_none_while_the_host_cannot_decide
- cli:
- crates/minimal/src/cmd/session.rs: prints the advisory with the install command when the missing privileged step is the cause, and never prompts
test: cargo nextest run -p minimal activate_prints_classifier_advisory
produces: none
consumes:
- crates/minimald/src/net/classifier.rs
proof: On a host that cannot decide per box, session start names the cause, prints the install command only when the missing step is the cause, never prompts, and the box's listing and spec show egress enforcement none until the host can decide.
depends on:
- blocked by #1631
Reacted by minimal-foundry
Activity
revert(minimald): drop the T73 create-response and CLI advisory
minimal-foundry commentedon Oct 3, 2026
Done. #1877 merged.
branch
agent/1806-surface-the-host-s-classifier-verdict-on-the-cre· epic #1437 · PR #1877Updated 2026-10-28T06:17:32.453Z.
T48 — Classify host-address boxes apart from node-plane traffic and e…