Reveal progressively
Sparse checkout hides unselected directories and begins with every selected source path read-only.
Progressively governed agent workspaces
Open the workspaceonly when the work is ready.
Sparse Git worktrees that begin planning-locked, require context-blind plan review, and keep foundational changes behind exact parent-authorized patches.
Private preview. Product behavior shown here reflects the current application contract.
01
PLANNINGsource read-only · plan writable
ACTIVEsubmitted plan · sha256 2f90…
02
REVIEW PENDINGsource-free blind bundle
LOCKEDGO requires exact artifact match
03
IMPLEMENTATIONordinary partition writable
WAITINGProtected roots remain parent-authorized in every phase.
Planning lockedBlind GO / NO-GOContent-addressed patchesEvent-driven Codex grids
What it owns
Workflow authority as durable state.
Capsules reduce accidental access and bind plan, review, implementation, verification, and protected changes to exact artifacts.
Review without source
A content-addressed plan enters a source-free blind bundle and opens implementation only after an exact GO verdict.
Patch foundations exactly
Parent-authorized protected proposals bind touched paths, pre-state, patch hash, and expected post-state.
Deliberate product boundary
A cooperative audit boundary, described without security theater.
A process sharing the human OS identity can deliberately bypass file modes. Strong hostile-process isolation still requires a separate principal, container, VM, or inaccessible parent broker.
Owned here
- Capsule lifecycle and audit
- Permission dispositions
- Protected patch artifacts
- tmux/Codex event transport
Owned elsewhere
- Hostile-process isolation
- Reviewer judgment
- Atomic multi-file guarantees
- Authority from worker messages
The operating loop
One explicit path from intent to durable fact.
Plan
Create a sparse worktree with source locked and one writable planning document.
Review
Submit the frozen plan to a context-blind, source-free reviewer.
Implement
Open only the ordinary editable partition after an artifact-valid GO.
Verify
Freeze exact changes, audit integrity, and complete or deliberately reopen.
$ workspace-capsule workflow submit-plan /tmp/dowhere-author {"phase":"review-pending","sourceWritable":false,"planSha256":"2f90…"}
Private preview
Use the system without surrendering the judgment.
A process sharing the human OS identity can deliberately bypass file modes. Strong hostile-process isolation still requires a separate principal, container, VM, or inaccessible parent broker.