Skip to content

docs(blog): Why Your Agent Can't Audit Itself#443

Merged
ojongerius merged 7 commits into
mainfrom
worktree-blog+daemon-process-separation
May 17, 2026
Merged

docs(blog): Why Your Agent Can't Audit Itself#443
ojongerius merged 7 commits into
mainfrom
worktree-blog+daemon-process-separation

Conversation

@ojongerius
Copy link
Copy Markdown
Contributor

Draft blog post on daemon process separation — intended to publish before PR #442 (unified chain + redaction demo).

Covers:

  • Why in-process signing doesn't constitute an audit
  • The two-role split: thin emitter + trusted daemon
  • Peer credential capture (kernel-attested, not emitter-asserted)
  • One chain across all channels
  • The honest tradeoff (system service)
  • Real receipt JSON as proof

Ends with a forward reference to the next post (unified chain + redaction demo).

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a new blog post explaining the architectural reasoning behind moving from in-process receipt signing to a separate daemon (ADR-0010), registers it in the site sidebar, and adds a v0.10.0 entry to the daemon changelog describing the redaction pipeline, the new agent-receipts list CLI, the mcp-proxy thin-emitter change, and the SDK bump.

Changes:

  • New blog post daemon-process-separation.mdx covering the in-process vs. daemon split, peer credential capture, and the unified chain.
  • Sidebar entry for the new post in site/astro.config.mjs.
  • daemon/CHANGELOG.md v0.10.0 entry summarising redaction, agent-receipts list, mcp-proxy emitter conversion (with flag-removal breaking changes), and the sdk/go v0.9.1 bump.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File Description
site/src/content/docs/blog/daemon-process-separation.mdx New blog post on daemon process separation and the audit property it restores.
site/astro.config.mjs Adds sidebar link for the new blog post.
daemon/CHANGELOG.md Documents v0.10.0 changes: redaction pipeline, agent-receipts list, mcp-proxy thin-emitter conversion, sdk/go bump.

Retitle to declarative form, drop the apologetic intro paragraph, fold
"deliberately small" into the original-design framing, and flatten a
handful of writing tropes (rule-of-three buildup, "no X / no Y / no Z",
"falls out naturally", "what actually provides the property").
Replace clinical phrasings with warmer word choices throughout, and
lean into the elegance of the underlying mechanics — particularly in
the peer credential section, where the kernel-attested identity is
now framed as the daemon asking the kernel directly. Adds the image
of an auditor "holding its own signing key" to make the v1 limitation
concrete, and notes that the separation is "structural, not policy".
@ojongerius ojongerius marked this pull request as ready for review May 17, 2026 07:19
@ojongerius ojongerius merged commit fa74bd1 into main May 17, 2026
12 checks passed
@ojongerius ojongerius deleted the worktree-blog+daemon-process-separation branch May 17, 2026 07:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants