From 70d8b09a532fcc2ef69e4da636ef209d1580f029 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 2 Sep 2026 01:26:43 +0900 Subject: [PATCH 1/6] docs: add Ask DeepWiki badge --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 0942976cf..f35531ec8 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,7 @@ # OriginWeave +[![Ask DeepWiki](https://deepwiki.com/badge.svg)](https://deepwiki.com/ContextualWisdomLab/OriginWeave) + **Browse. Act. Prove.** OriginWeave is a Chromium-compatible, Rust-first control plane for governed AI agents on the web. It is designed to let an agent observe, extract, and act without turning untrusted page content into authority, exposing secrets to a model, connecting to an unapproved network destination, accepting an unauthenticated web service, or losing the evidence required to explain what happened. From aa1e5e9c54f3f88ac94ed3da7930b11228d46d82 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 2 Sep 2026 01:27:04 +0900 Subject: [PATCH 2/6] docs: add public Pages landing source --- docs/index.md | 41 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 41 insertions(+) create mode 100644 docs/index.md diff --git a/docs/index.md b/docs/index.md new file mode 100644 index 000000000..0aa6f71fb --- /dev/null +++ b/docs/index.md @@ -0,0 +1,41 @@ +# OriginWeave + +OriginWeave is a Chromium-compatible, Rust-first control plane for governed AI agents on the web. It separates trusted instruction, untrusted web observation, protected secrets, destination authority, browser action authority, and evidence so an agent can browse and act without turning page content into ambient control. + +> Status: pre-alpha. This page describes protected-default-branch product truth and intentionally does not promote active pull requests, queued checks, planned adapters, or unpublished release work to shipped capability. + +## Start here + +- [Repository overview](https://github.com/ContextualWisdomLab/OriginWeave#readme) +- [Architecture and trust boundaries](https://github.com/ContextualWisdomLab/OriginWeave/blob/main/ARCHITECTURE.md) +- [Product roadmap](product-roadmap.md) +- [Architecture decisions](adr/) +- [Product and technical gap baseline](product-technical-gap-baseline.md) +- [Repository releases](https://github.com/ContextualWisdomLab/OriginWeave/releases) +- [Ask DeepWiki](https://deepwiki.com/ContextualWisdomLab/OriginWeave) +- [Security policy](https://github.com/ContextualWisdomLab/OriginWeave/blob/main/SECURITY.md) +- [Contributing](https://github.com/ContextualWisdomLab/OriginWeave/blob/main/CONTRIBUTING.md) + +## Product responsibility + +OriginWeave owns governed browser-agent control contracts: browser-equivalent origin identity, fail-closed typed action policy, resolved-destination authorization, exact direct TCP peer binding, authenticated TLS service identity, bounded resource governance, and credential-safe evidence/provenance primitives. These foundations are independently reusable while the complete Chromium/BiDi/CDP/HTTP/proxy/persistence adapter surface remains subject to protected-main integration evidence. + +The product does not treat successful parsing, DNS resolution, TCP connection, TLS authentication, browser protocol acknowledgement, or model output as interchangeable proof. Each boundary must preserve its own authority and evidence before a later layer can consume it. + +## Safety model + +OriginWeave treats page content and tool output as untrusted observations. They can contribute evidence, but they cannot grant capabilities, approve actions, rewrite policy, or request protected values. Destination admission is separate from name resolution; exact TCP peer evidence is separate from TLS identity; transport identity is separate from HTTP resource policy; and browser action acknowledgement is separate from an observed post-condition. + +See the root architecture document and accepted ADRs for the binding contracts and reversal paths. + +## Development and verification + +The repository pins its supported Rust toolchain and verifies formatting, locked workspace checks, tests, strict Clippy, rustdoc, and exact owned-production coverage through protected CI. Current-head checks and counted reviews are integration evidence; predecessor-head, skipped, queued, model-only, or active-PR results are not treated as shipped product proof. + +## Publication boundary + +GitHub Pages availability is a repository-facing deployment state, not a property of this source file alone. This landing becomes a published product surface only after protected integration, Pages configuration/deployment, and live HTTPS content verification succeed. + +## License + +OriginWeave source is licensed under the [Apache License 2.0](https://github.com/ContextualWisdomLab/OriginWeave/blob/main/LICENSE). Third-party dependencies retain their own license obligations. From e3fadd1d1aeebf6118552cf80fbdac243bb9eb5a Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 2 Sep 2026 02:10:53 +0900 Subject: [PATCH 3/6] docs: fix Pages ADR navigation --- docs/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/index.md b/docs/index.md index 0aa6f71fb..0708e77cc 100644 --- a/docs/index.md +++ b/docs/index.md @@ -9,7 +9,7 @@ OriginWeave is a Chromium-compatible, Rust-first control plane for governed AI a - [Repository overview](https://github.com/ContextualWisdomLab/OriginWeave#readme) - [Architecture and trust boundaries](https://github.com/ContextualWisdomLab/OriginWeave/blob/main/ARCHITECTURE.md) - [Product roadmap](product-roadmap.md) -- [Architecture decisions](adr/) +- [Architecture decisions](adr/README.md) - [Product and technical gap baseline](product-technical-gap-baseline.md) - [Repository releases](https://github.com/ContextualWisdomLab/OriginWeave/releases) - [Ask DeepWiki](https://deepwiki.com/ContextualWisdomLab/OriginWeave) From 403a84841f52be7a40b68e9b51ff88585e1f33e2 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 2 Sep 2026 02:12:14 +0900 Subject: [PATCH 4/6] docs: record public-surface change --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index f747adeae..5da4013a4 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,7 @@ All notable changes to OriginWeave are documented in this file. The format follo - Refreshed the product-gap queue to 126 open pull requests (54 ready, 72 draft) after #190, #188, #185, #192, #182, #184, #115, #181, #116, #117, #118, #183, #114, #127, #112, #109, #186, #110, #108, #111, #174, and #113 were merged into their immediate stacked prerequisites. PRs #147, #146, #145, #144, #143, #142, #141, #139, #136, #132, #129, and #128 moved to ready after exact-head checks and thread review; these are queue-consolidation results, not protected-main shipment. ### Added +- Added the exact-cased Ask DeepWiki README badge and a bounded public documentation landing for product, architecture, safety, onboarding, releases, and publication-state navigation. - Corrected the 2026-08-26 product-gap snapshot with current #229 presentation-identity evidence, stacked-only #205 integration evidence, current base/head pairs, the 126-PR queue count, explicit root-versus-child merge ordering, and the active GitHub counted-approval gate. - Refreshed the product and technical gap baseline onto the 2026-08-26 live inventory: 126 open pull requests (54 ready, 72 draft), protected-main promotion of #168/#194/#196/#216/#151, a verified maintenance-loop record (supersession closure of #153, conflict reconciliations on #37/#149/#152/#173/#175, issue #212 option-(b) authorization on #43, Strix vuln-0001 homoglyph remediation on #124), provider-rerun outcome evidence, an organization review-pipeline congestion record, and refreshed merge-order queue guidance. Documentation evidence contracts were aligned to the same snapshot so the baseline, its dated markers, and the pinned exact-head rows cannot silently diverge. From 9e37e835cfab999f72a5f04d911d46a092b7ac73 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 5 Sep 2026 09:33:58 +0900 Subject: [PATCH 5/6] test(docs): pin public landing contract Commit-Message-Assisted-by: Claude (via Claude Code) Signed-off-by: Seongho Bae --- tests/test_repository_contract.py | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/tests/test_repository_contract.py b/tests/test_repository_contract.py index 00ceb5a12..99fff6e06 100644 --- a/tests/test_repository_contract.py +++ b/tests/test_repository_contract.py @@ -71,6 +71,17 @@ def test_required_architecture_and_governance_documents_exist(self) -> None: missing = sorted(path for path in required_paths if not (ROOT / path).is_file()) self.assertEqual(missing, []) + def test_public_documentation_landing_stays_bounded_and_discoverable(self) -> None: + """The public landing must retain its badge, status, and publication boundary.""" + + readme = (ROOT / "README.md").read_text(encoding="utf-8") + landing = (ROOT / "docs/index.md").read_text(encoding="utf-8") + + self.assertEqual(readme.count("[![Ask DeepWiki]"), 1) + self.assertIn("Status: pre-alpha", landing) + self.assertIn("## Publication boundary", landing) + self.assertIn("does not promote active pull requests", landing) + def test_origin_identity_and_destination_safety_remain_distinct(self) -> None: """Documentation must never present origin parsing as an SSRF decision.""" From 802d0bdff7536d9ac253305d3e0237b4e4a1789e Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Sat, 5 Sep 2026 09:42:50 +0900 Subject: [PATCH 6/6] test(docs): bind DeepWiki badge target Commit-Message-Assisted-by: Claude (via Claude Code) Signed-off-by: Seongho Bae --- tests/test_repository_contract.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/tests/test_repository_contract.py b/tests/test_repository_contract.py index 99fff6e06..4bf5a1953 100644 --- a/tests/test_repository_contract.py +++ b/tests/test_repository_contract.py @@ -78,6 +78,11 @@ def test_public_documentation_landing_stays_bounded_and_discoverable(self) -> No landing = (ROOT / "docs/index.md").read_text(encoding="utf-8") self.assertEqual(readme.count("[![Ask DeepWiki]"), 1) + self.assertIn( + "[![Ask DeepWiki](https://deepwiki.com/badge.svg)]" + "(https://deepwiki.com/ContextualWisdomLab/OriginWeave)", + readme, + ) self.assertIn("Status: pre-alpha", landing) self.assertIn("## Publication boundary", landing) self.assertIn("does not promote active pull requests", landing)