Skip to content
HUEHUE Docs

HUE-036 — Implement external side-effect ledger and adversarial safety suite

Canonical source: docs/roadmap/issues.json · HUE-036

Specification status: TBI · Readiness: agent:blocked

Goal

Section titled “Goal”

Prevent unsafe retries and prove browser/computer/tool boundaries under attack.

Scope

Section titled “Scope”
  • Persist effect intent/idempotency/readback/outcome
  • Reconcile unknown effects before retry
  • Run prompt injection, approval replay, secret leak and cancellation fixtures

Acceptance criteria

Section titled “Acceptance criteria”
  • Duplicate external write is prevented
  • Unknown outcome has inspection path
  • All threat-model alpha fixtures pass
  • Evidence and redaction are retained

Dependencies

Section titled “Dependencies”
  • HUE-032
  • HUE-034
  • HUE-035
  • HUE-021

Non-goals

Section titled “Non-goals”
  • None beyond the documented scope.

Product contract

Section titled “Product contract”
  • Follow the milestone and repository product contract.

Implementation handoff requirements

Section titled “Implementation handoff requirements”
  • Preserve the documented security, project, memory and event boundaries.
  • Add or update automated tests for every observable acceptance criterion.
  • Provide real verification output; do not rely on a worker/agent self-report.
  • Update only the exact documentation sections whose status changed.
  • Include screenshots or a recording for user-interface changes.
  • Include migration, rollback and recovery notes for data/state changes.
  • Link the pull request to this issue with Closes #<issue-number>.