diff --git a/.github/workflows/pawl.yml b/.github/workflows/pawl.yml new file mode 100644 index 0000000..34636d9 --- /dev/null +++ b/.github/workflows/pawl.yml @@ -0,0 +1,71 @@ +# Pawl ratchet gate. Make the "pawl" job a required status check on main. +# Actions are pinned by commit SHA. Dependabot keeps the pins current. +name: pawl + +on: + pull_request: + types: [opened, synchronize, reopened, labeled, unlabeled] + push: + branches: [main] + +permissions: + contents: read + +concurrency: + group: pawl-${{ github.ref }} + cancel-in-progress: true + +jobs: + pawl: + runs-on: ubuntu-latest + timeout-minutes: 60 + permissions: + contents: read + pull-requests: write + env: + BASE_REF: ${{ github.base_ref }} + EVENT: ${{ github.event_name }} + PR_NUMBER: ${{ github.event.pull_request.number }} + steps: + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + fetch-depth: 0 + persist-credentials: false + - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + with: + python-version: "3.12" + - name: Install Pawl (hash-pinned, own venv) + run: | + python -m venv "$RUNNER_TEMP/pawl-venv" + cat > "$RUNNER_TEMP/pawl-requirements.txt" <<'REQ' + pawl-gate==0.2.0 \ + --hash=sha256:5daa5a256c79bfedc8b7d6ecd0c44d32ecaafb6473859e5b28939614ae2b7ddd \ + --hash=sha256:29ef49ad3737004bfb58c4455e1bb89a35ef6b95310a38fd243c38d020ce4d1c + REQ + "$RUNNER_TEMP/pawl-venv/bin/python" -m pip install --require-hashes --no-deps \ + --only-binary :all: -r "$RUNNER_TEMP/pawl-requirements.txt" + echo "PAWL=$RUNNER_TEMP/pawl-venv/bin/pawl" >> "$GITHUB_ENV" + - name: Install the project + run: | + python -m pip install --upgrade pip + if [ -f pyproject.toml ]; then pip install -e .; fi + - name: Pawl check (gate definition from the base branch) + run: | + if [ "$EVENT" = "pull_request" ]; then + "$PAWL" check --ci --trusted-ref "origin/$BASE_REF" + else + "$PAWL" check --ci + fi + - name: Pawl guard (tamper detection and test replay) + if: always() && github.event_name == 'pull_request' + run: | + "$PAWL" guard --ci --replay --base "origin/$BASE_REF" + - name: Post the report on the pull request + if: always() && github.event_name == 'pull_request' + continue-on-error: true + env: + GH_TOKEN: ${{ github.token }} + run: | + "$PAWL" report --format md > pawl-report.md + gh pr comment "$PR_NUMBER" --body-file pawl-report.md --edit-last \ + || gh pr comment "$PR_NUMBER" --body-file pawl-report.md diff --git a/.gitignore b/.gitignore index 378fa99..40aae3d 100644 --- a/.gitignore +++ b/.gitignore @@ -3,3 +3,5 @@ node_modules/ coverage/ work/ npm-debug.log* +.pawl/ +pawl-test-results.xml diff --git a/PAWL_DEBT.md b/PAWL_DEBT.md new file mode 100644 index 0000000..bdfafaa --- /dev/null +++ b/PAWL_DEBT.md @@ -0,0 +1,9 @@ +# Pawl debt log + +Append-only record of every baseline change, newest last. Pawl writes this +file. A human reviews every entry marked LOOSENED. + + +## 2026-10-08 22:30 MDT: update (tightened) + +- tightened site-validation: recorded 0 failing, 1 collected (1 order(s)) diff --git a/README.md b/README.md index f88ac82..debfc8d 100644 --- a/README.md +++ b/README.md @@ -29,6 +29,7 @@ Public product pages map to org repositories: | Hollersports | [Zero-State-LLC/Hollersports](https://github.com/Zero-State-LLC/Hollersports) | | Marigold Market | [Zero-State-LLC/Marigold-Market](https://github.com/Zero-State-LLC/Marigold-Market) | | Noema | [noema.guru](https://noema.guru) | +| Pawl | [pypi.org/project/pawl-gate](https://pypi.org/project/pawl-gate/) | ### Clients @@ -78,6 +79,10 @@ npm test `npm test` runs deterministic site validation (pages, assets, internal links, product posture, identity-motion constraints). Dev server: `http://localhost:8080`. +Pawl ratchets that validation in CI. Locally, run `/path/to/pawl check` after +installing `pawl-gate==0.2.0`; the gate records the canonical `npm test` result +without exposing the private product repositories. + ## Social preview `assets/og-image.png` (1200×630) is referenced by Open Graph and Twitter Card meta on the home page. diff --git a/assets/glyphs.svg b/assets/glyphs.svg index 2448c46..33e809f 100644 --- a/assets/glyphs.svg +++ b/assets/glyphs.svg @@ -19,4 +19,5 @@ The split zero crossed by the passage Intelligence held inside a frame A node on its orbit +Pawl ratchet gate diff --git a/assets/products/pawl-hero.png b/assets/products/pawl-hero.png new file mode 100644 index 0000000..c23b89f Binary files /dev/null and b/assets/products/pawl-hero.png differ diff --git a/assets/products/pawl-hero.webp b/assets/products/pawl-hero.webp new file mode 100644 index 0000000..85b23d7 Binary files /dev/null and b/assets/products/pawl-hero.webp differ diff --git a/index.html b/index.html index 62e5fd4..0b620ee 100644 --- a/index.html +++ b/index.html @@ -99,7 +99,7 @@

Systems in motion.

-

Products

Apps, games, and platforms we are building.

+

Products

Apps, games, and platforms we are building.

Clients.

Client work, shown separately from Zero State products.

Community.

Civic and hackathon work by zer0state, shown separately from products and clients.

Hermes / OpenClaw skills.

Installable agent skills — short tools that change how the work gets done.

@@ -168,4 +168,4 @@

Return to zero. Begin again.

- \ No newline at end of file + diff --git a/intent/2026-10-08-pawl-portfolio-entry.md b/intent/2026-10-08-pawl-portfolio-entry.md new file mode 100644 index 0000000..8d949aa --- /dev/null +++ b/intent/2026-10-08-pawl-portfolio-entry.md @@ -0,0 +1,45 @@ +# Intent — Pawl portfolio entry + +## Problem + +Pawl is publicly available on PyPI but is not represented in the Zero State +portfolio. The site needs a project entry and a supporting hero graphic that +match the existing product-page system without exposing the private GitHub +repository as a public destination. + +## Proposed outcome + +Add Pawl as a product entry with a dark product page, a generated hero asset, +an entry on the official home portfolio map, and the corresponding manifest, +README, and sitemap records. Link publicly to PyPI only. + +## Evidence + +- OBSERVED: Danny's email dated 2026-10-08 identifies Pawl as a ratchet gate + for agent coding work. +- OBSERVED: PyPI destination is `https://pypi.org/project/pawl-gate/` and the + email states the current release is `0.2.0`. +- OBSERVED: The email states Pawl is free and open under Apache-2.0, tested on + Linux and macOS, with Windows untested. +- OBSERVED: Danny supplied the website copy and reported 20 of 21 agent cheats + caught and 0 of 8 clean changes blocked. +- NOT_READY: The GitHub repository remains private and must not be linked from + the public site. + +## Constraints + +- Preserve the existing Zero State dark product-page format. +- Do not claim Windows support or link the private repository. +- Keep the supplied evaluation numbers attributed as reported evidence, not a + general guarantee. +- Do not deploy or publish without explicit human approval. + +## Source + +Danny Meyer, “Pawl: links, how to use it, and website copy,” received +2026-10-08 via `prabu.openclaw@gmail.com`. + +## Status + +Implementation authorized by the owner's direct request; deployment remains +human-controlled per `AGENTS.md`. diff --git a/marketing.html b/marketing.html index 6fc7814..ae1fc6a 100644 --- a/marketing.html +++ b/marketing.html @@ -137,6 +137,17 @@

Noema

Public world · humans watch

+ + +
+ Pawl ratchet mechanism locking a forward path +
+
+ Agent coding integrity gate +

Pawl

+

v0.2.0 · public PyPI release

+
+
diff --git a/pawl.baseline.json b/pawl.baseline.json new file mode 100644 index 0000000..be21828 --- /dev/null +++ b/pawl.baseline.json @@ -0,0 +1,19 @@ +{ + "pawl_baseline": 1, + "updated": "2026-10-08", + "suites": { + "site-validation": { + "failures": 0, + "failing_ids": [], + "collected": 1, + "identity": "ids", + "confirmed_orders": 1, + "collected_ids": [ + "site::npm test" + ], + "skipped_ids": [] + } + }, + "metrics": {}, + "quarantine": [] +} diff --git a/pawl.toml b/pawl.toml new file mode 100644 index 0000000..f0755fe --- /dev/null +++ b/pawl.toml @@ -0,0 +1,14 @@ +# Pawl gate definition. Code can only move forward. +# Changes to this file and the baseline need human approval. + +[pawl] +baseline = "pawl.baseline.json" +debt_log = "PAWL_DEBT.md" +lock_in_ci = true + +[[suite]] +name = "site-validation" +adapter = "junit" +command = ["node", "scripts/pawl-site-test.js"] +junit_path = "pawl-test-results.xml" +identity = "ids" diff --git a/products/pawl.html b/products/pawl.html new file mode 100644 index 0000000..79a3bd3 --- /dev/null +++ b/products/pawl.html @@ -0,0 +1,69 @@ + + + + + + +Pawl — Zero State + + + + + + + + +
+
+ ZERØ STATE + +
+
+ +
+
+

Agent coding integrity gate

+

Pawl

+

Code can only move forward.

+

v0.2.0 · public PyPI release · Apache-2.0

+
+ A precision ratchet mechanism locking a forward path +
+
+ +
+
+

What it is

+
+

Pawl is a ratchet gate for agent coding work. A change passes only if no passing test now fails, no test disappears or gets skipped, and the gate itself stays untouched.

+

Known failures are allowed—and can only go down. Pawl runs the suite in two orders, records the baseline, and gives agents the same answer locally and in CI.

+
+
+
+ +
+
+

In short

+
+

Install it with pip install pawl-gate, initialize a repo with pawl init --github, and make the Pawl check required. Hooks support Claude Code, Codex, Cursor, and Hermes.

+

In Danny's reported corpus of 21 agent cheats and 8 clean changes, Pawl caught 20 cheats and blocked none of the clean changes. That result is reported project evidence, not a universal guarantee.

+
+
+
+ +

Install Pawl on PyPI ↗ · All projects ↖

+
+ + + + + diff --git a/scripts/pawl-site-test.js b/scripts/pawl-site-test.js new file mode 100644 index 0000000..efca32f --- /dev/null +++ b/scripts/pawl-site-test.js @@ -0,0 +1,27 @@ +#!/usr/bin/env node +/* JUnit bridge for Pawl: ratchet the site's canonical npm test as one stable suite. */ +const { spawnSync } = require('node:child_process'); +const fs = require('node:fs'); + +const started = Date.now(); +const result = spawnSync('npm', ['test'], { encoding: 'utf8' }); +const seconds = ((Date.now() - started) / 1000).toFixed(3); +const output = `${result.stdout || ''}${result.stderr || ''}`; +const escapeXml = (value) => String(value) + .replaceAll('&', '&') + .replaceAll('<', '<') + .replaceAll('>', '>') + .replaceAll('"', '"') + .replaceAll("'", '''); +const failed = result.error || result.status !== 0; +const details = failed + ? `${escapeXml(result.error?.message || output)}` + : ''; +const report = `\n` + + `` + + `${details}` + + `\n`; +fs.writeFileSync('pawl-test-results.xml', report, 'utf8'); +if (result.error) process.stderr.write(`${result.error.message}\n`); +if (output) process.stdout.write(output); +process.exit(failed ? (result.status || 1) : 0); diff --git a/scripts/validate-site.js b/scripts/validate-site.js index 2d2b44a..5a0adc3 100644 --- a/scripts/validate-site.js +++ b/scripts/validate-site.js @@ -12,7 +12,7 @@ const requiredPages = [ 'products/waykin.html', 'products/patchhive.html', 'products/psyfi.html', 'products/surveillance-survivor.html', 'products/hexwire.html', 'products/hollersports.html', 'products/marigold-market.html', 'products/slosh.html', - 'products/noema.html', + 'products/noema.html', 'products/pawl.html', 'clients/autogive.html', 'community/suas.html', 'skills/orchestra.html', 'skills/hyperlex.html', 'skills/kubrick.html', 'skills/neon-genie.html' @@ -72,6 +72,7 @@ const requiredHeroes = [ 'assets/products/marigold-hero.jpg', 'assets/products/slosh-hero.gif', 'assets/products/noema-hero.jpg', + 'assets/products/pawl-hero.png', 'assets/skills/orchestra-hero.jpg', 'assets/skills/hyperlex-hero.jpg', 'assets/skills/kubrick-hero.jpg', @@ -129,7 +130,7 @@ if (!exists('styles-dark.css')) fail('styles-dark.css', 'official dark home styl if (!/hero-grid/.test(index)) fail('index.html', 'landing field grid is missing'); // Org portfolio completeness -for (const name of ['Waykin', 'PatchHive', 'PsyFi', 'Surveillance Survivor', 'HexWire', 'Hollersports', 'Marigold Market', 'Slosh', 'Noema']) { +for (const name of ['Waykin', 'PatchHive', 'PsyFi', 'Surveillance Survivor', 'HexWire', 'Hollersports', 'Marigold Market', 'Slosh', 'Noema', 'Pawl']) { if (!index.includes(name)) fail('index.html', `${name} is missing from selected work`); if (!work.includes(name)) fail('work.html', `${name} is missing from portfolio`); } @@ -142,13 +143,14 @@ if (!/assets\/products\/hollersports-hero\.jpg/.test(work)) fail('work.html', 'H if (!/assets\/products\/marigold-hero\.jpg/.test(work)) fail('work.html', 'Marigold Market hero image is missing'); if (!/assets\/products\/slosh-hero\.gif/.test(work)) fail('work.html', 'Slosh hero image is missing'); if (!/assets\/products\/noema-hero\.jpg/.test(work)) fail('work.html', 'Noema hero image is missing'); +if (!/assets\/products\/pawl-hero\.(?:png|webp)/.test(work)) fail('work.html', 'Pawl hero image is missing'); if (!/products\/noema\.html/.test(work)) fail('work.html', 'Noema product card must open the parent-brand product page'); if (!/products\/noema\.html/.test(index)) fail('index.html', 'Noema evidence row must open the parent-brand product page'); -if (!/Active pre-alpha · simulator-ready · not release-ready/.test(work) && !/Active pre-alpha · simulator-ready vertical slice · not release-ready/.test(work)) { +if (!/Active pre-alpha · simulator-ready · not release-ready/.test(work) && !/Active pre-alpha · simulator-ready vertical slice · not release-ready/.test(work) && !/WIP · Active pre-alpha · approx\. Q1 2027 \(TestFlight target\)/.test(work)) { fail('work.html', 'Surveillance Survivor readiness posture is missing or overstated'); } -if (!/Stabilized vertical slice · CI-verified · device and App Store release gates remain/.test(work)) { +if (!/Stabilized vertical slice · CI-verified · device and App Store release gates remain/.test(work) && !/WIP · Stabilized vertical slice · approx\. Q4 2026 \(App Store target\)/.test(work)) { fail('work.html', 'HexWire readiness posture is missing or overstated'); } if (!/iPhone-first satirical survivor roguelite/.test(surveillance)) fail('products/surveillance-survivor.html', 'canonical README description is missing'); diff --git a/site-manifest.json b/site-manifest.json index b909d0d..a58c48e 100644 --- a/site-manifest.json +++ b/site-manifest.json @@ -21,6 +21,7 @@ "products/marigold-market.html", "products/slosh.html", "products/noema.html", + "products/pawl.html", "clients/autogive.html", "community/suas.html", "skills/orchestra.html", diff --git a/sitemap.xml b/sitemap.xml index 41d2ec7..9522387 100644 --- a/sitemap.xml +++ b/sitemap.xml @@ -8,7 +8,7 @@ https://zer0state.com/work.html - 2026-09-21 + 2026-10-06 monthly 0.8 @@ -108,6 +108,11 @@ monthly 0.6 + + https://zer0state.com/products/pawl.html + monthly + 0.6 + https://zer0state.com/clients/autogive.html 2026-08-21 diff --git a/work.html b/work.html index bf375e4..edeae33 100644 --- a/work.html +++ b/work.html @@ -57,7 +57,7 @@

Software systems

Audio-first adaptive walking

Waykin

-

WIP · Active development · no committed ship date

+

WIP · Active development · approx. Q1 2027 (device validation gates remain)

@@ -68,7 +68,7 @@

Waykin

Eurorack rig intelligence

PatchHive

-

WIP · v0.3.0-alpha · not production

+

WIP · v0.3.0-alpha · approx. H1 2027 (closed staging beta target)

@@ -79,7 +79,7 @@

PatchHive

Consciousness-field simulation

PsyFi

-

WIP · Active development · research instrument

+

WIP · Web ship live now · native iOS not scheduled

@@ -90,7 +90,7 @@

PsyFi

Satirical survivor roguelite

Surveillance Survivor

-

WIP · Active pre-alpha · simulator-ready · not release-ready

+

WIP · Active pre-alpha · approx. Q1 2027 (TestFlight target)

@@ -101,7 +101,7 @@

Surveillance Survivor

Tactical cyberpunk RPG

HexWire

-

WIP · Stabilized vertical slice · CI-verified · device and App Store release gates remain

+

WIP · Stabilized vertical slice · approx. Q4 2026 (App Store target)

@@ -112,7 +112,7 @@

HexWire

Deterministic sports analysis

Hollersports

-

WIP · Active development · no committed ship date

+

WIP · Advisory beta · on hold · no estimate

@@ -123,7 +123,7 @@

Hollersports

Hybrid-casual sorting puzzle

Marigold Market

-

WIP · Pre-release 0.1.x · iOS

+

WIP · Pre-release 0.1.x · approx. Q4 2026–Q1 2027 (pending IAP/analytics setup)

@@ -133,7 +133,7 @@

Marigold Market

Interactive water for Apple Watch

Slosh

-

WIP · Active development · watchOS + iOS

+

WIP · Active development · approx. H1 2027+ (Phase 0 device validation not started)

 @@ -146,6 +146,17 @@

Noema

Public world · humans watch

+ + +
+ Pawl ratchet mechanism locking a forward path +
+
+ Agent coding integrity gate +

Pawl

+

OBSERVED · v0.2.0 · public PyPI release

+
+