From 23aba55cf09b626750b1ea9256947fbfaf6070b5 Mon Sep 17 00:00:00 2001 From: Sinabina Date: Tue, 21 Jul 2026 18:20:55 -0700 Subject: [PATCH] docs(gstack2): authorize code-intelligence provider contract in canonical rules Documents the #16 code-intelligence marketplace (GBrain/Sourcebot/Graphify) as an authorized optional external-service category: off by default, grep fallback, per-repo egress consent for off-machine providers. Co-Authored-By: Claude Opus 4.8 (1M context) --- CLAUDE.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/CLAUDE.md b/CLAUDE.md index d59c0d50d..31456c643 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -39,6 +39,10 @@ what the user approves, and use typed failure codes. Context.dev specifically ma receive only public URLs after explicit consent. `gstack context options` and `context select host|local-browser|none` persist fallback selection without granting Context.dev consent. +The optional code-intelligence provider contract (GBrain, Sourcebot, Graphify +via `gstack-code-intelligence`) follows the same rule: no provider selected by +default, callers fall back to grep / the file-only decision store, and any +provider that sends code off-machine requires explicit per-repo egress consent. The existing browser stays local. Physical iOS uses only DebugBridge/CoreDevice. Do not add cloud browsers, alternate iOS drivers, local image models, workflow engines, or a new state database.