docs(gstack2): authorize code-intelligence provider contract in canonical rules

Documents the #16 code-intelligence marketplace (GBrain/Sourcebot/Graphify) as
an authorized optional external-service category: off by default, grep fallback,
per-repo egress consent for off-machine providers.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Sinabina
2026-07-21 18:20:55 -07:00
co-authored by Claude Opus 4.8
parent bfc92247e1
commit 23aba55cf0
+4
View File
@@ -39,6 +39,10 @@ what the user approves, and use typed failure codes. Context.dev specifically ma
receive only public URLs after explicit consent. receive only public URLs after explicit consent.
`gstack context options` and `context select host|local-browser|none` persist `gstack context options` and `context select host|local-browser|none` persist
fallback selection without granting Context.dev consent. fallback selection without granting Context.dev consent.
The optional code-intelligence provider contract (GBrain, Sourcebot, Graphify
via `gstack-code-intelligence`) follows the same rule: no provider selected by
default, callers fall back to grep / the file-only decision store, and any
provider that sends code off-machine requires explicit per-repo egress consent.
The existing browser stays local. Physical iOS uses only DebugBridge/CoreDevice. The existing browser stays local. Physical iOS uses only DebugBridge/CoreDevice.
Do not add cloud browsers, alternate iOS drivers, local image models, Do not add cloud browsers, alternate iOS drivers, local image models,
workflow engines, or a new state database. workflow engines, or a new state database.