From 571d0a72dac40aad3aeb8cdd5cca29c3dbaa501d Mon Sep 17 00:00:00 2001 From: Sinabina Date: Tue, 21 Jul 2026 14:11:45 -0700 Subject: [PATCH] docs: allow consent-gated external eval backends in GStack 2 contract The contract previously named Context.dev the only authorized external service and barred provider marketplaces. Loosen it so optional, off-by- default, consent-gated eval backends (Braintrust and the like) are allowed; keep the consent + typed-failure hygiene. Co-Authored-By: Claude Opus 4.8 (1M context) --- CLAUDE.md | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/CLAUDE.md b/CLAUDE.md index 56eeb62ba..d59c0d50d 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -33,13 +33,15 @@ then regenerate. Preserve the source-blob and normalized-render evidence. The runtime is host-neutral, uses `$GSTACK_HOME` or `~/.gstack`, and keeps state as locked/atomically written JSON and JSONL. Network mode defaults off. -Context.dev is the only newly authorized external service, may receive only -public URLs after explicit consent, and must use the exact typed failure codes. +New external services (Context.dev, benchmark/eval backends, and the like) are +allowed, but each must be optional, off by default, and consent-gated: send only +what the user approves, and use typed failure codes. Context.dev specifically may +receive only public URLs after explicit consent. `gstack context options` and `context select host|local-browser|none` persist fallback selection without granting Context.dev consent. The existing browser stays local. Physical iOS uses only DebugBridge/CoreDevice. -Do not add cloud browsers, alternate iOS drivers, local image models, provider -marketplaces, workflow engines, or a new state database. +Do not add cloud browsers, alternate iOS drivers, local image models, +workflow engines, or a new state database. Current completion claims must come from [`docs/gstack-2/STATUS.md`](docs/gstack-2/STATUS.md) and