magus v0.4.3 is out. See what's new
¶ View markdown source · ✎ Suggest an edit
2 min read

Verdicts are provenance-blind; disposition is not

A verdict (the cache saying a replay is honest, the drift gate saying generated output matches source, a diagnostic, a CI result) judges the work. No verdict conditions on who or what produced the change: cache keys hash content, the drift gate compares bytes, diagnostics read the tree. Whether a change was typed by hand or generated is invisible to every gate, on purpose, because good software is the only defensible standard at the tool layer, and a bar that moves with the byline is theater in both directions: extra suspicion for one author, unearned trust for another.

Disposition is the opposite case. Accepting a proposal, sending a review, landing a change: these are accountability, and accountability needs a true name. That is why authorship is stamped from the transport a write arrived on, never from what the writer claims about itself (the mechanism described under Agents propose, humans dispose). The blindness half is structural today and stated here so that a proposal to break it, a gate keyed on how code was written, has to argue with this page first.

Enforced by

  • Cache keys hash content, the drift gate compares bytes, and diagnostics read the tree; none of them takes an author as input.
  • Exactly one code path grades a write by who is acting, and naming it keeps the rule checkable. gradeLeasedWrite reads the lease ledger to decide whether a worker is editing outside the paths its lease declared. That is a concurrency-ownership question in the guard (who owns this file right now) rather than a judgment about the work, and it reaches no cache key, no drift comparison, and no diagnostic. Its uncertainties (no ledger, no live lease, a file that will not parse) fail open with at most an advisory.

Good

The gate reads the bytes; the record of who landed them reads the transport.

magus affected ci
git log -1 --format='%an <%ae>'

Bad

rules:
  - if: commit.trailers contains "Co-Authored-By: Claude"
    then: require_extra_review

The bar moves with the byline. A trailer is whatever the writer typed, so the rule both insults honest work and waves through anything that leaves it out.

See also

designprincipleagentsreview
Last updated (2df714e8)
Glossary

Op

A single tool-native command a target composes (long form: operation); the middle of the work hierarchy (Spell to Op to Target). Op in full.

Cache

The content-addressed store magus consults before running a target, so unchanged work is skipped. Cache in full.

Affected

The set of projects touched by a change; magus affected <target> runs a target only over them. Affected in full.

CI

An ordinary target you compose yourself with ctx.needs; magus does not hardcode its stages. It is the anchor magus affected ci keys off, and ci strips the rw charm. CI in full.

Concurrency

How many targets run at once. It is bounded by the pool's capacity and set with --concurrency, MAGUS_CONCURRENCY, or the concurrency config key. Concurrency in full.

Ownership

An insight lens for author concentration: the primary author and their share, the distinct-author count (the bus factor), and abandonment. Ownership in full.

Agent

A model working through an agent host such as Claude Code, Codex, Cursor or OpenCode. magus treats an agent as one more caller of its CLI, MCP tools and console, held to the same checks as a person. Agent in full.

Tool

An action a model can call through its host: a name, a description, a typed input and a result. magus serves its tools over MCP, each a read of the workspace model or a run of the CLI it already has. Tool in full.

Dispose

The human act of closing an attention request: a judgment rendered, recorded with who and why. Distinct from resolving a review thread or a merge conflict: a disposition answers a request; it does not merge anything. Dispose in full.

Lease

The grant a holder takes on a job: the write and read paths that job declared, enforced in the checkout that took it with magus job exec. A job is the piece of work; a lease is permission over it. Lease in full.

Advisor

One read-only check from the advice suite: it reads the changeset through magus and writes one titled section of findings. The same advisors run as a pull request comment in CI and inside magus diff --impact locally. Advisor in full.

Conventions

This page uses none of the site's convention markers. The full set is on the conventions page.