Skip to content

Latest commit

 

History

History

README.md

Canonical TBE v1 Workflows

This directory contains canonical workflows for the shipped TBE v1.0.0 product surface.

WF1: Safe repo content generation

Description

Read repository content, render deterministic output, and write a file under a policy-allowed path.

Thread JSON

wf1-safe-content-thread.json

Commands

./bin/tbe init
./bin/tbe run --thread examples/wf1-safe-content-thread.json --plan --json
./bin/tbe run --thread examples/wf1-safe-content-thread.json --dry-run --json
./bin/tbe run --thread examples/wf1-safe-content-thread.json --json
./bin/tbe replay --session .tbe/sessions/<wf1-session>.json --json

Expected result

  • Plan shows policy allowance for read_file and write_file.
  • Dry-run simulates the write step without mutating files.
  • Run completes with status=allowed.
  • Replay reports match=true.

WF2: Controlled exec workflow

Description

Run exec under explicit command governance using policy command_rules.

Thread JSON

  • wf2-controlled-exec-thread.json
  • wf2-policy.json

Commands

./bin/tbe init
cp examples/wf2-policy.json .tbe/policy.json
./bin/tbe run --thread examples/wf2-controlled-exec-thread.json --plan --json
./bin/tbe run --thread examples/wf2-controlled-exec-thread.json --dry-run --json
./bin/tbe run --thread examples/wf2-controlled-exec-thread.json --json
./bin/tbe replay --session .tbe/sessions/<wf2-session>.json --json

Expected result

  • Plan includes exec with policy_allowed=true.
  • Dry-run records simulated exec evidence.
  • Run completes with status=allowed.
  • Replay reports match=true.

WF3: Named artifact pipeline

Description

Use the artifact registry with artifact:<name> references and deterministic replay.

Thread JSON

wf3-artifact-pipeline-thread.json

Commands

./bin/tbe init
./bin/tbe run --thread examples/wf3-artifact-pipeline-thread.json --plan --json
./bin/tbe run --thread examples/wf3-artifact-pipeline-thread.json --dry-run --json
./bin/tbe run --thread examples/wf3-artifact-pipeline-thread.json --json
./bin/tbe replay --session .tbe/sessions/<wf3-session>.json --json

Expected result

  • Named artifact references (artifact:seed_text and artifact:reread_text) resolve deterministically.
  • Run completes with status=allowed.
  • Replay reports match=true.