Phase B/C: stabilize run as reference orchestrator + policy.toml expansion #31

Parent

Later phases of #25. Track here so they don’t get mixed into Phase A PRs.

Phase B — Dual-path polish

• Freeze agentic-git run CLI surface (flags, exit codes, session-end summary format)
• Document run as reference orchestrator; checklist mapping to Embedder Contract v1
• Grow agentic-git-core only for true shared helpers (e.g. binding serialize/sign helpers), not classify
• Event schema freeze; consumers key on disposition

Phase C — Policy surface (fail-closed, add-only floor)

• policy.toml keys beyond protected refs:
  • snapshot TTL
  • push range base (depends on Phase A push-base issue)
  • optional destructive-op list overrides
• Hardcode floor remains: policy may only add protected refs, never remove main/master
• HMAC verify of policy stays hygiene fail-closed (unsigned → floor only)
• Align with agend’s policy signing so fleets don’t need two key stories

Explicitly out of scope here

• HMAC envelope default emit flip (coordinate with agend; separate issue when ready)
• Windows committed support
• In-process OS sandbox

Acceptance (when this issue is closed)

• Second embedder can choose: use run or implement the checklist without run
• Policy expansion covered by tests + embedder contract updates
• agend legacy adoption still green