Skip to content

docs: make LIMITATIONS.md the source for the shared platform-state caveat - #195

Merged
imran-siddique merged 1 commit into
mainfrom
docs/share-platform-state-caveat
Aug 21, 2026
Merged

docs: make LIMITATIONS.md the source for the shared platform-state caveat#195
imran-siddique merged 1 commit into
mainfrom
docs/share-platform-state-caveat

Conversation

@imran-siddique

Copy link
Copy Markdown
Member

The SEV-SNP platform-state caveat under ## Platform state is not appraised is duplicated in cmcp/LIMITATIONS.md and ca2a/LIMITATIONS.md. The three copies were verbatim except for two sentences, and those two sentences are the only part that is genuinely project-specific.

Three hand-maintained copies of a security caveat drift, and the copy that goes stale is the one that quietly overstates what the project checks. agent-manifest shipped PLATFORM_INFO parsing and appraise_platform_info() on 2026-08-20, which is exactly the kind of change that needs to reach all three.

Shape

The shared prose is wrapped in <!-- shared:platform-state-appraisal begin/end --> markers and this file is the source. The project-specific sentence moves out, below the end marker, as an In TRACE paragraph.

The full text stays in each repository on purpose. LIMITATIONS.md exists to state the bounds where a reader will actually meet them, so replacing the explanation with a link would weaken the one document whose job is to not hide anything. Companion PRs add a limitations-parity workflow to cmcp and ca2a that fetches this file and fails on drift, the same shape as the existing schema-parity check on the apex site.

Merge this one first: the other two check against main here.

Companions: agentrust-io/cmcp and agentrust-io/ca2a.

🤖 Generated with Claude Code

https://claude.ai/code/session_013EQx4N5BzTQbY8kvXUsdkY

…veat

The SEV-SNP platform-state caveat is duplicated verbatim in cmcp and
ca2a, except for two sentences that are genuinely project-specific.
Three hand-maintained copies of a security caveat drift, and the stale
copy is the one that quietly overstates what the project checks.

Wraps the shared prose in shared:platform-state-appraisal markers and
makes this file the source. The TRACE-specific sentence moves below the
end marker as its own paragraph.

The full text stays in each repository. LIMITATIONS.md exists to state
the bounds where a reader meets them, so replacing the explanation with
a link would weaken the document whose job is to not hide anything.
Companion PRs add a limitations-parity workflow to cmcp and ca2a that
fails on drift, the same shape as the schema-parity check on the apex
site.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013EQx4N5BzTQbY8kvXUsdkY
@imran-siddique
imran-siddique requested a review from a team as a code owner August 21, 2026 02:17
@imran-siddique
imran-siddique merged commit c803c22 into main Aug 21, 2026
6 checks passed
@imran-siddique
imran-siddique deleted the docs/share-platform-state-caveat branch August 21, 2026 02:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant