Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 7 additions & 6 deletions docs/repository-ecosystem.md
Original file line number Diff line number Diff line change
Expand Up @@ -198,8 +198,8 @@ If you find patterns diverging between repos:
## Cross-Repo Multi-Workspace Patterns

When working with multiple repositories simultaneously, you can mount them into a single sandbox
using Docker's `sbx` CLI. This enables workflows where an agent can reference one repo while
editing another.
via `acq` (the sandboxing wrapper). This enables
workflows where an agent can reference one repo while editing another.

### Common Cross-Repo Modes

Expand All @@ -212,13 +212,14 @@ editing another.

### Repository Ownership

- **Quickstart** owns the detailed `sbx` CLI setup instructions
- **Quickstart** owns the detailed `acq` setup instructions
- **Patterns** provides high-level guidance on when to use cross-repo workflows
- **Playbook** defines standards that may be referenced from other repos

For `sbx` command syntax and examples, see the
[Multiple Workspaces](https://github.com/GSA-TTS/agentic-coding-quickstart/blob/main/docs/QUICKSTART_SBX.md#multiple-workspaces)
section in the quickstart guide.
For command syntax and examples, see the quickstart guide's
[Quick Start](https://github.com/GSA-TTS/agentic-coding-quickstart/blob/main/docs/QUICKSTART.md)
and its [Multiple Workspaces](https://github.com/GSA-TTS/agentic-coding-quickstart/blob/main/docs/QUICKSTART_SBX.md#multiple-workspaces)
section.

### Security Best Practice

Expand Down
3 changes: 1 addition & 2 deletions integrations/isolation/acq-kits/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,7 @@ Neutral, backend-agnostic **mixin kits** for
[`acq`](https://github.com/GSA-TTS/agentic-coding-quickstart) — the pluggable
isolation-backend wrapper. A kit configures an agentic-coding sandbox
declaratively (network egress, files to drop, lifecycle commands, agent
context); `acq` translates the neutral spec into whichever backend is active
(`sbx` today; `msb` from Phase 2; `ppp` later).
context); `acq` translates the neutral spec into whichever backend is active.

These are isolation/environment building blocks — they configure the *sandbox*,
not agent behavior. (Behavioral patterns live in `skills/`, `prompts/`, etc.)
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,7 @@ kit** that delivers the GSA
the federal `AGENTS.md` rules and the Agent Skills — into a sandbox.

> **Neutral (backend-agnostic) kit.** This is the `schemaVersion: "hybrid/v1"`
> form consumed by `acq`, which selects an isolation backend (`sbx` today; `msb`
> from Phase 2). It replaces the former `sbx-kits/playbook-kit/` sbx-only spec.
> form consumed by `acq`, which abstracts the isolation backend. It replaces the former `sbx-kits/playbook-kit/` sbx-only spec.
> See [backend parity](#backend-parity) and
> [`../../docs/decisions/0001-neutral-hybrid-v1-acq-kits.md`](../../docs/decisions/0001-neutral-hybrid-v1-acq-kits.md).

Expand Down
3 changes: 1 addition & 2 deletions integrations/isolation/acq-kits/git-ssh-sign/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,8 +9,7 @@ Your **private key never leaves the host** — the sandbox forwards the SSH agen
and signing resolves the public key from that agent at signing time.

> **Neutral (backend-agnostic) kit.** This is the `schemaVersion: "hybrid/v1"`
> form consumed by `acq`, which selects an isolation backend (`sbx` today; `msb`
> from Phase 2). It replaces the former `sbx-kits/git-ssh-sign/` sbx-only spec.
> form consumed by `acq`, which abstracts the isolation backend. It replaces the former `sbx-kits/git-ssh-sign/` sbx-only spec.
> See [backend parity](#backend-parity) and
> [`../../docs/decisions/0001-neutral-hybrid-v1-acq-kits.md`](../../docs/decisions/0001-neutral-hybrid-v1-acq-kits.md).
>
Expand Down
8 changes: 4 additions & 4 deletions integrations/isolation/acq-kits/kits.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@
#
# Maps each neutral (schemaVersion: "hybrid/v1") kit to the backends that
# support it and a prose parity note describing any per-backend capability
# difference. For Phase 2 the supported backends are sbx and msb; ppp arrives in
# Phase 3. Parity is ADVISORY (documented, not machine-enforced) — the source of
# truth for a per-backend difference is the kit's spec.yaml backend_shortcuts and
# its README parity note.
# difference. `acq` abstracts the isolation backend; the authoritative backend
# set lives in the acq wrapper, not here. Parity is ADVISORY (documented, not
# machine-enforced) — the source of truth for a per-backend difference is the
# kit's spec.yaml backend_shortcuts and its README parity note.
#
# See integrations/isolation/docs/decisions/0001-neutral-hybrid-v1-acq-kits.md.
schemaVersion: "acq-kits-registry/v1"
Expand Down
3 changes: 1 addition & 2 deletions integrations/isolation/acq-kits/usai-provider/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,7 @@ kit** that configures a coding agent to use the GSA **USAi** OpenAI-compatible
endpoint as its model provider, with network egress allow-listed.

> **Neutral (backend-agnostic) kit.** This is the `schemaVersion: "hybrid/v1"`
> form consumed by `acq`, which selects an isolation backend (`sbx` today; `msb`
> from Phase 2). It replaces the former `sbx-kits/usai-provider-kit/` sbx-only
> form consumed by `acq`, which abstracts the isolation backend. It replaces the former `sbx-kits/usai-provider-kit/` sbx-only
> spec. See the [backend parity](#backend-parity) note and
> [`../../docs/decisions/0001-neutral-hybrid-v1-acq-kits.md`](../../docs/decisions/0001-neutral-hybrid-v1-acq-kits.md).

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,7 @@ HTTPS-inspecting proxy — so outbound HTTPS works on networks where Zscaler
intercepts and re-signs TLS traffic.

> **Neutral (backend-agnostic) kit.** This is the `schemaVersion: "hybrid/v1"`
> form consumed by `acq`, which selects an isolation backend (`sbx` today; `msb`
> from Phase 2). It replaces the former `sbx-kits/zscaler-ca-certificate/`
> form consumed by `acq`, which abstracts the isolation backend. It replaces the former `sbx-kits/zscaler-ca-certificate/`
> sbx-only spec. See [backend parity](#backend-parity) and
> [`../../docs/decisions/0001-neutral-hybrid-v1-acq-kits.md`](../../docs/decisions/0001-neutral-hybrid-v1-acq-kits.md).

Expand Down