· ENPT-BR
Grok Build for Alembic · Roadmap

Roadmap and operating playbook

Choose the next bounded unit by prerequisite and proof—not by upstream feature count.

Primary source
Pinned session management guide

Pinned upstream commit: b189869b7755d2b482969acf6c92da3ecfeffd36

The Simple layer stands alone; open Technical for exact contracts and edge cases.
You will be able to
  • Choose a future unit from product need and prerequisite readiness.
  • Write a real proof boundary before implementation.
  • Keep rejected duplicate surfaces out of the roadmap.
1

The big idea


Phase one is complete when the opt-in provider works and its limits are explicit. Future work should advance one honest boundary at a time: first image readiness if production needs Grok, atomic session storage if resume matters, or ACP/stdio research if tool telemetry is worth the complexity. The rest stays with existing Alembic owners.

Think of it like… Treat the roadmap like a climbing route: each anchor must hold before you move weight onto the next one. The analogy breaks because independent branches—Docker, sessions, telemetry—can be climbed separately when the product need is clear.

Candidate A: pin and install Grok in `.factory/Dockerfile`, choose non-leaking auth injection, and run the exact sentinel inside the image. Candidate B: generalize session storage from one file to an atomic directory bundle, then prove capture/resume/fork. Candidate C: evaluate ACP/stdio for structured tool events while preserving the AgentProvider narrow waist.

Do not auto-route Grok, copy the Rust runtime, or create parallel hooks/plugins/TUI/sandbox subsystems. Re-open the pinned/live upstream docs before each unit because CLI flags and event shapes can drift. Every unit gets owner, blocker, proof command, rollback, and an independent validator.

Evidence: Pinned session management guide

phase oneproduct needprerequisiteDockerauth Safe: one bounded unit, explicit owner, blocker, proof, and rollback.
Choose the next bounded unit by prerequisite and proof—not by upstream feature count.
2

Compare the boundaries


Safe
Safe: one bounded unit, explicit owner, blocker, proof, and rollback.
Risky
Risky: “internalize everything” as a permanent parallel platform.
SurfaceUpstreamAlembicVerdict
Docker readinessNeeded for Factory image usePin + auth + in-image smokeNEXT IF NEEDED
Session bundleNeeded for resume/forkAtomic directory storageDEFER
ACP telemetryNeeded for tool eventsProtocol research + adapter proofDEFER

Do not auto-route Grok, copy the Rust runtime, or create parallel hooks/plugins/TUI/sandbox subsystems. Re-open the pinned/live upstream docs before each unit because CLI flags and event shapes can drift. Every unit gets owner, blocker, proof command, rollback, and an independent validator.

3

Real code and commands


packages/factory/README.md (phase-one contract)
const nextUnit = {
  id: "grok-docker-boundary",
  prerequisite: "production actually needs Grok",
  proof: [
    "grok --version inside the pinned image",
    "exact sentinel through factory.run inside the image",
    "no credential in image layers or logs",
  ],
  changesRoster: false,
};
How to reach it
sed -n '1,80p' packages/factory/README.md
rg -n "captureSessions|resumeSession|forkSession" packages/factory/src/GrokAgentProvider.ts

Evidence: RESOURCES.md

4

Visual atlas


inputproofphase one
Trace the boundary: phase one.
surfaceseamownerproduct need
Locate the owner: product need.
claimwithout gateevidenceat boundaryvsprerequisite
Compare claim and evidence: prerequisite.
learnexecuteverifyDocker
Read the sequence: Docker.
complete?yes / noauth
Find the decision gate: auth.
inputproofimage smoke
Trace the boundary: image smoke.
surfaceseamownersession bundle
Locate the owner: session bundle.
claimwithout gateevidenceat boundaryvsresume
Compare claim and evidence: resume.
learnexecuteverifyfork
Read the sequence: fork.
complete?yes / noACP
Find the decision gate: ACP.
inputprooftool events
Trace the boundary: tool events.
surfaceseamownerowner
Locate the owner: owner.
claimwithout gateevidenceat boundaryvsvalidator
Compare claim and evidence: validator.
learnexecuteverifyrollback
Read the sequence: rollback.
5

Practice and feedback


Predict before revealing

Tool-call telemetry is desirable, but no product consumer needs it yet. What is the next action?

Keep it deferred with an ACP/stdio research boundary; do not widen phase one.

Retrieval cards

Retrieval cardsBounded unitClick or press Enter to flip
Bounded unitOne change with one proof boundary.
Retrieval cardsPrerequisiteClick or press Enter to flip
PrerequisiteA condition that must exist before honest delivery.
Retrieval cardsRollbackClick or press Enter to flip
RollbackHow to remove the unit without harming existing owners.
Retrieval cardsValidatorClick or press Enter to flip
ValidatorIndependent scrutiny after the builder's proof.
Phase one is complete when the opt-in provider works and its limits are explicit. Future work should advance one honest boundary at a time: first image readiness if production needs Grok, atomic session storage if resume matters, or ACP/stdio research if tool telemetry is worth the complexity. The rest stays with existing Alembic owners.
Candidate A: pin and install Grok in `.factory/Dockerfile`, choose non-leaking auth injection, and run the exact sentinel inside the image. Candidate B: generalize session storage from one file to an atomic directory bundle, then prove capture/resume/fork. Candidate C: evaluate ACP/stdio for structured tool events while preserving the AgentProvider narrow waist.

Tune the next unit

Select a desired outcome and read the smallest honest next unit.

Verdict

Four-slide summary

Bounded unit

One change with one proof boundary.

Prerequisite

A condition that must exist before honest delivery.

Rollback

How to remove the unit without harming existing owners.

Validator

Independent scrutiny after the builder's proof.

Check your model

Spaced review

What should select the next roadmap unit?

A bounded product need plus ready prerequisites and a real proof gate outranks novelty.
6

Sources and next move


Ask your teacher to challenge a verdict, replay an event, or review a future unit against the same proof discipline.