Evidence record / heypi
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-13-heypi-approval-request-records-are-queryable-jsonl-without-tamper-evidence
Approval-request records are queryable JSONL without tamper evidence. This replaces the older typed-trace-events description. heypi’s conversation JSONL is a queryable authorization/routing ledger; Pi’s transcript is the separate execution trace. The approval-request path records requester, approver, canonical-input hash, displayed action and decision, and required write failures block that path. Calls with no policy, policies returning allow/block and reused once() approvals do not each enter this audit path. A decision hash does not prove subsequent execution. The file writes are not tamper-evident.
Channel: preview-or-beta heypi 0.3.0-beta.2. Half: both. Date: 2026-07-21 (historical beta.0 ledger); re-verified for the 2026-10-13 profile.
Operator consequence: Use these records to reconstruct decisions that entered the request path, not as a complete per-call execution ledger. Export them to independently protected append-only storage if state writers must not be able to rewrite evidence. An OS crash may lose unflushed records. The loader drops a malformed unterminated final line and rejects earlier JSON syntax errors, but cannot authenticate well-formed edits. Under host execution, the service account may also let the agent edit this state.
Receipt
- https://github.com/hunvreus/heypi/blob/436da22ceab0bc4e2db133e8626649b4bf76286d/packages/heypi/docs/configuration/admin.md#L47-L53
- https://github.com/hunvreus/heypi/blob/436da22ceab0bc4e2db133e8626649b4bf76286d/packages/heypi/src/channel.ts#L191-L194
- https://github.com/hunvreus/heypi/blob/436da22ceab0bc4e2db133e8626649b4bf76286d/packages/heypi/src/approval.ts#L309-L395
- https://github.com/hunvreus/heypi/blob/436da22ceab0bc4e2db133e8626649b4bf76286d/packages/heypi/src/approval.ts#L468-L484
- https://github.com/hunvreus/heypi/blob/436da22ceab0bc4e2db133e8626649b4bf76286d/packages/heypi/src/app.ts#L975-L985
- https://github.com/hunvreus/heypi/blob/436da22ceab0bc4e2db133e8626649b4bf76286d/packages/heypi/src/channel.ts#L356-L374
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-heypi-approval-request-records-are-queryable-jsonl-without-tamper-evidence
Source links
Primary links, including exact changelog lines when available.
- tagged commit file2026-10-13-heypi-approval-request-records-are-queryable-jsonl-without-tamper-evidencehunvreus/heypi / packages/heypi/docs/configuration/admin.md#L47-L53tagged commit file2026-10-13-heypi-approval-request-records-are-queryable-jsonl-without-tamper-evidencehunvreus/heypi / packages/heypi/src/channel.ts#L191-L194tagged commit file2026-10-13-heypi-approval-request-records-are-queryable-jsonl-without-tamper-evidencehunvreus/heypi / packages/heypi/src/approval.ts#L309-L395tagged commit file2026-10-13-heypi-approval-request-records-are-queryable-jsonl-without-tamper-evidencehunvreus/heypi / packages/heypi/src/approval.ts#L468-L484tagged commit file2026-10-13-heypi-approval-request-records-are-queryable-jsonl-without-tamper-evidencehunvreus/heypi / packages/heypi/src/app.ts#L975-L985tagged commit file2026-10-13-heypi-approval-request-records-are-queryable-jsonl-without-tamper-evidencehunvreus/heypi / packages/heypi/src/channel.ts#L356-L374
Versioned source: run artifact