Struct LisrAdr 

pub struct LisrAdr;

Architecture Decision Record for the LISR system.

Records why LISR exists, what threats it addresses, and why fail-closed constraints were chosen. This is embedded in code to prevent drift from the original safety intent.

Implementations

impl LisrAdr

pub const ID: &'static str = "ADR-LISR-001"

ADR identifier.

pub const TITLE: &'static str = "Dynamic Secure Extension Repair with Intent-Legible Self-Healing"

Title of the architecture decision.

pub const CONTEXT: &'static str = "\ Extensions frequently break during updates when build artifacts (dist/) \ diverge from source (src/). Manual repair is slow, error-prone, and blocks \ the agent workflow. LISR provides automated repair within strict safety \ boundaries to restore extension functionality without human intervention."

Why LISR exists.

pub const DECISION: &'static str = "\ Adopt a layered repair pipeline with fail-closed defaults: \ (1) security policy framework bounds all repairs, \ (2) intent legibility analysis gates repair eligibility, \ (3) deterministic rules execute safe repairs, \ (4) model-assisted repairs are constrained to whitelisted primitives, \ (5) all repairs require structural + capability + semantic proof, \ (6) overlay deployment uses canary routing with health rollback, \ (7) every action is recorded in an append-only audit ledger, \ (8) governance checks are codified in the release process."

The core architectural decision.

pub const THREATS: &'static [&'static str]

Threats addressed by the design.

pub const FAIL_CLOSED_RATIONALE: &'static str = "\ Any uncertainty in repair safety defaults to denial. A broken extension \ that remains broken is safer than a repaired extension that silently \ escalates privileges or introduces semantic drift. The cost of a false \ negative (missed repair) is low; the cost of a false positive (unsafe \ repair applied) is catastrophic."

Why fail-closed was chosen.

pub const INVARIANTS: &'static [&'static str]

Key safety invariants enforced by the system.