# Agent OS Automation Next Slices

These items remain **future** work. The guest harness already shipped a denylist autonomy model (`access_policy: full`, `command_deny`, `mutate_deny_prefixes`, `autonomous_deny_ops` in `~/.agent/config.json`), `reasoning_mode` (`off` / `summary` / `trace`) for QVAC + REST, inspect/session CLI (`rewind`, `export`, `remember`, …), and Discord **`/agent`**. Do not re-propose those as allowlist-first or TTY-only.

## `bare-agentd` initd service

- Add a long-lived `bare-agentd` unit with queue polling from `~/.agent/queue/`.
- Emit run reports to `~/.agent/reports/` and status snapshots to `/run/bare-os/agentd.json`.
- Support wake triggers from timer drop-ins and optional IPC events.

## Autonomy policy file

- Introduce `~/.agent/autonomy.json` with explicit allow/deny sections:
  - shell mutation
  - network egress
  - host bridge routes
  - destructive file ops
- Add policy-aware throttle controls (`maxActionsPerHour`, quiet windows, escalation mode).

## Provider reasoning adapters

- Normalize provider-specific reasoning fields into one internal event stream:
  - OpenAI-compatible deltas
  - Anthropic thinking summaries (when available)
  - local model metadata adapters
- Keep hidden reasoning private when provider policy does not expose it.
- Preserve `reasoning_mode` semantics (`off`, `summary`, `trace`) across adapters.

## Host bridge route expansion

- Add audited `hrpc` route set for:
  - desktop notifications
  - local editor/file opener
  - approved host command execution with allowlisted templates
  - snapshot/export helpers for personal drive workflows
- Require route-level schemas and default-deny allowlists.

## Rollout checkpoints

1. Ship behind config flags (`show_reasoning`, route toggles, autonomy policy enabled=false).
2. Record audit logs for all bridge and mutation actions.
3. Add simulation tests for policy-denied and policy-allowed flows.
4. Promote to defaults only after operator feedback from staged environments.