Skip to content

docs: Factor contributor and agent terminology out of docs and skills into a canonical glossary #5271

Open

Description

@purp

User Story

When coordinating work on OpenShell through its contributor instructions and skills, I need terms such as “accepted work” to have one authoritative definition in one and only one specific location for documentation and skills to refer to so every agent uses them consistently and follows the intended workflow.

Problem Statement

Let's DRY up our docs and skills by making one source of truth for core terminology that we consistently refer to from docs and skills rather than defining and redefining in multiple places.

OpenShell's workflow vocabulary is explained across AGENTS.md, CONTRIBUTING.md, contributor skills, and GitHub label descriptions. There is no shared terminology glossary for instructions to reference. Repeating or paraphrasing definitions across these surfaces makes it easy for meanings to drift or for agents to infer different permissions from the same term.

Further, many terms are explained in multiple locations which creates the opportunity for definitions to drift over time as agents make corrections to some but not all of the places where a term is defined.

“Accepted work” is a motivating example: agents need to distinguish a maintainer's decision to pursue an issue from technical validation, implementation readiness, and authorization to perform a particular phase in response to a direct request. We talk around this in our triage skills and PR review readiness workflow, and the first agentic attempt to explicitly define it (#5260) started by writing it in three skills and two doc files.

Impact / Why This Matters

Contributors and agents currently have to reconstruct meanings from multiple documents and live repository state. Ambiguity can cause unnecessary clarification, premature implementation, incorrect status changes, or avoidable PR gating failures. Maintaining equivalent prose in several places also increases the cost of changing a workflow rule.

Proposed Design

Consider adopting Matt Pocock's domain-modeling skill which is specifically intended for this and easily separable from his other skills. Otherwise, the agent suggests this course of action:

Provide a discoverable, canonical glossary for OpenShell contributor and agent workflow terminology. Define each term once, with a stable reference that instructions and skills can link to instead of restating its definition. Keep procedural steps where they belong, and distinguish those steps from definitions.

Start with the vocabulary that affects authority and issue disposition: accepted work, triage, technical validation, implementation readiness, phase authorization, and roadmap placement. Confirm the exact initial terms and definitions against current maintainer policy. Entries should explain who can make the relevant decision, what evidence establishes it, and what it permits; include short examples where similar terms are easily confused.

Make consulting and using the glossary part of agent instructions. Update existing contributor instructions and relevant skills to reference the canonical entries and remove duplicated definitions. Future terminology or workflow changes should update the definition and its references together.

The glossary must coexist with the requirement to discover current GitHub labels and descriptions: explain conceptual meaning and link to the authoritative live state where applicable, without freezing a second label inventory or silently changing existing policy. Public installable skills must retain access to any definitions they need without requiring a source checkout.

Suggested UX

A contributor or agent encountering “accepted work” follows its glossary link to one definition and a brief example distinguishing it from “technically validated.” An instruction that requires acceptance references that entry and states the action-specific requirement. A direct request to investigate an issue is understood as authorization for that phase; issue disposition is evaluated separately under the existing workflow.

Acceptance Criteria

  • A canonical glossary defines the agreed initial workflow terms, including “accepted work,” with stable links to individual entries.
  • Definitions distinguish acceptance, technical validation, implementation readiness, phase authorization, and roadmap placement without changing existing maintainer policy.
  • AGENTS.md, CONTRIBUTING.md, and relevant contributor skills direct agents to the glossary and use its terminology consistently.
  • Duplicated definitions are replaced with references; procedural requirements remain clear at their point of use.
  • Representative examples cover technically validated work without acceptance, a direct request authorizing investigation only, and accepted work subject to applicable implementation or PR requirements. The instructions resolve each case consistently.
  • A documented consistency check or review step detects terminology drift, duplicate definitions, and broken glossary references when workflow instructions change.
  • Live label discovery remains authoritative for current repository state, and any affected public skills remain usable outside a checkout.

Alternatives Considered

  • Continue explaining terms independently in each instruction or skill. This preserves local context but retains the duplication and drift problem.
  • Use only GitHub label descriptions. These describe live state, but do not cover all workflow concepts or explain how authorization and disposition relate.
  • Put all definitions directly in AGENTS.md. This increases the always-injected instruction surface; a linked glossary offers focused definitions that other surfaces can reference.

Runtime middleware, interceptors, and providers do not address this contributor-instruction need.

Investigation

CONTRIBUTING.md already separates triage, technical validation, human acceptance, and direct-request phase authorization. Its Label Discovery section requires inspecting current label descriptions. AGENTS.md and the PR creation/review skills also describe acceptance requirements. The proposal should consolidate terminology while preserving these rules and their existing exceptions.

Activity

  1. purp commented on Nov 4, 2026

    @purp
    CollaboratorAuthor

    Candidate terminology inventory from AGENTS.md, CONTRIBUTING.md, contributor skills under .agents/skills/, and public skills under skills/, including their supporting references. These are terms to consider, not proposed policy changes or approved definitions. Grouped phrases may belong in one entry with aliases rather than separate definitions.

    1. Issue disposition and authority — highest priority

    Sources: CONTRIBUTING — Issue Workflow, triage-issue, build-from-issue.

    • Accepted work / accepted issue / human acceptance / maintainer acceptance — what decision is recorded, who can make it, and what acceptance permits.
    • Triage / assessment / technical validation — their boundaries and whether these are distinct phases or overlapping activities.
    • Valid work / confirmed bug / feasible feature / actionable concern — evidence sufficient for each judgment; distinguish technical findings from investment decisions.
    • Ready for implementation / implementation readiness / agent-ready — prerequisites beyond technical validity or acceptance.
    • Authorization / authorized phase / direct request / maintainer direction — which actions a request authorizes and which require separate authority.
    • Planning / investigation / implementation / remediation — phase boundaries, especially when a request authorizes only one.
    • Unattended work — what establishes authority when there is no current direct request.
    • Issue disposition / assessment state / execution state / lifecycle state — which decisions each records and which must be preserved during triage.
    • Roadmap placement / scheduling / product investment decision — relationship to acceptance and authorization.
    • Label discovery / current label definition — how live repository metadata relates to conceptual glossary definitions; avoid a second frozen label inventory.

    2. Actors, permissions, and review gates

    Sources: CONTRIBUTING — First-Time Contributors, create-github-pr, AGENTS — Pull Requests.

    • Human operator / requesting user / author / contributor — distinguish who requests work, who submits it, and whose permissions apply.
    • Maintainer / core contributor / collaborator / organization member / code owner / on-duty engineer — role boundaries and sources of authority; “core contributor” particularly needs a reliable identification rule for intake.
    • Target repository / fork / upstream — which repository's issues, labels, and permissions govern a contribution.
    • Write access / verified permission / push access — exact permission levels and treatment of failed or unknown lookups.
    • Vouch / vouched contributor / vouch status — separate contributor admission from issue acceptance and repository permissions.
    • Maintainer approval / code owner approval / general review approval / issue acceptance gate / test authorization — distinct gates that must not collapse into “approved.”
    • Explicit confirmation / selection / authorization / external write / bulk change — especially the action-specific confirmation rules in triage application.

    3. Intake, evidence, and proposed work

    Sources: create-github-issue, create-spike, create-rfc.

    • First-hand context / attestation / concrete use case / User Story — what must come from the human rather than inference.
    • Problem Statement / impact / workaround / proposed design / notional UX example — distinct purposes of required issue sections.
    • Acceptance criteria / Definition of Done — observable completion criteria; distinguish these from maintainer acceptance of the work.
    • Spike / investigation / build plan / RFC / design proposal — expected deliverables and decisions each supports.
    • Observed behavior / reproduced result / code-inspection evidence / reported claim / likely cause / open question — evidence categories and certainty.
    • Missing evidence / failed reproduction / expected behavior / already-fixed behavior / duplicate / canonical issue — distinct assessment outcomes and required support.
    • Extension point / middleware / interceptor / provider — what counts as an existing extension satisfying a use case; link product definitions rather than redefine them here.

    4. Triage queue and local action records

    Sources: review-triage-queue, apply-triage-action, report template.

    • Intake / triage queue / already-routed work / substantive community issue — inclusion and exclusion boundaries.
    • Finding / signal / recommendation / action / disposition — distinct objects in queue review.
    • Item ID / canonical source / provenance / source report / checkpoint / action record / local inbox — identity, evidence, and authority of local state.
    • Pending / deferred / rejected / applied / processed / superseded / already-final — terminal versus nonterminal local states, separate from GitHub issue states.
    • New / carried / overflow / scan window / backlog cursor / in-progress triage pass — how work persists across reviews and how “next issue” is selected.
    • Priority / confidence / severity / release blocker / security finding — separate urgency from evidentiary confidence and security impact.
    • Material change / fresh review / harmless no-op — when prior selection or confirmation stops applying.

    5. Contribution scope and verification

    Sources: CONTRIBUTING — Pull Requests, CONTRIBUTING — DCO, build-from-issue, Windows build skill.

    • Issue-backed work / tracking issue / closable issue / closing reference / related issue — which issue covers a PR's complete scope.
    • Draft PR / dependent PR / parent branch / automated dependency update / build fix / flaky-test fix — categories with distinct workflow requirements or exceptions.
    • Scoped verification / focused checks / full CI / regression test / E2E lane / conformance / smoke test / canary — what evidence each provides.
    • Passed / failed / skipped / ignored / filtered / not run / unverified — precise test and verification accounting; absence of failure is insufficient to claim execution.
    • DCO sign-off / Signed-off-by / cryptographic commit signing — explicitly different requirements.
    • User-facing behavior / internal implementation detail / smallest coherent change — boundaries affecting documentation and verification scope.

    6. Agent instructions and documentation authority

    Sources: AGENTS — Skills, sync-agent-infra, CONTRIBUTING — Agent Skills.

    • Agent-first / agent-only — intended division of responsibility between humans and agents.
    • Public/installable skill / contributor/internal skill / maintainer workflow / companion skill — audiences, availability, and source assumptions.
    • Internal metadata / discovery filter / access-control boundary — avoid treating discovery visibility as a permission boundary.
    • Primary instruction surface / canonical source / source of truth / authoritative reference — ownership and precedence of definitions, procedures, command syntax, and live state.
    • Published docs / crate README / RFC / docs preview / dev docs / stable docs / latest docs — appropriate destinations and version semantics.
    • Consistency check / maintenance map / terminology drift / cross-reference — how shared definitions stay synchronized without repetition.

    7. Security review and disclosure

    Sources: create-security-advisory, review-security-issue, fix-security-issue, AGENTS — Security.

    • Security concern / finding / vulnerability / advisory / GHSA / private draft / publication — artifact and lifecycle distinctions; GHSA states differ from issue labels.
    • Authorized private venue / disclosure boundary / remediation authorization / release approval — separate authority to review, fix, and disclose.
    • Threat model / attack scenario / exploitability / prerequisites / existing authority / security boundary — what a finding must establish.
    • Tested revision / affected release / proposed fix / patched release — prevent unsupported version or remediation claims.
    • Security-sensitive cryptographic operation / crypto facade / documented exception / backend failure / fallback — boundaries of the first-party crypto rule.
    • Destructive operation / explicit human confirmation — actions covered by the repository convention.

    8. Release and operational vocabulary

    Sources: release-openshell, release-captain, test-release-canary, sbom.

    • Release train / release series / seed / prerelease / candidate / qualified prerelease / stable release / promotion — related artifacts and lifecycle decisions.
    • Qualification profile / qualification evidence / passing run / publication success — what must pass before promotion and when evidence expires.
    • Release Dev / Pre-release / Release / Release Auto-Tag / Release Canary — named workflows with different responsibilities.
    • Support branch / versioned artifact / rolling dev / latest / immutable version — version and distribution semantics.
    • Retry / rerun / new candidate / transient infrastructure failure / code defect — when an existing candidate can be reused.
    • Release artifact / SBOM / license resolution / advisory license check — generated outputs and what their checks establish.
    • Supervised gator / sandbox image / runtime override / harness override — operational concepts in the gator-launch workflow.

    9. Product terms found in public skills — consider links to existing product definitions

    Sources: openshell-cli, generate-sandbox-policy, debug-inference, debug-openshell-cluster, helm-dev-environment.

    • Gateway / gateway registration / active gateway / cluster / compute driver / sandbox / workload / supervisor / shared supervisor / isolation backend.
    • Provider / provider profile / provider attachment / credential driver / credential substitution / managed refresh / revision-scoped reference / native endpoint / host-local inference.
    • Authored policy / effective policy / policy revision / policy proposal / binary identity / binary authorization.
    • L4-only / L7 inspection / access preset / enforce / audit / allow / deny / bypass / TLS termination / TLS skip / transparent TCP / explicit proxy.
    • Middleware / built-in middleware / operator-run middleware / middleware binding / registration / host selector / fail-open / fail-closed / gateway interceptor.
    • Stop/start / suspend/resume / delete / workload template / service exposure / port forwarding / BYOC.
    • Observable sandbox behavior / operational plumbing / OCSF domain event / detection finding / dual-emit / severity from AGENTS.md logging guidance.
    • snap / Snap Store / Snapcraft / snapd — existing terminology and capitalization convention.

    Suggested first pass: define the authority and disposition terms in groups 1–2, plus acceptance criteria, evidence categories, local triage dispositions, verification outcomes, and sign-off versus signing. Keep the remaining groups as a candidate backlog. For product and specialized technical terms, reuse stable links to their existing authoritative definitions wherever possible so this work does not create another competing glossary.

  2. jyotir07 commented on Nov 4, 2026

    @jyotir07

    Hey @purp I'd like to work on this issue. Would it be okay if I picked it up and submitted a PR? Thanks! :)

  3. changed the title [-]docs: add a canonical glossary for contributor and agent terminology[/-] [+]docs: Factor contributor and agent terminology out of docs and skills into a canonical glossary[/+] on Nov 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions