# Status > Where every branch of both repositories is and where every member is: a snapshot by the conductor, from git, never from a session. *Source: · generated by tools/gen_admin.py from content/admin/, so the page and this file cannot drift. Every page on this site has a .md twin.* --- A snapshot taken by the conductor with `python3 tools/admin_status.py`, as of 26 Oct 2026 (2026-10-26T01:12Z): every branch of both repositories, its head, its last commit and how far it is from `dev`, read from git, never from a session; then every member's own `status.json`. A branch ahead of `dev` is work nobody has released yet; a session is only visible here once it has pushed. ## SHarness-AI__Website Latest tag `v0.5.28`; 0 branch(es) carry commits not yet on `dev`. | Branch | Head | Last commit | Against dev | |---|---|---|---| | `dev` | `4d92fed` · 2026-10-26 01:11 | site v0.5.28: article: The CLI is the front door, the design for the next sharness-ai | 0 ahead, 0 behind | | `main` | `a1f93f6` · 2026-10-24 17:30 | Initial commit | 0 ahead, 55 behind | | `claude/blissful-johnson-yk1c4p` | `e9a9679` · 2026-10-24 17:55 | site v0.3.1: completeness pass against the sgit design pack 00-04 | 0 ahead, 50 behind | | `claude/wonderful-cray-4xpawa` | `4d92fed` · 2026-10-26 01:11 | site v0.5.28: article: The CLI is the front door, the design for the next sharness-ai | 0 ahead, 0 behind | | `conductor/admin` | `c4c4b9b` · 2026-10-26 00:58 | site v0.5.27: website@sharness joins the roster as a draft: its role, its card and its start prompt, so one line onboards it from any account; R20 (Agent: conductor) | 0 ahead, 1 behind | | `pbp/join` | `c0cde85` · 2026-10-25 23:52 | site v0.5.17: sharness.pbp joins; the Process Behaviour Policy on one page (Agent: sharness.pbp) | 0 ahead, 22 behind | | `security/join` | `e921452` · 2026-10-25 23:58 | site v0.5.20: the security section and the code at immutable paths, merged onto dev at v0.5.19 | 0 ahead, 16 behind | ## SHarness-AI__CLI Latest tag `v0.1.0`; 4 branch(es) carry commits not yet on `dev`. | Branch | Head | Last commit | Against dev | |---|---|---|---| | `dev` | `7dcbe05` · 2026-10-26 00:00 | security.yml: audit what the package installs, not the venv's pip; dependency review waits on a setting | 0 ahead, 0 behind | | `main` | `6836292` · 2026-10-24 16:27 | Update release badge and version file | 0 ahead, 16 behind | | `claude/blissful-johnson-yk1c4p` | `0a53a7c` · 2026-10-24 16:50 | Point the package at sharness.ai, add the proposed scope, make sharness-ai the only command | 0 ahead, 15 behind | | `claude/wonderful-cray-4xpawa` | `2aa5d8d` · 2026-10-25 23:56 | Join the working branch back to dev; ba86a3f is a stray copy of 997459a (Agent: sharness.build) | 2 ahead, 1 behind | | `dependabot/github_actions/actions-b6b218e832` | `199e5b0` · 2026-10-26 00:05 | Bump the actions group across 1 directory with 3 updates | 1 ahead, 0 behind | | `dependabot/pip/pytest-cov-gte-7.1.0` | `aa31efd` · 2026-10-25 23:52 | Update pytest-cov requirement from >=5.0 to >=7.1.0 | 1 ahead, 1 behind | | `dependabot/pip/pytest-gte-9.1.1` | `be65598` · 2026-10-25 23:52 | Update pytest requirement from >=8.0 to >=9.1.1 | 1 ahead, 1 behind | ## The members | Member | Role | State | Last did | Waiting for | |---|---|---|---|---| | [cli@sharness](../members/cli/index.md) | The CLI agent; builds the sharness-ai package, the experiments and the browser bench | idle | The CLI as the front door: article (the design, then the postscript) and the code on the CLI's dev (5e48c28, merged b2d4a7e): sharness_ai/cli/ and sharness_ai/ui/ in the sgit shape, the guide with no arguments, policy new/show/edit, run with its plan, hello as a scoreboard, components with honest status; 92 -> 135 tests, CI green; hello 6/6 here and in the v86 guest; playground 17/17; the demo and playground copies on the site refreshed. Unstuck the release chain (v0.5.39 to v0.5.41) after my merge-commit release broke it; lesson: tools/ship.py only. | the editor's next CLI changes; website@ to carry the new commands onto code/cli/index.md (text in the CLI README) | | [conductor@sharness](../members/conductor/index.md) | Conductor; for now also librarian, ontologist and project manager | working | The check-in of 00:32 UTC: reviewed what landed since v0.5.21 (the Sherpa's v0.5.22 twice, security@'s CLI audit, Dependabot), built tools/ship.py (T16) and released with it; R19 opened; the update of 00:40. | R17 (the go on the cards), R12, R13; on: editor | | [dev@sharness](../members/dev/index.md) | The developer agent, reference implementations in several languages | working | The editor decided R8 in session (26 Oct): one repository per language, same structure, vectors on the site. Shipped: the policy v0 standard and its 28 vectors (code/standards/, tools/gen_vectors.py), the registry, the brief on the repositories; JavaScript and Go implementations of policy hash and check passing every vector, staged on the CLI's branches claude/js-reference and claude/go-reference (Rust: the structure only); R21 opened. Then: the pages queue dropped v0.5.33's run and the tags stalled at v0.5.32; website@ cut the missing tags, re-ran, and opened T21 for the fix (my own tags were refused as already there). Took in pbp@'s tree of doors (v0.5.30 to v0.5.35): the registry and the brief carry it; the article has a dated postscript. | R21: the three repositories (editor); T20's door design (pbp); on: editor, pbp | | [Dinis Cruz](../members/editor/index.md) | Author of SHarness and editor of the site | deciding | Asked the conductor to join (25 Oct); asked for the commit-notes protocol and sent the list of running sessions (26 Oct). | nothing from the team; the R rows on the board wait on him | | [pbp@sharness](../members/pbp/index.md) | The policy agent; holds the definition of the Process Behaviour Policy | done | The levels (design/levels, 26 Oct 2026): six levels of one policy, each compiling into the one below; three rules that keep the simple levels honest; each level a service; two stacks on TCP; the claim checked against what exists. T22 opened for the level-3 form in the CLI. | the editor's read of design/levels; the menu entry from website@ (the nav is theirs); T14, T19 and T22 on: cli; T18 on: conductor; T20 on: dev | | [security@sharness](../members/security/index.md) | Security agent; keeps the register and reviews what lands | working | Review 1 of the CLI, the policies, the bench, both pipelines and the site (25 findings; 5 High, all fixed on the CLI's dev at 997459a with 32 tests); the security section (threat model, register, reviews, hardening, supply chain); security.yml, codeql.yml, dependabot.yml, SECURITY.md in both repositories; the code at immutable paths under code/releases/ with tools/releases.py and the gate's checks; the storyboards kit loaded with its integrity string. | R15 (the repository and account settings on the lock-down list) and R16 (the process.env row); the first run of the rewritten release pipeline on the CLI's next push to main (SR-05 reads fixed, untested until then); on: editor | | [sharness.build](../members/sharness.build/index.md) | The build agent of the site and the CLI | retired | Site v0.5.13 (25 Oct, 23:46 UTC): the guest in the tab on a network the page provides, and the playground's interceptor that decodes every packet and enforces an egress allowlist outside the guest; 17 of 17 checks, live. Site v0.5.16 (26 Oct, 00:20 UTC): the Components section, the OS a process sees, one page per component with the proposed API and the verdicts; the phone menu fixed. CLI: dev taken in after security@sharness's review 1; the guest rebuilt on it and the 17 checks re-run. | nothing: renamed cli@sharness on 26 Oct 2026; see content/admin/members/cli/ | | [sherpa@sharness](../members/sherpa/index.md) | The Sherpa; also outreach and telemetry | working | Site v0.5.22 (the outreach plan without the material on another project's promotion) and v0.5.23 (R7's decision). Both vaults pushed; the telemetry lane open and drained (29 events); both vault keys handed to the vault keeper, sealed. R9 superseded (identity keys are ephemeral), R11 paused (the site first, LinkedIn first), R7 after the security and functionality pass: the editor, 26 Oct. | R11 (paused by the editor until the site is ready), R7 (after the security and functionality pass), R17 (the go on the cards); the conductor to land the T8 words in the CLI; on: editor, conductor | | [website@sharness](../members/website/index.md) | The website agent; owns sharness.ai, its generators, its gate and its pages | joined, working on the editor's first request | The editor's request of 26 Oct: a first pass at the site for a reader arriving cold, proposed as mockups and released as v0.5.41: seven menus (Landscape folded into Evidence, duplicates gone), a phone menu that folds, On this page on long generated pages, previous and next in the menu's order, a four-column footer, a skip link, three papercuts. Earlier: joined (v0.5.34), T21 opened (v0.5.36), dev unstuck twice. | the editor's choice on the next pass (site search, a shorter front page, dark mode, still first frames for the explainers); the brief to publish (R20); the go on the card (R17); security@'s review of the T21 workflow fix; on: editor, security |