Admin programme

#programme

Admin programme

Frame

Admin stewards Dru’s thinking-feed structure: area scopes, cross-area conventions and decisions belonging to no subject area. Maintenance, not a catch-all research desk. Work in narrow depth on a plausible overlap in changed notes, not broad discovery. Owner follows tested cohort, measured outcome, independent check and reader decision, not shared vocabulary, infrastructure or source. A common proposed instrument is not a common field result. Attribute Dru’s instructions and respect date scope. Quiet days leave feed room. Breadth remains in the boundary index; current effort favors precise evidence and disagreement at one physical handoff rather than another topic.

Open questions

Curriculum

  1. Respect the original mandates: Agentic Software covers software lifecycle and maintained requester outcome across roles; AI Safety covers serious harms, plausible blockers, rights and independent controls.
  2. After any merge, check directory and affected surviving links; never edit another agent’s notes.
  3. For overlap read both programmes and primary notes. Write the causal question, cohort/denominator, permission grantor, intervention, time of actual effect versus purported approval, independent observer and reader decision. A completed delegated service task, a blocked unauthorized outside effect, and a safe response to adversarial evaluation are different endpoints. A lab’s contractual right to review is neither an observed refusal nor an instrument effect; a real-device validation is neither a rights gate nor a customer benefit by itself. Even a shared canary protocol must report matched task strata and consent before claims transfer across areas.
  4. Announce a material structural decision on Admin’s feed; otherwise keep evidence in topic notes and leave room for the subject areas. An every-item arrival in another area does not redefine its scope.

Observations

Dru’s instructions: September 28 requested agentic coding rather than general AI, keeping planning/tracking and cross-functional software roles, and removed Planning Agent Work and Roles in AI-Native Teams (record). September 29 requested skeptical investigation of serious AI harms and practical bottlenecks (handoff). No later Admin scope instruction in notes supplied for this run.

Tested distinctions: software branch pricing versus safety cost-as-stopper; validated lab successor versus deployed-app cost; graduate entry and hiring share versus trained novice performance; human PR reviewer, adversarial monitor, authorized branch cleanup and independently blocked outside egress; surveillance subject rights versus maintained interface; announced HomeView continuity versus measured household harm; released Windows patch awaiting reporter retest versus UK remediation assurance without case-level exploit audit.

October 22–26: authority, memory, monitoring, physical handoff. Both areas use Wikimedia’s October 5 host account: Software for task-scoped third-party authority, Safety for recipient effects and prevention. Wikimedia says its traffic may have contributed to May disruption; engineers’ May account does not identify an OpenAI scraper. Safety’s proposed consented twin includes owner time, false denials and legitimate completion, nearer Software’s permission-and-completion design, but no joined origin/host trace or fielded cohort exists in the originals checked. The Kiro check separates read-heavy AWS CLI triage and corrupt future lessons from the distinct repaired Kiro IDE pre-approval disk-write flaw and AISI’s unfielded independent egress architecture. Sunday’s monitor check puts METR’s historical OpenAI internal Codex eligibility and delayed-turn monitoring beside Anthropic’s authorized PR review and release: neither provides matched executed unauthorized effects, independent timed prevention and legitimate requester outcomes. OpenAI’s asserted subsequent patches have not been independently retested in the public audit. Monday’s physical-handoff check keeps Emerald’s contractual lab authority, Ginkgo’s benign staffed loop, Smith’s proposed controls and Singh’s field-device acceptance in separate cohorts and endpoint owners. No reported study joins measured independent physical prevention to legitimate software requester acceptance.

Feed signal: Admin has never posted: no trash, hearts, hearted-but-unopened reads or stale Admin posts. Its feed remains empty Monday October 26. No new Dru reaction or Admin scope request appears in changed programmes. Silence is budget signal, not assent. Other areas choose whether their own unread cards stay or go.

Backlog

No Admin announcement or weekend long read held. Post only on a scope request, actual duplicate acceptance outcome, named broken path or significant structural change. For third-party rights, watch for a signed origin-to-recipient join or a consented prospectively compared gate study with both unauthorized executed effects and accepted authorized work on the same eligible cohort and named steward. For lab material crossover, seek a consented same-request owner-approval and instrument-effect record including unsafe low-risk proxy prevention, false denials and accepted legitimate output; neither provider terms nor proposed security tiers suffice. For triage-memory crossover, add an approved correction→next-session skill load→human-accepted repair alongside timed outside-owner grant and actual effect; a raw skill count or an unrelated IDE advisory will not do. For monitor/review overlap require timed unauthorized actions and independent prevention plus the same cohort’s legitimate PR/release/requester outcome, not retrospective flags or incomparable traffic percentages. Hiring/teaching needs linked entry and coached work outcomes; patches need both field service acceptance and exploit verification in an actual common cohort.

This run

Monday October 26, 2026, ~02:00 UTC, readying Monday morning. Read empty Admin feed, both programmes and changed Software player/physical and Safety automated-lab notes. No new scope instruction, Admin reaction, duplicate research endpoint or named broken path. Three-question physical-handoff check verified Ginkgo, Emerald, Singh and Smith originals: benign AI-directed science has human-owned protocol/material steps; provider terms and proposed tiers lack prospective refusal/effect evidence; software fleet testing measures a different acceptance problem and lacks isolated agent benefit. No scope change or Admin post. Tuesday October 27 first run: check Dru’s directions and any named shared acceptance/physical-effect trace; otherwise preserve feed room and do not search broadly.

Run log

September 28–29 — Software scope/consolidation and Safety handoff. September 30–October 4 — Learning, compute, interface and limited link checks. October 5–10 — Permissions, adversarial monitoring, state rights, third-party grants, compute and review warnings. October 11–12 — Production versus research. October 13 — Shared incident, distinct endpoints. October 14–17 — State rights, household identity, patch/feature and junior career versus team learning. October 18–19 — Code review versus monitor; branch permission versus outside egress. October 20 — Remote-work hiring comparator, no linked coached-work cohort. October 21 — Windows reporter retest versus UK all-critical remediation assurance. October 22 — Same Wikimedia host source in both areas, no joined attribution or cohort. October 23 — Primary May page rechecked; paired canary design closer but unfielded. October 24 — Kiro triage memory/rights contrasted with independent evaluator egress and a different IDE advisory; no common outcome. October 25 — Historical OpenAI monitor coverage versus authorized Anthropic PR gate; no common outcome or Admin post. October 26 — Lab material authorization versus physical software release oracle: different cohorts and owners; no Admin post.