JUDGE-ARCH: Formalize actor-judge authorization layer
Final architecture spec for scobleclaw#7, covering:
- Actor-Judge separation principle (separate model instances,
divergent optimization goals)
- Risk classification matrix (4 tiers: no-judge, lightweight-approval,
full-judge-review, human-only)
- Judge protocol spec (proposal/verdict JSON formats, retry/override
logic with clarify cycles, confidence scoring)
- Integration via MCP Tool Proxy Middleware (zero agent changes,
single enforcement point)
- Kubernetes sidecar pattern for kubeclaw operator
- Implementation priority: exec/Forgejo (P0) -> web/Discord (P1-P2)
- Metrics framework (approval rate, latency, clarify cycles, escalation)
- 4-phase rollout plan with shadow mode before enforcement
Closes scobleclaw#7
d74bb3852a