feature/Some-refusals-escape-verdict · L-260926-537faf

[lchoquel]

The pipe factories' refusal classes declared no error domain, so the verdict translation let them escape every validator raw; they are raised only while a pipe is built from its own blueprint, so they are now input-domained and caller-facing, and a PipeExtract with a non-image, non-document input validates to an item located on its pipe and file that says which input to redeclare. The builder's validate_ops.validate_pipe and validate_all now translate their library loads and dry runs as the validate commands do, keeping the entry-pipe lookup and the library teardown outside the translation.

Closes L-260926-537faf

🤖 Generated with Claude Code

---

Summary by cubic

The pipe factories' refusal classes declared no error domain, so the verdict translation let them escape every validator raw. They're now input-domained and caller-facing: a PipeExtract whose input is neither an image nor a document validates to a pipe_validation item on its pipe and file that says which input to redeclare. The builder's validate_ops.validate_pipe and validate_all now translate their library loads and dry runs as the validate commands do, while the entry-pipe lookup and library teardown stay outside the translation. The agent CLI's validate_all_core also keeps the file on an item raised while its libraries load, where it used to lose it because the refusal was translated only after the failed library was torn down. PipeLLMFactoryError no longer echoes a failing prompt: a pipe may inherit its domain's system prompt, which a host's library can declare, so a malformed host prompt would have reached an untrusted caller verbatim under STRICT disclosure where it used to be a redacted 500.

Refactors

• PipeLLMFactoryError refusals now catch the template validation error the factory actually raises, report only the line of that prompt it fails at (Jinja2's own diagnosis names the offending token), and a refusal of a domain-inherited system prompt names that domain.

^{Written for commit 1fc308b. Summary will update on new commits.}

[lchoquel]

Review round 3, profile 4, bar necessity. Reviewers: cubic, Codex review and adversarial, code-review (medium). Every fixed finding was confirmed by a verifier first.

Fixed in b6e4e14: PipeLLMFactoryError, now caller-facing, quoted the prompt that failed to parse, and a pipe inheriting its domain's system prompt could carry a host library's prompt to a caller under STRICT disclosure; the factory now gives Jinja2's diagnosis and line only. Also corrected the stale reason validate_ops.validate_all gave for returning no pending_signatures. Before the pass, 4719866 made the agent validate --all keep the file on a load refusal's item.

Deferred, handed to the sprint for filing: host-library load refusals answer as input 422s whatever their owner (already true of model-choice errors, now of factory refusals too); the bare pipelex validate --all still loses an item's file on a load refusal (verified, predates this branch). Unverified: an inherited system-prompt refusal is located on the pipe's file rather than the one declaring the prompt, and the validate-all lifecycle is spelled out in three places.

round 4 — bar necessity — profile 4 (derived) — the round-3 pass fixed a critical, so this pass is held to necessity rather than the ladder's freeze

[lchoquel]

Superseded by #1276, which carries this branch's commits and landed on dev as a7924f6.