data2dsl

Ticket 073: Build autonomous data-source discovery graph

• ID: ticket-073
• Owner: founder:tom-sapletta-com
• Status: DONE
• Workflow state: DONE
• Created: 2026-08-30

Goal and scope

Build a deterministic, read-only discovery graph from explicitly supplied configuration, registry and runtime-projection JSON documents. Expose bounded query access through the existing MCP skill without granting execution authority or reading implicit filesystem locations.

Acceptance criteria

• AC-01: The user’s autonomous execution request records SESSION_EXECUTION_AUTHORIZATION for this bounded scope.
• AC-02: Explicit JSON sources produce stable source, entity, schema and reference nodes with typed edges and canonical SHA-256 evidence.
• AC-03: Queries return a bounded connected subgraph through MCP.
• AC-04: Secret-value fields, oversized inputs and excessive graph depth fail closed or are redacted without exposing values.
• AC-05: Unit, repository and governance checks pass.

Validation evidence

• Full suite: 130 tests passed.
• New discovery module: Ruff passed; repository governance passed with zero errors and zero warnings; git diff --check passed.
• Read-only live canary: four explicit Subactor projections produced 1,560 nodes and 1,556 edges with graph SHA-256 1defb70a7564a7cac3d2d9ced798ec4cedadb8d7d40ad24f6169bbfa8f70a661.
• Queries resolved connected subgraphs for subactor/supervisor and maskservice/update without copying source values into the graph.
• Protected Validator run 33302343161 approved exact head 954fed20a32aa1a313330271d7a7f20de5763dfe and merged PR #60 as 3ecdb6670bc8553db3aa0d18ec02bac7d52b6b60.
• Integrated-main readback passed all 130 tests and repeated the four-source canary. The ticket index was deterministically regenerated and now includes ticket-073.

Participants

• Human participant: founder request in the active chat session; no user-* file was created or modified.
• Agent participant: ai-codex.md