todo2code

Ticket 073: Define analysis budget DSL

• ID: ticket-073
• Owner: unresolved:human
• Status: DONE
• Workflow state: DONE
• Created: 2026-08-12

Goal and scope

Define a strict, canonical t2c.analysis-policy/v1 DSL that lets todo2code bound semantic-analysis cost without replacing semantic reasoning with a deterministic approximation. Deterministic signals select the necessary LLM stages and evidence slices; each selected stage retains explicit request, token and elapsed-time ceilings, exact-evidence cache identity and fail-closed provider policy. Every request ceiling includes retries and response-repair calls.

This ticket supplies the dependency-free core contract, canonical parser/renderer, deterministic stage selection and budget calculation. Runtime, CLI and provider wiring remain a separate workstream so the contract can be reviewed before it controls live calls.

Acceptance criteria

• AC-01: A human approves this bounded contract before source changes.
• AC-02: One typed policy renders and parses byte-for-byte in canonical t2c.analysis-policy/v1 form.
• AC-03: Unknown vocabulary, duplicate stages, invalid trigger topology and stage budgets exceeding global ceilings fail closed.
• AC-04: Deterministic trigger selection includes mandatory stages, selects only matching conditional stages and calculates exact maximum requests, tokens and elapsed time.
• AC-05: The contract requires LLM for selected semantic stages, allows no deterministic semantic fallback and makes provider/budget exhaustion explicit.
• AC-06: Focused, host, governance and Docker checks pass.

Participants

• Human participant: unresolved; no user-* file was created by this script.
• Agent participant: ai-codex.md

Approval gate

The plan and intent were committed independently as f2e68ae before any source change. The user’s instruction kontynuuj followed the concrete recommendation for this bounded cost-analysis DSL and authorizes the transition to IN_PROGRESS / EDIT on 2026-08-12. Protected exact-head review was subsequently obtained before publication.

Non-goals

• No CLI flag, environment variable, pipeline scheduling or provider call.
• No model selection, mutable provider pricing or credential change.
• No deterministic substitute for intent, refactoring or documentation reasoning.
• No public SDK/interface or src/core/types.ts change.

Verification and measured LLM evidence

• The focused contract suite passes 8/8 tests, including exact round-trip, trigger selection, cache binding and fail-closed request/token/time budgets.
• npm run verify passes 414 tests with 0 failures and one expected local JDK skip; the gold benchmark remains at 100% for every gated metric.
• Governance reports 0 errors and 0 warnings, dependency audit reports 0 vulnerabilities and Docker smoke passes.
• A real all-semantic-stage require-llm pipeline used 43 provider responses, 498,533 input tokens and 153,176 output tokens for 1.303208672 USD. Every selected semantic stage remained LLM-backed; no deterministic semantic fallback occurred.
• The repository-wide run was degraded because documentation was deliberately capped at 12 of 320 chunks, the local JDK was absent and one historical ticket-018 response violated its old schema. Its 920,279 ms Markdown stage demonstrated why elapsed-time ceilings are part of the policy.
• LLM synthesis found ambiguous action-less wording in this ticket preprompt. The requirements now use explicit Implement, Read, Require, Reduce and Prohibit actions. Broad historical suggestions without ticket-local evidence were not adopted.

Publication evidence

Protected PR #86 passed Koru, hosted verify, required JDK, Docker smoke and review-triggered governance. Independent validator-agent run 31580896098 reviewed exact head 5b61cb8b0cc2a0dd65abf9073f4b60243461a845 in four chunks; both the deterministic authority and openrouter/z-ai/glm-5.2 returned APPROVE with no findings. The PR was squash-merged as main@f0df52cae41c99151419554363f1e1393c300b10, and post-merge CI run 31581196362 passed verify, Docker smoke, governance and required Java.

This site is open source. Improve this page.