| name | bop-bop-integrity |
| description | Use when agents must write to .bop bundles safely and consistently without corruption. |
Bop Jobcard Integrity
Mission
Guarantee .bop writes are deterministic, atomic, and schema-safe.
Hard Rules
- Treat the card directory as the state machine; never bypass state folder semantics.
- Never perform partial in-place writes to
meta.json.
- Never rename cards while in
running/.
- Prefer
bop commands over manual filesystem mutation.
- If manual write is unavoidable, follow the atomic protocol in
references/write_protocol.md.
- Set routing fields with
bop meta set <id> --workflow-mode <mode> --step-index <n>, not ad-hoc edits.
- Treat
pending/ as quarantine-enforced: invalid meta.json is moved to failed/ by dispatcher.
- Treat
links.md, Logs.webloc, and Session.webloc as system-managed card UI artifacts.
- On macOS, card/template copies must use APFS clone semantics (
ditto --clone or cp -c); do not add plain cp -R/-r fallback for card paths.
- Terminal-state card refresh/compression must use
ditto --hfsCompression (transparent, idempotent, no adapters/converters).
Stage-Scoped Write Surface
Use only stage-allowed files from references/allowed_writes.tsv.
Verification
bop inspect <id> must parse and show valid stage/meta.jq . <meta.json> must succeed.bop meta set ... is the canonical mutation path for workflow routing metadata.bop policy check --staged before merge/integration.
