Adapters are host-specific wrappers around the same selector/verifier flow. They must not implement independent compression logic.
- Accept only local file paths from the host agent/tool call.
- Run
selector.pywith:--cwd--adapter--model--report-out--verify-report- one or more user-selected paths
- Persist the full
context-selector/v1report. - Return the verified report to the host.
- Consumers may read
read_pathonly after verification succeeds.
- Never rewrite the source file.
- Never trust
output_pathdirectly; only trust verifiedread_path. - Preserve
output_sha256in evidence logs so sidecar tampering is auditable. - Never optimize remote URLs, chat text, clipboard content, or untrusted web content through this tool.
- Never claim token, cost, latency, or quality savings without persisting the report.
- Use host-specific naming only in the report
adapterfield.
Codex, Pi, Hermes/MCP, OpenClaw, and generic shells should remain thin adapters over this same selector/evidence contract.