90 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
tegwick	64d81e3169	Wave-2 right-sizing: email-connect CPU request 25m->5m (EMAIL-WP-0009) ... Request only; limits and 64Mi memory unchanged. Evidence: resource-control 2026-10-21 node budget (3d9b1bd). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 276069@bnt-lap001 Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c	2026-10-21 23:59:51 +02:00
tegwick	91f1e05ab0	chore: keep generated orientation brief local ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 8340@bnt-lap001 Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c	2026-10-21 12:31:16 +02:00
tegwick	2622efe282	chore(consistency): write back State Hub ids ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 8340@bnt-lap001 Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c	2026-10-21 12:30:05 +02:00
tegwick	46d3b74cdd	EMAIL-WP-0009: wave-2 resource right-sizing receiving workplan ... Receiving workplan for the 2026-10-21 node allocation review (RESOURCE-WP-0008-T03 / CUST-WP-0071-T03). Wave-2 apply is human-gated; no manifest changes. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 8340@bnt-lap001 Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c	2026-10-21 08:47:34 +02:00
tegwick	994db7d040	docs: retain provider setup delivery owner intake ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a15374-f59f-7a31-86d2-d23b5d2ed181	2026-10-19 13:16:55 +02:00
tegwick	f77e2333af	Retain independent ledger recovery custody and activate verified backups ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11fd9-caf6-7a63-b578-9daaaa134ff2	2026-10-10 13:39:49 +02:00
custodian-sync	6c7ba61a05	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-10: - update .custodian-brief.md for email-connect Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11fd9-caf6-7a63-b578-9daaaa134ff2	2026-10-10 13:38:21 +02:00
tegwick	6479273510	Refresh work-record index after scoped caller completion ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11fd9-caf6-7a63-b578-9daaaa134ff2	2026-10-09 20:24:56 +02:00
custodian-sync	8c4b9f23e3	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-09: - update .custodian-brief.md for email-connect Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11fd9-caf6-7a63-b578-9daaaa134ff2	2026-10-09 20:24:40 +02:00
tegwick	e9b9d1c708	Activate scoped user-engine mail and finish EMAIL-WP-0008 ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11fd9-caf6-7a63-b578-9daaaa134ff2	2026-10-09 20:23:43 +02:00
tegwick	42e8b2040b	Install backup capacity guard and bind scoped continuation ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11fd9-caf6-7a63-b578-9daaaa134ff2	2026-10-09 19:54:31 +02:00
tegwick	4ecbb0fb62	Clarify remaining Scaleway custody and operating acceptance ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11fd9-caf6-7a63-b578-9daaaa134ff2	2026-10-09 19:50:25 +02:00
tegwick	9a2cf213d1	Prepare immutable caller rollout and independent Scaleway recovery custody ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11fd9-caf6-7a63-b578-9daaaa134ff2	2026-10-09 19:49:24 +02:00
tegwick	3e18f11afe	Refresh generated workplan progress indexes ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11fd9-caf6-7a63-b578-9daaaa134ff2	2026-10-09 11:44:59 +02:00
tegwick	93b6ba2aae	Prepare glob-scoped callers and prove offsite ledger recovery ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11fd9-caf6-7a63-b578-9daaaa134ff2	2026-10-09 11:43:11 +02:00
tegwick	6fb206b359	Sync the work-record index for the ledger caller task. ... EMAIL-WP-0007-T03 is in progress after the reader delivery. Retention, escrow, the first capture and the caller mount stay open. Assistant: grok Assistant-Session: 01a11cdb-f9fe-7011-947c-936e72007e54	2026-10-09 00:11:38 +02:00
custodian-sync	057747e436	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-09: - update .custodian-brief.md for email-connect Assistant: grok Assistant-Session: 01a11cdb-f9fe-7011-947c-936e72007e54	2026-10-09 00:06:17 +02:00
tegwick	28bb13d7d6	Record email-connect backup pair delivery. ... The accepted reader wrote primary.env. Retention, escrow, capture and the timer remain open. Assistant: grok Assistant-Session: 01a11cdb-f9fe-7011-947c-936e72007e54	2026-10-09 00:05:35 +02:00
tegwick	a56bfd70de	Record the email-connect prefix on the backup bucket policy. ... Assistant: grok Assistant-Session: 01a11cdb-f9fe-7011-947c-936e72007e54	2026-10-08 23:42:25 +02:00
tegwick	4357603a00	Record that the backup publisher pairs are at OpenBao version 2. ... Assistant: grok Assistant-Session: 01a11cdb-f9fe-7011-947c-936e72007e54	2026-10-08 23:19:21 +02:00
tegwick	c79d53c8e0	Record the empty backup-primary slots waiting for founder key versions. ... Assistant: grok Assistant-Session: 01a11cdb-f9fe-7011-947c-936e72007e54	2026-10-08 23:13:17 +02:00
tegwick	a86d92e583	Record that the backup pair writer is installed and the keys are still absent. ... Assistant: grok Assistant-Session: 01a11cdb-f9fe-7011-947c-936e72007e54	2026-10-08 22:41:21 +02:00
tegwick	a60a729421	Draft the inactive user-engine caller policy. ... The draft names the live registration binding and quotas, and records that current invitation envelopes are still denied. Ledger tasks stay waiting on pair custody. Assistant: grok Assistant-Session: 01a11cdb-f9fe-7011-947c-936e72007e54	2026-10-08 21:28:07 +02:00
tegwick	48823c8182	Route remaining product acceptance to WP-0015 ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a119cf-56d0-7fa3-840b-eb8732e1db0b	2026-10-08 15:13:25 +02:00
tegwick	b530c78d3a	Index completed receiver deployment task ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a119cf-56d0-7fa3-840b-eb8732e1db0b	2026-10-08 14:12:18 +02:00
custodian-sync	d077331b18	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-08: - update .custodian-brief.md for email-connect Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a119cf-56d0-7fa3-840b-eb8732e1db0b	2026-10-08 14:11:08 +02:00
tegwick	3e8996fe94	Deploy caller-control receiver and align ledger recovery pins ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a119cf-56d0-7fa3-840b-eb8732e1db0b	2026-10-08 14:10:26 +02:00
tegwick	c9756b093f	Index scoped caller admission work in State Hub ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a119cf-56d0-7fa3-840b-eb8732e1db0b	2026-10-08 12:19:57 +02:00
custodian-sync	1bf4235684	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-08: - update .custodian-brief.md for email-connect Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a119cf-56d0-7fa3-840b-eb8732e1db0b	2026-10-08 12:19:14 +02:00
tegwick	f703bf637e	Isolate admitted transactional callers and retain retry policy ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a119cf-56d0-7fa3-840b-eb8732e1db0b	2026-10-08 12:17:14 +02:00
tegwick	5f80c6f307	Record managed ledger recovery tasks and redacted rehearsal proof ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11538-05ea-7b63-b3c7-a2df5f38898d	2026-10-08 00:10:12 +02:00
custodian-sync	01135d3bba	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-08: - update .custodian-brief.md for email-connect Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11538-05ea-7b63-b3c7-a2df5f38898d	2026-10-08 00:08:32 +02:00
tegwick	2ff24e991d	Prepare independent ledger backup and isolated no-send recovery ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11538-05ea-7b63-b3c7-a2df5f38898d	2026-10-08 00:06:59 +02:00
tegwick	c8c018496a	Refresh work-record index after verification release completion ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11538-05ea-7b63-b3c7-a2df5f38898d	2026-10-07 22:44:36 +02:00
custodian-sync	dea7f82881	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-07: - update .custodian-brief.md for email-connect Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11538-05ea-7b63-b3c7-a2df5f38898d	2026-10-07 22:43:10 +02:00
tegwick	bc303639f4	Record approved retry release, private recovery proof and completed workplan ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11538-05ea-7b63-b3c7-a2df5f38898d	2026-10-07 22:42:45 +02:00
custodian-sync	ca2d9ac1e4	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-07: - update .custodian-brief.md for email-connect Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11538-05ea-7b63-b3c7-a2df5f38898d	2026-10-07 19:40:30 +02:00
tegwick	554d5916a3	Index verification retry workplan and its managed task identifiers ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11538-05ea-7b63-b3c7-a2df5f38898d	2026-10-07 19:40:03 +02:00
custodian-sync	597c378c58	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-10-07: - update .custodian-brief.md for email-connect Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11538-05ea-7b63-b3c7-a2df5f38898d	2026-10-07 19:36:14 +02:00
tegwick	f69291659c	Pin reviewed verification candidate and record exact live activation gate ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11538-05ea-7b63-b3c7-a2df5f38898d	2026-10-07 19:35:39 +02:00
tegwick	7258505917	Reserve verification sends durably across retries and restart ... Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11538-05ea-7b63-b3c7-a2df5f38898d	2026-10-07 19:04:48 +02:00
tegwick	73702b7e1a	fix(security): prevent ESO copying source annotations (CUST-WP-0073) ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da	2026-09-28 15:56:50 +02:00
tegwick	bedb99193e	Record verified P05 rollout and service recovery acceptance ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-13 22:31:16 +02:00
tegwick	8984a84cfd	Expect uncertain delivery when timeout acceptance cannot be ruled out ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-13 22:13:06 +02:00
tegwick	0fcfddc342	Implement P05 checked services and safe selected delivery recovery ... Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c	2026-09-13 22:11:49 +02:00
codex	21eebffc56	fix(workplans): adopt ADR-007 derived identifiers for unregistered records ... These workplans exist only in the retired local hub. Their random pre-ADR-007 identifiers are refused by C-06 as stale references, so they cannot be registered. Deriving from the canonical record id takes no identity from anything: central does not hold them and the old ids die with the cache. Records central already holds were deliberately left untouched. Refs CUST-WP-0068-T06 Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-25 20:09:09 +02:00
codex	492f9a442f	docs(agents): repoint remote State Hub URL to the in-cluster address ... The remote row pointed at 127.0.0.1:18000, a reverse tunnel back to the workstation. On railiance01 the State Hub runs in the cluster on that same machine, so the request left the box and came back to reach a local service. Refs CUST-WP-0067-T07 Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-25 00:20:54 +02:00
tegwick	2eae684e77	chore(consistency): sync work records after EMAIL-WP-0005 [auto] ... Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-14 02:05:30 +02:00
tegwick	3497ca88bf	EMAIL-WP-0005 T05/T06: evidence realism and harness documentation ... Adds harness.deliver_raw() to inject crafted .eml fixtures through the harness, so they pick up the real Received: headers an MTA adds, and harness.inject_maildir() as the byte-exact offline counterpart. tests/test_evidence_realism.py asserts all ten recognized evidence classes after passing through a real MTA, proves MTA delivery does not change which evidence is produced, and covers Maildir injection offline. Documents what no local server can honestly produce -- provider-generated DSNs, real 4xx deferral and retry, ISP feedback loops, provider suppression behavior, MX acceptance as distinct from provider acceptance -- and names SES simulator addresses as the staging path. That tier stays out of the test run because it needs real credentials. Adds docs/test-harness-tutorial.md covering the three test tiers and the start/send/scan/assert/reset walkthrough, with an explicit assertable/not-assertable list so the evidence ceiling is stated where tests get written. Adds a Maildir section to the mailbox report tutorial. Completes EMAIL-WP-0005. Suite: 85 passed with the harness up, 64 passed + 21 skipped with it down. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-14 02:00:17 +02:00
tegwick	e9609b4024	EMAIL-WP-0005-T04: end-to-end send-and-scan tests, and two fixes they found ... Adds tests/test_integration_send_scan.py: 7 harness-gated cases covering delivery and Message-ID correlation, scanner ingestion without a delivery claim, idempotency, resend, suppression, rejected requests never reaching the provider, and verification mail carrying no authorization. Fixes the reply heuristic, which matched against headers as well as body. The Received: trace that every MTA-handled message carries matched its "received" keyword, so ordinary mail was classified human_reply with a success.reply_received assessment at medium confidence -- the exact overclaim this repo exists to prevent. Hand-written fixtures have no Received headers, so only real scanned mail exposed it. The heuristic now takes the body alone; DSN detection still sees headers, which it needs. Regression test is offline. Fixes the provider reference: SMTPProvider set no Message-ID, so send() fell back to abs(hash((recipient, subject))) -- randomized per process and colliding for equal recipient/subject. Outgoing mail now carries a proper RFC 5322 Message-ID, returned as the reference, which is what makes send-to-scan correlation testable. Suite: 72 passed with the harness up, 62 passed + 10 skipped with it down. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-14 01:54:56 +02:00