coulomb/frontend-patterns
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add verified reference lookup and immutable consumer receipts

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1045b-933d-7aa1-b2db-104557487a79
This commit is contained in:
tegwick 2026-10-04 09:02:35 +02:00
parent c7f87b791b
commit bd85fcd179
15 changed files with 583 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

43
feedback/ConsumerIntegration.md
View file

@ -12,6 +12,49 @@ implementation authority. A deployment repair or documentation-only inspection o
this pattern repository is not an external frontend use. Unsupported contexts should
produce an explicit no-match decision, not a forced pattern selection.
## Local lookup and closeout helper
The local helper is available before hosted federation enrollment. From the reference
checkout, `python3 scripts/reference_consume.py --version 0.1 lookup --candidate CAND-0007`
returns a verified candidate with exact corpus/packaging citation pins. Force and
responsibility filters narrow research leads; they do not make the consumer decision.
Read the linked contracts and their alternatives. Preserve abstention and unsupported
needs; do not turn a matching force into a complete architecture claim.
The [decision-input example](decision-input.example.json) is explicitly synthetic,
with dummy provenance. It is a format example, never an eligible real use. For an
actual eligible task, the consumer creates its own JSON with stable use/event IDs,
explicit `kind`, full consumer commit, task/producer/run references, constraints,
considered/selected IDs, action/reason/artifact reference and an observable outcome
expectation. Unknown is the default outcome; reported helpfulness requires observation
and evidence locators and still awaits independent verification. No private code,
credentials or transcript belongs in the input.
From that consumer's checkout, using the path to the reference tool:
```bash
python3 /path/to/frontend-patterns/scripts/reference_consume.py --version 0.1 receipt \
--input decision.json --output research/pattern-use/use-01/event-01.json
```
The helper validates input and the frozen release, fills its version/packaging/digest
pins, exclusively writes a new source-relative file, and prints the exact path/SHA-256
entry for the consumer's schema-v1 receipt index. JSON is valid YAML for activity-core's
existing collector. Without `--output`, it prints the event for inspection. It never
overwrites a receipt, enrolls a source or supplies collector-verified origin.
A later outcome uses the same `use_id`, a new `event_id` and the preceding file's
`previous_event_sha256`. Retain the earlier event/index entry; chronology and predecessor
integrity are checked by the existing collector. The helper preserves a supplied
digest but does not independently verify the event chain or outcome artifact.
Consumer owners still integrate invocation into their normal closeout hook, commit the
receipt/index and arrange authorized enrollment through WP-0008. This preparation does
not establish hosted discovery, automatic hook installation, real value or the loop's
delayed-artifact refresh. `make consumption-test` includes disclosed synthetic cases
and an integration check against the sibling activity-core validator when its Python
environment is present; release acceptance requires that check to run without a skip.
## Short planning and closeout instruction
> For eligible frontend architecture work, query