feat: atomically journal and deliver authorized native operation outcomes
Some checks failed
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / pytest-smoke (push) Failing after 4s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e747-8f27-7242-8df8-8bc44f88c929
This commit is contained in:
tegwick 2026-09-28 14:00:26 +02:00
parent 3c5cbfbafe
commit f0eff0ac92
13 changed files with 583 additions and 28 deletions

View file

@ -370,6 +370,25 @@ forces a fresh environment and refreshes the Hub package, and the rerun passed.
No credential was issued or retrieved and no consumer was switched. T04 remains
`progress`; host authentication/exchange, real caller admission and T05 remain open.
## Transaction outcome continuation — 2026-09-28
Native durable registry/message/progress/interaction mutations now atomically
store verified authorization attribution, their existing ledger row and an
immutable committed-outcome envelope. Added migration `0006_outcome_outbox`,
retry/backoff delivery with stable receiver idempotency keys, lifecycle-owned
dispatch and protected backlog readiness. Rollback creates no outcome; a lost
receipt can replay after restart. Downgrade refuses undelivered rows.
[Outcome contract and evidence scope](../docs/operation-outcome-audit.md).
Local SQLite tests and real Audit Core receiver-source checks cover this slice;
production PostgreSQL lock scheduling, grants, receiver admission and retention
remain open. Compatibility/embedded/external writes and background projection
refreshes are not claimed as covered. T03/T04 remain `progress`.
Validation: **366 tests passed**, including the opt-in Audit Core owner-source
suite. Inventory drift, distribution builds, isolated installed-wheel checks
and current migration/context/store wheel contents pass.
No database migration or deployment was applied to a live service.
## Acceptance checkpoints
- [x] Architecture/source/runtime review captured; new implementation owner is hub-core