tegwick
7ceac4372d
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
67 lines
4.1 KiB
JSON
67 lines
4.1 KiB
JSON
{
|
|
"reviewer": "net-kingdom",
|
|
"formal_role": "native-consumer source owner only",
|
|
"disposition": "approved",
|
|
"qualification": "Exact paired source agreement only; no transport, private custody, issuer authentication, native authorization or task closure inferred.",
|
|
"proposal_id": "KEY-WP-0039-T02/private-producer-handoff-v4",
|
|
"manifest_sha256": "d6f641dc1e4aae7d36658d4199d89af14d2fd7a4bd4e526856eb340234f2d33e",
|
|
"compatible_consumer_manifest_sha256": "84542ddcff00932fc7ce22dcb2626be8942a3c006c5098a62fdd6b2478d0cd14",
|
|
"adapter_sha256": "faf63a3e9504dcbb46847a114275f83d508521e095410a47f92f02b86ba82b1b",
|
|
"launcher_sha256": "46e57504b3185cc13f1656901a0ca02cc3887527cb09566e270f57b76099ab9c",
|
|
"work_record": {
|
|
"task": "NK-WP-ADHOC-2026-10-11-T07",
|
|
"status": "done",
|
|
"actual_baseline_sha256": "6300d9d47a59a830dd32c4106441771f7227f094f351956502dbff11507b19bb",
|
|
"staged_refinement_sha256": "ea3cd23484aecb9d2b5fe72356f279cd08d323f8cfd53f2af2d070018fae5391",
|
|
"preserved_v9_anchor_sha256": "90d34dd5520f998c269529c53de4ebb065328d3f6d8ae79cbb215b19344b1cf7",
|
|
"completed_before_formal_review": true
|
|
},
|
|
"findings": [],
|
|
"corrected_findings": [
|
|
{
|
|
"refusal_sha256": "38abf660701194f85934a076a0c01d3047e6bfe790e02ba1b0e4616e356634e6",
|
|
"finding": "NET-PRODUCER-V3-F01",
|
|
"verification": "Actual CLI FIFO, symlink and oversized public contract now refuse promptly; O_NOFOLLOW/O_NONBLOCK regular single-link stable source reads run under original main preparation deadline. Slow acquisition and default launch validation have hard elapsed bounds; acquisition plus launch cannot renew deadline."
|
|
}
|
|
],
|
|
"coverage": {
|
|
"maker_tests_passed": 40,
|
|
"independent_tests_passed": 13,
|
|
"paired_handshake_tests_passed": 9,
|
|
"preparation_tests_passed": 4,
|
|
"exact_pins_matched": 23,
|
|
"paired_execution": "Local fake SSH substitutes transport only. Actual pinned node wrapper and actual child main/source/window/ready/bounded-input run; public health returns fixture digest and native execute records private-pair receipt boolean only. Kubernetes function raises if called. Unsigned synthetic tokens only.",
|
|
"cases": [
|
|
"actual wrapper/child readiness and complete private delivery",
|
|
"wrong nonce zero token-file loads",
|
|
"extra marker field zero token-file loads",
|
|
"health failure zero token-file loads",
|
|
"expired envelope zero transport or private loads",
|
|
"local source mismatch zero transport or private loads",
|
|
"child output suppressed with consumer outcome unknown",
|
|
"stalled marker zero private loads and local teardown",
|
|
"actual 4096 capacity partial pipe with sticky unknown after teardown",
|
|
"actual CLI FIFO/symlink/oversize refuse before missing private paths",
|
|
"default caller slow validation bounded no spawn/private load",
|
|
"actual main slow acquisition bounded no spawn/private load",
|
|
"actual main acquisition and launch share original deadline"
|
|
]
|
|
},
|
|
"preserved_history": [
|
|
"a1ed14e6b2db1ae77c3fd638fd7e47b5bd50c25eebba418e31aba89bb4b7f88e",
|
|
"38abf660701194f85934a076a0c01d3047e6bfe790e02ba1b0e4616e356634e6",
|
|
"8353eb8aae11be8ce874887d6a5ca10bf37c6fba73c3f85f0644a7546dd7d33f"
|
|
],
|
|
"source_scope_conditions": [
|
|
"Trusted owner launcher must launch admitted exact pinned child/wrapper/envelope over separately founder-admitted captured SSH peer/profile. Marker synchronizes readiness and does not authenticate authority or peer.",
|
|
"Exclusive same-UID private directory custody and no concurrent writer required. Stat/unlink is non-atomic; copied credentials may remain and no zeroization/remote cleanup is established.",
|
|
"Unsigned JWT decoded claims are shape checks only; issuer/client/agent admission remains owner/founder decision.",
|
|
"Unknown partial delivery remains sticky after local transport teardown. Native remote cleanup/acceptance requires separate owner evidence."
|
|
],
|
|
"native_executed": false,
|
|
"credentials_read": false,
|
|
"actual_ssh_executed": false,
|
|
"native_or_transport_admitted": false,
|
|
"founder_go_granted": false,
|
|
"task_closure_inferred": false
|
|
}
|