Complete G8 fleet source-reference sweep with provenance exceptions

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a070b5-4994-7271-bd8b-7c3dbcedec4b
This commit is contained in:
tegwick 2026-09-06 02:42:55 +02:00
parent 4d61ff5e11
commit 8a1f1b9fb2
11 changed files with 1887 additions and 5 deletions

View file

@ -0,0 +1,33 @@
{
"repo_count": 133,
"fields_checked": [
"slug",
"local_path",
"host_paths",
"remote_url",
"mcp_server_name",
"mcp_server_url"
],
"obsolete_live_coordinates": [],
"git_repos_checked": 141,
"obsolete_git_remote_repos": [],
"nonadjacent_dispositions": {
"inter-hub": "State Hub archived; excluded from live source coverage",
"markitect-project": "State Hub archived; excluded from live source coverage",
"vergabe_teilnahme": "Resolved by local_path to scanned vergabe-teilnahme checkout"
},
"agent_configuration_scan": {
"roots": [
"~/.codex",
"~/.config",
"~/.claude"
],
"filename_patterns": [
"*config*",
"*mcp*",
"*settings*"
],
"live_matches": 0,
"historical_tool_result_matches": 2
}
}

View file

@ -0,0 +1,9 @@
{
"gate": "G8-source-scan",
"result": "pass",
"repositories_scanned": 141,
"files_scanned": 22414,
"reviewed_exception_files": 164,
"matching_lines": 307,
"errors": []
}

View file

@ -0,0 +1,104 @@
# G8 — Fleet source-reference sweep, 2026-09-06
CFED-WP-0001-T09 updates current source references across eight owning
repositories and the project ledger's validation command. Identity, actor,
access and shared-evidence references point to InfoTechCanon; repository and
commercial references point to CommerceCanon. No runtime contract, capability
identifier, maturity vector or concept assignment changes.
## Source coverage and preserved references
The [scan result](2026-09-06-reference-sweep.json) covers 141 adjacent Git
repositories and more than 22,000 files: tracked files (including ignored tracked
files), nonignored untracked files, hidden source/configuration files, and
symlink target paths (including dangling pointers). It
finds zero unreviewed legacy references. The
[exception ledger](../../ledger/reference-sweep.json) reviews 164 files / 307
matching lines and fingerprints each exact reference line. Historical research,
accepted ADR context, authored accounts, completed workplans, migration scope
and stable test/scenario identifiers remain deliberate provenance. Changing or
adding a matching line requires a fresh review; exceptions are not directory-wide
suppression rules. G8's own evidence files are excluded as scan metadata.
[State Hub coordinate evidence](2026-09-06-hub-coordinates.json) checks all 133
registered repo records, their source coordinates and all 141 local Git remotes.
No obsolete live coordinate remains. The old State Hub lookup is a protected
alias resolving the same UUID `8c82baea-bb40-435d-ac42-ec7a7c20dbb8` and current
CommerceCanon paths/remote. Two records without adjacent checkouts, inter-hub
and markitect-project, are archived; vergabe_teilnahme resolves to the scanned
vergabe-teilnahme path. This source scan does not certify unregistered external
repositories or stale copies of historical checkouts on other hosts.
Agent config/MCP/settings filename searches under ~/.codex, ~/.config and
~/.claude found no live match; two historical tool-result files were preserved.
Repository-owned MCP/config files are included in the source scan. Untracked ignored
third-party dependency trees and unrelated caches are not treated as source.
## Published changes
| Owner | Result | Published revision |
| --- | --- | --- |
| reuse-surface | Canonical source/roster, refreshed cache and composed index; live registration handover | `5501b8b` |
| repo-manager | CommerceCanon slug/Forge coordinate; existing repository UUID preserved | `6854ea10b278664baee7167efcceb2713bbab754` |
| binky-control | Current ecosystem and inventory references | `143b78e` |
| feature-control | Technical identity/evidence source references | `a555aaa` |
| kaizen-agentic | Identity/organization source references | `894d34c` |
| user-engine | Technical owner references in intent, mapping/card, docs and exporter docstring | `b9ae48b` |
| the-custodian | Current classification example and authoring override; obsolete human-review override retired | `4df570a` |
| commerce-canon | Current downstream owner links; original research proposal explicitly historical | `4a5b3d8fcbfd168ed1b3b326f3ecbedc6689b080` |
Each owning repo has a synchronized native ADHOC-2026-09-06 record, except
reuse-surface, which uses existing REUSE-WP-0021. Consistency also assigned a
missing UUID to Kaizen's existing ADHOC-2026-08-21 record without changing its
body or task identities. The project ledger command now uses the renamed local
source path while retaining the original pinned Git blob.
## Live federation proof
[Registration evidence](2026-09-06-reuse-registration.json) records the enabled
CommerceCanon registration and the old source retained disabled with a replacement
note. Its history is preserved without keeping it in the active composition.
[Composed live proof](2026-09-06-reuse-composed.json) verifies exactly the two
expected capability IDs, owner/source repo, canonical URLs and cache paths:
- capability.identity.subject-resolution — D3 / A0 / C1 / R0
- capability.identity.vocabulary-canonicalize — D4 / A0 / C2 / R0
The fresh live response has no target warning. The local federation composer
refreshed just CommerceCanon, then its source slice replaced the old slice in
the generated index; all 60 unrelated local capability rows were preserved.
The two obsolete local cache files were backed up and removed. Capability
ownership metadata here is registry stewardship, not a competing concept owner.
## Verification
```bash
python3 tools/validate_fleet_references.py --workspace ..
PYTHONDONTWRITEBYTECODE=1 python3 tools/test_fleet_references.py
python3 tools/validate_ownership.py --source-repo ../commerce-canon
python3 tools/validate_corpus.py --commerce-repo ../commerce-canon --info-tech-repo ../info-tech-canon
python3 docs/evidence/2026-09-05-counterparty-validate.py --commerce-repo ../commerce-canon --info-tech-repo ../info-tech-canon
```
The three sweep regression tests verify tracked ignored/hidden coverage,
rejection of new live references, and exact exception fingerprints. Existing
reuse-surface federation tests: 15 passed. Existing User Engine identity-alignment
tests: 4 passed, run with PYTHONPATH=src. Changed YAML/fenced examples/Python parse;
new relative links resolve; Custodian's example/authoring override match
CommerceCanon source classification. Existing ownership, counterparty and corpus
preservation proofs remain passing.
## Residuals and limits
G8 source-reference acceptance passes. Whole-fleet State Hub consistency is not
claimed. REUSE-WP-0021-T01 is done; T02 remains waiting on supported restoration
of three archived blank bindings to their existing legacy identities. The
missing-identifier tool rejects blank scalars and would derive different UUIDs;
no manual substitution or identity migration was performed. REUSE-WP-0021 remains
active and is the live owner of this repair.
Custodian's 13 historical consistency failures remain owned by CUST-IN-0017
from the prior gate. Other touched native records synchronized successfully.
CFED-WP-0001-T10 retains the final project residual/adoption review.
Acceptance decision: `48be4584-48df-4e81-8190-7a356e20f18b`.

View file

@ -0,0 +1,59 @@
{
"capabilities": [
{
"id": "capability.identity.subject-resolution",
"name": "Identity Subject Resolution",
"summary": "Resolve who or what is acting by mapping principals, accounts, actors, and identifiers to a stable subject model.",
"vector": "D3 / A0 / C1 / R0",
"domain": "helix_forge",
"status": "draft",
"owner": "commerce-canon",
"path": "registry/capabilities/capability.identity.subject-resolution.md",
"tags": [
"identity",
"subject",
"architecture"
],
"consumption_modes": [
"informational"
],
"source_repo": "commerce-canon",
"source_url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml",
"source_index": "/data/cache/commerce-canon.yaml"
},
{
"id": "capability.identity.vocabulary-canonicalize",
"name": "Identity Vocabulary Canonicalization",
"summary": "Define an implementation-neutral vocabulary for identity-related concepts across overlapping domains.",
"vector": "D4 / A0 / C2 / R0",
"domain": "helix_forge",
"status": "draft",
"owner": "commerce-canon",
"path": "registry/capabilities/capability.identity.vocabulary-canonicalize.md",
"tags": [
"identity",
"terminology",
"research"
],
"consumption_modes": [
"informational"
],
"source_repo": "commerce-canon",
"source_url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml",
"source_index": "/data/cache/commerce-canon.yaml"
}
],
"sources": [
{
"repo": "commerce-canon",
"count": 2,
"url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml",
"cache": "/data/cache/commerce-canon.yaml"
}
],
"composed_at": "2026-09-05T23:23:57+00:00",
"stale": false,
"target_warnings": [],
"total_capabilities": 65,
"other_warning_count": 0
}

View file

@ -0,0 +1,84 @@
{
"old_registration_before": {
"repo": "identity-canon",
"url": "https://forgejo.coulomb.social/coulomb/identity-canon/raw/branch/main/registry/indexes/capabilities.yaml",
"enabled": true,
"required": false,
"domain": "helix_forge",
"cache_ttl_seconds": 86400,
"auth_header": "Authorization",
"registered_at": "2026-06-15T23:35:02+00:00",
"updated_at": "2026-08-20T21:44:34+00:00"
},
"retired_registration": {
"repo": "identity-canon",
"url": "https://forgejo.coulomb.social/coulomb/identity-canon/raw/branch/main/registry/indexes/capabilities.yaml",
"enabled": false,
"required": false,
"domain": "helix_forge",
"cache_ttl_seconds": 86400,
"auth_header": "Authorization",
"registered_at": "2026-06-15T23:35:02+00:00",
"updated_at": "2026-09-05T23:22:01+00:00",
"description": "Retired source registration after repository rename; replaced by commerce-canon under CFED-WP-0001-T09. Kept for history."
},
"canonical_registration": {
"repo": "commerce-canon",
"url": "https://forgejo.coulomb.social/coulomb/commerce-canon/raw/branch/main/registry/indexes/capabilities.yaml",
"enabled": true,
"required": false,
"domain": "helix_forge",
"cache_ttl_seconds": 86400,
"auth_header": "Authorization",
"description": "Canonical source after CFED-WP-0001-T03/T09; stable capability.identity identifiers retained.",
"registered_at": "2026-09-05T23:22:01+00:00",
"updated_at": "2026-09-05T23:22:01+00:00"
},
"capability_ids": [
"capability.identity.subject-resolution",
"capability.identity.vocabulary-canonicalize"
],
"source_payload": {
"version": 1,
"updated": "2026-06-16",
"domain": "helix_forge",
"capabilities": [
{
"id": "capability.identity.subject-resolution",
"name": "Identity Subject Resolution",
"summary": "Resolve who or what is acting by mapping principals, accounts, actors, and identifiers to a stable subject model.",
"vector": "D3 / A0 / C1 / R0",
"domain": "helix_forge",
"status": "draft",
"owner": "commerce-canon",
"path": "registry/capabilities/capability.identity.subject-resolution.md",
"tags": [
"identity",
"subject",
"architecture"
],
"consumption_modes": [
"informational"
]
},
{
"id": "capability.identity.vocabulary-canonicalize",
"name": "Identity Vocabulary Canonicalization",
"summary": "Define an implementation-neutral vocabulary for identity-related concepts across overlapping domains.",
"vector": "D4 / A0 / C2 / R0",
"domain": "helix_forge",
"status": "draft",
"owner": "commerce-canon",
"path": "registry/capabilities/capability.identity.vocabulary-canonicalize.md",
"tags": [
"identity",
"terminology",
"research"
],
"consumption_modes": [
"informational"
]
}
]
}
}