Record verified security source integrations and remaining contract seams
This commit is contained in:
codex
parent
8b4c3cd4c7
commit
cd940b87d4
10 changed files with 369 additions and 16 deletions
|
|
@ -0,0 +1,33 @@
|
|||
{
|
||||
"repo": "access-engine",
|
||||
"base_commit": "919ce25a377300ef9749c85e41b608467bed02ad",
|
||||
"patch_sha256": "sha256:8880eb0f693f6793cfa6b3ea6f2466dbe67313e521a7f79c30180ca4880609b9",
|
||||
"integrated_at": "2026-10-16T14:25:18.841396+00:00",
|
||||
"files_sha256": {
|
||||
"tenancy.yaml": "sha256:7ee9ef8357c9af7351d9aa0805e8d7770f0640ed6311a4a261595e1efc972571",
|
||||
"values/secrets-engine.yaml": "sha256:567189d14467815a77df5ad7e0f22e7184c8e5bb9f814cbc0fbb99102b3cfd55",
|
||||
"charts/flex-auth/templates/deployment.yaml": "sha256:8d08371c1b944e5a4ab494e42874346a29d2ffdcc5331a65f417f2f8a04bbaf0",
|
||||
".forgejo/workflows/image.yaml": "sha256:802c92ffe11a8a7d21014ddee3fed26c0089bcc936eade625cc8b3304529ba4c",
|
||||
"tools/verify_native_signer_receipt.py": "sha256:33d3c50aba51b85cf85d2e234268e903004894299efc9b3745e0980c55578280",
|
||||
"tests/test_native_signer_receipt.py": "sha256:4e1efed7cbf4934557ef5aee3b12197da0eed1fb924cdad5e0296179961b546e",
|
||||
"docs/native-signer-workload.json": "sha256:3776ab61187aa6d2c80144334b564440a7f3a8f5131e85a5372af059ac0bdd83",
|
||||
"examples/secrets-engine/signer-receipt-admission.template.json": "sha256:3c261344a7003839d34d6bb166a78514fbe16414851deee28cf19ce78f819199",
|
||||
"workplans/FLEX-WP-0024-decision-envelope-authenticity.md": "sha256:0b3eddb0b5a773d1edbd525458c693bf88ba6f490e7a814e1da4d01c92a2dc35",
|
||||
"cmd/access-engine/main.go": "sha256:015a839e2365e4223e7d31aafb5088db5ac16baefdaa30ab75794a80645168c8",
|
||||
"cmd/access-engine/service_pilot_http_test.go": "sha256:433be61bba5471c3e8949846816d7565552f6cb326c92830f63886500ecd0edd",
|
||||
"internal/decision/engine.go": "sha256:b9273aa1daea1d3b5ccfb68bcf166d6bc251ed52c5eebe4f3e057213d1105f9c",
|
||||
"internal/taskexecution/service_input.go": "sha256:1a2ff3006a0410111f7e9d9d73b35c303f5f9f75a37c612e395b95a6baa1b5cf",
|
||||
"internal/taskexecution/service_input_test.go": "sha256:801fdcf712414da6bc870b8f052168ecb619343483f7d76a150ecfd81f463569",
|
||||
"internal/taskexecution/identity.go": "sha256:b5234f206f6984f9f7d12983250fe17be63d27a31e50de165abf5afc05aaacb2",
|
||||
"docs/service-task-execution-contract.md": "sha256:ac1a1dab44b2a6076ac62baface56078fac03f9c50450b592f439a8599248952"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"preserved_registrar_ids": {
|
||||
"FLEX-WP-0024-T05": "cfe4d275-9f02-5090-8391-06eea59d45c5",
|
||||
"FLEX-WP-0024-T06": "7f785b52-bf62-5884-8d34-670d70bc9023"
|
||||
},
|
||||
"commit": "4f6946bbb338f61e4ee19efe32dcfe2757c22dcc"
|
||||
}
|
||||
|
|
@ -0,0 +1,22 @@
|
|||
{
|
||||
"repo": "access-engine",
|
||||
"base_commit": "ec21518e25df2a58444f19ff3413ce0b83383d3c",
|
||||
"patch_sha256": "sha256:cee7af8e1e8ee8b63f9d5bc5927a6d89ae6c1169b3ec23f59e0958664fc91dca",
|
||||
"integrated_at": "2026-10-16T08:42:01.458760+00:00",
|
||||
"files_sha256": {
|
||||
"tenancy.yaml": "sha256:7ee9ef8357c9af7351d9aa0805e8d7770f0640ed6311a4a261595e1efc972571",
|
||||
"values/secrets-engine.yaml": "sha256:567189d14467815a77df5ad7e0f22e7184c8e5bb9f814cbc0fbb99102b3cfd55",
|
||||
"charts/flex-auth/templates/deployment.yaml": "sha256:8d08371c1b944e5a4ab494e42874346a29d2ffdcc5331a65f417f2f8a04bbaf0",
|
||||
".forgejo/workflows/image.yaml": "sha256:802c92ffe11a8a7d21014ddee3fed26c0089bcc936eade625cc8b3304529ba4c",
|
||||
"tools/verify_native_signer_receipt.py": "sha256:33d3c50aba51b85cf85d2e234268e903004894299efc9b3745e0980c55578280",
|
||||
"tests/test_native_signer_receipt.py": "sha256:4e1efed7cbf4934557ef5aee3b12197da0eed1fb924cdad5e0296179961b546e",
|
||||
"docs/native-signer-workload.json": "sha256:3776ab61187aa6d2c80144334b564440a7f3a8f5131e85a5372af059ac0bdd83",
|
||||
"examples/secrets-engine/signer-receipt-admission.template.json": "sha256:3c261344a7003839d34d6bb166a78514fbe16414851deee28cf19ce78f819199",
|
||||
"workplans/FLEX-WP-0024-decision-envelope-authenticity.md": "sha256:9fcfcf25049a6c6780f1468d7f831a479a52669f8cf13a50f1e7d464a8c1beb9"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "919ce25a377300ef9749c85e41b608467bed02ad"
|
||||
}
|
||||
|
|
@ -0,0 +1,28 @@
|
|||
{
|
||||
"repo": "approval-engine",
|
||||
"base_commit": "eece796b8bbee19551f6aa07ad389cbf83cabcdb",
|
||||
"patch_sha256": "sha256:096de94db8afff6b429215d951a98b94cd501cc6a7e1c374420e546169df2179",
|
||||
"integrated_at": "2026-10-16T14:25:18.828909+00:00",
|
||||
"files_sha256": {
|
||||
"adapters/go/approvalfact/README.md": "sha256:5d936b7f3de87bbf4e946f0dc44823d2f69b62b4122b55b9064791b7a19fd4f5",
|
||||
"adapters/go/approvalfact/canonical.go": "sha256:d48588fb26e9037c8e83421586b8a818f4c0a52afb874f3fadf7229fc971c282",
|
||||
"adapters/go/approvalfact/claim.go": "sha256:007a2494f79c47c104635402407e9e68f17d8599d23e0f2c8ebf6cb1b47e3621",
|
||||
"adapters/go/approvalfact/claim_test.go": "sha256:99611a15a3eb5ed7b2a7a896e7e9784ee2c48ee41be30934fdd44164948dd05c",
|
||||
"adapters/go/approvalfact/go.mod": "sha256:bb09c53ffea926fbfba6e580ed3bd71ca358575401717389b3c7c49c0c674b43",
|
||||
"adapters/go/approvalfact/oracle_test.go": "sha256:205cbee15c035bf0777423b6241a15a164ba6f8428f650bb989e4a551640b2e9",
|
||||
"adapters/go/approvalfact/testdata/owner-vectors.json": "sha256:dfb0a8810cd91847d7af6a7af6a51607a67a66fad7b86fc57365308c36bd9323",
|
||||
"docs/access-claim-fact-reader.md": "sha256:e2f3733a8fc4bbb1db054ffe314384f9f19e0c8dc5315b9d1f4aad06fad47489",
|
||||
"docs/reviews/2026-10-16-access-claim-fact-reader-owner-review.json": "sha256:f04e6f364ab24fe322a2e325f86a3eb3f88e2c76692c9ad2a4dd7d246a2e570a",
|
||||
"examples/access-claim-reader-vectors.json": "sha256:dfb0a8810cd91847d7af6a7af6a51607a67a66fad7b86fc57365308c36bd9323",
|
||||
"scripts/check_go_approvalfact.py": "sha256:aec57329e92bdb35cbb6eb9d358e6677c1f3501e4a0d7f100ae4c2a01c6f92c8",
|
||||
"tests/test_access_claim_vectors.py": "sha256:71d594f09e0f22fb8849eb13b517dd1b435ca5330670f64df331d733d5376b3d",
|
||||
"workplans/APPROVAL-WP-0002-production-readiness-and-consumer-adoption.md": "sha256:9e0d1292516c4fc25c4521ab1dda3b3aecc1559260eb630a4bf1af5f0f10a4f5",
|
||||
"workplans/APPROVAL-WP-0005-access-claim-fact-contract.md": "sha256:43144c350cd42b2cfd807cdaa660392b488a3206eec1922e7c1dbab3750ad517"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"preserved_registrar_ids": {},
|
||||
"commit": "3485415b823faf4f3b682079195e186666b0ed2b"
|
||||
}
|
||||
|
|
@ -1,5 +1,5 @@
|
|||
{
|
||||
"checked_at": "2026-10-16T07:25:49.945069+00:00",
|
||||
"checked_at": "2026-10-16T14:52:11.591469+00:00",
|
||||
"review_scope": "independent source reconstruction, focused regression tests and canonical integrated hash verification; not foreign owner approval or native acceptance",
|
||||
"checks": {
|
||||
"platform": {
|
||||
|
|
@ -114,6 +114,76 @@
|
|||
"eb67b4b8b369b3fea4eda25c3d9b5ed5d906f98d"
|
||||
],
|
||||
"final_result": "normal commit scanner clean36blobs; root commit d170e6b"
|
||||
},
|
||||
"platform_wave5": {
|
||||
"result": "32 passed in 316.66s",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/platform-r5",
|
||||
"patch_sha256": "sha256:b4c44a452a1b62d0a2c114e2de60537666a139a387c478c663236b3aacdaadec",
|
||||
"scope": "exact sequential metadata baseline/readback and independent cleanup; no nativeCAS or production acceptance; positiveAccess pin ec21518e"
|
||||
},
|
||||
"access_native_preparation_r2": {
|
||||
"result": "9 receipt tests and2runtime-twin tests passed",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/access-native-r2",
|
||||
"retained_attempt": "Initial nine tests skipped because SECRETS_ENGINE_SOURCE_ROOT missing; corrected explicit source environment gave nine actual passes",
|
||||
"review": "R1 reproduced bool/int and int/float source-record equality acceptance; R2 exact JSON types and same verified/hashed bounded bytes"
|
||||
},
|
||||
"secrets_native_preparation": {
|
||||
"result": "independent runtime AST unchanged except docstrings; proposal/template JSON valid",
|
||||
"native_effect_coverage": "0/11 serving sites across10handlers",
|
||||
"bundle_scope": "canonical ff1 bundle rebuilt by owner; no installation/trust"
|
||||
},
|
||||
"approval_go_fact": {
|
||||
"result": "Go suite,2Python producer-vector tests and14114actualPython canonicalbyte/digest differential cases passed",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/approval-go-r1",
|
||||
"retained_attempt": "Differential initially refused Go cache write in sandbox; approved exact rerun passed",
|
||||
"scope": "pure data owner adapter, no origin/credential/runtime authority"
|
||||
},
|
||||
"access_b1_r2": {
|
||||
"result": "cmd/access-engine,internal/taskexecution,internal/decision Go suites passed; repaired nested duplicate targeted test passed",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/access-b1",
|
||||
"review": "R1 test had malformed JSON instead of valid nested duplicate; correctedR2. SignedDENY until trusted successor, all genericexecute-ccr paths refuse"
|
||||
},
|
||||
"access_trusted_successor_r1": {
|
||||
"result": "full Go suite passed independently",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/access-trusted-r1",
|
||||
"patch_sha256": "sha256:6079ed2ff40b131aa2c5efc8d33608ecb3475c8158f0486b44ec4469e9f222c1",
|
||||
"state": "not integrated; consumer successor/fullstack/native gates pending",
|
||||
"integration_blocker": "Discovered whole-stack timing contradiction:15sPDPallow versus backendTTL30..120 plus5sreserve. Owner temporal review in progress; no widenedTTL/clockwaiver."
|
||||
},
|
||||
"platform_recovery_r2": {
|
||||
"state": "passed",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/platform-recovery-r2",
|
||||
"patch_sha256": "sha256:61f516c876fd612b83300e9913f0e80aad836a50014310797913c7c4505e3114",
|
||||
"retained_attempts": [
|
||||
"41passed12setuperrors: missing SECRETS_ENGINE_SOURCE_ROOT",
|
||||
"41passed12setuperrors: missing PYTHONPATH source dependency"
|
||||
],
|
||||
"review": "R1 broad404absence and damagedcapsule sourcecounterexamples requireR2 exactabsence and independently keyed authenticatedcapsule; no native grant",
|
||||
"result": "53 passed in169.59s with explicit Secrets source and PYTHONPATH",
|
||||
"published_commit": "b9eaa200601f1226d13efe82472dfec81c2999aa",
|
||||
"reconciliation": "applied exactcommit primary/railiance01;64records1taskupdated12historicalunresolvededges"
|
||||
},
|
||||
"wave5_publication": {
|
||||
"platform": "d870596 applied exactcommit primary/railiance01,64records updated,12historical unresolvededges retained",
|
||||
"secrets": "5a2099f synced16/16zero failures/errors",
|
||||
"access_prep": "919ce25 firstStateHub querytimeout, retry38/38zero failures/errors; twoIDsassigned, generatedonlywriteback refused; stale C13 temporarily markedclosed after taskcreation and needs next reconciliation",
|
||||
"approval": "3485415 synced7/7zero failures/errors; generatedIDs preserved; dirty_workplans means no exactwholeprojectionrevision",
|
||||
"access_b1": "4f6946b retry synced38/38 and pushed; nofail/errors11warnings; correct activeWPstatus restored from authoritativefile"
|
||||
},
|
||||
"secrets_trusted_successor_r2": {
|
||||
"result": "176 independent focused tests passed in62.17s",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/secrets-trusted-r2",
|
||||
"patch_sha256": "sha256:65218b481f01cace1b879a3935b05af6b1c743960c64df69e43974fcc2c2002c",
|
||||
"state": "notintegrated; latest producer temporal and retainedregistry whole-stack correspondence under owner review"
|
||||
},
|
||||
"successor_cross_owner_seams": {
|
||||
"state": "unintegrated; owners actively resolving",
|
||||
"findings": [
|
||||
"retained registry normalized approval-free binding differs from original submitted approval binding; actual request refused before CAS/effect",
|
||||
"fractional decision not_before versus whole-second Approval consumed_at rejects immediate legitimate CAS",
|
||||
"operation ceiling, actual credential expiry and cleanup reserve require consistent owner contracts and absolute per-call enforcement"
|
||||
],
|
||||
"acceptance": "actual retained-registry producer/consumer/native path; no empty registry, blind replay, timestamp waiver or implicit trust"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
|
|
|||
|
|
@ -0,0 +1,19 @@
|
|||
{
|
||||
"repo": "secrets-engine",
|
||||
"base_commit": "ff1a13dabd44ba02ddd6bc26ad75568f6d2e6225",
|
||||
"patch_sha256": "sha256:316daaba4afa309b2f13acf995f781d9fae1ea84e12837a8b494e31b8489dd46",
|
||||
"integrated_at": "2026-10-16T08:42:01.472259+00:00",
|
||||
"files_sha256": {
|
||||
"docs/pdp-access-path.md": "sha256:16ef0e03a16270374be29d04a5e76c71d26185acf2013f81d06f237989a58a99",
|
||||
"docs/proposals/native-cli-admission/README.md": "sha256:606bfdedc5766f9af54c1660c12d03f3f1c3992558fdc01f12d02918ab8e126c",
|
||||
"docs/proposals/native-cli-admission/lifecycle-trust.template.json": "sha256:5f01b418cccef03326c424a1de649a4bde42811aa1e2041a6d0417c8d65a3f6a",
|
||||
"docs/proposals/native-cli-admission/proposal.json": "sha256:c6d86c80a0b61434e24ed058a9681626c650faf07ee58e88b9c9b1f9bc31d489",
|
||||
"src/secrets_engine/cli.py": "sha256:b7f74330732fd991f080adb6d1c4ef576c81884809103812612652cafe3ee4d0",
|
||||
"workplans/SECRETS-WP-0014-pdp-transport-and-responder-authentication.md": "sha256:53ef3532d5c208cc76fa4b538b94c632a4b677bcd39a113dfad3ad12a472b01c"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "5a2099f400fb0c97fed2d991832c0e31513bbdfb"
|
||||
}
|
||||
|
|
@ -0,0 +1,19 @@
|
|||
{
|
||||
"repo": "railiance-platform",
|
||||
"base_commit": "d870596cc72f74a5762cce2400802e2b351e903e",
|
||||
"patch_sha256": "sha256:61f516c876fd612b83300e9913f0e80aad836a50014310797913c7c4505e3114",
|
||||
"integrated_at": "2026-10-16T14:42:31.017031+00:00",
|
||||
"files_sha256": {
|
||||
"scripts/task_execution_recovery.py": "sha256:910f38919a8b6f57591366a2ef4da40d1ed7dfd7556c845a4b89496eca39ce1c",
|
||||
"scripts/task_execution_native_fixture.py": "sha256:1191bfe2cfd0dd967f51405a1fd453e2f24c929d558554110137c2cc99f71941",
|
||||
"scripts/task_execution_journal.py": "sha256:604cf285286a8a1be23d9bc0d8a547bd1195b7f80286778e1d4f30c711fd6a7e",
|
||||
"tests/test_task_execution_recovery.py": "sha256:1322469a116305a3a44bca7191eb52b76614d911b9eb7ce68864c52ce13c36e1",
|
||||
"docs/task-execution-native-fixture.md": "sha256:e299ff92fbd5282ca73066e41d5ef3753fad2e46ded2d8eda9935d20effaae46",
|
||||
"workplans/RPF-WP-0035-credential-lane-implementation.md": "sha256:312a3b4b9228897a1a256736eb0d4995b38274a47c6a52870d106aba16b532fd"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "b9eaa200601f1226d13efe82472dfec81c2999aa"
|
||||
}
|
||||
|
|
@ -0,0 +1,21 @@
|
|||
{
|
||||
"repo": "railiance-platform",
|
||||
"base_commit": "5f30ddd90c33e7eb1b9efa1093c7324d83210cf2",
|
||||
"patch_sha256": "sha256:b4c44a452a1b62d0a2c114e2de60537666a139a387c478c663236b3aacdaadec",
|
||||
"integrated_at": "2026-10-16T08:42:01.445796+00:00",
|
||||
"files_sha256": {
|
||||
"docs/task-execution-mediator-seam.md": "sha256:24b79b287ea6b585a8fabf316b6c6abd22f9d81440c70839911175d11206bf41",
|
||||
"docs/task-execution-native-fixture.md": "sha256:4501a512bc03a8d912b11a199a1385d75cfa077ba849dfcfe3eca53f31d1c8ea",
|
||||
"scripts/task_execution_mediator.py": "sha256:364180dfaead6f63452f6c8752609e98725372232ac6f280c6ade09f106d7da7",
|
||||
"scripts/task_execution_native_fixture.py": "sha256:4575d048f79b125b0f87c70b9a76558d8cce6e61cb66b5b0583934d1a62f2ef6",
|
||||
"tests/test_task_execution_mediator.py": "sha256:66b6b4eae930f857eaf28f129bdb8c2744142e633bba17d8e4743df24f7c525b",
|
||||
"tests/test_task_execution_native_fixture.py": "sha256:801dfeb601ac0f2f4ace8847e25333cb191218b86482a22eb6e90780ca9906e8",
|
||||
"tests/test_task_execution_readback.py": "sha256:3c3ea5b06e8779d396a9d9301cc0e79477f8bb382e15a5e66366dde941f80b33",
|
||||
"workplans/RPF-WP-0035-credential-lane-implementation.md": "sha256:e90d963f8699360a62907ccc32d2346a33db62945dfb10473217c6dce7b2d383"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "d870596cc72f74a5762cce2400802e2b351e903e"
|
||||
}
|
||||
|
|
@ -1,6 +1,6 @@
|
|||
{
|
||||
"schema": "custodian.netkingdom-source-wave.v1",
|
||||
"observed_at": "2026-10-16T07:23:11.107036+00:00",
|
||||
"observed_at": "2026-10-16T14:52:11.590806+00:00",
|
||||
"coordinator": "CUST-WP-0080-T06",
|
||||
"source_slices": [
|
||||
{
|
||||
|
|
@ -114,22 +114,76 @@
|
|||
"patch_sha256": "a2dfa6585a8b97fc6facec7b0815ffc3374869b8de51cc696d534c69643e3621",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "railiance-platform",
|
||||
"slice": "protected-execution-wave5",
|
||||
"commit": "d870596cc72f74a5762cce2400802e2b351e903e",
|
||||
"patch_sha256": "sha256:b4c44a452a1b62d0a2c114e2de60537666a139a387c478c663236b3aacdaadec",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "access-engine",
|
||||
"slice": "access-native-source",
|
||||
"commit": "919ce25a377300ef9749c85e41b608467bed02ad",
|
||||
"patch_sha256": "sha256:cee7af8e1e8ee8b63f9d5bc5927a6d89ae6c1169b3ec23f59e0958664fc91dca",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "secrets-engine",
|
||||
"slice": "decision-native-preparation",
|
||||
"commit": "5a2099f400fb0c97fed2d991832c0e31513bbdfb",
|
||||
"patch_sha256": "sha256:316daaba4afa309b2f13acf995f781d9fae1ea84e12837a8b494e31b8489dd46",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "approval-engine",
|
||||
"slice": "approval-go-fact",
|
||||
"commit": "3485415b823faf4f3b682079195e186666b0ed2b",
|
||||
"patch_sha256": "sha256:096de94db8afff6b429215d951a98b94cd501cc6a7e1c374420e546169df2179",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "access-engine",
|
||||
"slice": "access-native-source/b1",
|
||||
"commit": "4f6946bbb338f61e4ee19efe32dcfe2757c22dcc",
|
||||
"patch_sha256": "sha256:8880eb0f693f6793cfa6b3ea6f2466dbe67313e521a7f79c30180ca4880609b9",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "railiance-platform",
|
||||
"slice": "protected-execution-recovery",
|
||||
"commit": "b9eaa200601f1226d13efe82472dfec81c2999aa",
|
||||
"patch_sha256": "sha256:61f516c876fd612b83300e9913f0e80aad836a50014310797913c7c4505e3114",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
}
|
||||
],
|
||||
"integrity_note": "Canonical owner commits are the durable source. Raw patches and temporary reconstructions are workspace-local review artifacts; their hashes retain revision identity. No runtime admission follows from these commits.",
|
||||
"independent_review": "coordinator-source-review.json",
|
||||
"publication_caveats": [
|
||||
"Mason publication verified at57411f25; State Hub reported dirty_workplans and no whole-repo source revision because unrelated MASON-WP-0013 changes pre-existed.",
|
||||
"Access initial State Hub timeout preserved; retry succeeded38/38 but T05/T06 indexing needs second pass after reopened workplan.",
|
||||
"Historical (resolved by Access B1 reconciliation): Access initial State Hub timeout preserved; retry succeeded38/38 but T05/T06 indexing needs second pass after reopened workplan.",
|
||||
"Generated-only writeback commit refusals retained; no scanner bypass.",
|
||||
"Platform scanner ref race retried through normal owner sync after review.",
|
||||
"Access follow-up task-index repair timed out again; producer source remains published. Owner admission preparation also tracks qualified wait metadata."
|
||||
"Historical (resolved by Access B1 reconciliation): Access follow-up task-index repair timed out again; producer source remains published. Owner admission preparation also tracks qualified wait metadata."
|
||||
],
|
||||
"remaining_critical_path": [
|
||||
"Independently admit package, producer signing key/policy and consumer trust; actual service-pilot remains DENY",
|
||||
"Protected native acceptance: exact target baseline/readback, recovery/restart, current caller mapping and owner admission",
|
||||
"Actual isolated agent assignment and combined runner acceptance",
|
||||
"Native browser owner receipts and consumer acceptance",
|
||||
"All sixteen TSA gate closure audit remains open"
|
||||
]
|
||||
"Independently integrate trusted Access v2, strict Secrets successor and new Platform whole-stack proof; old positive fixture stays pinned to Access ec21518e",
|
||||
"Admit actual recovery custody/actor/audit and resolve lost issuance without accessor; authenticated process-loss cleanup source b9eaa20 is integrated and published",
|
||||
"Exact native producer image, signer custody/public trust, consumer bundle/config and caller admission",
|
||||
"Actual browser identity/case, agent isolation, runner isolation, source audit completeness, independent recovery and remaining sixteen TSA gates"
|
||||
],
|
||||
"canonical_receipt_verification": {
|
||||
"checked_at": "2026-10-16T14:52:11.590806+00:00",
|
||||
"scope": "six subsequent source slices",
|
||||
"all_commit_file_hashes_match": true,
|
||||
"all_commits_ancestor_of_origin_main": true,
|
||||
"native_acceptance": false
|
||||
}
|
||||
}
|
||||
|
|
|
|||
|
|
@ -49,10 +49,11 @@ support coordinator review before integration. A child reviews only its own
|
|||
owner role; independent cross-owner reviews require separate assignments.
|
||||
|
||||
The table records assignment history, not perpetual liveness. All eight owners
|
||||
delivered initial source packages. Secrets and Access are preparing native
|
||||
package/trust/caller admission. Platform is extending exact effect readback and
|
||||
recovery evidence in disposable OpenBao. Approval delivered the focused source
|
||||
closure and a separate exact-confirmation repair.
|
||||
delivered initial source packages. Secrets and Access are implementing the trusted
|
||||
service task path and preparing native package/trust/caller admission. Platform
|
||||
delivered exact effect readback and process-loss cleanup recovery in disposable
|
||||
OpenBao; the trusted successor adds absolute execution budgets. Approval delivered the shared claim adapter and is reviewing
|
||||
its authenticated consumer integration.
|
||||
Exact revisions and publication caveats are in the
|
||||
[source wave receipt](changes/netkingdom-target-2026-10-16/source-wave-status.json);
|
||||
independent tests and retained failures are in the
|
||||
|
|
@ -94,8 +95,8 @@ Secrets handoff now binds the signed decision, approval, exact grant and caller;
|
|||
Platform reserves durably, journals consumption and independently confirms it
|
||||
before effects. Actual Access and Approval servers passed this path with explicit
|
||||
synthetic identity/key/policy admission. Denied confirmation leaves uncertainty
|
||||
and permits no native effect. Six successful native calls still do not establish
|
||||
the complete expected-state readback; that remains the next Platform proof.
|
||||
and permits no native effect. Six successful native calls alone do not establish
|
||||
complete expected-state readback; the following source slice adds that proof.
|
||||
Both Secrets and Approval now compare the existing canonical native digest,
|
||||
refusing Python's boolean/integer equality ambiguity. The original counterexample
|
||||
and intermediate test failures remain recorded.
|
||||
|
|
@ -105,6 +106,63 @@ It grants no runtime credential scope or automatic native acceptance. Required
|
|||
owner checkout filesystem approval is distinct from authority to change live
|
||||
trust or credentials. No agent inherits another assignment's autopilot grant.
|
||||
|
||||
## Subsequent source integration, 16 October
|
||||
|
||||
Platform `d870596` binds canonical before/after metadata snapshots through the
|
||||
existing descriptor commitments, checks each baseline before its target write,
|
||||
and verifies complete readback before recording success. Independent native
|
||||
fixture/mediator/readback suites passed 32 tests. This is sequential observation:
|
||||
there is no atomic native CAS or concurrent-writer exclusion. Partial application
|
||||
remains unknown, and cleanup confirmation stays separate. Its whole-stack
|
||||
positive proof is pinned to Access `ec21518e`; later Access source deliberately
|
||||
removes the generic task path used by that old synthetic fixture.
|
||||
|
||||
Access `919ce25` fixes explicit caller-audience rendering and source revision
|
||||
pinning, records the existing workload identity, and adds an offline native
|
||||
receipt verifier using the installed Secrets verifier. Root review reproduced
|
||||
boolean/integer and integer/float source-record equality mistakes; R2 checks exact
|
||||
JSON types and hashes the same bounded bytes it verified. Nine receipt tests and
|
||||
two runtime-twin tests passed independently. Missing managed package declaration,
|
||||
signer custody and native image/trust admission remain explicit.
|
||||
|
||||
Secrets `5a2099f` records the exact native CLI preparation, verified canonical
|
||||
release bundle, configuration and trust inputs. The initial serving denominator
|
||||
is 11 authorization sites across 10 handlers; native effect acceptance is zero.
|
||||
Root verified unchanged runtime AST except documentation. The empty-key template
|
||||
is intentionally unusable until independently admitted owner inputs exist.
|
||||
|
||||
Approval `3485415` supplies a producer-owned Go fact adapter and authoritative
|
||||
claim vectors. Root passed its Go suite, two producer-vector tests and 14,114
|
||||
actual Python canonical-byte/digest comparisons. This is shared validation code,
|
||||
not another evaluator or credential transport. Access B1 R2 `4f6946b` connects the
|
||||
actual HTTP caller join, preserves the submitted context and withholds accidental
|
||||
ALLOW until the trusted source path exists. All three affected Go packages passed
|
||||
independently; a malformed nested-duplicate test was corrected and rerun. These
|
||||
two commits' publication/reconciliation state is recorded in the source receipt.
|
||||
|
||||
The trusted Access v2 successor, refreshed strict Secrets handoff and signer-custody
|
||||
proposal remain separate review packages. Access's actual Approval API fixture and signed ALLOW/refusal evidence
|
||||
are source proofs; the complete new consumer-to-Platform path and native issuer,
|
||||
key, workload, grant, recovery and independent audit acceptance remain necessary.
|
||||
Recovery review rejected broad 404 absence and unauthenticated stored accessor
|
||||
claims. Revised Platform `b9eaa20` passed 53 independent tests and adds authenticated
|
||||
private accessor custody and separately admitted cleanup after executor loss,
|
||||
without restoring business or consumption authority. Lost issuance before accessor
|
||||
persistence remains unresolved. Actual custody/key isolation and recovery grants
|
||||
remain unadmitted.
|
||||
|
||||
Whole-stack successor work exposed a temporal contradiction: the first v2 source
|
||||
allowed 15 seconds while native token lifetime requires at least 30 seconds plus
|
||||
cleanup reserve. Owner temporal revision now binds expiry to the exact operation
|
||||
deadline within declared hard limits and all original/fresh/caller authority;
|
||||
it is pending independent integration. Retained registry enrichment also needs
|
||||
exact approval-free digest correspondence. Empty-registry proof cannot close that
|
||||
gate. Immediate consumption also exposed a precision mismatch: Approval receipts
|
||||
use whole seconds while the new decision start has fractional precision. A
|
||||
positive proof that waits across that boundary does not establish immediate-path
|
||||
acceptance; the producer owners are resolving it without weakening verification.
|
||||
All sixteen target acceptance gates remain open.
|
||||
|
||||
## Dependency and residual handling
|
||||
|
||||
The current implementation demand selects necessary target dependencies for
|
||||
|
|
|
|||
|
|
@ -660,3 +660,32 @@ Platform checks and eight final mediator checks with the repaired Approval clien
|
|||
The actual local provider path uses synthetic admission; the real task policy
|
||||
still denies. Exact native expected-state readback/recovery and governed
|
||||
package/key/caller admission are next. All sixteen acceptance gates remain open.
|
||||
|
||||
2026-10-16 next source integration: Platform `d870596` adds exact committed
|
||||
metadata baseline/readback and separate cleanup confirmation (32 independent
|
||||
tests). Access `919ce25` adds exact native receipt checking and workload/audience
|
||||
preparation (nine receipt and two runtime-twin tests); Secrets `5a2099f` records
|
||||
native CLI/trust preparation and the 11-site/10-handler denominator, with zero
|
||||
native effect acceptance. Approval `3485415` provides the shared owner Go claim
|
||||
adapter (14,114 independent actual Python byte/digest comparisons); Access
|
||||
`4f6946b` adds the real service caller HTTP join and generic task bypass refusal.
|
||||
Exact commit/publication receipts retain State Hub timeouts and scanner results.
|
||||
Trusted v2 source, strict consumer successor, authenticated process-loss cleanup
|
||||
recovery and signer custody are the next reviewed packages. Old positive stack
|
||||
proof remains pinned to Access `ec21518e`; it does not validate the new task path.
|
||||
No native gate, live grant, deployment or credential admission is closed here.
|
||||
|
||||
Platform `b9eaa20` adds independently admitted process-loss cleanup recovery after
|
||||
53 passing root tests. Root review required exact absence semantics and capsule
|
||||
integrity; failures and revised proof remain retained. Lost token issuance without
|
||||
persisted accessor and actual custody/isolation remain open. Trusted successor
|
||||
source passed the full Access Go suite and 176 focused Secrets tests, but actual
|
||||
whole-stack work found incompatible time budgets and retained-registry digest
|
||||
correspondence. Owners are repairing those contracts before successor integration;
|
||||
no empty-registry shortcut or timing waiver establishes acceptance.
|
||||
|
||||
2026-10-16 coordinator checkpoint: all six subsequent canonical receipt file hashes
|
||||
match their owner commits and every commit is an ancestor of origin/main. The
|
||||
actual immediate-consumption path also exposes whole-second Approval receipt
|
||||
precision against fractional decision start times; owner resolution is required.
|
||||
Access, Secrets and Platform continue the retained-registry end-to-end repair.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue