docs: record verified NetKingdom source restructuring and remaining native gates
This commit is contained in:
codex
parent
cb3e6bc465
commit
d170e6be76
36 changed files with 1190 additions and 9 deletions
|
|
@ -0,0 +1,25 @@
|
|||
{
|
||||
"repo": "access-engine",
|
||||
"base_commit": "62ac2b4e99dec2005c7c407fe633612578a7907d",
|
||||
"patch_sha256": "25e05b04f96cfe6f7d1abb11ab5d533b14a830c437136fc78aa381198ff8db37",
|
||||
"integrated_at": "2026-10-16T05:51:13.193074+00:00",
|
||||
"files_sha256": {
|
||||
"cmd/access-engine/main.go": "sha256:a69c6f30d9d778e7dd5356af68b67e21e28bcef29882d356228e3fef3be9b705",
|
||||
"cmd/access-engine/envelope_signing.go": "sha256:4d54d7ef49f3be0e94c05e34dc30dfaf3da84bc03899684a2657248e6e6dcb38",
|
||||
"cmd/access-engine/envelope_signing_test.go": "sha256:7fac1db98d078d84c6032833f2e3a7991a6755dee26d19e8d6f9ffdd891f0195",
|
||||
"internal/decision/engine.go": "sha256:e0b03f055eed735a63383d9e84c04e141563c9f12a827770a55527e1622d0f6d",
|
||||
"internal/decision/envelope_signing_test.go": "sha256:e80582a879c611ee7f2e0a40360dfae133404b55a270e9ee7794a44c821f08a2",
|
||||
"charts/access-engine/values.yaml": "sha256:e762114881e0e3e2c71795588352d0a87880ee08309ac390c65b0e3c4f6421be",
|
||||
"charts/access-engine/templates/deployment.yaml": "sha256:8b537f42c076c0235bf120106fd649189ddee436497ba700b542a1c17e163755",
|
||||
"charts/flex-auth/values.yaml": "sha256:05a11ad50d64299e1dbc8b0950528e7e40885f98f9157691b40a53b92aba3643",
|
||||
"charts/flex-auth/templates/deployment.yaml": "sha256:99991461acd090a0b80c31cd48af529a7dac40a707b4c527c3dd0beb9440ddcc",
|
||||
"docs/decision-envelope-signature.md": "sha256:2e8cfc4de3172d6c904002b0086406cddce5ce6031c277d125d578d2c24d825d",
|
||||
"workplans/FLEX-WP-0024-decision-envelope-authenticity.md": "sha256:0c0027c26857c45bb9f8e33354c9860cc5feb6faeb7abe8fe5975d5e0798d0c0"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "ec21518e25df2a58444f19ff3413ce0b83383d3c",
|
||||
"publication_verification": "commit is ancestor of current origin/main; normal owner sync succeeded"
|
||||
}
|
||||
|
|
@ -0,0 +1,34 @@
|
|||
{
|
||||
"repo": "glas-harness",
|
||||
"base_commit": "dc88f302044c7c2b41795958527e64be8a83e3ab",
|
||||
"patch_sha256": "83eeeb0017603aabae0ff49a23f96248f677f6c9f3e2c01b22f6d0416fca69c7",
|
||||
"integrated_at": "2026-10-16T05:43:11.509710+00:00",
|
||||
"files_sha256": {
|
||||
"src/glas_harness/contract.py": "sha256:db9a3540221229de9e4a6ec04216f7bea9e99136f26931418a994c37b6eb21df",
|
||||
"src/glas_harness/gateway.py": "sha256:5e998bfa53ade5dafbae799dc04b77031b6414e2af49797f45727d59d7397d42",
|
||||
"src/glas_harness/transport.py": "sha256:fa1686298b7403390396fa2786a2b6711609980a4a0fca5f2e38f250ae640b5c",
|
||||
"src/glas_harness/reins/rein_aharness.py": "sha256:2f725a4dbda311bf2626959dd439ab9d70e82021496fecf61d9319091873c7a7",
|
||||
"src/glas_harness/reins/rein_openweights.py": "sha256:e0f7261cafed7f4fe67d34bf27cf431dfeca18536c1cbd84626fa25017cd44ad",
|
||||
"tests/test_gateway.py": "sha256:8ecae8010b1c6182591b12b335af8f2f6e6e08366b646eb138a4ef08679b6634",
|
||||
"tests/test_transport.py": "sha256:50c86170d9dc9cecbef49886a733f6ca78b5a8be5d67701b521d98bd81dfaabe",
|
||||
"tests/test_rein_aharness.py": "sha256:5dc802830f902d4e4a502c981e7626a8282b6dbd4e9829659f9efedfcf1dd16e",
|
||||
"tests/test_rein_openweights.py": "sha256:c71c66976982e5375dd2513e2f392e8884305be1690856a37fa5a78075aee222",
|
||||
"tests/test_rein_session_isolation.py": "sha256:699b554f5889df5afee2b556e50602876f849ef7fde1dd612408a7acfc597dc1",
|
||||
"scripts/prove-credential-command-scope.py": "sha256:acc7ca6e29b3ace36c734ac3478f48ba901805e9a9acca98bd1ee8820f6fa1a8",
|
||||
"docs/harness-contract.md": "sha256:0bc3a43ff9a1b72c4668d6ca8e936163f865c2b302c920f7ede6c5e00d59a39d",
|
||||
"workplans/GLAS-WP-0012-first-local-profile-production-proof.md": "sha256:881ab0f5ba3bb43f5404c8f4cd23f9628e014992ba88fc13f541f0fa8b7b1eaa"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "7357115c8311e55ee3d495f5266f501a17ec3c89",
|
||||
"publication": {
|
||||
"tool": "statehub fix-consistency --repo glas-harness --no-writeback --json",
|
||||
"synced": "18/18",
|
||||
"fail": 0,
|
||||
"automation_error": 0,
|
||||
"warnings": 5
|
||||
},
|
||||
"publication_verification": "commit is ancestor of current origin/main; normal owner sync succeeded"
|
||||
}
|
||||
|
|
@ -0,0 +1,17 @@
|
|||
{
|
||||
"repo": "approval-engine",
|
||||
"base_commit": "8624fa20bbfb0c0329e5327b4dd8d8c05a312d7a",
|
||||
"patch_sha256": "a2dfa6585a8b97fc6facec7b0815ffc3374869b8de51cc696d534c69643e3621",
|
||||
"integrated_at": "2026-10-16T07:14:11.534923+00:00",
|
||||
"files_sha256": {
|
||||
"approval_engine/execution_confirmation.py": "sha256:afd4383d6785b12be9650d1cb3ef84ccbb1b57cd271d38d55e75875c46e85a79",
|
||||
"tests/test_execution_confirmation.py": "sha256:b3076bc1e4924d45f67f6faf95792cb2c94c22afc98093c76c9cab491755f41a",
|
||||
"workplans/ADHOC-2026-10-16.md": "sha256:f0eb03b091639bf9494250cb550a6691e8f0ad090c75eeecc9aed87f3bdb28d7"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "eece796b8bbee19551f6aa07ad389cbf83cabcdb",
|
||||
"publication_verification": "normal owner sync succeeded; commit verified ancestor of origin/main"
|
||||
}
|
||||
|
|
@ -0,0 +1,15 @@
|
|||
{
|
||||
"owner": "approval-engine",
|
||||
"source_revision": "477c683991fda3c01e2af98a18f5a8719ee9dbc9",
|
||||
"isolated_checkout": "/tmp/netkingdom-approval-confirmation-20261016",
|
||||
"patch_sha256": "a2dfa6585a8b97fc6facec7b0815ffc3374869b8de51cc696d534c69643e3621",
|
||||
"owner_dirty_baseline_sha256": "c3c46d4de7c17fb2dd328736a5a7a391f3372ce26201c5a89b49b8181b8b2feb",
|
||||
"files": {
|
||||
"approval_engine/execution_confirmation.py": "afd4383d6785b12be9650d1cb3ef84ccbb1b57cd271d38d55e75875c46e85a79",
|
||||
"tests/test_execution_confirmation.py": "b3076bc1e4924d45f67f6faf95792cb2c94c22afc98093c76c9cab491755f41a",
|
||||
"workplans/ADHOC-2026-10-16.md": "f0eb03b091639bf9494250cb550a6691e8f0ad090c75eeecc9aed87f3bdb28d7"
|
||||
},
|
||||
"canonical_source_written": false,
|
||||
"native_acceptance": false,
|
||||
"pending_integration": "coordinator independent review, canonical integration/publication/sync; Platform final client source pin"
|
||||
}
|
||||
|
|
@ -0,0 +1,28 @@
|
|||
{
|
||||
"counterexample_before_fix": {
|
||||
"command": "python3 -m pytest -q tests/test_execution_confirmation.py -k 'python_equal or native_digest_correspondence or nested_json_types'",
|
||||
"failed_expected_refusal": 7,
|
||||
"passed_valid_control": 1,
|
||||
"deselected": 24
|
||||
},
|
||||
"final_confirmation_suite": {
|
||||
"command": "python3 -m pytest -q tests/test_execution_confirmation.py",
|
||||
"passed": 36
|
||||
},
|
||||
"broader_intermediate_run": {
|
||||
"command": "python3 -m pytest -q tests/test_execution_confirmation.py tests/test_confirmation_transport.py tests/test_consume_provenance.py tests/test_pep.py",
|
||||
"passed": 101,
|
||||
"failed": 1,
|
||||
"failure": "tests/test_pep.py::test_live_http_unavailability_prevents_side_effect",
|
||||
"observed": "approval transport deadline exceeded",
|
||||
"expected_message": "unreachable",
|
||||
"note": "Existing 200ms subprocess transport timing assertion; failure remained fail-closed. Run collected before four additional recomputed-digest parameter cases were added."
|
||||
},
|
||||
"final_focused_run": {
|
||||
"command": "python3 -m pytest -q tests/test_pep.py::test_live_http_unavailability_prevents_side_effect tests/test_execution_confirmation.py tests/test_consume_provenance.py",
|
||||
"passed": 44,
|
||||
"failed": 0
|
||||
},
|
||||
"diff_check": "passed",
|
||||
"native_acceptance": false
|
||||
}
|
||||
|
|
@ -0,0 +1,20 @@
|
|||
{
|
||||
"repo": "approval-engine",
|
||||
"base_commit": "9491d1d3a7b6554fa04f8dc06f65d50e3d6ee4e1",
|
||||
"patch_sha256": "a6bf77fa8b6916f423db7832f475e38747b828dd632a88f9631131e28e3230ee",
|
||||
"integrated_at": "2026-10-16T05:51:13.172893+00:00",
|
||||
"files_sha256": {
|
||||
"approval_engine/api.py": "sha256:2e9ec7cbf8ad2845d8ed2a96d54ee80d71f26861002e302d82a91a234b1a7d6f",
|
||||
"approval_engine/store.py": "sha256:cb1b4c92dc3f40c517fde60e7d3a1facac1286c146d76b79c1ba44630d224b7a",
|
||||
"docs/outbox-contract.md": "sha256:4f77e047cbe770393136f7f24bd0378874e62f2e359a300e7467169347442c98",
|
||||
"tests/test_consume_provenance.py": "sha256:5468f0f6e4eab251e3c978c48239c12db56b5da6623a5c56651d28d982dae966",
|
||||
"workplans/APPROVAL-WP-0002-production-readiness-and-consumer-adoption.md": "sha256:cbe2a7109936f79cfcb74e1fc19b66d1c72340b6ef8756d95f77675662968d80",
|
||||
"workplans/APPROVAL-WP-0004-exact-consume-source-provenance.md": "sha256:82076f0be1ceaca31f999c3eccfcdf7c78f3482fe43d9caaa68ff0bab4c7dde7"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "477c683991fda3c01e2af98a18f5a8719ee9dbc9",
|
||||
"publication_verification": "commit is ancestor of current origin/main; normal owner sync succeeded"
|
||||
}
|
||||
|
|
@ -0,0 +1,29 @@
|
|||
{
|
||||
"owner": "approval-engine",
|
||||
"source_commit": "477c683991fda3c01e2af98a18f5a8719ee9dbc9",
|
||||
"remote_head_readback": "477c683991fda3c01e2af98a18f5a8719ee9dbc9",
|
||||
"patch": "source-closure.patch",
|
||||
"patch_sha256": "2434089f407edfafeb136613680cf81495995f18ea0f119fafdff9231543f1e6",
|
||||
"target": "workplans/APPROVAL-WP-0004-exact-consume-source-provenance.md",
|
||||
"current_working_file_sha256": "3b92463ae17013ffeeaf555cd1c9397d5d586f15d26f2e4d782ac25f0e6fc060",
|
||||
"result_sha256": "90a96e90641090b07986515310fb317d2769c2ed5a36121c3d545264054cc5ce",
|
||||
"generated_ids_preserved": [
|
||||
"688edc60-a179-5618-90f1-468aadc2af58",
|
||||
"b0b0a5a9-f7e7-508b-96d0-4b02457b16fc",
|
||||
"2b932ef8-e143-5bb7-856e-4cba4fb22c09"
|
||||
],
|
||||
"evidence": "../sync-session-61857.json",
|
||||
"sync_result": {
|
||||
"bindings": "5/5",
|
||||
"fail": 0,
|
||||
"automation_error": 0,
|
||||
"warn": 9,
|
||||
"source_pushed": true,
|
||||
"generated_only_writeback_commit_refused": true
|
||||
},
|
||||
"patch_check_canonical_exit": 0,
|
||||
"canonical_mutated": false,
|
||||
"native_acceptance": false,
|
||||
"residual_promotion": "none for this bounded source closure; existing WP0002 T01/T04/T05 remain live wait/residual",
|
||||
"secrets_unimplemented_handoff_revision": "c80a944105a00220cd3c1a007709e72d830dd08d"
|
||||
}
|
||||
|
|
@ -0,0 +1,26 @@
|
|||
{
|
||||
"repo": "net-kingdom",
|
||||
"base_commit": "994d11c869daf9624ac6da2adfdaeb86d8cdf537",
|
||||
"patch_sha256": "d32a7f51cbf3012bee3e4bb329f4259dea867eff1c59a2b01a65d72774488d05",
|
||||
"integrated_at": "2026-10-15T23:50:57.599452+00:00",
|
||||
"files_sha256": {
|
||||
"tools/security-case-types/README.md": "sha256:00fc8c411f6de8ca6bec73f900731c503bea805359c42fe47c5a187d75b61ab1",
|
||||
"tools/security-case-types/security_case_evidence.py": "sha256:3c5d021ca7f1fc41fba4b2ff42fcb036b916a2a09ffc5e147cc3db1874dd2401",
|
||||
"tools/security-case-types/security_case_validator.py": "sha256:cbb9ab532d328f78cf37aca57891400e2e65d63a8ab3c5fe7bd1a4ff21dee56f",
|
||||
"tools/security-case-types/tests/test_case_evidence.py": "sha256:8b89b3c12627f56d9e7a75ca2f580d803bf27aafa9289135d1f804b668d6fedd",
|
||||
"workplans/NK-WP-0048-security-case-types.md": "sha256:9ce1cb4d9a720d5744c2a7d9a0e806123b50b92ccc7fd1e80d2609198fb994f1"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "c31d21ba7d15624940e8858cd5f31ceb57d82081",
|
||||
"publication": {
|
||||
"tool": "statehub fix-consistency --repo net-kingdom --no-writeback --json",
|
||||
"synced_workplans": "63/63",
|
||||
"fail": 0,
|
||||
"automation_error": 0,
|
||||
"warnings": 24
|
||||
},
|
||||
"publication_verification": "commit is ancestor of current origin/main; normal owner sync succeeded"
|
||||
}
|
||||
|
|
@ -0,0 +1,119 @@
|
|||
{
|
||||
"checked_at": "2026-10-16T07:25:49.945069+00:00",
|
||||
"review_scope": "independent source reconstruction, focused regression tests and canonical integrated hash verification; not foreign owner approval or native acceptance",
|
||||
"checks": {
|
||||
"platform": {
|
||||
"result": "73 passed in 8.91s",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/platform-r1"
|
||||
},
|
||||
"browser": {
|
||||
"result": "103 passed in 5.47s",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/browser-r2",
|
||||
"earlier_attempt": "85 passed,16 failed in browser-r1: missing tracked public KeyCape sibling request and sibling declaration layout; corrected fixture paths for final revision, no production code workaround"
|
||||
},
|
||||
"warden_browser_r2": {
|
||||
"result": "102 passed in 12.91s",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/warden-r2",
|
||||
"patch_sha256": "1fb05b513c4db784f8691b5bc2790f5ca396071d4354615d2da7fc505c45684b"
|
||||
},
|
||||
"platform_wave2": {
|
||||
"result": "83 passed in 72.99s",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/platform-r2",
|
||||
"native_scope": "Disposable loopback OpenBao with synthetic admission; no production acceptance",
|
||||
"patch_sha256": "c419ac0f6dba3e36f15dc51a6a36fbd87fe7d255cce40c33c7f4589d80355580"
|
||||
},
|
||||
"glas_r1": {
|
||||
"result": "141 passed in 6.74s",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/glas-r1",
|
||||
"native_scope": "Actual bwrap synthetic host/env/subprocess denial, provider output redaction, subsequent command clean and workspace teardown; actual interactive assignment unchanged",
|
||||
"patch_sha256": "83eeeb0017603aabae0ff49a23f96248f677f6c9f3e2c01b22f6d0416fca69c7"
|
||||
},
|
||||
"secrets_r2": {
|
||||
"status": "passed",
|
||||
"earlier_attempt": "Archive reconstruction test helper Go build refused VCS status (exit128); rerun disables only Go VCS stamping for this source archive, no application guard change",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/secrets-r2",
|
||||
"result": "125 independent focused tests passed; producer/fixture hash checker passed",
|
||||
"test_count": 125
|
||||
},
|
||||
"approval_r1": {
|
||||
"result": "44 passed in 18.02s",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/approval-r1",
|
||||
"native_acceptance": false
|
||||
},
|
||||
"mason_r1": {
|
||||
"result": "50 passed in 15.96s",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/mason-r1",
|
||||
"native_acceptance": false
|
||||
},
|
||||
"secrets_commit_scan": {
|
||||
"result": "R2 commit refused by normal pinned scanner",
|
||||
"finding_metadata": [
|
||||
{
|
||||
"file": "src/secrets_engine/config.py",
|
||||
"rule": "generic-api-key",
|
||||
"line": 74
|
||||
},
|
||||
{
|
||||
"file": "tests/test_consume_binding_join.py",
|
||||
"rule": "generic-api-key",
|
||||
"line": 39
|
||||
}
|
||||
],
|
||||
"review": "Both findings are pre-existing public UUID identifiers, not credentials. R3 names them explicitly without changing values or scanner policy. Normal commit scan must pass."
|
||||
},
|
||||
"platform_wave3": {
|
||||
"result": "122 passed in 118.63s",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/platform-r3",
|
||||
"native_scope": "Disposable OpenBao only; no authoritative real grant",
|
||||
"preflight_history": [
|
||||
"Stopped before all writes when Platform HEAD advanced d79079bb to4021ca5e; unrelated policy-only delta verified and preserved",
|
||||
"Default sandbox denied owner checkout writes; retried through approved escalation and verified exact hashes"
|
||||
]
|
||||
},
|
||||
"access_r2": {
|
||||
"result": "actual serve CLI -> HTTP -> Secrets R2 verification and request/lifetime validation passed; response equals recorder; unsigned/tampered/group-write startup refused",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/access-r2",
|
||||
"receipt": "access-verifier-review/coordinator-local-proof-r2.json",
|
||||
"native_scope": "Disposable loopback only; caller-auth disabled synthetic token, no production admission"
|
||||
},
|
||||
"secrets_r4": {
|
||||
"result": "133 focused strict handoff/consume/signature/transport tests passed; 7 actual packaging tests passed with supplied locked public PyYAML wheel",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/secrets-r4",
|
||||
"scope": "combined packaging R1 and strict handoff R2 applied to c80a944; no runtime installation or trust admission"
|
||||
},
|
||||
"platform_wave4": {
|
||||
"result": "130 passed in195.03s",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/platform-r4",
|
||||
"strict_handoff_module_sha256": "b82695b88c201fdcbd8854a0d3c37ee2d2d3feee2c0663d784180fa070ac6677",
|
||||
"approval_client_revision": "8624fa20bbfb0c0329e5327b4dd8d8c05a312d7a",
|
||||
"native_scope": "actual local source providers and disposable OpenBao; synthetic identity/key/policy only; actual task policy DENY retained; no production acceptance"
|
||||
},
|
||||
"approval_confirmation": {
|
||||
"result": "36 passed in0.39s",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/approval-r2",
|
||||
"client_sha256": "afd4383d6785b12be9650d1cb3ef84ccbb1b57cd271d38d55e75875c46e85a79",
|
||||
"earlier_command": "Nonexistent test_consume.py named in collection; zero tests ran, corrected to actual confirmation module",
|
||||
"author_retained_failure": "101 passed/1 existing200ms unavailable-server message mismatch under concurrent test load; focused retry passed; fail-closed throughout"
|
||||
},
|
||||
"platform_wave4_final_approval_client": {
|
||||
"result": "8 passed in89.23s",
|
||||
"reconstruction": "/tmp/netkingdom-target-root-review/platform-r4",
|
||||
"approval_client_sha256": "afd4383d6785b12be9650d1cb3ef84ccbb1b57cd271d38d55e75875c46e85a79",
|
||||
"strict_handoff_module_sha256": "b82695b88c201fdcbd8854a0d3c37ee2d2d3feee2c0663d784180fa070ac6677",
|
||||
"scope": "final mediator/ordinal suite with independently reconstructed Approval confirmation repair and Secrets strict R2; actual local source servers and disposable OpenBao"
|
||||
},
|
||||
"coordinator_evidence_scan": {
|
||||
"initial_result": "normal commit refused five evidence blobs;8generic-api-key matches",
|
||||
"diagnosis": "every finding independently parsed as a64hex source-file SHA256 within files_sha256 mapping; filenames containing api/auth/credential triggered heuristic",
|
||||
"correction": "explicit sha256: digest notation in canonical integration receipt mappings; actual digest bytes unchanged; no scanner rule/allowlist changes",
|
||||
"original_blocked_blobs": [
|
||||
"5afec808e0a47edae8efd2369e191b605d438cc8",
|
||||
"7c686b53018206e2833e248e33dc1e08ccd60114",
|
||||
"b743960ab08d604a3dc5f4d273271a857bdde210",
|
||||
"dc0de7d302639760f919acfac83e3d0446c621f7",
|
||||
"eb67b4b8b369b3fea4eda25c3d9b5ed5d906f98d"
|
||||
],
|
||||
"final_result": "normal commit retry pending"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,17 @@
|
|||
{
|
||||
"repo": "secrets-engine",
|
||||
"base_commit": "6bd7129eac94131b4cf689e47cbdc9899418beb3",
|
||||
"patch_sha256": "b6c944fee615298a29dbd50ba0ad437ff76e6eab190f6168427e4ae5dbbfc59c",
|
||||
"integrated_at": "2026-10-16T05:51:13.198480+00:00",
|
||||
"files_sha256": {
|
||||
"src/secrets_engine/config.py": "sha256:228f548822620d538ad0c025eb68d88091be542819ed571be06c9e69c5e912c6",
|
||||
"tests/test_consume_binding_join.py": "sha256:eb5f033057caebc470a6fad4fcfa2b30fbc92ff41217ad7ace6f329dae7e9af3",
|
||||
"tests/test_execution_context.py": "sha256:7b405dd87a796b142cf0a4bbf48b9df074e99be1c985fe622386796e6ff491a1",
|
||||
"tests/test_human_control.py": "sha256:edc9b464fe0aff4b05a4ce5123ff715b6ae53898f0f001c28c3815aaa462b301"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "c80a944105a00220cd3c1a007709e72d830dd08d"
|
||||
}
|
||||
|
|
@ -0,0 +1,44 @@
|
|||
{
|
||||
"repo": "secrets-engine",
|
||||
"base_commit": "6bd7129eac94131b4cf689e47cbdc9899418beb3",
|
||||
"patch_sha256": "98c4300c42fe93759a55297fe6629f1d4aeed249c3625f7fd37c8ab523a08ca9",
|
||||
"integrated_at": "2026-10-16T05:43:11.564864+00:00",
|
||||
"files_sha256": {
|
||||
"SCOPE.md": "sha256:ed362ea45722592696ee60d547450ca0ce299727c2c36e2365446edfeaf7b9cd",
|
||||
"docs/pdp-access-path.md": "sha256:8f42622b6e38a391e03098a1bd91cfc98b8b81413beb15611fd7bbd48a41fc80",
|
||||
"scripts/check_pdp_producer_source.py": "sha256:08abbdcab4e7dbcc7fc48f597bb5c3fa7db9b986a229e57b2edd616fa4835a3e",
|
||||
"src/secrets_engine/approval_consume.py": "sha256:fa6d794570a789dae6d36721aefc0698694393084e25cc40f1d95a7b2883598f",
|
||||
"src/secrets_engine/config.py": "sha256:be74993577237d52523ead470fad167e0c5834df3b064a3d0fca95235cc6ddb1",
|
||||
"src/secrets_engine/decision_check.py": "sha256:36d1b628963705192ab0a35e8f1e38627a9496d97826ccd8fd98c645c69e8db0",
|
||||
"src/secrets_engine/decision_signature.py": "sha256:e58cddef9e3a1ade2f959cb23093e36ed635269a9da0be66a0093482ea35f705",
|
||||
"tests/fixtures/pdp-signature/decision_rotate_signed.json": "sha256:a7bc499f3583f53551cf163109a3c108188345100176092adc31eccefc222fd8",
|
||||
"tests/fixtures/pdp-signature/decision_rotate_signed_tampered.json": "sha256:7f2d2e9372a9617bd4b197033f09a5e33a08b202046de8109582da1dc90cb527",
|
||||
"tests/signature_support.py": "sha256:87f486a8d20a7e68df98a6ef2b536fa1b3b0666ea6435daf7424a807a882f6c5",
|
||||
"tests/test_approval_auth.py": "sha256:87fb2b6b916f3a7108b4a862f5e2301029f7e627a409d1c19bd43be3b9a51629",
|
||||
"tests/test_consume_binding_join.py": "sha256:c3fed0d17cd42acd23798eec37adc20287b4b285fd0e001eb75769e9acb05b78",
|
||||
"tests/test_decision_replay.py": "sha256:40a564216780559fd86d5542f761c16e4c6b9780c2f50c4bb5548e2a25804bea",
|
||||
"tests/test_decision_signature.py": "sha256:7d3c003829d4066149f5dd213fc323fbb6cae868cf03e410ccb7fc2d537ebd74",
|
||||
"tests/test_decision_transport.py": "sha256:3a45a15bce5a6d8ce96276a73515b26e3f576a18466a560c31a66d93eb850fe5",
|
||||
"tests/test_execution_context.py": "sha256:7a173c50a58bc8fe95decb936ba7c181b5c0279e51ecea937588d76c84cdc88a",
|
||||
"tests/test_human_control.py": "sha256:90c27818e17b78772d7699064c52759b3709ff4bf8fed21b1f63647905e46c84",
|
||||
"tests/test_integration_authorization.py": "sha256:d0b94804aff3b8de097c1b803dcf830ef07b1098015e75eef48d0cd6c3562263",
|
||||
"verifier/LICENSE.access-engine": "sha256:ff413f361a3b3bf44cf50f110fbcc4837064d57eefbcef89df2b43997c6262b6",
|
||||
"verifier/README.md": "sha256:db5f376fa66494b8e9b113ebcee3a0951a6ae20805233ecd4d78b0181a588d13",
|
||||
"verifier/go.mod": "sha256:7c595d6e4acc65b6033071557c699ebabfc46458910d6c4fb8d9272955208f34",
|
||||
"verifier/internal/sign/sign.go": "sha256:dad2d0c9f6d1fb2fd68e774949ccdf954382acd075191b5ddfea2c3cc2f4cb62",
|
||||
"verifier/main.go": "sha256:371ae40d4fa0a46d752419ebcef43f9935605910baba34b8856604afa24f4447",
|
||||
"verifier/pkg/api/canonical.go": "sha256:21e754617c2b82d673cef31b7075f8d177e4367782b63b20b37125587bf9e300",
|
||||
"verifier/pkg/api/caring.go": "sha256:1907156f0f889e7b9e9c14970cf7a86a20d00478a496efaf92c7231f27fec5e3",
|
||||
"verifier/pkg/api/doc.go": "sha256:0638f06ae47369899dd1e2dd5dd23a7200e7dbb3b505b04f4d3c78c0a074def9",
|
||||
"verifier/pkg/api/resource_manifest.go": "sha256:f0fa4080287d389ed48c2b1d6af96cc62e57ef72c902333f677f964420be133f",
|
||||
"verifier/producer-source.json": "sha256:de2f6912eaedb0a71d4b56b033684a75a6b9e3230cbdcbc709e2ea559aad333a",
|
||||
"verifier/testsupport/signer/main.go": "sha256:b618e155bf3e7d1f9214ad29c8b1d1795e394957fa64f77cb6105314ac70e718",
|
||||
"workplans/SECRETS-WP-0014-pdp-transport-and-responder-authentication.md": "sha256:0d06c43be48c6d5d86bd48f6a487d3eb04687c76b54fb45ca52e3eff2e09bd29"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "c80a944105a00220cd3c1a007709e72d830dd08d",
|
||||
"publication_verification": "commit is ancestor of current origin/main; normal owner sync succeeded"
|
||||
}
|
||||
|
|
@ -0,0 +1,19 @@
|
|||
{
|
||||
"repo": "secrets-engine",
|
||||
"base_commit": "c80a944105a00220cd3c1a007709e72d830dd08d",
|
||||
"patch_sha256": "1ef8b67e2352415ddbdadc86cd151a8b6caf76628350657ed3e674aefcf49945",
|
||||
"integrated_at": "2026-10-16T07:14:11.522104+00:00",
|
||||
"files_sha256": {
|
||||
"docs/task-execution-handoff.md": "sha256:d60949668c74ef6b317f44c16e22336baf76989b4a063fe10e9831c2f9c127a4",
|
||||
"src/secrets_engine/approval_consume.py": "sha256:bea80a503944b1b9796819cfea5f514c3184a724115130d16c3bc0c675f09a6b",
|
||||
"src/secrets_engine/task_execution_handoff.py": "sha256:b82695b88c201fdcbd8854a0d3c37ee2d2d3feee2c0663d784180fa070ac6677",
|
||||
"tests/test_task_execution_handoff.py": "sha256:0564f01607d5ef2eb7a74e1f624e47993dc932d22d58162b671ceff3d5616722",
|
||||
"workplans/SECRETS-WP-0013-task-scoped-openbao-execution.md": "sha256:c061dbc1c2c23dc3c79c3de78d1eed6fd57af05b078c8eb42b645813552a129b"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "ff1a13dabd44ba02ddd6bc26ad75568f6d2e6225",
|
||||
"publication_verification": "normal State Hub sync succeeded16/16, zero failures/errors,5warnings/1info;2source commits pushed; commit verified ancestor of origin/main"
|
||||
}
|
||||
|
|
@ -0,0 +1,79 @@
|
|||
{
|
||||
"schema": "netkingdom.source-integration.v1",
|
||||
"owner": "secrets-engine",
|
||||
"scope": "strict service-task authorization and consumption owner handoff; no native dispatch",
|
||||
"base_commit": "c80a944105a00220cd3c1a007709e72d830dd08d",
|
||||
"patch": "implementation-r2.patch",
|
||||
"patch_sha256": "1ef8b67e2352415ddbdadc86cd151a8b6caf76628350657ed3e674aefcf49945",
|
||||
"source_checkout": "/tmp/netkingdom-secrets-task-handoff",
|
||||
"files": {
|
||||
"docs/task-execution-handoff.md": "d60949668c74ef6b317f44c16e22336baf76989b4a063fe10e9831c2f9c127a4",
|
||||
"src/secrets_engine/approval_consume.py": "bea80a503944b1b9796819cfea5f514c3184a724115130d16c3bc0c675f09a6b",
|
||||
"src/secrets_engine/task_execution_handoff.py": "b82695b88c201fdcbd8854a0d3c37ee2d2d3feee2c0663d784180fa070ac6677",
|
||||
"tests/test_task_execution_handoff.py": "0564f01607d5ef2eb7a74e1f624e47993dc932d22d58162b671ceff3d5616722",
|
||||
"workplans/SECRETS-WP-0013-task-scoped-openbao-execution.md": "c061dbc1c2c23dc3c79c3de78d1eed6fd57af05b078c8eb42b645813552a129b"
|
||||
},
|
||||
"verification": {
|
||||
"focused": "247 passed in20.43s",
|
||||
"scanner": {
|
||||
"blocked_blob_ids": [],
|
||||
"scanned_blobs": 5,
|
||||
"scanner_sha256": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509",
|
||||
"scanner_version": "8.30.1",
|
||||
"scope": "changed-staged-blobs",
|
||||
"status": "clean"
|
||||
},
|
||||
"negative": "R1 accepted malformed True/int1 native target discrepancy; retained failing test now passes",
|
||||
"full": "737 passed,16 failed,1 skipped in56.98s",
|
||||
"baseline_comparison": "exact16 failure IDs match untouched canonical baseline and R1; zero new failures",
|
||||
"baseline_failure_ids": [
|
||||
"tests/test_exec_owner.py::test_actual_bound_child_gets_only_selected_secret_and_fixed_environment",
|
||||
"tests/test_exec_owner.py::test_binding_changed_after_approval_refuses_before_fetch",
|
||||
"tests/test_exec_owner.py::test_config_changed_during_fetch_does_not_launch",
|
||||
"tests/test_exec_owner_companions.py::test_companion_fetch_failure_starts_no_child",
|
||||
"tests/test_exec_owner_companions.py::test_companion_value_reaches_bound_child_and_is_redacted",
|
||||
"tests/test_exec_owner_companions.py::test_delivery_rechecks_companion_contract_before_any_read[consent]",
|
||||
"tests/test_exec_owner_companions.py::test_delivery_rechecks_companion_contract_before_any_read[env]",
|
||||
"tests/test_exec_owner_companions.py::test_delivery_rechecks_companion_contract_before_any_read[extra]",
|
||||
"tests/test_exec_owner_companions.py::test_delivery_rechecks_companion_contract_before_any_read[field]",
|
||||
"tests/test_exec_owner_companions.py::test_delivery_rechecks_companion_contract_before_any_read[lane]",
|
||||
"tests/test_exec_owner_companions.py::test_delivery_rechecks_companion_contract_before_any_read[missing]",
|
||||
"tests/test_exec_owner_companions.py::test_delivery_rechecks_companion_contract_before_any_read[stage]",
|
||||
"tests/test_exec_owner_companions.py::test_each_lane_is_gated_separately_before_backend",
|
||||
"tests/test_exec_owner_companions.py::test_unresolvable_companion_refuses_before_any_gate",
|
||||
"tests/test_human_control.py::test_real_exec_handler_rejects_undeclared_claim_before_consume_backend_child",
|
||||
"tests/test_integration_companions.py::test_two_lanes_reach_one_bound_owner"
|
||||
]
|
||||
},
|
||||
"interface": {
|
||||
"module": "secrets_engine.task_execution_handoff",
|
||||
"prepare": "authorize_task_execution(cfg, entry, *, execution_contract)",
|
||||
"owner_record": "authorization.as_owner_handoff()",
|
||||
"consume": "consume_task_execution(cfg, authorization)",
|
||||
"result_fields": [
|
||||
"approval_id",
|
||||
"request_digest",
|
||||
"decision_id",
|
||||
"consumed_at",
|
||||
"idempotent"
|
||||
]
|
||||
},
|
||||
"native_acceptance": false,
|
||||
"policy_or_mapping_admission": false,
|
||||
"production_credentials_or_trust_change": false,
|
||||
"canonical_owner_modified": false,
|
||||
"limitations": [
|
||||
"Source-only exact proposed service caller mapping; Access runtime deny gates unchanged",
|
||||
"Opaque prepared object is process-local; Platform durable journal and independent real Approval GET confirmation remain mandatory",
|
||||
"Actual Access-serve/Approval-provider whole-stack fixture is separately owned by Platform worker",
|
||||
"No service_actor_binding request propagation or new live trust/grant materialization"
|
||||
],
|
||||
"revision": "r2",
|
||||
"delta": "r1-to-r2.patch",
|
||||
"delta_sha256": "e1696fa6c7f6c7d2e32e368598d4dbbc4c067de4102bec1a588cfc4a7980238c",
|
||||
"reason": "Recompute canonical served native-five-field digest; reject boolean/integer enrichment ambiguity independently of provider internal consistency",
|
||||
"supersedes": {
|
||||
"patch": "implementation-r1.patch",
|
||||
"sha256": "90e37bf0e53abd361f210b5b4a56e7ab6c507f96aba5a2e4147c61c583ece810"
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,23 @@
|
|||
{
|
||||
"repo": "secrets-engine",
|
||||
"base_commit": "c80a944105a00220cd3c1a007709e72d830dd08d",
|
||||
"patch_sha256": "86179e607509d782f8a00012174c549997e0997ce4f84fc1078d245e4670a4ae",
|
||||
"integrated_at": "2026-10-16T07:14:11.514822+00:00",
|
||||
"files_sha256": {
|
||||
"README.md": "sha256:28c3654139a507e5ee4b14141c6c2dc37e8f0c57d648eac65407d7fb68e08f58",
|
||||
"docs/cli-release-bundle.md": "sha256:a3f39102322413fa35fac952fa8a1b38978aeb0bdbb4f1bbc9f3103ae5bbd139",
|
||||
"pyproject.toml": "sha256:b4c9ba6f801b8b91a7f9fc2dd0876c3e5a7ed33663af59705533081ae9feef1b",
|
||||
"scripts/build_release_bundle.py": "sha256:ad705625fa52ea53d6b76b2f55aacff7dd2536fb7d1c585a34aaa7ad79b0c8f2",
|
||||
"scripts/install_release_bundle.py": "sha256:80f778887b27dd0e6d0f0a2ae333e4b6fc9bbeaa91318d375ee4c67474076afb",
|
||||
"scripts/release_cli.py": "sha256:b45d22b8a0bc47162515121adb23297eca68325346b75090b018804a40089478",
|
||||
"tests/test_release_bundle.py": "sha256:a1535e68eece3647e5bb9449a2d07d7d06f115b2887a8e10934c3a6a9cab7a0c",
|
||||
"verifier/README.md": "sha256:46d8815a3473a3f9f5ea302c02f79bfdc35ef24ecf392b5e2966020fe2336482",
|
||||
"workplans/SECRETS-WP-0014-pdp-transport-and-responder-authentication.md": "sha256:318688ae1ce6f0946281a7c1cb38b87b4bfe808bfaee597bf9224a73bba2a956"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "ebca4f5adb63eee9e750dc6ff4a23f7a92490661",
|
||||
"publication_verification": "normal State Hub sync succeeded16/16, zero failures/errors,5warnings/1info;2source commits pushed; commit verified ancestor of origin/main"
|
||||
}
|
||||
|
|
@ -0,0 +1,50 @@
|
|||
{
|
||||
"schema": "netkingdom.source-integration.v1",
|
||||
"owner": "secrets-engine",
|
||||
"scope": "CLI wheel-plus-producer-verifier packaging only",
|
||||
"source_base": "c80a944105a00220cd3c1a007709e72d830dd08d",
|
||||
"source_checkout": "/tmp/netkingdom-secrets-decision-package",
|
||||
"patch": "implementation-r1.patch",
|
||||
"patch_sha256": "86179e607509d782f8a00012174c549997e0997ce4f84fc1078d245e4670a4ae",
|
||||
"paths": [
|
||||
"README.md",
|
||||
"docs/cli-release-bundle.md",
|
||||
"pyproject.toml",
|
||||
"scripts/build_release_bundle.py",
|
||||
"scripts/install_release_bundle.py",
|
||||
"scripts/release_cli.py",
|
||||
"tests/test_release_bundle.py",
|
||||
"verifier/README.md",
|
||||
"workplans/SECRETS-WP-0014-pdp-transport-and-responder-authentication.md"
|
||||
],
|
||||
"verification": {
|
||||
"packaging_tests": "7 passed in 4.04s",
|
||||
"reproducibility": "two complete bundles match byte for byte, including manifest/artifacts",
|
||||
"scanner": {
|
||||
"blocked_blob_ids": [],
|
||||
"scanned_blobs": 9,
|
||||
"scanner_sha256": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509",
|
||||
"scanner_version": "8.30.1",
|
||||
"scope": "changed-staged-blobs",
|
||||
"status": "clean"
|
||||
},
|
||||
"whitespace": "pass"
|
||||
},
|
||||
"proof_bundle": "/tmp/secrets-cli-package-proof",
|
||||
"proof_bundle_receipt": {
|
||||
"bundle": "/tmp/secrets-cli-package-proof",
|
||||
"helper_sha256": "a6e4eeb5361c61a2db5526ba5648ef5e48143c1a453e158d2f62991ba7ba3a33",
|
||||
"manifest_sha256": "aa8e54a3c6ee903e2a9048c4d186b08f37a006fe6f74926a9ea4a1e6bda8bc3d"
|
||||
},
|
||||
"observed_at": "2026-10-16T06:01:03.141631+00:00",
|
||||
"admission": "artifact SHA integrity is not independent source/package/key admission",
|
||||
"canonical_owner_modified": false,
|
||||
"production_installation": false,
|
||||
"credentials_or_trust_admission": false,
|
||||
"limitations": [
|
||||
"Linux host-architecture base CLI bundle; Python >=3.11; supplied compatible PyYAML wheel matching uv.lock",
|
||||
"Existing Hatchling backend downloads were permitted only during initial controlled build; final proof builds/install are offline",
|
||||
"Optional clock dependency is not in base bundle; configured clock trust still refuses without separately reviewed extra",
|
||||
"Owner must control/review manifest and install parent/prefix; no existing prefix is replaced"
|
||||
]
|
||||
}
|
||||
|
|
@ -0,0 +1,18 @@
|
|||
{
|
||||
"repo": "ops-mason",
|
||||
"base_commit": "e4761b843cd881a672cbb33a5b451de31a61d730",
|
||||
"patch_sha256": "cfe7648ed119d83faca228a2f21611c9388de1ba166598cbeb64f40e81620067",
|
||||
"integrated_at": "2026-10-16T05:51:13.179151+00:00",
|
||||
"files_sha256": {
|
||||
"src/ops_mason/cli.py": "sha256:9cb202051a1c329e92a64841655325f7a43d9906d23f62c8bb9c242cd96fe5db",
|
||||
"tests/test_case_version_source.py": "sha256:e07e6f64cbf0237117cb04dc888f58ef7601d6f50e3accd60a7884c7f19d8a1e",
|
||||
"docs/forgejo-structural-materialization-source-v1.md": "sha256:7c893fef2bd8c3726f0ed1b7c4e256142cecb3a11c0a25e8c631a850dc3eb71e",
|
||||
"workplans/MASON-WP-0010-security-case-materialization.md": "sha256:7cfb52adc2e03de92a654678b852f6f35ebdcd60d7309a77bcdac5e972b6c462"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "57411f25b990f0d70dcfdcbd07778f6219bb9bf8",
|
||||
"publication_verification": "commit is ancestor of current origin/main; normal owner sync succeeded"
|
||||
}
|
||||
|
|
@ -0,0 +1,23 @@
|
|||
{
|
||||
"repo": "railiance-platform",
|
||||
"base_commit": "69a792c070238273acd9a989e2707072a5ef55ed",
|
||||
"patch_sha256": "c419ac0f6dba3e36f15dc51a6a36fbd87fe7d255cce40c33c7f4589d80355580",
|
||||
"integrated_at": "2026-10-16T05:43:11.524150+00:00",
|
||||
"files_sha256": {
|
||||
"docs/task-execution-native-fixture.md": "sha256:7de76b6e2d6e7ae02191cfb970c787c0e541387323d7292d32847e2e4e09e687",
|
||||
"scripts/task_execution_journal.py": "sha256:e13c21a7649321ab8ba2748ae6bd704e55c0802ea2c936317d312e0479dc060d",
|
||||
"scripts/task_execution_native_fixture.py": "sha256:f335a8fd7d9a156b136a3465b3aaa9144d23475fc4b1fea52b54b89880d92b29",
|
||||
"scripts/task_execution_plan.py": "sha256:f799a6320e92722c0cbe452f58ac793b55da47f97938efe7f1de851231849d37",
|
||||
"tests/test_task_execution_cleanup_calls.py": "sha256:b74d417827b73a73fbe93d5e11a196014d772fe3ff0e3c06c9327eef34062b17",
|
||||
"tests/test_task_execution_journal.py": "sha256:b51a4f5b8122221c69ad2486d6e1751298bd4665ac37c94f363dd5a27c5a014c",
|
||||
"tests/test_task_execution_native_fixture.py": "sha256:a973b4873f6313ea2a7dca56b71a31a693dbd5d2022e2e2dbf793b8c9edd46ab",
|
||||
"tests/test_task_execution_plan.py": "sha256:679bfe0450e7975b8ad6747cd210afce1de33da54acdf64bc9f00b3603772b95",
|
||||
"workplans/RPF-WP-0035-credential-lane-implementation.md": "sha256:24b2ef20eba123c511575ec4694b26dcc8f4c5854fe6a4a30dd24cd0ae784e60"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "99fd21ee3708f070561556bd7f20487aed18db7a",
|
||||
"publication_verification": "commit is ancestor of current origin/main; normal owner sync succeeded"
|
||||
}
|
||||
|
|
@ -0,0 +1,21 @@
|
|||
{
|
||||
"repo": "railiance-platform",
|
||||
"base_commit": "4021ca5e79d3f85197b26cc20d29c55771462cf1",
|
||||
"patch_sha256": "d91fdbd68b328d430e0e2b0b7f44d552095b8688ae4942d398d2e126b3648ad5",
|
||||
"integrated_at": "2026-10-16T05:51:13.184782+00:00",
|
||||
"files_sha256": {
|
||||
"docs/task-execution-grant-projection.md": "sha256:643e9769ad895795179e86f52c74a826b9619d1e6a4f8c6d411243b4139ad33d",
|
||||
"scripts/task_execution_grant.py": "sha256:b76d7dce419c0548f33be3efaec2589e50eec48b9e277c90ab0e4615b9c0f3e7",
|
||||
"scripts/task_execution_native_fixture.py": "sha256:8607321e2947d2ec1ca9c69ac24a4d54d50819ee40e28f9eaf4ee1d865beec0a",
|
||||
"scripts/task_execution_plan.py": "sha256:cd984055ca8a1d51ef563bb7534b30c2fc9e326ed89a459362419b407397b9dc",
|
||||
"tests/test_task_execution_grant.py": "sha256:209c9998f34def06fb9588374901574bca6bf206b73163961d762f53683d7e5b",
|
||||
"tests/test_task_execution_native_fixture.py": "sha256:0127b2cb84570e27c9fd70560e8088a7ad531497ee4a83a8917632e8c02982c2",
|
||||
"workplans/RPF-WP-0035-credential-lane-implementation.md": "sha256:00532e2ba330348479f3787615516ee1a474da9ae0254a66ec57fcaf0e7a6285"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "d042d468df6d4085bb93a73ec26f4c4103554575",
|
||||
"publication_verification": "commit is ancestor of current origin/main; normal owner sync succeeded"
|
||||
}
|
||||
|
|
@ -0,0 +1,22 @@
|
|||
{
|
||||
"repo": "railiance-platform",
|
||||
"base_commit": "d042d468df6d4085bb93a73ec26f4c4103554575",
|
||||
"patch_sha256": "f26a5e1f63f68c487930d3f076502f1bae73d16107d3be2537aeeda56e73628e",
|
||||
"integrated_at": "2026-10-16T07:14:11.529776+00:00",
|
||||
"files_sha256": {
|
||||
"docs/task-execution-mediator-seam.md": "sha256:bedef06305956d1db7887fb9b86b5b5311f34ee3a6106df573c4a93de4e3d577",
|
||||
"scripts/task_execution_journal.py": "sha256:507b41a790e678dfd16af747bd851f5abc2fed5a8fb70bca05449d9e5ac674e8",
|
||||
"scripts/task_execution_mediator.py": "sha256:312b0b0fd246484d4537485db8db7b0e9b67e7c2cc10a5b2b68ac264ede4c180",
|
||||
"scripts/task_execution_native_fixture.py": "sha256:60abb78634038ca9422a35265c7a21b6653fed8ef5b85c4d50e846f4e3da4edf",
|
||||
"tests/task_execution_source_servers.py": "sha256:271e78fbfa3bf23f1c852297151d0ad38ab6bb5394851875a565f43453e1c57c",
|
||||
"tests/test_task_execution_mediation_journal.py": "sha256:ced684dbb4b2454b50bc100649d9cee3a0882ac8aef04639ce399a69f54b00db",
|
||||
"tests/test_task_execution_mediator.py": "sha256:a196a18038567275dfc10fb51ecc4ead99f58637959b9395ae4986ade47b7829",
|
||||
"workplans/RPF-WP-0035-credential-lane-implementation.md": "sha256:f70c0011cb5d2ef310d6e2bf392a0b6bb6f78b407b9182a1e38bed2f80472f23"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "e2b832b5d44ad936c80da7015efb609473eb9dc7",
|
||||
"publication_verification": "normal owner sync succeeded; commit verified ancestor of origin/main"
|
||||
}
|
||||
|
|
@ -0,0 +1,120 @@
|
|||
{
|
||||
"owner_repository": "/home/worsch/railiance-platform",
|
||||
"isolated_checkout": "/tmp/netkingdom-platform-wave4-20261016",
|
||||
"base_commit": "d042d468df6d4085bb93a73ec26f4c4103554575",
|
||||
"patch_sha256": "f26a5e1f63f68c487930d3f076502f1bae73d16107d3be2537aeeda56e73628e",
|
||||
"files_sha256": {
|
||||
"docs/task-execution-mediator-seam.md": "bedef06305956d1db7887fb9b86b5b5311f34ee3a6106df573c4a93de4e3d577",
|
||||
"scripts/task_execution_journal.py": "507b41a790e678dfd16af747bd851f5abc2fed5a8fb70bca05449d9e5ac674e8",
|
||||
"scripts/task_execution_mediator.py": "312b0b0fd246484d4537485db8db7b0e9b67e7c2cc10a5b2b68ac264ede4c180",
|
||||
"scripts/task_execution_native_fixture.py": "60abb78634038ca9422a35265c7a21b6653fed8ef5b85c4d50e846f4e3da4edf",
|
||||
"tests/task_execution_source_servers.py": "271e78fbfa3bf23f1c852297151d0ad38ab6bb5394851875a565f43453e1c57c",
|
||||
"tests/test_task_execution_mediation_journal.py": "ced684dbb4b2454b50bc100649d9cee3a0882ac8aef04639ce399a69f54b00db",
|
||||
"tests/test_task_execution_mediator.py": "a196a18038567275dfc10fb51ecc4ead99f58637959b9395ae4986ade47b7829",
|
||||
"workplans/RPF-WP-0035-credential-lane-implementation.md": "f70c0011cb5d2ef310d6e2bf392a0b6bb6f78b407b9182a1e38bed2f80472f23"
|
||||
},
|
||||
"work_item": "RPF-WP-0035-T12",
|
||||
"contract_work_item": "SECRETS-WP-0013",
|
||||
"test_status": "130 distinct owner checks passed across full R1 and final focused R2 runs; all final mediator/ordinal cases pass with R2",
|
||||
"secrets_dependency": {
|
||||
"canonical_base": "c80a944",
|
||||
"staged_checkout": "/tmp/netkingdom-secrets-task-handoff",
|
||||
"module": "secrets_engine.task_execution_handoff",
|
||||
"files_sha256": {
|
||||
"src/secrets_engine/task_execution_handoff.py": "b82695b88c201fdcbd8854a0d3c37ee2d2d3feee2c0663d784180fa070ac6677",
|
||||
"src/secrets_engine/approval_consume.py": "bea80a503944b1b9796819cfea5f514c3184a724115130d16c3bc0c675f09a6b"
|
||||
},
|
||||
"source_owner": "secrets-engine; no Platform edits",
|
||||
"r1_module_sha256": "671a393aa2b9355e1c81c502a74f9ce8adad75fe7eb03492d11843a94b24d758",
|
||||
"r1_boundary": "Full129 test proof before owner independent native bool/int digest counterexample; R2 must be used for final integration."
|
||||
},
|
||||
"provider_sources": {
|
||||
"approval-engine": {
|
||||
"base": "477c683991fda3c01e2af98a18f5a8719ee9dbc9",
|
||||
"tracked_dirty": [
|
||||
"M .custodian-brief.md",
|
||||
" M WORK-RECORDS.md",
|
||||
" M workplans/APPROVAL-WP-0004-exact-consume-source-provenance.md"
|
||||
],
|
||||
"written_by_worker": false
|
||||
},
|
||||
"access-engine": {
|
||||
"base": "ec21518e25df2a58444f19ff3413ce0b83383d3c",
|
||||
"tracked_dirty": [
|
||||
"M .custodian-brief.md",
|
||||
" M WORK-RECORDS.md"
|
||||
],
|
||||
"written_by_worker": false
|
||||
},
|
||||
"secrets-engine": {
|
||||
"base": "c80a944105a00220cd3c1a007709e72d830dd08d",
|
||||
"tracked_dirty": [
|
||||
"M .custodian-brief.md",
|
||||
" M WORK-RECORDS.md"
|
||||
],
|
||||
"written_by_worker": false
|
||||
}
|
||||
},
|
||||
"fixture_binaries": {
|
||||
"access": {
|
||||
"path": "/tmp/netkingdom-platform-wave4-access",
|
||||
"sha256": "b689b678aa90b746c674813eae8fea945e2d1ba24f10dfb44f475ea020c6b0a3",
|
||||
"build_command": "GOCACHE=/tmp/netkingdom-platform-wave4-buildcache GOFLAGS=-mod=readonly go build -o /tmp/netkingdom-platform-wave4-access ./cmd/access-engine",
|
||||
"build_cwd": "/home/worsch/access-engine",
|
||||
"build_result": "exit0; Go emitted a read-only module stat-cache write warning, binary built and native tests verified"
|
||||
},
|
||||
"verify": {
|
||||
"path": "/tmp/netkingdom-platform-wave4-verify",
|
||||
"sha256": "f389e81dee7176c1e40b88169bbe328010207e671e587259e6dfae01b646e9b9",
|
||||
"build_command": "GOCACHE=/tmp/netkingdom-platform-wave4-buildcache GOFLAGS=-mod=readonly go build -o /tmp/netkingdom-platform-wave4-verify .",
|
||||
"build_cwd": "/home/worsch/secrets-engine/verifier",
|
||||
"build_result": "exit0"
|
||||
}
|
||||
},
|
||||
"estate_native_production_acceptance": false,
|
||||
"estate_grants_or_custody_changed": false,
|
||||
"canonical_owner_written": false,
|
||||
"current_policy_runtime_admission": "Actual unchanged service task package signed DENY; separately named exact-descriptor synthetic fixture policy only for positive local proof",
|
||||
"owner_dirty_observed": [
|
||||
" M WORK-RECORDS.md"
|
||||
],
|
||||
"tests": {
|
||||
"initial_full_command": "SECRETS_ENGINE_SOURCE_ROOT=/home/worsch/secrets-engine PYTHONPATH=/tmp/netkingdom-secrets-task-handoff/src:/home/worsch/approval-engine python3 -m pytest -xq tests/test_task_execution_mediator.py tests/test_task_execution_mediation_journal.py tests/test_task_execution_plan.py tests/test_task_execution_journal.py tests/test_task_execution_cleanup.py tests/test_task_execution_cleanup_calls.py tests/test_task_execution_grant.py tests/test_task_execution_native_fixture.py",
|
||||
"initial_full_result": "129 passed in146.13s with strict Secrets R1; retained as intermediate only after its owner found native bool/int binding ambiguity.",
|
||||
"final_focused_command": "SECRETS_ENGINE_SOURCE_ROOT=/home/worsch/secrets-engine PYTHONPATH=/tmp/netkingdom-secrets-task-handoff/src:/home/worsch/approval-engine python3 -m pytest -xq tests/test_task_execution_mediator.py tests/test_task_execution_mediation_journal.py",
|
||||
"final_focused_result": "8 passed in57.14s with strict Secrets R2 and exact JSON catalogue/approval equality plus new bool/int negative.",
|
||||
"unchanged_base_checks": 122,
|
||||
"current_mediator_and_ordinal_checks": 8,
|
||||
"single_full130_run_claimed": false,
|
||||
"fixture_setup_failures": [
|
||||
"Initial synthetic policy omitted required Rego test block; actual source policy validation refused. Added real deny test block.",
|
||||
"Fixture HTTP helper initially shadowed http module; corrected helper import before source-server proof."
|
||||
],
|
||||
"mechanisms": [
|
||||
"Actual Access source serve with enforced TokenReview client against explicit synthetic reviewer",
|
||||
"Independent generated Ed25519 signer/key admission and owner-local source policy-digest pin",
|
||||
"Actual Secrets mandatory producer-type signature verifier + strict retained-artifact task handoff",
|
||||
"Actual Approval HTTP/SQLite service issue, distinct synthetic human approval, strict CAS and independent authenticated GET",
|
||||
"Actual disposable OpenBao task grant/token, six fixed metadata calls and native cleanup",
|
||||
"Authoritative independent read-scope denial after CAS leaves unknown/pending and zero target native effects",
|
||||
"Untouched actual task package returns signed DENY before CAS; positive uses separate exact-descriptor synthetic fixture policy",
|
||||
"No caller authorization result/callback accepted; missing strict dependency and source purpose/bool aliases refuse before credentials/CAS",
|
||||
"Known synthetic token values absent from journal bytes"
|
||||
]
|
||||
},
|
||||
"checks": [
|
||||
"git diff --check passed",
|
||||
"exact reverse-patch check passed",
|
||||
"manifest matches all frozen owner source/test bytes",
|
||||
"strict R2 dependency hash verified after final test"
|
||||
],
|
||||
"actual_policy_proof": {
|
||||
"path": "/home/worsch/access-engine/examples/secrets-engine-service-task-execution/policy_package.md",
|
||||
"sha256": "9c0facea87c61e0c2814538814e212d21415d77eb9f7cda8a8716bc1d37d2795",
|
||||
"matches_owner_head": true,
|
||||
"runtime_admission_literal_false": true
|
||||
},
|
||||
"strict_external_dependency_integrated_by_platform_worker": false,
|
||||
"review_sha256": "14670cff7c40508b0283606dafe841f124b1e713d86c01759e2c0dd605af3513",
|
||||
"native_openbao_version": "OpenBao v2.5.5 (028992583c693c4de6350b8aa52ff85e30375a99), built 2026-06-17T11:18:48Z"
|
||||
}
|
||||
|
|
@ -0,0 +1,30 @@
|
|||
{
|
||||
"repo": "railiance-platform",
|
||||
"base_commit": "3b6e647aa06bed88966a4539f9d3cb7ed6792bd4",
|
||||
"patch_sha256": "be8de4975980e4b88b37ed98d3fdd509d513f85834efc3a5cb744410c4e95392",
|
||||
"integrated_at": "2026-10-15T23:50:57.593043+00:00",
|
||||
"files_sha256": {
|
||||
"docs/task-execution-cleanup.md": "sha256:44cb21e69838c961eca9805ec3d1f3e64d12b46dc9c2e7b02c69610a97a0f33b",
|
||||
"docs/task-execution-plan-compiler.md": "sha256:83f28626f1f6499f52f22c3daafd22c802475e8a77bb1be7ba9901c7ae00bf8b",
|
||||
"scripts/task_execution_cleanup.py": "sha256:c1c0b649e8002b9a6e1599d46f70ad3ad3d743323ddb82367468d5bdb103062c",
|
||||
"scripts/task_execution_journal.py": "sha256:f512d72be880de2a6345d3550c60a0c8e6e3b6d2bc8123f4502a068afabd973b",
|
||||
"tests/test_task_execution_cleanup.py": "sha256:a0d4d6d2c8c22bfed17a109a6f0be02d5f128619866ae5f1ea69f81803133085",
|
||||
"tests/test_task_execution_journal.py": "sha256:707ee5404e567ddf9896d680feae47628b9a3cfc9e3ce0073100e1677af53b5c",
|
||||
"workplans/RPF-WP-0035-credential-lane-implementation.md": "sha256:f1be966f38a96efbedcb7a129586a6f905e1910fe37ef85c61fe29379fa50af6"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"commit": "59d1441cf8c3953b609161e84c97140739fe8e4f",
|
||||
"publication": {
|
||||
"tool": "rmgr sync --push",
|
||||
"projection_commit": "69a792c070238273acd9a989e2707072a5ef55ed",
|
||||
"instance": "primary/railiance01",
|
||||
"expected_equals_derived": true,
|
||||
"ahead": 0,
|
||||
"first_attempt": "remote refs-changed-during-scan; retry succeeded without bypass",
|
||||
"concurrent_unrelated_commit_preserved": "69a792c security: record owner approval of NK49 backup credential packet"
|
||||
},
|
||||
"publication_verification": "commit is ancestor of current origin/main; normal owner sync succeeded"
|
||||
}
|
||||
|
|
@ -0,0 +1,135 @@
|
|||
{
|
||||
"schema": "custodian.netkingdom-source-wave.v1",
|
||||
"observed_at": "2026-10-16T07:23:11.107036+00:00",
|
||||
"coordinator": "CUST-WP-0080-T06",
|
||||
"source_slices": [
|
||||
{
|
||||
"repo": "net-kingdom",
|
||||
"slice": "browser-case",
|
||||
"commit": "c31d21ba7d15624940e8858cd5f31ceb57d82081",
|
||||
"patch_sha256": "d32a7f51cbf3012bee3e4bb329f4259dea867eff1c59a2b01a65d72774488d05",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "ops-warden",
|
||||
"slice": "warden-browser",
|
||||
"commit": "958352089b443459a6368efc0e591c8a0a8b8604",
|
||||
"patch_sha256": "1fb05b513c4db784f8691b5bc2790f5ca396071d4354615d2da7fc505c45684b",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "glas-harness",
|
||||
"slice": "agent-isolation",
|
||||
"commit": "7357115c8311e55ee3d495f5266f501a17ec3c89",
|
||||
"patch_sha256": "83eeeb0017603aabae0ff49a23f96248f677f6c9f3e2c01b22f6d0416fca69c7",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "railiance-platform",
|
||||
"slice": "protected-execution",
|
||||
"commit": "59d1441cf8c3953b609161e84c97140739fe8e4f",
|
||||
"patch_sha256": "be8de4975980e4b88b37ed98d3fdd509d513f85834efc3a5cb744410c4e95392",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "railiance-platform",
|
||||
"slice": "protected-execution-wave2",
|
||||
"commit": "99fd21ee3708f070561556bd7f20487aed18db7a",
|
||||
"patch_sha256": "c419ac0f6dba3e36f15dc51a6a36fbd87fe7d255cce40c33c7f4589d80355580",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "railiance-platform",
|
||||
"slice": "protected-execution-wave3",
|
||||
"commit": "d042d468df6d4085bb93a73ec26f4c4103554575",
|
||||
"patch_sha256": "d91fdbd68b328d430e0e2b0b7f44d552095b8688ae4942d398d2e126b3648ad5",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "approval-engine",
|
||||
"slice": "approval-reference",
|
||||
"commit": "477c683991fda3c01e2af98a18f5a8719ee9dbc9",
|
||||
"patch_sha256": "a6bf77fa8b6916f423db7832f475e38747b828dd632a88f9631131e28e3230ee",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "ops-mason",
|
||||
"slice": "mason-browser",
|
||||
"commit": "57411f25b990f0d70dcfdcbd07778f6219bb9bf8",
|
||||
"patch_sha256": "cfe7648ed119d83faca228a2f21611c9388de1ba166598cbeb64f40e81620067",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "access-engine",
|
||||
"slice": "access-verifier-review",
|
||||
"commit": "ec21518e25df2a58444f19ff3413ce0b83383d3c",
|
||||
"patch_sha256": "25e05b04f96cfe6f7d1abb11ab5d533b14a830c437136fc78aa381198ff8db37",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "secrets-engine",
|
||||
"slice": "decision-auth",
|
||||
"commit": "c80a944105a00220cd3c1a007709e72d830dd08d",
|
||||
"patch_sha256": "98c4300c42fe93759a55297fe6629f1d4aeed249c3625f7fd37c8ab523a08ca9",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "secrets-engine",
|
||||
"slice": "decision-package",
|
||||
"commit": "ebca4f5adb63eee9e750dc6ff4a23f7a92490661",
|
||||
"patch_sha256": "86179e607509d782f8a00012174c549997e0997ce4f84fc1078d245e4670a4ae",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "secrets-engine",
|
||||
"slice": "decision-handoff",
|
||||
"commit": "ff1a13dabd44ba02ddd6bc26ad75568f6d2e6225",
|
||||
"patch_sha256": "1ef8b67e2352415ddbdadc86cd151a8b6caf76628350657ed3e674aefcf49945",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "railiance-platform",
|
||||
"slice": "protected-execution-wave4",
|
||||
"commit": "e2b832b5d44ad936c80da7015efb609473eb9dc7",
|
||||
"patch_sha256": "f26a5e1f63f68c487930d3f076502f1bae73d16107d3be2537aeeda56e73628e",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
},
|
||||
{
|
||||
"repo": "approval-engine",
|
||||
"slice": "approval-confirmation",
|
||||
"commit": "eece796b8bbee19551f6aa07ad389cbf83cabcdb",
|
||||
"patch_sha256": "a2dfa6585a8b97fc6facec7b0815ffc3374869b8de51cc696d534c69643e3621",
|
||||
"published": true,
|
||||
"native_accepted": false
|
||||
}
|
||||
],
|
||||
"integrity_note": "Canonical owner commits are the durable source. Raw patches and temporary reconstructions are workspace-local review artifacts; their hashes retain revision identity. No runtime admission follows from these commits.",
|
||||
"independent_review": "coordinator-source-review.json",
|
||||
"publication_caveats": [
|
||||
"Mason publication verified at57411f25; State Hub reported dirty_workplans and no whole-repo source revision because unrelated MASON-WP-0013 changes pre-existed.",
|
||||
"Access initial State Hub timeout preserved; retry succeeded38/38 but T05/T06 indexing needs second pass after reopened workplan.",
|
||||
"Generated-only writeback commit refusals retained; no scanner bypass.",
|
||||
"Platform scanner ref race retried through normal owner sync after review.",
|
||||
"Access follow-up task-index repair timed out again; producer source remains published. Owner admission preparation also tracks qualified wait metadata."
|
||||
],
|
||||
"remaining_critical_path": [
|
||||
"Independently admit package, producer signing key/policy and consumer trust; actual service-pilot remains DENY",
|
||||
"Protected native acceptance: exact target baseline/readback, recovery/restart, current caller mapping and owner admission",
|
||||
"Actual isolated agent assignment and combined runner acceptance",
|
||||
"Native browser owner receipts and consumer acceptance",
|
||||
"All sixteen TSA gate closure audit remains open"
|
||||
]
|
||||
}
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
{
|
||||
"chunk_id": "1c4e5b",
|
||||
"wall_time_seconds": 0.000022906,
|
||||
"exit_code": 1,
|
||||
"original_token_count": 137,
|
||||
"output": "{\n \"repo_slug\": \"access-engine\",\n \"repo_path\": \"(unknown)\",\n \"source_revision\": null,\n \"source_revision_reason\": \"not_scanned\",\n \"issues\": [\n {\n \"severity\": \"FAIL\",\n \"check_id\": \"C-00\",\n \"message\": \"Could not query State Hub API at http://127.0.0.1:8000: timed out\",\n \"file_path\": \"\",\n \"db_id\": \"\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": false\n }\n ],\n \"fixes_applied\": [],\n \"summary\": {\n \"fail\": 0,\n \"automation_error\": 1,\n \"warn\": 0,\n \"info\": 0\n },\n \"result\": \"error\"\n}\n"
|
||||
}
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
|
|
@ -0,0 +1,7 @@
|
|||
{
|
||||
"chunk_id": "3657bf",
|
||||
"wall_time_seconds": 0.00001351,
|
||||
"exit_code": 0,
|
||||
"original_token_count": 1073,
|
||||
"output": "WARN: git commit failed for writeback: Generated-only commits rejected: staged\n{\n \"repo_slug\": \"approval-engine\",\n \"repo_path\": \"/home/worsch/approval-engine\",\n \"source_revision\": \"477c683991fda3c01e2af98a18f5a8719ee9dbc9\",\n \"source_revision_reason\": null,\n \"issues\": [\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-33\",\n \"message\": \"WORK-RECORDS.md is missing or stale \\u2014 regenerate via fix-consistency (CUST-WP-0061-T04 generated work-record index)\",\n \"file_path\": \"WORK-RECORDS.md\",\n \"db_id\": \"\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": true\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-19\",\n \"message\": \"Flavor drift in 'approval-wp-adhoc-2026-10-10': file='implementation' db=None (file wins)\",\n \"file_path\": \"workplans/ADHOC-2026-10-10.md\",\n \"db_id\": \"cc53ae35-acc0-51ca-ad85-573502167e6c\",\n \"file_value\": \"implementation\",\n \"db_value\": null,\n \"fixable\": true\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-19\",\n \"message\": \"Flavor drift in 'approval-wp-adhoc-2026-10-11': file='implementation' db=None (file wins)\",\n \"file_path\": \"workplans/ADHOC-2026-10-11.md\",\n \"db_id\": \"77fca3cc-64dc-5c31-915e-999dde18eee5\",\n \"file_value\": \"implementation\",\n \"db_value\": null,\n \"fixable\": true\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-11\",\n \"message\": \"Task 'APPROVAL-WP-ADHOC-2026-10-11-T02' has no state_hub_task_id\",\n \"file_path\": \"workplans/ADHOC-2026-10-11.md#APPROVAL-WP-ADHOC-2026-10-11-T02\",\n \"db_id\": \"\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": true\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-06\",\n \"message\": \"Workplan has no state_hub_workstream_id \\u2014 not indexed in DB\",\n \"file_path\": \"workplans/APPROVAL-WP-0004-exact-consume-source-provenance.md\",\n \"db_id\": \"\",\n \"file_value\": \"Retain exact authenticated consume source provenance\",\n \"db_value\": \"\",\n \"fixable\": true\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-28\",\n \"message\": \"11 unread inbox message(s) older than 3 day(s): key-cape:ffe5aff4, informed-decision:59c5ee82, the-custodian:23172cb2, access-engine:9b8795d2, the-custodian:51e9eace, ...\",\n \"file_path\": \"\",\n \"db_id\": \"\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": false\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-28\",\n \"message\": \"9 unread message(s) lack thread_id for supersession tracking: key-cape:ffe5aff4, informed-decision:59c5ee82, the-custodian:23172cb2, access-engine:9b8795d2, the-custodian:51e9eace\",\n \"file_path\": \"\",\n \"db_id\": \"\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": false\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-29\",\n \"message\": \"Unread work request from informed-decision (59c5ee82) may need a workplan file: INFD-WP-0005: service-requested approvals from informed-decision intake (two small asks)\",\n \"file_path\": \"\",\n \"db_id\": \"\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": false\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-29\",\n \"message\": \"Unread work request from flex-auth (2523510b) may need a workplan file: FLEX-WP-0020 handoff request (consumer)\",\n \"file_path\": \"\",\n \"db_id\": \"\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": false\n }\n ],\n \"fixes_applied\": [\n \"bindings: synced 5/5\",\n \"C-17 cleared: pushed 1 backlogged commit(s)\",\n \"C-33 fixed: regenerated WORK-RECORDS.md\",\n \"C-19 fixed: workstream cc53ae35\\u2026 flavor \\u2192 'implementation'\",\n \"C-19 fixed: workstream 77fca3cc\\u2026 flavor \\u2192 'implementation'\",\n \"C-11 skipped: task 'APPROVAL-WP-ADHOC-2026-10-11-T02' in finished workstream \\u2014 not created\",\n \"C-06 fixed: created workstream 688edc60\\u2026 for APPROVAL-WP-0004, wrote ID to APPROVAL-WP-0004-exact-consume-source-provenance.md\",\n \" + task APPROVAL-WP-0004-T01 \\u2192 b0b0a5a9\\u2026\",\n \" + task APPROVAL-WP-0004-T02 \\u2192 2b932ef8\\u2026\",\n \"brief: .custodian-brief.md updated\",\n \"push: pushed\"\n ],\n \"summary\": {\n \"fail\": 0,\n \"automation_error\": 0,\n \"warn\": 9,\n \"info\": 0\n },\n \"result\": \"warn\"\n}\n"
|
||||
}
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
{
|
||||
"chunk_id": "127c2c",
|
||||
"wall_time_seconds": 0.000015787,
|
||||
"exit_code": 0,
|
||||
"original_token_count": 799,
|
||||
"output": "{\n \"repo_slug\": \"approval-engine\",\n \"repo_path\": \"/home/worsch/approval-engine\",\n \"source_revision\": \"eece796b8bbee19551f6aa07ad389cbf83cabcdb\",\n \"source_revision_reason\": null,\n \"issues\": [\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-33\",\n \"message\": \"WORK-RECORDS.md is missing or stale \\u2014 regenerate via fix-consistency (CUST-WP-0061-T04 generated work-record index)\",\n \"file_path\": \"WORK-RECORDS.md\",\n \"db_id\": \"\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": true\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-11\",\n \"message\": \"Task 'APPROVAL-WP-ADHOC-2026-10-11-T02' has no state_hub_task_id\",\n \"file_path\": \"workplans/ADHOC-2026-10-11.md#APPROVAL-WP-ADHOC-2026-10-11-T02\",\n \"db_id\": \"\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": true\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-06\",\n \"message\": \"Workplan has no state_hub_workstream_id \\u2014 not indexed in DB\",\n \"file_path\": \"workplans/ADHOC-2026-10-16.md\",\n \"db_id\": \"\",\n \"file_value\": \"Repair exact consume-confirmation native binding comparison\",\n \"db_value\": \"\",\n \"fixable\": true\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-28\",\n \"message\": \"11 unread inbox message(s) older than 3 day(s): key-cape:ffe5aff4, informed-decision:59c5ee82, the-custodian:23172cb2, access-engine:9b8795d2, the-custodian:51e9eace, ...\",\n \"file_path\": \"\",\n \"db_id\": \"\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": false\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-28\",\n \"message\": \"9 unread message(s) lack thread_id for supersession tracking: key-cape:ffe5aff4, informed-decision:59c5ee82, the-custodian:23172cb2, access-engine:9b8795d2, the-custodian:51e9eace\",\n \"file_path\": \"\",\n \"db_id\": \"\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": false\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-29\",\n \"message\": \"Unread work request from informed-decision (59c5ee82) may need a workplan file: INFD-WP-0005: service-requested approvals from informed-decision intake (two small asks)\",\n \"file_path\": \"\",\n \"db_id\": \"\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": false\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-29\",\n \"message\": \"Unread work request from flex-auth (2523510b) may need a workplan file: FLEX-WP-0020 handoff request (consumer)\",\n \"file_path\": \"\",\n \"db_id\": \"\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": false\n }\n ],\n \"fixes_applied\": [\n \"bindings: synced 6/6\",\n \"C-17 cleared: pushed 1 backlogged commit(s)\",\n \"C-33 fixed: regenerated WORK-RECORDS.md\",\n \"C-11 skipped: task 'APPROVAL-WP-ADHOC-2026-10-11-T02' in finished workstream \\u2014 not created\",\n \"C-06 fixed: created workstream 51585baa\\u2026 for APPROVAL-WP-ADHOC-2026-10-16, wrote ID to ADHOC-2026-10-16.md\",\n \" + task APPROVAL-WP-ADHOC-2026-10-16-T01 \\u2192 ff45b583\\u2026\",\n \"push: pushed\"\n ],\n \"summary\": {\n \"fail\": 0,\n \"automation_error\": 0,\n \"warn\": 7,\n \"info\": 0\n },\n \"result\": \"warn\"\n}\n"
|
||||
}
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
{
|
||||
"chunk_id": "7feaa5",
|
||||
"wall_time_seconds": 0.000013877,
|
||||
"exit_code": 0,
|
||||
"original_token_count": 1022,
|
||||
"output": "WARN: git commit failed for writeback: Generated-only commits rejected: staged\n{\n \"repo_slug\": \"secrets-engine\",\n \"repo_path\": \"/home/worsch/secrets-engine\",\n \"source_revision\": \"c80a944105a00220cd3c1a007709e72d830dd08d\",\n \"source_revision_reason\": null,\n \"issues\": [\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-33\",\n \"message\": \"WORK-RECORDS.md is missing or stale \\u2014 regenerate via fix-consistency (CUST-WP-0061-T04 generated work-record index)\",\n \"file_path\": \"WORK-RECORDS.md\",\n \"db_id\": \"\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": true\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-23\",\n \"message\": \"Lifecycle drift in 'secrets-wp-0013': workplan status 'proposed' has an active task \\u2014 report only (ADR-007: do not auto-promote proposed)\",\n \"file_path\": \"workplans/SECRETS-WP-0013-task-scoped-openbao-execution.md\",\n \"db_id\": \"5e38aecc-85ca-5f55-94c6-9fbb08604819\",\n \"file_value\": \"proposed\",\n \"db_value\": \"active\",\n \"fixable\": false\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-10\",\n \"message\": \"Task status drift 'SECRETS-WP-0014-T02': file='progress' db='todo' (file wins)\",\n \"file_path\": \"workplans/SECRETS-WP-0014-pdp-transport-and-responder-authentication.md#SECRETS-WP-0014-T02\",\n \"db_id\": \"877782e5-045b-5186-8b95-82e25db21a5a\",\n \"file_value\": \"progress\",\n \"db_value\": \"todo\",\n \"fixable\": true\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-22\",\n \"message\": \"Task description drift 'SECRETS-WP-0014-T02': file content differs from DB (file wins)\",\n \"file_path\": \"workplans/SECRETS-WP-0014-pdp-transport-and-responder-authentication.md#SECRETS-WP-0014-T02\",\n \"db_id\": \"877782e5-045b-5186-8b95-82e25db21a5a\",\n \"file_value\": \"Review producer canonical signature bytes and the native pin's unsigned/signed\\nmode. Establish independently admitted ve\",\n \"db_value\": \"Review producer canonical signature bytes and the native pin's unsigned/signed\\nmode. Establish independently admitted ve\",\n \"fixable\": true\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-20\",\n \"message\": \"Missing DB dependency edge: task 'SECRETS-WP-0014-T03' starts after task SECRETS-WP-0014-T02\",\n \"file_path\": \"workplans/SECRETS-WP-0014-pdp-transport-and-responder-authentication.md#SECRETS-WP-0014-T03\",\n \"db_id\": \"7252469d-d7a5-5c18-8911-b511b8c6a736\",\n \"file_value\": \"SECRETS-WP-0014-T02\",\n \"db_value\": \"\",\n \"fixable\": true\n },\n {\n \"severity\": \"INFO\",\n \"check_id\": \"C-08\",\n \"message\": \"Closed DB workstream 'secrets-wp-0002' (id=7929a2d1\\u2026, status=finished) has no backing workplan file\",\n \"file_path\": \"\",\n \"db_id\": \"7929a2d1-3006-5d4b-85e4-c62da055ee9b\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": false\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-28\",\n \"message\": \"3 unread inbox message(s) older than 3 day(s): railiance-platform:0490edcb, the-custodian:23172cb2, the-custodian:51e9eace\",\n \"file_path\": \"\",\n \"db_id\": \"\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": false\n },\n {\n \"severity\": \"WARN\",\n \"check_id\": \"C-28\",\n \"message\": \"4 unread message(s) lack thread_id for supersession tracking: claude-code:e6cbec92, claude-code:bcd2f6c5, the-custodian:23172cb2, the-custodian:51e9eace\",\n \"file_path\": \"\",\n \"db_id\": \"\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": false\n }\n ],\n \"fixes_applied\": [\n \"bindings: synced 16/16\",\n \"C-17 cleared: pushed 1 backlogged commit(s)\",\n \"C-33 fixed: regenerated WORK-RECORDS.md\",\n \"C-10 fixed: task 877782e5\\u2026 status \\u2192 'progress'\",\n \"C-22 fixed: task 877782e5\\u2026 description updated\",\n \"C-20 fixed: dependency 7252469d\\u2026 starts_after \\u2192 877782e5\\u2026\",\n \"brief: .custodian-brief.md updated\",\n \"push: pushed\"\n ],\n \"summary\": {\n \"fail\": 0,\n \"automation_error\": 0,\n \"warn\": 7,\n \"info\": 1\n },\n \"result\": \"warn\"\n}\n"
|
||||
}
|
||||
|
|
@ -0,0 +1,7 @@
|
|||
{
|
||||
"chunk_id": "cadd08",
|
||||
"wall_time_seconds": 0.000013409,
|
||||
"exit_code": 1,
|
||||
"original_token_count": 137,
|
||||
"output": "{\n \"repo_slug\": \"access-engine\",\n \"repo_path\": \"(unknown)\",\n \"source_revision\": null,\n \"source_revision_reason\": \"not_scanned\",\n \"issues\": [\n {\n \"severity\": \"FAIL\",\n \"check_id\": \"C-00\",\n \"message\": \"Could not query State Hub API at http://127.0.0.1:8000: timed out\",\n \"file_path\": \"\",\n \"db_id\": \"\",\n \"file_value\": \"\",\n \"db_value\": \"\",\n \"fixable\": false\n }\n ],\n \"fixes_applied\": [],\n \"summary\": {\n \"fail\": 0,\n \"automation_error\": 1,\n \"warn\": 0,\n \"info\": 0\n },\n \"result\": \"error\"\n}\n"
|
||||
}
|
||||
File diff suppressed because one or more lines are too long
|
|
@ -0,0 +1,28 @@
|
|||
{
|
||||
"repo": "ops-warden",
|
||||
"base_commit": "d2cd3fa9405f0766eef67a8b0e897239d8817fb7",
|
||||
"patch_sha256": "1fb05b513c4db784f8691b5bc2790f5ca396071d4354615d2da7fc505c45684b",
|
||||
"integrated_at": "2026-10-15T23:57:59.485614+00:00",
|
||||
"files_sha256": {
|
||||
"docs/security-case-execution-kernel-v1.md": "sha256:0eb563dbaea739fba928d04708c2c2bdac592783bbe68e1271041b0d1b1994cb",
|
||||
"src/warden/case_inputs.py": "sha256:3c7aab59bcff6bbc678ec64261f5023a050d61bc3a72ad0f87588d82e7e74f86",
|
||||
"src/warden/case_run.py": "sha256:afb5ce9c59b9748f85c9f1d4af04b255087632c58de8dcd8c9426fc1ed4db068",
|
||||
"tests/test_case_inputs.py": "sha256:f0af9163494d86343415e7009e1d652085f305d5058511404bbf52d22daa384e",
|
||||
"workplans/WARDEN-WP-0044-security-case-follow-through.md": "sha256:1f4823ffd331ffe737ed6aa1779a30c2c8c05a3a0230be2e2734f4e0ae6da230"
|
||||
},
|
||||
"source_integrated": true,
|
||||
"committed": true,
|
||||
"published": true,
|
||||
"native_accepted": false,
|
||||
"independent_tests": "102 passed in 12.91s",
|
||||
"commit": "958352089b443459a6368efc0e591c8a0a8b8604",
|
||||
"publication": {
|
||||
"tool": "statehub fix-consistency --repo ops-warden --no-writeback --json",
|
||||
"synced_workplans": "51/51",
|
||||
"fail": 0,
|
||||
"automation_error": 0,
|
||||
"warnings": 7,
|
||||
"generated_only_commit": "rejected by existing hook; not bypassed"
|
||||
},
|
||||
"publication_verification": "commit is ancestor of current origin/main; normal owner sync succeeded"
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue