322 lines
20 KiB
JSON
322 lines
20 KiB
JSON
{
|
|
"checked_at": "2026-10-16T17:54:13.797579+00:00",
|
|
"review_scope": "independent source reconstruction, focused regression tests and canonical integrated hash verification; not foreign owner approval or native acceptance",
|
|
"checks": {
|
|
"platform": {
|
|
"result": "73 passed in 8.91s",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/platform-r1"
|
|
},
|
|
"browser": {
|
|
"result": "103 passed in 5.47s",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/browser-r2",
|
|
"earlier_attempt": "85 passed,16 failed in browser-r1: missing tracked public KeyCape sibling request and sibling declaration layout; corrected fixture paths for final revision, no production code workaround"
|
|
},
|
|
"warden_browser_r2": {
|
|
"result": "102 passed in 12.91s",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/warden-r2",
|
|
"patch_sha256": "1fb05b513c4db784f8691b5bc2790f5ca396071d4354615d2da7fc505c45684b"
|
|
},
|
|
"platform_wave2": {
|
|
"result": "83 passed in 72.99s",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/platform-r2",
|
|
"native_scope": "Disposable loopback OpenBao with synthetic admission; no production acceptance",
|
|
"patch_sha256": "c419ac0f6dba3e36f15dc51a6a36fbd87fe7d255cce40c33c7f4589d80355580"
|
|
},
|
|
"glas_r1": {
|
|
"result": "141 passed in 6.74s",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/glas-r1",
|
|
"native_scope": "Actual bwrap synthetic host/env/subprocess denial, provider output redaction, subsequent command clean and workspace teardown; actual interactive assignment unchanged",
|
|
"patch_sha256": "83eeeb0017603aabae0ff49a23f96248f677f6c9f3e2c01b22f6d0416fca69c7"
|
|
},
|
|
"secrets_r2": {
|
|
"status": "passed",
|
|
"earlier_attempt": "Archive reconstruction test helper Go build refused VCS status (exit128); rerun disables only Go VCS stamping for this source archive, no application guard change",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/secrets-r2",
|
|
"result": "125 independent focused tests passed; producer/fixture hash checker passed",
|
|
"test_count": 125
|
|
},
|
|
"approval_r1": {
|
|
"result": "44 passed in 18.02s",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/approval-r1",
|
|
"native_acceptance": false
|
|
},
|
|
"mason_r1": {
|
|
"result": "50 passed in 15.96s",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/mason-r1",
|
|
"native_acceptance": false
|
|
},
|
|
"secrets_commit_scan": {
|
|
"result": "R2 commit refused by normal pinned scanner",
|
|
"finding_metadata": [
|
|
{
|
|
"file": "src/secrets_engine/config.py",
|
|
"rule": "generic-api-key",
|
|
"line": 74
|
|
},
|
|
{
|
|
"file": "tests/test_consume_binding_join.py",
|
|
"rule": "generic-api-key",
|
|
"line": 39
|
|
}
|
|
],
|
|
"review": "Both findings are pre-existing public UUID identifiers, not credentials. R3 names them explicitly without changing values or scanner policy. Normal commit scan must pass."
|
|
},
|
|
"platform_wave3": {
|
|
"result": "122 passed in 118.63s",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/platform-r3",
|
|
"native_scope": "Disposable OpenBao only; no authoritative real grant",
|
|
"preflight_history": [
|
|
"Stopped before all writes when Platform HEAD advanced d79079bb to4021ca5e; unrelated policy-only delta verified and preserved",
|
|
"Default sandbox denied owner checkout writes; retried through approved escalation and verified exact hashes"
|
|
]
|
|
},
|
|
"access_r2": {
|
|
"result": "actual serve CLI -> HTTP -> Secrets R2 verification and request/lifetime validation passed; response equals recorder; unsigned/tampered/group-write startup refused",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/access-r2",
|
|
"receipt": "access-verifier-review/coordinator-local-proof-r2.json",
|
|
"native_scope": "Disposable loopback only; caller-auth disabled synthetic token, no production admission"
|
|
},
|
|
"secrets_r4": {
|
|
"result": "133 focused strict handoff/consume/signature/transport tests passed; 7 actual packaging tests passed with supplied locked public PyYAML wheel",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/secrets-r4",
|
|
"scope": "combined packaging R1 and strict handoff R2 applied to c80a944; no runtime installation or trust admission"
|
|
},
|
|
"platform_wave4": {
|
|
"result": "130 passed in195.03s",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/platform-r4",
|
|
"strict_handoff_module_sha256": "b82695b88c201fdcbd8854a0d3c37ee2d2d3feee2c0663d784180fa070ac6677",
|
|
"approval_client_revision": "8624fa20bbfb0c0329e5327b4dd8d8c05a312d7a",
|
|
"native_scope": "actual local source providers and disposable OpenBao; synthetic identity/key/policy only; actual task policy DENY retained; no production acceptance"
|
|
},
|
|
"approval_confirmation": {
|
|
"result": "36 passed in0.39s",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/approval-r2",
|
|
"client_sha256": "afd4383d6785b12be9650d1cb3ef84ccbb1b57cd271d38d55e75875c46e85a79",
|
|
"earlier_command": "Nonexistent test_consume.py named in collection; zero tests ran, corrected to actual confirmation module",
|
|
"author_retained_failure": "101 passed/1 existing200ms unavailable-server message mismatch under concurrent test load; focused retry passed; fail-closed throughout"
|
|
},
|
|
"platform_wave4_final_approval_client": {
|
|
"result": "8 passed in89.23s",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/platform-r4",
|
|
"approval_client_sha256": "afd4383d6785b12be9650d1cb3ef84ccbb1b57cd271d38d55e75875c46e85a79",
|
|
"strict_handoff_module_sha256": "b82695b88c201fdcbd8854a0d3c37ee2d2d3feee2c0663d784180fa070ac6677",
|
|
"scope": "final mediator/ordinal suite with independently reconstructed Approval confirmation repair and Secrets strict R2; actual local source servers and disposable OpenBao"
|
|
},
|
|
"coordinator_evidence_scan": {
|
|
"initial_result": "normal commit refused five evidence blobs;8generic-api-key matches",
|
|
"diagnosis": "every finding independently parsed as a64hex source-file SHA256 within files_sha256 mapping; filenames containing api/auth/credential triggered heuristic",
|
|
"correction": "explicit sha256: digest notation in canonical integration receipt mappings; actual digest bytes unchanged; no scanner rule/allowlist changes",
|
|
"original_blocked_blobs": [
|
|
"5afec808e0a47edae8efd2369e191b605d438cc8",
|
|
"7c686b53018206e2833e248e33dc1e08ccd60114",
|
|
"b743960ab08d604a3dc5f4d273271a857bdde210",
|
|
"dc0de7d302639760f919acfac83e3d0446c621f7",
|
|
"eb67b4b8b369b3fea4eda25c3d9b5ed5d906f98d"
|
|
],
|
|
"final_result": "normal commit scanner clean36blobs; root commit d170e6b"
|
|
},
|
|
"platform_wave5": {
|
|
"result": "32 passed in 316.66s",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/platform-r5",
|
|
"patch_sha256": "sha256:b4c44a452a1b62d0a2c114e2de60537666a139a387c478c663236b3aacdaadec",
|
|
"scope": "exact sequential metadata baseline/readback and independent cleanup; no nativeCAS or production acceptance; positiveAccess pin ec21518e"
|
|
},
|
|
"access_native_preparation_r2": {
|
|
"result": "9 receipt tests and2runtime-twin tests passed",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/access-native-r2",
|
|
"retained_attempt": "Initial nine tests skipped because SECRETS_ENGINE_SOURCE_ROOT missing; corrected explicit source environment gave nine actual passes",
|
|
"review": "R1 reproduced bool/int and int/float source-record equality acceptance; R2 exact JSON types and same verified/hashed bounded bytes"
|
|
},
|
|
"secrets_native_preparation": {
|
|
"result": "independent runtime AST unchanged except docstrings; proposal/template JSON valid",
|
|
"native_effect_coverage": "0/11 serving sites across10handlers",
|
|
"bundle_scope": "canonical ff1 bundle rebuilt by owner; no installation/trust"
|
|
},
|
|
"approval_go_fact": {
|
|
"result": "Go suite,2Python producer-vector tests and14114actualPython canonicalbyte/digest differential cases passed",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/approval-go-r1",
|
|
"retained_attempt": "Differential initially refused Go cache write in sandbox; approved exact rerun passed",
|
|
"scope": "pure data owner adapter, no origin/credential/runtime authority"
|
|
},
|
|
"access_b1_r2": {
|
|
"result": "cmd/access-engine,internal/taskexecution,internal/decision Go suites passed; repaired nested duplicate targeted test passed",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/access-b1",
|
|
"review": "R1 test had malformed JSON instead of valid nested duplicate; correctedR2. SignedDENY until trusted successor, all genericexecute-ccr paths refuse"
|
|
},
|
|
"access_trusted_successor_r1": {
|
|
"result": "full Go suite passed independently",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/access-trusted-r1",
|
|
"patch_sha256": "sha256:6079ed2ff40b131aa2c5efc8d33608ecb3475c8158f0486b44ec4469e9f222c1",
|
|
"state": "not integrated; consumer successor/fullstack/native gates pending",
|
|
"integration_blocker": "Discovered whole-stack timing contradiction:15sPDPallow versus backendTTL30..120 plus5sreserve. Owner temporal review in progress; no widenedTTL/clockwaiver."
|
|
},
|
|
"platform_recovery_r2": {
|
|
"state": "passed",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/platform-recovery-r2",
|
|
"patch_sha256": "sha256:61f516c876fd612b83300e9913f0e80aad836a50014310797913c7c4505e3114",
|
|
"retained_attempts": [
|
|
"41passed12setuperrors: missing SECRETS_ENGINE_SOURCE_ROOT",
|
|
"41passed12setuperrors: missing PYTHONPATH source dependency"
|
|
],
|
|
"review": "R1 broad404absence and damagedcapsule sourcecounterexamples requireR2 exactabsence and independently keyed authenticatedcapsule; no native grant",
|
|
"result": "53 passed in169.59s with explicit Secrets source and PYTHONPATH",
|
|
"published_commit": "b9eaa200601f1226d13efe82472dfec81c2999aa",
|
|
"reconciliation": "applied exactcommit primary/railiance01;64records1taskupdated12historicalunresolvededges"
|
|
},
|
|
"wave5_publication": {
|
|
"platform": "d870596 applied exactcommit primary/railiance01,64records updated,12historical unresolvededges retained",
|
|
"secrets": "5a2099f synced16/16zero failures/errors",
|
|
"access_prep": "919ce25 firstStateHub querytimeout, retry38/38zero failures/errors; twoIDsassigned, generatedonlywriteback refused; stale C13 temporarily markedclosed after taskcreation and needs next reconciliation",
|
|
"approval": "3485415 synced7/7zero failures/errors; generatedIDs preserved; dirty_workplans means no exactwholeprojectionrevision",
|
|
"access_b1": "4f6946b retry synced38/38 and pushed; nofail/errors11warnings; correct activeWPstatus restored from authoritativefile"
|
|
},
|
|
"secrets_trusted_successor_r2": {
|
|
"result": "176 independent focused tests passed in62.17s",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/secrets-trusted-r2",
|
|
"patch_sha256": "sha256:65218b481f01cace1b879a3935b05af6b1c743960c64df69e43974fcc2c2002c",
|
|
"state": "notintegrated; latest producer temporal and retainedregistry whole-stack correspondence under owner review"
|
|
},
|
|
"successor_cross_owner_seams": {
|
|
"state": "unintegrated; owners actively resolving",
|
|
"findings": [
|
|
"retained registry normalized approval-free binding differs from original submitted approval binding; actual request refused before CAS/effect",
|
|
"fractional decision not_before versus whole-second Approval consumed_at rejects immediate legitimate CAS",
|
|
"operation ceiling, actual credential expiry and cleanup reserve require consistent owner contracts and absolute per-call enforcement"
|
|
],
|
|
"acceptance": "actual retained-registry producer/consumer/native path; no empty registry, blind replay, timestamp waiver or implicit trust"
|
|
},
|
|
"access_trusted_temporal_r2": {
|
|
"state": "focused independent source checks passed; pending successor integration",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/access-trusted-r2",
|
|
"patch_sha256": "sha256:f44fce1bc4190e70cf9488f7319f6384b723f4dd2e1e791a4a0d8ee2557d0f9b",
|
|
"command": "GOCACHE=/tmp/netkingdom-root-go-cache go test ./internal/decision ./cmd/access-engine -run 'TestTrusted(TaskWholeOperationLifetime|ServiceActualHTTPPositiveAndRefusals)' -count=1",
|
|
"result": "decision and command packages passed; exact operation deadline, cleanup reserve, source cap and original/fresh authority cases",
|
|
"retained_attempt": "initial command cwd was predecessor R1, where decision selection had no tests; corrected R2 command passed actual new tests"
|
|
},
|
|
"approval_timestamp_precision": {
|
|
"state": "canonical defect independently reproduced; owner repair pending",
|
|
"evidence": "approval-timestamp-precision/coordinator-counterexample.json",
|
|
"result": "approval expiry .500, actual clock .750; native consume incorrectly succeeds after expiry and records whole-second timestamp",
|
|
"scope": "actual canonical in-memory Engine deterministic clock; no production probing"
|
|
},
|
|
"access_trusted_r3": {
|
|
"result": "All seven affected Go packages passed independently",
|
|
"command": "go test ./cmd/access-engine ./internal/decision ./internal/taskexecution ./internal/sign ./internal/audit ./internal/emission ./internal/registry -count=1",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/access-trusted-r3",
|
|
"patch_sha256": "sha256:46bfeb706d3a88bf6054309cc9303eb360a91e57dda3b0fcbb7b80d551a75db6",
|
|
"native_accepted": false
|
|
},
|
|
"secrets_trusted_r4": {
|
|
"result": "193 focused tests passed in20.31s",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/secrets-trusted-r4",
|
|
"patch_sha256": "sha256:759bf5c7b89169ddd32761d36ce1ae71735bb4c471213f5bbb8cd9af25350b86",
|
|
"owner_full_suite": "784passed16failed7skipped; exact16 failures reproduce on retained baseline",
|
|
"native_accepted": false
|
|
},
|
|
"approval_precision_r1": {
|
|
"result": "98 tests passed in2.02s",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/approval-precision-r1",
|
|
"patch_sha256": "sha256:74eb0ff67d14508c2a2cee14d055790321ee171a96d5290ad6d037ce8f61dbcd",
|
|
"covers": [
|
|
"timestamp precision",
|
|
"atomic consumption",
|
|
"independent confirmation",
|
|
"outbox",
|
|
"claim contract",
|
|
"human control"
|
|
],
|
|
"native_accepted": false
|
|
},
|
|
"platform_budget_r1": {
|
|
"result": "28 tests passed in129.95s",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/platform-budget-r1",
|
|
"commit": "76fdc0b861ec2ee7f6512dc5023ffc0cee5940f9",
|
|
"scope": "Absolute per-call and whole-operation deadlines, actual credential expiry and immutable source bytes; disposable fixture only"
|
|
},
|
|
"platform_fullchain_r1": {
|
|
"result": "8 tests passed in128.41s",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/platform-fullchain-r1",
|
|
"patch_sha256": "sha256:a26c68ff224663129757fd43d0a5364762180131030e4dda22975935be89f99d",
|
|
"scope": "Real local Access and Approval services, strict Secrets R4, root-built binaries, actual retained registry and disposable OpenBao; synthetic distinct identities and admission",
|
|
"proves": [
|
|
"Immediate precise CAS and authoritative GET before native effect",
|
|
"Six positive native calls, complete readback and cleanup",
|
|
"Signed DENY/ALLOW parity with durable source recording",
|
|
"Changed source, foreign caller, revoked approval, denied reader, registry drift and expiry refuse",
|
|
"Revocation after ALLOW before CAS permits zero native effect"
|
|
],
|
|
"native_accepted": false
|
|
},
|
|
"platform_signer_writer_r3": {
|
|
"result": "12 tests passed in12.14s on writer R2; R3 changes metadata only",
|
|
"reconstruction": "/tmp/netkingdom-target-root-review/platform-signer-r2",
|
|
"patch_sha256": "sha256:b0c190060f5a41d6002e1fb7b49f047fd4874a51576f29f3c127a8634c2616f6",
|
|
"metadata_delta_sha256": "sha256:a29cdbd2ac92fd09bc6c79144e9aeb84bb6abcd303df997c0f01c0223cf1a508",
|
|
"scope": "Disposable OpenBao, durable private receipt, exact KV CAS/readback, unknown outcomes retained; production entry deliberately unavailable",
|
|
"native_accepted": false
|
|
},
|
|
"wave7_preflight": {
|
|
"result": "All four owner source reconstructions matched expected final bytes before owner mutations",
|
|
"retained_difference": "Access canonical workplan retains existing T05/T06 managed UUID lines absent in review snapshot; exact two-line diff inspected; no source behavior difference",
|
|
"scope": "Unrelated owner dirty files preserved"
|
|
},
|
|
"approval_precision_publication_scan": {
|
|
"result": "First commit refused by unchanged scanner",
|
|
"blocked_file": "docs/reviews/2026-10-16-fractional-consumption-temporal-approval-owner-review.json",
|
|
"blocked_blob": "deefaac30c988de61ee26a08f29482ae76b39a0b",
|
|
"next_action": "Approval owner preparing explicit sha256 metadata formatting; no scanner bypass or review meaning change",
|
|
"resolution": "Approval owner prefix-only metadata repair; exact hashes/review meaning preserved. Unchanged normal scanner passed all6blobs;d40e842 published."
|
|
},
|
|
"wave7_publication": {
|
|
"result": "All five new canonical commits published (budget plus four-owner wave); exact committed file hashes independently verified and commits are origin/main ancestors",
|
|
"native_accepted": false,
|
|
"approval_limit": "Whole-repository projection revision unavailable due to retained unrelated dirty workplans; generated-only writeback refused without bypass",
|
|
"platform_sync": "Exact7be8b6e applied at primary/railiance01;64records,12historical unresolvededges"
|
|
},
|
|
"wave8_publication": {
|
|
"result": "All four commits published; exact committed bytes and origin/main ancestry verified",
|
|
"native_accepted": false
|
|
},
|
|
"access_outbox_hardening": {
|
|
"result": "Root go test -race ./internal/emission ./internal/decision ./cmd/access-engine -count=1 and chart tests passed",
|
|
"source_commit": "0a05383195213e7eaacd08388ce1d7892ce756df",
|
|
"scope": "Process exclusion, bounded storage/startup and refusal paths; native PVC/disk/receiver acceptance remains open"
|
|
},
|
|
"warden_installed_routing": {
|
|
"result": "135 root tests passed; normal make install-memory and installed plan verified",
|
|
"receipt": "warden-admin-routing/installed-verification.json",
|
|
"scope": "Installed metadata routing; no login or native custody"
|
|
},
|
|
"platform_native_adapter_r2": {
|
|
"result": "56 root tests passed in40.02s",
|
|
"retained_r1_failure": "Metadata-only crash could not recover; R2 distinguishes absent/metadata-only/version1 read-only outcomes",
|
|
"consumer_review": "decision-native-preparation/platform-public-trust-review-r2.json",
|
|
"native_accepted": false
|
|
},
|
|
"secrets_clean_release": {
|
|
"result": "Independent artifact/source hashes, two builds equal; fresh offline install and pre-credential trust refusal passed",
|
|
"receipt": "decision-native-preparation/r3/coordinator-bundle-review.json",
|
|
"native_effects_accepted": "0/11 call sites"
|
|
},
|
|
"access_package_local": {
|
|
"result": "Exact thirteen-file canonical tree committed; actual local resolver succeeds; global baseline findings retained",
|
|
"receipt": "access-package-identity/admission/canonical-creation.json",
|
|
"scope": "Local source ownership only; no remote/placement/native acceptance"
|
|
},
|
|
"access_publisher_fix": {
|
|
"result": "3 root tests and Bash syntax passed",
|
|
"commit": "84c78e072c8f3daf2bc3b90f8efc8fbeb16c3cf0",
|
|
"retained_failure": "CI400 pushed image then failed because python3 absent; no scanner/workflow bypass"
|
|
},
|
|
"audit_bounded_reconciliation": {
|
|
"result": "17 root tests passed,1 isolated skip; actual canonical sibling fixture separately passed1",
|
|
"commit": "64509d2c4039ca1249f9e8aabf2bae030e3640cf",
|
|
"scope": "Complete independently retained ledger protocol and receiver fixtures; no sender/observer admission"
|
|
},
|
|
"platform_packet_assembler_r2": {
|
|
"result": "5 root tests passed",
|
|
"retained_r1_failure": "Initial assembler did not enforce promised0600; repaired with exclusive no-follow open,fchmod,fsync",
|
|
"scope": "Offline preparation only; external approvals unauthenticated by assembler"
|
|
}
|
|
}
|
|
}
|