248 Commits

Author	SHA1	Message	Date
mosaic-coder	354b695362	style(kbn): prettier-format KBN-101 Envelope A SSOT docs (format:check clean) ... Apply repo prettier (3.8.1, .prettierrc) to the KBN-101 Envelope A contract docs so CI `format:check` passes. Formatting-only: - Whitespace, markdown table pipe/column alignment, separator-dash widths, emphasis-marker normalization (`*italic*` -> `_italic_`). - One content-neutral fix required for prettier idempotency: the KBN-101-06 row's `*future*` italic clashed with the literal underscore in `SCM_RIGHTS` in the same cell, making prettier non-idempotent (it oscillated `SCM_RIGHTS`<->`SCM*RIGHTS`). Dropped that single italic marker; the word "future" and every value are preserved. Verified: no normative value/word/glob/path/number or table cell VALUE changed in any of the 5 files (exhaustive substantive-char-stream + per-cell equality vs the pre-format snapshot). All anchored contract edits (rc.20 block, CONNECT allowlist, secret matrix + PROVISIONAL-CONVENTION annotations, §7 manifest, SHARED rc.20 entry, RATIFIED preamble) intact. Only INDEX/DB-ROLE-SPLIT/ ENVELOPE-A changed; MISSION-MANIFEST/SHARED-CONTRACT already conformant. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0158NZqN2n2ymKFeJAZ4GUCb	2026-07-25 18:40:58 -05:00
mosaic-coder	86e00e1757	docs(kbn): mark rung DSN Vault subpaths PROVISIONAL-CONVENTION (Mos touch-up) ... Per Mos ruling: do not silently freeze the inferred Vault subpaths for the two new rung DSN secrets. Annotate the §5 secret-matrix rows for `.../database/runtime-user` and `.../database/runtime-orchestrator` as PROVISIONAL-CONVENTION — exact subpaths TO-CONFIRM against the live Vault layout at KBN-101-03/-05 implementation. The secret NAMES remain envelope-fixed; only the subpath is provisional. Annotation-only; no other edits. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0158NZqN2n2ymKFeJAZ4GUCb	2026-07-25 18:18:06 -05:00
mosaic-coder	e4de82a5b1	feat(kbn): land KBN-101 Envelope A v6 (rc.20) — declarative sink-RBAC + RLS write-source (Form A) ... Form A apply-in-place amendment of the frozen native-kanban SSOT, ratifying the converged KBN-101 Envelope A v6 (rc.20): declarative sink-RBAC + per-role connection-selection + RLS WITH CHECK/USING write-source + FORCE ROW LEVEL SECURITY + sink-resident task_status_write_override table on `tasks`. Contract-doc only — no code, no CI fixture, no KBN-100 file/row invention. Files: - KBN-101-DB-ROLE-SPLIT.md: §4 role table (+4 rung rows), role-table F2 note, §4 L176 CONNECT allowlist (+2 logins; "either"->"any of the three" + NB-5 inline grants), §4 closing rc.20 block + frozen-invariant note, §5 secret matrix (+2 rung DSN rows), §7 manifest (+KBN-101-10 row, +,10 dep edges on -02/-03/-05/-06/-08, closing-sentence clause). - SHARED-CONTRACT.md: rc.6 + rc.5 "Non-effect" pointer clauses; new ### 1.0.0-rc.20 changelog entry. - MISSION-MANIFEST.md: §10 change-control audit-trail note. - INDEX.md: index row for the ratified envelope doc. - KBN-101-ENVELOPE-A.md (new): converged v6 envelope text, verbatim, marked RATIFIED / part of the frozen SSOT as of this PR. Ratification lineage: Jason B1 ruling (2026-07-20T23:08Z) + Mos OPTION A + Mos Q1 (TIER-LEVEL) + Mos Q2 (RLS WITH CHECK, two mandatory conditions) + Gate A (a11a1e2c) + Gate B (a6aac2cd). HALT-clear per envelope §0-§1. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0158NZqN2n2ymKFeJAZ4GUCb	2026-07-25 18:13:20 -05:00
jason.woltje	fabde1c834	docs(rfc): add RFC-001 (MACP/Matrix-native comms) + RFC-002 (install/config/topology) (#886) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-25 21:02:54 +00:00
jason.woltje	11d2818453	docs(tasks): FCM-M5-001 done — verified completion evidence (supersedes #848) (#853)	2026-07-20 07:45:08 +00:00
jason.woltje	aa999daf1b	fix(framework): durable Gitea comment posting in pr-review.sh via REST + read-back verify (#812) (#852)	2026-07-20 06:45:48 +00:00
jason.woltje	627cf2bb38	docs(fleet): add operator configuration guide (#789)	2026-07-20 05:22:25 +00:00
jason.woltje	0582a8912b	WI-7 #834: T-C server-side branch-protection posture + R1 honesty amendment (#847)	2026-07-20 04:20:02 +00:00
jason.woltje	2509eb7646	WI-6 (#833): constrained recovery command + mosaic-context-refresh skill wrapper (#846)	2026-07-20 03:33:00 +00:00
jason.woltje	07553ead33	WI-5 #832: Receipt-challenge protocol (compaction-refresh, milestone 188) (#845)	2026-07-19 23:18:56 +00:00
jason.woltje	e4d7d4502d	WI-3 (#830): compaction observers → revoke + D4 same-PID generation auto-revoke (#842)	2026-07-19 19:46:28 +00:00
jason.woltje	8dfcf1903e	fix(#838): bound broker reply deadlines + fail-close empty-read; de-flake acceptance harness (#839) ... Bound broker reply deadlines (separate read/lock/send budgets, BROKER_BUSY-before-mutation, fresh post-handle send budget → closes drop-after-commit window); fail-close empty/truncated read → GATE_UNAVAILABLE deny. De-flakes the 1917 acceptance surface. terra CODE APPROVE (pi) + Opus SECREV APPROVED (claude) — RoR comment 18143. Promote-lease-lost-ACK residual = fail-safe two-generals observability-gap, routed to WI-3 D2-v5 as named-disclosed-bounded-residual (route i). Gate-16 3-principal author=gpt-sol. closes #838	2026-07-18 07:15:50 +00:00
jason.woltje	abd2791f59	feat(mosaic): WI-2 mutator-class guard for directive-freshness (#837) ... WI-2: mutator-class guard for the compaction directive-freshness mechanism — command-position parser (prefix x var-indirection unified) + primitive-anchored invariant backstop + all-tools-hook fail-close. Parser-complete on principle: realistic evasion matrix RED-regression-covered, residual exotic evasions proven backstop-caught (B-tests), lens-convergence reached. closes #829	2026-07-18 05:51:58 +00:00
jason.woltje	8ec67a1126	feat(mosaic): add authenticated external lease broker (#836)	2026-07-18 03:12:23 +00:00
jason.woltje	d801d6c4c8	feat(mosaic): add secure skill registration CLI (#826)	2026-07-17 23:45:35 +00:00
jason.woltje	d3bf52898b	fix: reject unknown installer arguments (#825)	2026-07-17 22:16:51 +00:00
jason.woltje	3f77229e88	fix(#792): fleet roster ENOENT actionable exit + installer heading printf (#818)	2026-07-17 21:36:36 +00:00
jason.woltje	9ddc6fbda8	feat(fleet): mosaic fleet regen — regenerate roster-derived projections (PR3 of #791) (#813)	2026-07-17 03:17:55 +00:00
jason.woltje	31607a4af6	feat(mosaic): durable pre-update snapshot + verify net + restore CLI (#791 PR2) (#811)	2026-07-17 00:43:18 +00:00
jason.woltje	32a0ffba13	feat(mosaic): manifest-owned upgrade guard so updates never wipe operator config (#791) (#802)	2026-07-16 23:01:26 +00:00
jason.woltje	8536454257	fix(glpi): accept HTTP 206 in list wrappers (#807) (#810)	2026-07-16 22:47:58 +00:00
jason.woltje	4f29cc604d	fix(tmux): correct cross-socket sender identity (#808) (#809)	2026-07-16 22:47:25 +00:00
jason.woltje	9745bc3f29	feat(fleet): add reviewed v1-to-v2 migration preview (#788)	2026-07-16 13:11:16 +00:00
jason.woltje	adad486b6f	fix(fleet): enforce exact comms authority (#787)	2026-07-16 00:32:23 +00:00
jason.woltje	c1aecfabe9	test(fleet): cover reconciler lifecycle gates (#786)	2026-07-15 16:46:13 +00:00
jason.woltje	499090508e	feat(fleet): reconcile local roster state (#785)	2026-07-15 15:03:31 +00:00
jason.woltje	c593a15ef8	docs(kbn): freeze KBN-101 database role split contract (#774)	2026-07-15 13:34:29 +00:00
jason.woltje	bc5e73629e	feat(fleet): add generation-guarded agent CRUD (#773)	2026-07-15 12:03:05 +00:00
jason.woltje	191efaefeb	feat(fleet): enforce generated environment boundary (#772)	2026-07-15 08:40:32 +00:00
jason.woltje	e9c4aa3e8b	test(fleet): validate shipped artifact dispositions (#770)	2026-07-15 01:37:12 +00:00
jason.woltje	a5e8e55401	feat(fleet): add shared role semantics (#768)	2026-07-15 00:53:47 +00:00
jason.woltje	eb4e14ae5c	feat(mos): add logical identity connector fencing (#757)	2026-07-14 23:33:06 +00:00
jason.woltje	2e2280070a	docs(#753): clear KBN-010 threat and schema gate (#765)	2026-07-14 21:46:44 +00:00
jason.woltje	aa5b43bba2	feat(fleet): add roster v2 structural compiler (#764)	2026-07-14 20:37:52 +00:00
jason.woltje	ba13c08890	Fixes #756 (#763)	2026-07-14 20:26:15 +00:00
jason.woltje	c32d85a337	docs(fleet): define declarative configuration M0 (#760)	2026-07-14 19:53:12 +00:00
jason.woltje	48b2bc42c9	docs(mos): format Option 2 qualification report (#762)	2026-07-14 19:33:09 +00:00
jason.woltje	5e832049bb	docs(mos): preserve Option 2 qualification evidence (#759)	2026-07-14 19:16:11 +00:00
jason.woltje	49e8a54105	docs(#751): Publish native Kanban/SOT canon (#752)	2026-07-14 17:08:09 +00:00
jason.woltje	d077183554	docs(tess): remediate M5 qualification findings (#750)	2026-07-13 19:59:38 +00:00
jason.woltje	405984af5a	De-hardcode orchestrator and interaction agent names (#748)	2026-07-13 18:59:27 +00:00
jason.woltje	8dd4e9d541	docs(tess): ledger sync m4 — M5-003 done, #745/#746 merged (#749)	2026-07-13 18:14:24 +00:00
jason.woltje	bc8016c831	docs(#744): complete Tess documentation gate (#746)	2026-07-13 17:44:17 +00:00
jason.woltje	e72388b2cb	docs(tess): ledger sync m3 — M5-001 + M5-002 done (#745)	2026-07-13 16:14:23 +00:00
jason.woltje	c6e3cfbd95	docs(tess): ledger sync — W-001 3-of-3 merged, M5-002 approved, M5-001 in TDD (#743)	2026-07-13 15:29:33 +00:00
jason.woltje	5789711ee0	docs(tess): add migration evidence set (#742)	2026-07-13 15:14:29 +00:00
jason.woltje	f40e6ba388	docs(tess): sync M4 tracking to merged reality (M4 in-progress / gate-pending) (#741)	2026-07-13 15:00:15 +00:00
jason.woltje	2363f155b4	feat(memory): add operator retrieval plugin (#736)	2026-07-13 12:44:31 +00:00
jason.woltje	76325ca3f2	feat(tess): add Mos coordination boundary (#735)	2026-07-13 11:59:16 +00:00
jason.woltje	9e5b9188ce	feat(agent): add transitional Hermes runtime adapter (#734)	2026-07-13 11:29:27 +00:00