961 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
fred	552650a69b	contract(onboarding-wizard): revision 13 — seed-progress query, generalized designation-derived authority ... Addresses sol r12 verdict (NEW-18, NEW-19): - NEW-18: new mapped, designation-only seed-progress query returning exactly the next unrecorded canonical position index (or completion marker); screening evaluated before any fence state, non-designated submitters refused byte-shape-identically across recorded and unrecorded worlds; closed read set (position-committed existence flags + designation, §6.1); origin fresh-client resume and successor completion both query first and originate from the returned index. - NEW-19: designation-derived authority generalized to the actor-authorization component of every canonical position's owning family, each surface named expressly (contract 2 §4; RBAC §§2-3 workspace-content authorization; native-kanban SOT REQ-TEN-001 / A1 §8.1.3) as coupled severable-together amendments under one mechanically decidable scope, with a defined result-disclosure boundary (canonical outcome fields only). - §6.7: seed-progress two-world refusal, entitlement witness with the actual fresh client run against both worlds, content-position completion in both recovery variants, non-canonical content refusal, result-disclosure witness. - §7 item 12 now three coupled amendments; §1.1/§1.2/§5.3-5.4/§6.1 disclosures updated; preamble Revision 13 paragraph.	2026-08-27 04:12:05 -05:00
fred	10e82d05c0	contract 7 rev 12: pure designation transfer, epoch-derived account-free seed tuples, designation-derived origination authority ... Answers sol re-review 10 (NEW-12/NEW-13/NEW-14 residuals, NEW-16, NEW-17): - Canonical seed tuples fully epoch-derived and account-free: no generated id or account identifier in any canonical payload or scope; child positions reference parents by epoch-scoped canonical seed role, resolved server-side at execution (canonical-reference resolution); position 1 carries no initial-owner field — the contract 2 §4.3 default binds owner to the acting designation as a recorded outcome. Byte-stability absolute; post-succession replay compares equal by construction (NEW-13). - Succession reduced to a pure designation transfer: condition (a) = identity §7.1 unavailability alone (unable disjunct removed), no grant conferred, reads identity/platform/epoch state only, closed write set = designation update + one audit event. World-independent unconditionally, self-revocation pair included (NEW-12); post- completion succession confers nothing (NEW-16). - Designation-derived origination authority: scoped contract 2 §4 amendment (§7 item 12) — the current designation satisfies the hierarchy-authority component for fresh origination of unoriginated canonical positions only; no read/replay/standing authority. - §6.1 succession-write inventory closed in both directions; no-seed- input static assertion (NEW-17). - Revision-10 preamble vocabulary corrected to the banned state identity defines (NEW-14). - §6.7 reworked: strengthened two-world control (event content, grant- table delta, full-command timing), new self-revocation two-world refusal, designation-derived completion, post-completion harmlessness, post-succession replay digest-equality, empty-prefix digest-equality witnesses; out-of-order origination witness.	2026-08-27 03:38:06 -05:00
fred	83142e1b79	docs: onboarding-wizard contract revision 11 (sol r10 NEW-12/13/14/15: world-independent succession with conferred position-1 authority, unavailable-or-unable re-succession, §7.1 predicate collapse with forward constraint, dual identity-surface disclosure)	2026-08-27 02:50:32 -05:00
fred	3824fc6a37	docs: onboarding-wizard contract revision 10 (sol r9 NEW-11: seed-origin becomes a designation with a disclosed succession command — origin loss recoverable without factory reset, no-oracle shape preserved)	2026-08-26 23:21:33 -05:00
fred	535ac2d860	docs: onboarding-wizard contract revision 9 (sol r8 NEW-9 residual: prefix-derived seed tuples + seed-origin gate; NEW-10: target-result authorization on every replay mode)	2026-08-26 22:56:59 -05:00
fred	eff3b91478	docs: onboarding-wizard contract revision 8 (sol r7 NEW-9: shared replay target-result authorization, seed-only boundary, replay access event)	2026-08-26 22:30:22 -05:00
fred	84fe8b6ef1	docs: onboarding-wizard contract revision 7 (sol r6 F6 residual + NEW-8)	2026-08-26 21:43:57 -05:00
fred	b8b257e1ec	docs: onboarding-wizard contract revision 6 (sol r5 residual F7 + N7 seed immutability)	2026-08-26 21:08:33 -05:00
fred	0162443a38	docs: onboarding-wizard contract revision 5 (sol re-review 3 residuals + N5/N6)	2026-08-26 20:40:14 -05:00
fred	e58d0a5447	docs: onboarding-wizard contract revision 4 (sol re-review 2 residuals + N3/N4) ... - F2: bootstrap-status closed two-field schema (epoch enum + pre-epoch-only mode), post-epoch mode-field absence witnessed, contract 6 \u00a72.2 amendment disclosed (\u00a77.9) - F5/N4: contract 5 \u00a73.1 rank-6 mapping expansion disclosed naming the rows to amend (\u00a77.8); \u00a71.1 states which families are live vs amended - F7: complete idempotency envelope \u2014 fence records operation/actor/scope/ payload digest, re-authorized replay, collision refusal, no error replay, concurrent loser receives winner's recorded outcome; witnesses added - N1/N3: post-epoch application phase replaced by a single bootstrap finalize command (one transaction: admin + epoch close + carried settings/registration/ JIT/seed-parameter writes under the new admin); password-only v1 first admin (\u00a77.10); seed sequence derived from canonical state; \u00a76.11 uses the authentication-failure class	2026-08-26 20:21:55 -05:00
fred	eb48d72f67	docs(wizard): revision 3 — client-side composition, collect-first settings, idempotency fence, bound name sources (sol r2 residuals + N1/N2)	2026-08-26 19:55:45 -05:00
fred	666e3dbf20	docs: onboarding wizard revision 2 — first-company authority, mode as input, choice/witness repairs (sol F1-F9)	2026-08-26 19:13:36 -05:00
fred	1c9a3ddefb	docs: onboarding wizard contract (S2 contract 3)	2026-08-26 18:46:14 -05:00
fred	49b7943420	fix(gateway): scope /api/teams endpoints to team membership (#1428) (#1429)	2026-08-26 22:45:54 +00:00
fred	19e16bd44f	ci: publish web+appservice sha images on next (#1407) (#1427)	2026-08-26 22:42:03 +00:00
jason.woltje	3bd490c080	Merge pull request 'docs: north-star PRD rewrite (D1-D14), ROADMAP, kanban SOT Amendment A1' (#1425) from docs/prd-north-star-rewrite into next ... Reviewed-on: #1425	2026-08-26 16:57:16 +00:00
fred	4b448109dd	docs/prd: address independent review findings 1-10 (fidelity, A1 record class + carve-out, roadmap completeness)	2026-08-25 23:20:40 -05:00
fred	bc1149c15e	docs: north-star PRD rewrite (D1-D14), ROADMAP.md, kanban SOT Amendment A1 ... - docs/PRD.md: Part I product north star authored from ratified decisions D1-D14; Part II preserves all active workstream contracts verbatim (KBN-101, FCM #758, FCOM #766, TESS, #756, MOS-PORT, #1150, #1174, #1194, RI #1275, M1). Referenced anchors unchanged. - docs/archive/PRD-v0.1.md: v0.1.0 beta PRD body archived verbatim with supersession header. - docs/ROADMAP.md: all phases P0-P5 present from day one per D11 (P2-P5 as explicit placeholders). - docs/requirements/native-kanban-sot.md: Amendment A1 (D13) - hierarchy parentage + RBAC chain above workspaces; sections 1-7 untouched.	2026-08-25 22:23:07 -05:00
orch-01	089953a7cf	ci: enable turbo remote cache on trusted publish events (#1424) ... Co-authored-by: orch-01 <[email protected]>	2026-08-25 18:32:55 +00:00
ops-deploy-01	7b25be22e9	fix(#1394): recover-token headless — dual path (--email flag + piped stdin) with documented precedence (#1423) ... Co-authored-by: ops-deploy-01 <[email protected]>	2026-08-25 16:14:56 +00:00
ops-deploy-01	4e3d179e61	fix(#1390): gateway uninstall headless — --yes/--remove-data; non-TTY without consent fails loud (#1422) ... Co-authored-by: ops-deploy-01 <[email protected]>	2026-08-25 16:00:17 +00:00
ops-deploy-01andorch-01	ae58482b72	fix(#1392): review-285 N1+N2 follow-up — env has no config authority in schema-check; verification throws fatal at install (#1421) ... Co-authored-by: ops-deploy-01 <[email protected]>	2026-08-25 15:08:04 +00:00
code-infra-01	b2d40dada0	fix(#1391): boot-time ValidationPipe metatype self-check — fail loud at startup (#1419) ... Co-authored-by: code-infra-01 <[email protected]>	2026-08-25 14:01:24 +00:00
code-be-02andorch-01	d30a4cce00	feat(git-tools): consume .mosaic/repo.json declarations in compat mode (T51 WP5b) (#1416) ... Co-authored-by: code-be-02 <[email protected]>	2026-08-25 12:55:40 +00:00
veronicaandorch-01	4cd280e48d	feat(tools/git): grant-reviewer.sh org-team reviewer grant with fail-closed read-back (#1415) (#1417) ... Co-authored-by: veronica <[email protected]>	2026-08-25 02:30:33 +00:00
code-infra-01andorch-01	8738a03893	fix(#1395): accounts.issuer column + credential-only backfill — password auth on fresh installs (#1401) ... Co-authored-by: code-infra-01 <[email protected]>	2026-08-25 01:19:29 +00:00
code-be-01andorch-01	04a01be992	ci(publish): serialize workspace-consuming image builds after publish-next-npm (#1411) (#1412) ... Co-authored-by: code-be-01 <[email protected]>	2026-08-25 01:18:02 +00:00
veronicaandorch-01	812e2df1da	fix(#1408): mosaic-agent@ condition arms on either home shape (#1410) ... Co-authored-by: veronica <[email protected]>	2026-08-25 01:17:15 +00:00
veronicaandorch-01	8c292fb32f	fix(#1408): legacy-socket launch guard + seat launch.sh preference (#1409) ... Co-authored-by: veronica <[email protected]>	2026-08-25 00:49:27 +00:00
code-be-01andorch-01	f45928c311	fix(ci): restore workspace manifests after publish pin transform (#1404) (#1405) ... Co-authored-by: code-be-01 <[email protected]>	2026-08-25 00:08:40 +00:00
ops-deploy-01andorch-01	4d24ae8618	fix(#1392): hash-ledger migrations + install-time schema verification (closes #1392, closes #1402) (#1403) ... Co-authored-by: ops-deploy-01 <[email protected]>	2026-08-24 23:11:50 +00:00
code-be-01andorch-01	d790572e2e	ci(publish): pin next-channel @mosaicstack deps to exact same-pipeline builds (#1389) (#1400) ... Co-authored-by: code-be-01 <[email protected]>	2026-08-24 23:05:37 +00:00
code-be-01andorch-01	d7b1dd9601	test(git-tools): wrapper-guard harness distinguishes tool failure from drift (#1380-FF) (#1388) ... Co-authored-by: code-be-01 <[email protected]>	2026-08-24 21:43:09 +00:00
code-be-01andorch-01	0db2d19a22	feat(framework): mosaic doctor structure-anchor provisioning check (T51 WP0b) (#1379) ... Co-authored-by: code-be-01 <[email protected]>	2026-08-24 20:15:08 +00:00
code-be-01andorch-01	8eb7e6354e	fix(fleet): resolve-then-validate symlink guard + framework helper resolution (#1380) (#1383) ... Co-authored-by: code-be-01 <[email protected]>	2026-08-24 19:39:13 +00:00
code-be-01andorch-01	9014a510a9	ci(mosaic): repo-structure declaration CI gate (T51 WP5c) (#1378) ... Co-authored-by: code-be-01 <[email protected]>	2026-08-24 04:43:26 +00:00
code-be-01andorch-01	974e4740ab	docs(mosaic): declare repo structure v2 (T51 WP2a) (#1377) ... Co-authored-by: code-be-01 <[email protected]>	2026-08-24 03:49:33 +00:00
orch-01	9cd6d39b71	fix(git-tools): pr-create API fallback resolves base from forge default branch (E4) (#1376)	2026-08-24 02:49:38 +00:00
code-be-01andorch-01	143f925fd8	fix(git-tools): admin-gated --no-ci-expected merge assertion for CI-less repositories (#1373) ... Co-authored-by: code-be-01 <[email protected]>	2026-08-23 18:54:49 +00:00
fredandgate-merge-01	24294d3b77	fix(git-tools): issue-view shows comment bodies and names the real tea failure (#1357) (#1365) ... Co-authored-by: fred <[email protected]>	2026-08-22 00:23:22 +00:00
veronicaandgate-merge-01	24caeab057	fix(tmux): locate the REPL input box by shape, not by a Claude-only glyph (#1363) ... Co-authored-by: veronica <[email protected]>	2026-08-21 23:45:08 +00:00
fredandgate-merge-01	888a6ad29b	fix(#1356): tea login resolution fails closed on a declared git identity (#1361) ... Co-authored-by: fred <[email protected]>	2026-08-21 23:04:31 +00:00
fred	24462f460e	docs(git-wrappers): correct the stale --login fallback and document the test suite's identity split (#1354)	2026-08-21 14:42:36 +00:00
veronicaandfred	a480ee83dc	docs(W4): document contract — stamp kind and status on 104 live docs (#1350) ... Co-authored-by: veronica <[email protected]>	2026-08-21 14:07:36 +00:00
fred	fd43ed5420	fix(git-wrappers): no --login must use the caller's own credential, not a guessed shared login (#1352)	2026-08-21 04:10:42 +00:00
fargoandfred	1d84bc3f3d	fix(fleet): lease-broker activation, symlink-safe unit placement, named launch refusal — Wall 6 (#1292) (#1297) ... Co-authored-by: fargo <[email protected]>	2026-08-21 00:40:29 +00:00
fred	6306914965	fix(lease-broker): no lease held is a no-op success, not a denied transition (#1339)	2026-08-20 23:40:09 +00:00
fred	af43a7a63e	docs(fleet): tier the north star and declare the tier-0 operator surface (#1337)	2026-08-20 23:05:34 +00:00
fred	ca97b885b0	fix(#808): never borrow a session identity for non-tmux senders (#1335)	2026-08-20 21:03:50 +00:00
code-infra-01	6db0bead44	fix(#1327): sentinel-managed PATH block, default-home-only profile writes (#1330) ... Co-authored-by: code-infra-01 <[email protected]>	2026-08-20 20:20:33 +00:00