133 Commits

Include renames

Author	SHA1	Message	Date
mos-dt-0andMos	a6b5f6a01a	fix(wake): #944 path becomes a hard-locator arm — detector-shape actionable entries pass the §2.1 gate (#945) ... Closes #944. _has_hard_locator accepted only repo+issue / 40-hex sha / file — the forge vocabulary. The detector emits path (+snapshot_sha when attested) and NEVER emits file/issue/sha, so predicate and sole producer shared ZERO keys and every class=actionable board_file entry dead-lettered. Latent since #920, whose harness pinned the detector's own emission shape as its malformed example — the suite certified the gap it was written to guard. Fix: `path` becomes a hard-locator arm, and ONLY path. Bare path-less snapshot_sha is a deliberate NON-arm (would widen past the board_file vocabulary); Q11(d) asserts it still quarantines at 7/40/64 chars, spanning the detector's ^[0-9a-f]{7,64}$ attestation range. VERIFICATION - Pipeline 2105 terminal-green at fa36da8. Its `test` step reaches all nine wake harnesses via turbo -> packages/mosaic `test` -> `test:framework-shell`, which names each suite explicitly. The two-levels-down indirection matters: no search of .woodpecker/* can see it, and that is exactly why this question was got wrong earlier today and then corrected. CI therefore DOES attest the quarantine suite and the detector suite at this head. - Independent review (mos-dt, consumer on the affected lane) PASS at fa36da8, from a detached worktree: predicate provably unmoved from fb3c3c3 (comment-stripped sha256 identical, _has_hard_locator body byte-identical), RED control at base reproduced exactly 8 failures all Q11 including "got 6". - Third reviewer (wake-judge) ACCEPT on both judgment calls: the Q1 assertion reversal is a legitimate correction (the flip was forced, not elective — base fixtures red 19 assertions against the head predicate) and path-alone satisfies §2.1, whose operative test is "one targeted call, never a search" — two of its four named exemplars already resolve to current state. Requiring path+snapshot_sha jointly would permanently dead-letter a declared source class and conflict with #940's advisory-fields ruling. - Judge's mutation criterion met: with the reconciled exemption disabled, the gate-level assertion ("an ORIENTATION-tier enumeration must NOT be quarantined") dies at this head and did not exist as a casualty before F1. - D4 (detector lock re-acquisition) fails intermittently at base AND head; git diff base..head over the detector files is EMPTY, so it is out of this PR's surface on structural grounds rather than on a re-roll. Known defect, fix identified (detector.sh:516, fd 9 leaked into sleep), tracked separately. KNOWN RESIDUALS - ENUM-B is now the sole address-free reconciled fixture, so the exemption's gate-level guard is a population of one. Safe by population, not by design. Author follow-up: assert ENUM-B carries no hard-locator arm so the harness guards its own premise. - The binding spec (CONVERGED-DESIGN.md §2.1, separate repo) still enumerates four forge tokens and reads narrower than the shipped gate. Tracked as #948, sequenced after the dragon-lin reseed. - Hard-locator arms are type-loose: repo/file/path accept any non-null JSON value. Pre-existing; `sha` fails closed only by accident of test(). Tracked separately. Authored by pepper (sb-it-1-dt); reviewed independently by mos-dt (sb-it-1-dt) and wake-judge. The mos-dt-0 commit/fork identity does not identify the author — attribution collapse tracked in #3092. Co-authored-by: mos-dt-0 <[email protected]>	2026-07-30 14:01:48 +00:00
mos-dt-0andMos	539b475a92	fix(wake): #943 whole-string validation for WAKE_SNAPSHOT_TS_FUTURE_SLACK + version 0.6.13 ... grep is line-oriented, so a multi-line knob value passed the per-line anchors and was still fatal in arithmetic. Replaced with a case pattern matching the whole string, so an embedded or leading newline rejects. Manifest bumped 0.6.12 -> 0.6.13: three materially different detectors had shipped under one version string, and version= is the component sole self-identity claim. Authored-by: pepper Reviewed-by: mos-dt (independent, at this head; transfer proven by blob-hash equality) Merged-by: Mos Co-authored-by: mos-dt-0 <[email protected]>	2026-07-30 11:56:18 +00:00
mos-dt-0andMos	3e47fc076f	fix(wake): #942 harden WAKE_SNAPSHOT_TS_FUTURE_SLACK — validate shape AND force base-10 ... The slack knob was interpolated raw into $((...)) under set -u: a malformed value was FATAL to the poll, falsifying the poll-never-fails invariant, and a negative value inverted the guard to deny-all. Shape validation alone was insufficient — bash reads a leading zero as octal, so 08/09 passed the regex yet were fatal and 0300 silently meant 192. Now validated ^[0-9]{1,9}$ with a loud fallback to 300, then forced to base-10 via 10# so the knob means what the operator wrote. Authored-by: pepper Reviewed-by: mos-dt (independent, found both the original defect and the radix residual) Merged-by: Mos Co-authored-by: mos-dt-0 <[email protected]>	2026-07-30 11:17:51 +00:00
mos-dt-0andMos	8710d0f6d7	feat(wake): #940 snapshot-datable digests — fd-3 snapshot-metadata channel (#941) ... Adapter emits snapshot sha/ts out-of-band on fd 3 so a changing value never enters the delta-gate hash. Detector validates advisorily (sha regex, epoch sanity before arithmetic, future-skew slack); malformed metadata is dropped loudly and never gates the wake. Digest renders snapshot_sha/snapshot_ts plus a git-show re-verify hint. Adapters that never write fd 3 are byte-identical. Reviewed-by: Mos (design, independent) Reviewed-by: mos-dt (artifact, hardening §2) Co-authored-by: mos-dt-0 <[email protected]>	2026-07-30 10:55:18 +00:00
jason.woltjeandMos	b981b4ec10	fix(wake): #934 mount-free, privilege-invariant seq-integrity fault injection (T9/T11 run in non-priv CI) (#936) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 16:34:58 +00:00
jason.woltjeandMos	9e81ffd7fc	fix(wake): #932 stop reconciler re-enumerating already-CONSUMED detector state (#935) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 15:48:40 +00:00
jason.woltjeandMos	9becaf877f	fix(wake): #917 gate the final observed_seq cursor write + observed.set/cursor consistency (defense-in-depth) (#933) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 15:14:38 +00:00
jason.woltjeandMos	17087efe15	fix(wake): #925 framework-ship canon fallback-wake (systemd timer + schema bound + A10 install/validate) — F7 out of the box (#931) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 13:44:51 +00:00
jason.woltjeandMos	0ea41e848b	fix(wake): #913 installer adoption gaps — _lib dep-check fail-loud + mosaic-wake.service systemd-search-path link+validate (#930) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 12:37:29 +00:00
jason.woltjeandMos	347c1d57c1	fix(wake): #924 route dead-letter quarantine alarm via WAKE_ALARM_SINK_CMD with per-observed_seq dedup (G2a) (#929) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 11:45:09 +00:00
jason.woltjeandMos	13e6ce5e5c	fix(wake): #927 enqueue TOCTOU — move stale-tmp cleanup off the hot enqueue path (no concurrent in-flight-write clobber) (#928) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 10:56:40 +00:00
jason.woltjeandMos	90265ef550	test(wake): #923 de-flake T10 concurrent-enqueue race (deterministic barrier) (#926) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 10:23:07 +00:00
jason.woltjeandMos	937a276208	fix(wake): #920 quarantine render-refused drain entry (no head-of-line block) + reconciler enumerations render orientation-tier (reconciled:true, render-tier not class=digest) (#922) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 08:45:51 +00:00
jason.woltjeandMos	712c770b7a	fix(wake): #912 exercise the digest/HMAC trust suite in real CI (fix runner divergence + openssl + hard-require) (#921) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 08:11:28 +00:00
jason.woltjeandMos	d967a4a926	fix(wake): #914 digest renderer — WAKE_AGENT-prefixed ack line + digest-class locator threading (#916) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 07:13:07 +00:00
jason.woltjeandMos	c585ac3326	test(wake): #918 de-flake T7 ack-no-network-block (sub-second timing) (#919) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 06:46:28 +00:00
jason.woltjeandMos	e2ec927b1c	fix(wake): #908 unify observed_seq on a single store-side allocator (dissolve detector-private-counter seam) (#915) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 06:02:02 +00:00
jason.woltjeandMos	2378665eaf	feat(wake): W7 A10 idempotent installer + mosaic-wake.service (component-manifest, Gate-A, blank-reset retire, snapshot-guard, fail-closed install-validate) (#911) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 04:19:09 +00:00
jason.woltjeandMos	003cdaa1a6	feat(wake): W6 — off-host dead-man beacon + pluggable alarm-sink adapter (#910) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 02:30:28 +00:00
jason.woltjeandMos	320f5bfb6f	feat(wake): W5 — synthetic-canary FN-oracle + source-parity reconciler (#909) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 02:04:19 +00:00
jason.woltjeandMos	5df47e735e	feat(wake): W4 — per-host delta-gated detector daemon (fail-loud source semantics, enqueues to W2 store) (#907) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 01:04:55 +00:00
jason.woltjeandMos	dd1391fd76	fix(wake): digest hard-locator gate covers top-level .claim entries (Closes #905) (#906) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 00:58:40 +00:00
jason.woltjeandMos	10d957d095	feat(wake): W3 — cumulative-state digest renderer + non-circular HMAC signer (#904) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-26 00:32:12 +00:00
jason.woltjeandMos	28f022d9c0	feat(wake): W2 — three-cursor durable store + RECEIVED/CONSUMED ack-wrapper + watch-list schema (#903) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-25 23:58:08 +00:00
jason.woltjeandMos	ab6e8e80dc	fix(framework): send-message.sh fail-loud submission verdict + regression tests (Patch 6) (#895) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-25 22:57:11 +00:00
jason.woltjeandMos	1933c6cb1d	feat(framework): accept digest message class in agent-send.sh (W1) (#894) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-25 22:56:46 +00:00
jason.woltjeandMos	2483dada33	fix(framework): pr-review.sh -r/--repo + -H/--host overrides + UA + repo preflight (Patches 5/5c) (#896) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-25 22:08:08 +00:00
jason.woltjeandMos	4c117afe03	docs(framework): add WAKE-DOCTRINE.md guide (W0) (#893) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-25 21:57:51 +00:00
jason.woltjeandMos	3c7890f17f	fix(framework): detect-platform get_gitea_token fail-loud on absent per-slot token (Patch 2b) (#890) ... Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-25 20:51:19 +00:00
jason.woltjeandMos	a32ce4c8f9	feat(869-c4): activation version-coupling assertion (Part of #869) ... Part of #869 Mos (id-11) Gate-16 merge: independent APPROVE @90eb48fa (fail-closed identity locks byte-unchanged verified), author id2 != approver id11, clean mosaic-coder author, CI green wp1992. #869 Point-1 CODE COMPLETE (C1/C3/C5/C2/C4). Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-23 19:07:27 +00:00
jason.woltjeandMos	d351caad36	feat(869-c2): install-ordering enforcement-hook guard (Part of #869) ... Part of #869 Mos (id-11) Gate-16 merge: independent APPROVE @b6f36564 (8/8, verified vs real production settings template), author id2 != approver id11, clean mosaic-coder author, CI green wp1988. Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-23 18:48:33 +00:00
jason.woltjeandMos	4422231bdb	feat: per-agent Gitea identity resolution (#873) ... Closes #873 Mos (id-11) Gate-16 merge: independent APPROVE @4b472a22 (author-blocker dissolved via (a) re-author, identical tree hash to tech-approved head), author id2 != approver id11, clean mosaic-coder commit-author, CI green wp1985. Framework train COMPLETE 6/6. Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-23 18:09:34 +00:00
jason.woltjeandMos	8504216964	fix(pr-review): case-insensitive _belongs slug compare (#875) ... Closes #875 Mos (id-11) Gate-16 merge: independent APPROVE @9d8d58ae, author id2 != approver id11, clean mosaic-coder commit-author, CI green wp1982. Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-23 17:53:26 +00:00
jason.woltjeandMos	7edc9b3121	fix(gitea): direct REST comment/review with fail-closed read-back (#865) ... Closes #865 Mos (id-11) Gate-16 merge: fresh confirmatory independent APPROVE @8ac7e70f (1241-case fuzz 0 fail-open), author id2 != approver id11, clean commit-author, CI green wp1966. Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-23 17:25:32 +00:00
jason.woltjeandMos	2f50c0876b	feat(869-c3): lease-broker supervisor unit (Part of #869) ... Part of #869 Mos (id-11) Gate-16 merge: independent APPROVE @75235ef8 (9/9, no live host mutation), author id2 != approver id11, CI green wp1971. Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-23 17:19:48 +00:00
jason.woltjeandMos	48fd1df28a	fix(ci-queue-wait): treat absent branch (404) as queue-clear (#872) ... Closes #872 Mos (id-11) Gate-16 merge: independent review APPROVE @23cbdaf8, author jason.woltje(id2) != approver Mos(id11), CI green wp1974. Co-authored-by: jason.woltje <[email protected]> Co-committed-by: jason.woltje <[email protected]>	2026-07-23 17:08:57 +00:00
jason.woltje	b79336a8c1	feat(orchestrator): board-roll.sh — auto-roll LIVE board to LEDGER under byte cap (#868) ... feat(orchestrator): board-roll.sh - auto-roll LIVE board to LEDGER under byte cap Closes #868	2026-07-22 09:20:03 +00:00
jason.woltje	344d86a635	fix(#812 follow-up): normalize detect-platform.sh host-match port comparison by scheme (#859)	2026-07-20 10:13:29 +00:00
jason.woltje	acd7d380f6	fix(framework): install deps on worktree bootstrap + legible deps-preflight at gate seam (#856) (#858)	2026-07-20 09:38:12 +00:00
jason.woltje	3b70c66c07	fix(framework): drop unsupported --comment from tea pr approve/reject; route review body via durable comment (#835) (#857)	2026-07-20 09:19:48 +00:00
jason.woltje	aa999daf1b	fix(framework): durable Gitea comment posting in pr-review.sh via REST + read-back verify (#812) (#852)	2026-07-20 06:45:48 +00:00
jason.woltje	2509eb7646	WI-6 (#833): constrained recovery command + mosaic-context-refresh skill wrapper (#846)	2026-07-20 03:33:00 +00:00
jason.woltje	07553ead33	WI-5 #832: Receipt-challenge protocol (compaction-refresh, milestone 188) (#845)	2026-07-19 23:18:56 +00:00
jason.woltje	e522b22fa4	WI-4 (#831): verbatim-hashed normative fragments (B_payload/H_payload) (#844)	2026-07-19 20:34:20 +00:00
jason.woltje	e4d7d4502d	WI-3 (#830): compaction observers → revoke + D4 same-PID generation auto-revoke (#842)	2026-07-19 19:46:28 +00:00
jason.woltje	8dfcf1903e	fix(#838): bound broker reply deadlines + fail-close empty-read; de-flake acceptance harness (#839) ... Bound broker reply deadlines (separate read/lock/send budgets, BROKER_BUSY-before-mutation, fresh post-handle send budget → closes drop-after-commit window); fail-close empty/truncated read → GATE_UNAVAILABLE deny. De-flakes the 1917 acceptance surface. terra CODE APPROVE (pi) + Opus SECREV APPROVED (claude) — RoR comment 18143. Promote-lease-lost-ACK residual = fail-safe two-generals observability-gap, routed to WI-3 D2-v5 as named-disclosed-bounded-residual (route i). Gate-16 3-principal author=gpt-sol. closes #838	2026-07-18 07:15:50 +00:00
jason.woltje	abd2791f59	feat(mosaic): WI-2 mutator-class guard for directive-freshness (#837) ... WI-2: mutator-class guard for the compaction directive-freshness mechanism — command-position parser (prefix x var-indirection unified) + primitive-anchored invariant backstop + all-tools-hook fail-close. Parser-complete on principle: realistic evasion matrix RED-regression-covered, residual exotic evasions proven backstop-caught (B-tests), lens-convergence reached. closes #829	2026-07-18 05:51:58 +00:00
jason.woltje	8ec67a1126	feat(mosaic): add authenticated external lease broker (#836)	2026-07-18 03:12:23 +00:00
jason.woltje	d801d6c4c8	feat(mosaic): add secure skill registration CLI (#826)	2026-07-17 23:45:35 +00:00
jason.woltje	d3bf52898b	fix: reject unknown installer arguments (#825)	2026-07-17 22:16:51 +00:00