mosaicstack/stack
1
0
Fork 0
Code Issues 76 Pull Requests Actions Packages Projects Releases 15 Wiki Activity
633 Commits 56 Branches 17 Tags
f320d075df1737933e4a3ece0e85c9401b03d1fa
Commit Graph

13 Commits

Author SHA1 Message Date
mos-orchestrator
f320d075df co-attest: probe-3 v9 byte-scope-verify PASS (full-closure + B7 broker-env-iso + B8 bytecode-pinned); supersedes e08ad03/2ae379e 2026-07-18 18:52:57 -05:00
ms-lead-reviewer
e1c9a4682d docs(827): Gate0 Probe-3 launcher-fix §3-review v9 PASS @1c34e3cb (+ mark v8 superseded) 
Independent Opus SECREV review (ms-secrev-828 lane, dispatched by mosaic-100;
Gate-16 author≠reviewer; byte-only; did not build).
Reviewed object = 1c34e3cb31
harness sha256 = 29e5c7bfbe1911b52984bd94c79036bb1200ee82588318367b13c2b1053a0103
Verdict PASS: B6(c) remediated — launcher -I dropped -> -s + PYTHONNOUSERSITE=1;
empirically verified sys.path[0]=pinned/ so the pinned launcher's bare
'from lease_generation import' binds to pinned/lease_generation.py (broker keeps
-I, explicit --generation-module import). B7/B8/B5/B6-rest/fidelity/traceability/
lease_anchor/live-path/single-broker/--runs/ABSENT all intact; -O-safe. Also
marked my own v8 FAIL review SUPERSEDED (reviewed a92ad090 -> fixed by 1c34e3cb).
Byte review only; ran nothing.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-18 18:48:01 -05:00
ms-lead-reviewer
e6c3b830fd docs(827): Gate0 Probe-3 env+bytecode §3-review v8 FAIL @a92ad090 
Independent Opus SECREV review (ms-secrev-828 lane, dispatched by mosaic-100;
Gate-16 author≠reviewer; byte-only; did not build).
Reviewed object = a92ad090ae
harness sha256 = 915ebeb5aeab108cb60c5f629c1db520623ab4914eed427ca34ee66f9aa08390
Verdict FAIL: B7 (broker env=allowlist not os.environ + -I) and B8
(PYTHONDONTWRITEBYTECODE + -B both children + __pycache__/.pyc reject
fail-closed) land correctly, BUT the -I added to the LAUNCHER command
(p3_d4_focused_run.py:512) breaks B6(c): launcher's bare
'from lease_generation import' (@f4008307 launch-runtime.py:15) cannot
resolve the pinned helper because -I implies -P (Py 3.11+) which strips the
script dir from sys.path — empirically confirmed on Python 3.11.2
(ModuleNotFoundError). Fix: drop -I from the launcher command (keep -B +
allow-list env); keep -I on the broker (explicit --generation-module import).
Byte review only; ran nothing.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-18 18:38:30 -05:00
ms-lead-reviewer
90dc68a31c evidence-integrity: mark my v7 SECREV review SUPERSEDED by v8 
False-assurance principle: my v7 PASS record (@f609a449) is overtaken by the
stricter B7+B8 bar after homelab's 3rd-principal FAIL (broker env-inherit +
unpinned .pyc). This v7 PASS is NOT fire-authorization. Authored by the
ms-secrev-828 reviewer lane (my own artifact, Gate-16).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-18 18:33:32 -05:00
mos-orchestrator
2ae379e664 evidence-integrity: mark v7 co-attest SUPERSEDED (homelab FAIL @f609a449, B7+B8 raised) 2026-07-18 18:30:49 -05:00
mos-orchestrator
e08ad03506 Gate0 probe-3 (#827): Mos v7 full-closure byte-scope-verify CO-ATTESTATION (distinct identity) — PASS; all 3 closure pins independently recomputed, B5 conjunction + B6 verified in source; supersedes v6 12914d8/b6bd0cd; BYTE-CLEAR only, FIRE gated on homelab 3rd-principal + Jason transparency + Mos GO 2026-07-18 17:58:56 -05:00
ms-lead-reviewer
2bba933f67 docs(827): Gate0 Probe-3 full-closure §3-review v7 PASS @f609a449 
Independent Opus SECREV review (ms-secrev-828 lane, dispatched by mosaic-100;
Gate-16 author≠reviewer; byte-only; did not build).
Reviewed object = f609a44953
harness sha256 = 0f1bd1b39399b32f243d901230e2d840794a2144edd723a095dab716833a7a9b
Verdict PASS: B5 full-closure hashed==executed via conjunction (git-object
source @f4008307/@23c0caca + fixture-private 0700/0600 O_EXCL no-writable-window
+ re-hash immediately before each Popen) for launcher e950e422 / helper
06162540 / broker 4db4fef1; B6 one shared pinned lease_generation.py bound to
launcher import (sys.path[0]=pinned) AND broker --generation-module; closure
import guard complete; BAR1 fwd-contains 66b1e0a0; BAR2 .state stays in fixture
root, fidelity untouched; BAR3 carry-over intact; ABSENT sweep 0. Byte-only; ran nothing.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-18 17:51:46 -05:00
mos-orchestrator
b6bd0cd91c docs(827): SUPERSEDE Mos co-attest 12914d8 — homelab 3rd-principal FAIL upheld, stricter hashed==executed-full-closure bar; live target=v7 (ii)-materialization 2026-07-18 17:27:05 -05:00
mos-orchestrator
12914d8edd docs(827): Mos byte-scope-verify CO-ATTESTATION v-final — probe-3 PASS @2d54a9dd 
Independent provider-byte verify of harness 2d54a9dd (sha256 15a154df, 27366B) +
review-v6 23c0caca. VERDICT: byte-scope + mechanism + hygiene PASS. NEW-5 closed via
approach (i) [exec-adjacent re-hash, in-place, (ii) reverted]; NEW-6 closed [portable
resolve_gated_wi_root, off-by-one gone]; creds-scrub + source-invalid-purge confirmed;
all mechanism/assertion/fidelity/isolation invariants byte-stable; R1 boundary held.
Committed under distinct mos-orchestrator identity = distinct-identity co-attestation of
record (resolves shared ms-lead-reviewer signer gap). Byte-clear ONLY — FIRE still gated
on homelab third-principal verify + transparency-to-Jason + explicit Mos FIRE GO.
 2026-07-18 17:06:58 -05:00
ms-lead-reviewer
23c0caca9b docs(827): Gate0 Probe-3 NEW5/NEW6 §3-review v6 PASS @2d54a9dd 
Independent Opus SECREV review (ms-secrev-828 lane, dispatched by mosaic-100;
Gate-16 author≠reviewer; byte-only; did not build).
Reviewed object = 2d54a9dd14
harness sha256 = 15a154df55273f51301763a984485fd63813f6d1f05d2728abb9fb8b9c040b1a
Verdict PASS: NEW-5 approach (i) exact-byte sha256 pin trust anchor +
adjacent re-hash immediately before Popen (no interleaved yield) + exec in
place at pinned f4008307 worktree ((ii) copy-to-fixture/PYTHONPATH reverted);
NEW-6 portable+validated GATED_WI_ROOT (worktree enumeration, is-inside-work-tree
+ HEAD==f4008307, off-by-one gone); full v4/v5 carry-over byte-stable, R1
file-backed fidelity unperturbed, ABSENT sweep 0. Byte review only; ran nothing.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-18 16:55:17 -05:00
ms-lead-reviewer
49f0cdd15a docs(827): Gate0 Probe-3 hygiene §3-review v5 FAIL @7f975b95 
Independent Opus §3-conformance/SECREV review (Gate-16 author≠reviewer).
Reviewed object = 7f975b95ad
harness sha256 = c3a09a342a4b367184d44472ec6fc11f8a3aabb7e90d5a72aa6b7044b1d9b91e
Verdict FAIL: hygiene delta (a) creds-scrub + (b) source-invalid-removal
landed correctly and (c) byte-stable + (d) absent-sweep-0 hold, BUT homelab
NEW-6 (GATED_WI_ROOT off-by-one/non-portable resolution, :32) and NEW-5
(check-then-exec launcher TOCTOU, hash :280/:287 vs exec :514-515) are
present in these bytes; both must close for PASS. Byte review only; ran nothing.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-18 16:41:32 -05:00
ms-lead-reviewer
cff21358a2 docs(827): Gate0 Probe-3 fidelity §3-review v4 PASS @48484938 
Independent Opus §3-conformance review (Gate-16 author≠reviewer).
Reviewed object = 4848493870
harness sha256 = 9095eab7a4ddf11bb92bb5971d49e1facad12f4692ce2081665b0af47cbe5098
Verdict PASS: BAR1 traceability (launcher pinned head+sha256 to WI-3 f4008307),
BAR2 file-backed generation fidelity (read/bump_runtime_generation on the
fixture .state; assert_d4 observes state-file source), BAR3 carry-over
(live-path/precondition/isolation/lease_anchor_registered intact),
BAR4 b4-1..b4-5 (gated launcher, allow-list env no-escape, --runs==3,
whole-launch cleanup, -O-safe derived PASS). Byte review only; ran nothing.
FIRE remains separately gated on Mos GO.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-18 16:24:17 -05:00
ms-lead-reviewer
d19b41a62c docs(827): Gate0 Probe-3 Class-B §3-review v3 PASS @ace60667 
Independent Opus §3-conformance review (Gate-16 author≠reviewer).
Reviewed object = ace6066762
harness sha256 = 2f11c9391c0eef203f26b1206bee8bc4cd106e8c1192399c5e7b71f41a3f6b75
Verdict PASS: (a) live-path gated launcher, (b) fail-closed precondition,
(c) fixture-socket isolation, (d) lease_anchor_registered assertion intact.
Byte review only; ran nothing. FIRE remains separately gated on Mos GO.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-18 15:38:57 -05:00