mosaicstack/stack
1
0
Fork 0
Code Issues 81 Pull Requests 1 Actions Packages Projects Releases 15 Wiki Activity

WI-2: Whole mutator-class gate (revoke-first / promote-last) #829

New Issue
Closed
opened 2026-07-17 23:55:06 +00:00 by jason.woltje · 0 comments
jason.woltje commented 2026-07-17 23:55:06 +00:00
Owner
Copy Link

OPUS-SECREV MANDATORY (authorization surface).

Deliverable 2 (BUILD-BRIEF §3.2). A whole mutator-class gate — NOT per-wrapper: no consequential mutator succeeds without a valid VERIFIED lease. Revoke-first / promote-last. The mutator-class gate remains THE safety mechanism (receipt is only a promotion prerequisite; R6).

ACs: no consequential mutator succeeds while UNVERIFIED (given a compaction observer fired or post-TTL); T-B compromised-tool covered by this gate. Carry v4 T-B ACs. Depends on WI-1.

Authority (build AGAINST these, do not re-derive): BUILD-BRIEF 89fdbc27, SPEC-v5 a6d07ade, RATIFICATION bac58319, sol red-team 3da326a4. Coder MUST re-verify sha256 before build. Target: framework-native packages/mosaic/ in mosaicstack/stack (NOT jarvis-brain, NOT ~/.config/mosaic/ directly). M1 = Claude + Pi only.

Review discipline: red-first TDD; author≠reviewer; no self-merge; exact-head RoR (reviewed-SHA=merged-SHA); closes #<this>; full 40-char head; never edit tests to pass / never force-merge red / never --no-verify. Mos merges after review + green suite + (for security surfaces) Opus-SECREV.

**OPUS-SECREV MANDATORY (authorization surface).** Deliverable 2 (BUILD-BRIEF §3.2). A **whole mutator-class gate** — NOT per-wrapper: no consequential mutator succeeds without a valid VERIFIED lease. **Revoke-first / promote-last.** The mutator-class gate remains THE safety mechanism (receipt is only a promotion prerequisite; R6). **ACs:** no consequential mutator succeeds while UNVERIFIED (given a compaction observer fired or post-TTL); T-B compromised-tool covered by this gate. Carry v4 T-B ACs. Depends on WI-1. **Authority (build AGAINST these, do not re-derive):** BUILD-BRIEF `89fdbc27`, SPEC-v5 `a6d07ade`, RATIFICATION `bac58319`, sol red-team `3da326a4`. Coder MUST re-verify sha256 before build. Target: framework-native `packages/mosaic/` in `mosaicstack/stack` (NOT jarvis-brain, NOT `~/.config/mosaic/` directly). M1 = Claude + Pi only. **Review discipline:** red-first TDD; author≠reviewer; no self-merge; exact-head RoR (reviewed-SHA=merged-SHA); `closes #<this>`; full 40-char head; never edit tests to pass / never force-merge red / never `--no-verify`. **Mos merges** after review + green suite + (for security surfaces) Opus-SECREV.
jason.woltje added this to the Compaction-Refresh Mechanism (M1: Claude+Pi) milestone 2026-07-17 23:55:06 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
fleet-enhancement
Fleet-wide reliability/speed/cost improvements surfaced by the nightly enhance pass
No Label
Milestone
No items
No Milestone Compaction-Refresh Mechanism (M1: Claude+Pi)
Projects
Clear projects
No project
Assignees
Clear assignees
jason.woltje
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mosaicstack/stack#829
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?