WI-5 #832: Receipt-challenge protocol (compaction-refresh, milestone 188) #845

2026-07-19T23:06:54Z

jason.woltje commented

2026-07-19 23:06:54 +00:00

Implements WI-5 of the compaction-refresh epic: broker-computed single-use receipt-challenge protocol (ACs T25/T26/T28/T29). Reviewed+fired pin e196abfd71 (base e522b22f, no-rebase). 2-of-2 GO: CODE (terra) sha256 2a1a573f… + SECREV (Opus, anti-anchored) sha256 66e976c6…; D1-D4 + S1-S6 all Y; fail-open CLOSED all 3 refusal reasons; D4 restart-durability resolved. P5 FIRE PASS (fresh-executor, out-of-proc, 3x isolation, NOT Case-C). Non-blocking follow-ups: N1 revoke-before-validation hardening, N2 T-C observer residual (SPEC-v5 R6), N3 camelCase style.

closes #832

Implements WI-5 of the compaction-refresh epic: broker-computed single-use receipt-challenge protocol (ACs T25/T26/T28/T29). Reviewed+fired pin e196abfd710344792fa8fa51380ae1b71b875218 (base e522b22f, no-rebase). 2-of-2 GO: CODE (terra) sha256 2a1a573f… + SECREV (Opus, anti-anchored) sha256 66e976c6…; D1-D4 + S1-S6 all Y; fail-open CLOSED all 3 refusal reasons; D4 restart-durability resolved. P5 FIRE PASS (fresh-executor, out-of-proc, 3x isolation, NOT Case-C). Non-blocking follow-ups: N1 revoke-before-validation hardening, N2 T-C observer residual (SPEC-v5 R6), N3 camelCase style. closes #832

jason.woltje added 6 commits 2026-07-19 23:06:55 +00:00

test(#832 ): define receipt challenge replay contracts 5f967a4dc2

feat(#832 ): enforce broker-minted receipt challenges ba2716c113

test(#832 ): define observer and payload admission regressions 1713dfe5d0

fix(#832 ): bind receipt promotion to trusted observation e55262708e

test(#832 ): retain revoke fence on rejected receipt cycles b6e1461952

fix(#832 ): retain revoke fence on rejected cycles

ci/woodpecker/pr/ci Pipeline was successful

Details

e196abfd71

jason.woltje merged commit 07553ead33 into main

2026-07-19 23:18:57 +00:00