Files
stack/docs/plans/reviews/2026-09-07_foundation-inspector-ordering-followup.md
jason.woltje 8ebddd6f93 feat(foundation): offline synthetic scope/permission inspector (FI-FILBERT-8 APPROVED r6)
Rocko-authored, Filbert-reviewed inspector (r6 manifest
a4a44930...) with full review/build/verdict evidence under
docs/plans/reviews. 43/0 selftests, oracle zero-disagreement,
foundation checker PASS. Owner A9 acceptance recorded separately.
2026-09-07 14:06:35 -05:00

2.4 KiB

FI-ROCKO-7 — finish F5 across declaration inventories

Owner-authorized build corrections continue. Coordinator: darkwing; sole writer: rocko. No new feature, live test, staging, commit or push authority.

Verified r4 report dff9f676ad0a97f6333a59d527e02ed55e7bcdca986fe9c1488280b84d4e677f and manifest 2a2e885f9df3dd626a09fe5db6e28af67c289e54660872031c18f8aa40cb0826, including all 331 file hashes/modes/sizes. Fixes remain author claims pending review.

F5 is not yet closed in full. Your disclosure says registries/artifacts/ authorizations/delegationInputs are still shape-validated in input order. Charter §10.4 applies stable within-stage ordering, not just to the records array. Source inspection also finds input-order registry digest-profile traversal at resolve.mjs:831.

Complete stable traversal across the applicable declaration inventories/stages using appropriate typed identity keys and deterministic content tie-breaking for malformed entries. Preserve stage/field precedence, original values and error privacy. Do not change semantically ordered arrays such as instruction lists or canonical content. Add multi-failure permutation tests for all declaration families, including differing shape errors and competing profile/digest failures; demonstrate intended first-rule stability rather than only a consistent nonzero exit. Do not mutate frozen input files or invent an exception for declaration lists.

The new registry-declaration-missing rule is acceptable as a fixed diagnostic name under existing missing-state refusal semantics; this is not an authority expansion. Filbert must still confirm its application and stage/exit correctness in code review.

Allowed correction paths remain FI-ROCKO-3's implementation/test allowlist. New receipts:

  • docs/plans/reviews/2026-09-07_foundation-inspector-rocko-build-r5.md
  • docs/plans/reviews/2026-09-07_foundation-inspector-rocko-build-manifest-r5.json Preserve r4 and prior evidence. Return FI-ROCKO-7 exact hashes, per-family tests and all authorized required receipts; freeze for independent re-review. If the contract is ambiguous, report a precise blocker rather than narrowing it silently.

Continue to withhold task/release live branches. Jason is being asked about deferring those two mixed suites for this offline-only demo; no ruling exists yet. No fake full suite pass, new waiver, credential access or live execution is permitted. The report's correction that r3 included live branches must remain visible in history.