Files
stack/docs/plans/reviews/2026-09-07_foundation-inspector-ordering-followup.md
T
jason.woltje 8ebddd6f93 feat(foundation): offline synthetic scope/permission inspector (FI-FILBERT-8 APPROVED r6)
Rocko-authored, Filbert-reviewed inspector (r6 manifest
a4a44930...) with full review/build/verdict evidence under
docs/plans/reviews. 43/0 selftests, oracle zero-disagreement,
foundation checker PASS. Owner A9 acceptance recorded separately.
2026-09-07 14:06:35 -05:00

39 lines
2.4 KiB
Markdown

# FI-ROCKO-7 — finish F5 across declaration inventories
Owner-authorized build corrections continue. Coordinator: darkwing; sole writer:
rocko. No new feature, live test, staging, commit or push authority.
Verified r4 report dff9f676ad0a97f6333a59d527e02ed55e7bcdca986fe9c1488280b84d4e677f
and manifest 2a2e885f9df3dd626a09fe5db6e28af67c289e54660872031c18f8aa40cb0826,
including all 331 file hashes/modes/sizes. Fixes remain author claims pending review.
F5 is not yet closed in full. Your disclosure says registries/artifacts/
authorizations/delegationInputs are still shape-validated in input order. Charter
§10.4 applies stable within-stage ordering, not just to the records array. Source
inspection also finds input-order registry digest-profile traversal at resolve.mjs:831.
Complete stable traversal across the applicable declaration inventories/stages using
appropriate typed identity keys and deterministic content tie-breaking for malformed
entries. Preserve stage/field precedence, original values and error privacy. Do not
change semantically ordered arrays such as instruction lists or canonical content.
Add multi-failure permutation tests for all declaration families, including differing
shape errors and competing profile/digest failures; demonstrate intended first-rule
stability rather than only a consistent nonzero exit. Do not mutate frozen input files
or invent an exception for declaration lists.
The new registry-declaration-missing rule is acceptable as a fixed diagnostic name
under existing missing-state refusal semantics; this is not an authority expansion.
Filbert must still confirm its application and stage/exit correctness in code review.
Allowed correction paths remain FI-ROCKO-3's implementation/test allowlist. New receipts:
- docs/plans/reviews/2026-09-07_foundation-inspector-rocko-build-r5.md
- docs/plans/reviews/2026-09-07_foundation-inspector-rocko-build-manifest-r5.json
Preserve r4 and prior evidence. Return FI-ROCKO-7 exact hashes, per-family tests and
all authorized required receipts; freeze for independent re-review. If the contract
is ambiguous, report a precise blocker rather than narrowing it silently.
Continue to withhold task/release live branches. Jason is being asked about deferring
those two mixed suites for this offline-only demo; no ruling exists yet. No fake full
suite pass, new waiver, credential access or live execution is permitted. The report's
correction that r3 included live branches must remain visible in history.