diff --git a/.torch/backlog/TASK-6e4ff870-a386-4a11-a59c-444ebc23732e.json b/.torch/backlog/TASK-6e4ff870-a386-4a11-a59c-444ebc23732e.json index 9aed3f9..590c1c1 100644 --- a/.torch/backlog/TASK-6e4ff870-a386-4a11-a59c-444ebc23732e.json +++ b/.torch/backlog/TASK-6e4ff870-a386-4a11-a59c-444ebc23732e.json @@ -24,7 +24,7 @@ ], "observedAt": "cb145e56cb7d530f9563b98d4f9920ff0372a67a", "feature": "Check execution provenance and state isolation", - "milestone": "Reviewed reliability dependencies", + "milestone": "B2 registered policy and no-write native planning admission", "state": "verification", "owner": "work-integration", "evidence": [ @@ -96,8 +96,8 @@ "integrationRequest": "a1789e46-b91e-496c-9204-ab204dac6a6d", "blockedReason": null, "createdAt": "2026-10-01T10:14:01.401Z", - "updatedAt": "2026-10-01T18:15:19.000Z", - "revision": 15, + "updatedAt": "2026-10-01T18:42:58.762Z", + "revision": 17, "history": [ { "from": null, @@ -204,5 +204,33 @@ "at": "2026-10-01T18:15:19.000Z", "note": "Record actual owner28 existing Work read-only contract turn WIP; no new assignment/status/schema field, implementation permission, consent assumption or lifecycle change. All original source/criteria/history/refusals preserved; concrete returned contract and QA contributor decisions remain required." } + ], + "classificationHistory": [ + { + "actorId": "session-manager", + "at": "2026-10-01T18:39:48.912Z", + "reason": "Actual Workc106/e243 and Kernel2565351a agree narrow registered CheckService pre-snapshot admission, opaque parent/no CP, private FD3/4, real Node/npm/browser dependencies and observed descendant closure. Kernel accepts proposed config applier but not edit authority; candidate_execution_policy optional parser. Exact reproducible package_json_path/package_script_name/vector and artifact-versus-adapter A distinction need recipient decisions52502f15; exact QAaebbf allowlist copy/TIN consent requested8e7bea6a. No B2 implementation, policy registration, DDL, consumer or native acceptance. Preserve verification/full seven criteria, landed316 history, legacy2 and current3/2 refusal.", + "from": { + "feature": "Check execution provenance and state isolation", + "milestone": "Reviewed reliability dependencies" + }, + "to": { + "feature": "Check execution provenance and state isolation", + "milestone": "B2 registered policy bytes and private native admission agreement" + } + }, + { + "actorId": "session-manager", + "at": "2026-10-01T18:42:58.762Z", + "reason": "Append actual owner784c788c/Release2969 incident: nominal converge plan inherits mutable CLI1714 openControlPlane, Kernelconstructor initializeSchema/INSERT identity and identity/roster refresh. Same6e4 needs precise ReleaseCLI/Kernel readonly initialized compatible state/Work guards interface: no planning writes, missing/incompatible schema refusal and immutable schema/data/identities/tasks/messages/resource before-after scenarios. Separate external SQLite guard from exact QA TIN consent; immediate normal guarded path may request legitimate narrowly scoped tool approval, never live DDL/schema/DB permission workaround or75 activation. No new task/parallel implementation; previous B2 vectors/contributor gates and all seven full criteria retained.", + "from": { + "feature": "Check execution provenance and state isolation", + "milestone": "B2 registered policy bytes and private native admission agreement" + }, + "to": { + "feature": "Check execution provenance and state isolation", + "milestone": "B2 registered policy and no-write native planning admission" + } + } ] } diff --git a/.torch/backlog/TASK-a65500ed-a505-4664-badc-a1483d6f6f11.json b/.torch/backlog/TASK-a65500ed-a505-4664-badc-a1483d6f6f11.json index c40c247..c69ea1b 100644 --- a/.torch/backlog/TASK-a65500ed-a505-4664-badc-a1483d6f6f11.json +++ b/.torch/backlog/TASK-a65500ed-a505-4664-badc-a1483d6f6f11.json @@ -23,8 +23,8 @@ "No rollout or frozen-candidate protocol change occurs from proposal alone; independent QA acceptance and guarded integration required for eventual implementation." ], "observedAt": "1a2b5b0fec32c2dddbfec76e2f0479de9cfc31c4", - "feature": null, - "milestone": null, + "feature": "Immutable test-integrity evidence", + "milestone": "Corrected V1 oracle and approved QA record ownership application", "state": "blocked", "owner": "work-integration", "evidence": [ @@ -46,8 +46,8 @@ "integrationRequest": null, "blockedReason": "Read-only preparation complete. Actionable INTERNAL Work/QA contract decision: return concrete version-pinned record schema/canonical preimage/exact YAML/test paths/scenarios requested by actual QA1e477 (owner4646), then obtain named contributor/gate consent and sequence bounded implementation. Historical61de permits evidence preparation only. This is not an owner strategic permission hold; no code/migration/acceptance or automatic dependency unblocking.", "createdAt": "2026-10-01T07:36:25.425Z", - "updatedAt": "2026-10-01T18:15:19.000Z", - "revision": 7, + "updatedAt": "2026-10-01T18:39:45.725Z", + "revision": 8, "history": [ { "from": null, @@ -98,5 +98,20 @@ "at": "2026-10-01T18:15:19.000Z", "note": "Record actual owner28 existing Work read-only contract turn WIP; no new assignment/status/schema field, implementation permission, consent assumption or lifecycle change. All original source/criteria/history/refusals preserved; concrete returned contract and QA contributor decisions remain required." } + ], + "classificationHistory": [ + { + "actorId": "session-manager", + "at": "2026-10-01T18:39:45.725Z", + "reason": "Current decisions: QA862dd6d6 rejects original68d missing legacy; complete addressed Work6038b6c1 now includes legacy:null, explicit abc+LF source specimen, 955-byte SHA903157bef00dc68913c628813530f1612fa8e1b51a287b7ad0966c6bfdb0f1ab independently reproduced by Manager. Original941 invalid remains. Anchor143955/hash/61 independently reproduced; 14 mapping QA evidence preserved. Corrected packet still requires actual QA verdict; approved b103 named Kernel two-file amendment not applied, PATH_UNOWNED remains. Preserve blocked lifecycle, full criteria/owner/history/evidence. No code/migration/assignment; current decision ledger in reports/audit/pilot-remaining-work-handoff-report-2026-10-01.md supersedes stale 'packet not returned' text without deleting it.", + "from": { + "feature": null, + "milestone": null + }, + "to": { + "feature": "Immutable test-integrity evidence", + "milestone": "Corrected V1 oracle and approved QA record ownership application" + } + } ] } diff --git a/.torch/backlog/TASK-conversation-console-workflow.json b/.torch/backlog/TASK-conversation-console-workflow.json index 5c03b02..6135f3a 100644 --- a/.torch/backlog/TASK-conversation-console-workflow.json +++ b/.torch/backlog/TASK-conversation-console-workflow.json @@ -22,7 +22,7 @@ ], "observedAt": "ff0712534829", "feature": "Self-host development readiness", - "milestone": "Owner-reviewed first development backlog", + "milestone": "Release correction source accepted; guarded lossless convergence and exact final QA", "state": "blocked", "owner": "owner-console", "evidence": [ @@ -122,8 +122,8 @@ "integrationRequest": "cb83a211-9f3f-4688-98fe-3faaece76da6", "blockedReason": "Exact scoped Overview0c2 source independently QAe454 accepted and single native cb83a211 landed18:06:20; canonical clean0c2 independently observed. Prior accepted4fa/e8 source and histories preserved. Full task remains blocked on actual live/installed desktop/mobile owner flow, truthful served UI/API engine provenance and current durable blockedReason visibility; generated demo/native artifacts do not qualify installed/live acceptance. Human runtime75 remains pending, browser disconnected, alpha3 pointer switch alone cannot fix missing fields. Later93b health/mobile UX is separately proposed; Release9a0 actually QA-rejected invalid-pointer privacy edge; same three-path correction already active, future exact QA/post-advance convergence required. No installation/host/provider/wake/schema/publication.", "createdAt": "2026-09-30T19:30:23.720Z", - "updatedAt": "2026-10-01T18:12:50.000Z", - "revision": 25, + "updatedAt": "2026-10-01T18:39:51.779Z", + "revision": 26, "history": [ { "from": null, @@ -300,5 +300,20 @@ "at": "2026-10-01T18:12:50.000Z", "note": "Reconcile actual latest QA6b5/ownerdb4 source rejection/correction and completed arbiter exact development push; prior pending-review wording historical. Preserve blocked whole-workflow state/Console owner/source0c2/cb83/fullcriteria/every history/refusal; no further acceptance, assignment, code scope, live/activation or Release integration." } + ], + "classificationHistory": [ + { + "actorId": "session-manager", + "at": "2026-10-01T18:39:51.779Z", + "reason": "Actual QA455f3ac7 accepts exact8fb correction source/provenance9focused/four nativePASS/11hashes only, oldbase4fa not integration. Owner7b2 resumed existing Release convergence; Release2969 requests exact one-file TIN resolution and records SQLite readonly external refusal. Named QA requestc9df5bae preserves canonical0c2 full prefix plus unchanged three Release blocks; no Manager substitute. Fresh merged gates/finalQA/single request remain. Overview0c2 landed/pushed, installed alpha2/live blockedReason/provenance/browser/mobile full criteria open; human75 pending distinct PNG consent. No new assignment/source authority.", + "from": { + "feature": "Self-host development readiness", + "milestone": "Owner-reviewed first development backlog" + }, + "to": { + "feature": "Self-host development readiness", + "milestone": "Release correction source accepted; guarded lossless convergence and exact final QA" + } + } ] } diff --git a/.torch/backlog/TASK-conversation-owner-digest.json b/.torch/backlog/TASK-conversation-owner-digest.json index 9e40b0a..79e0384 100644 --- a/.torch/backlog/TASK-conversation-owner-digest.json +++ b/.torch/backlog/TASK-conversation-owner-digest.json @@ -16,7 +16,7 @@ ], "observedAt": "ff0712534829", "feature": "Self-host development readiness", - "milestone": "Owner-reviewed first development backlog", + "milestone": "Bounded Console saved-decision timestamps and coverage scenarios", "state": "proposed", "owner": null, "evidence": [], @@ -24,8 +24,8 @@ "integrationRequest": null, "blockedReason": null, "createdAt": "2026-09-30T19:30:23.715Z", - "updatedAt": "2026-09-30T19:30:23.715Z", - "revision": 1, + "updatedAt": "2026-10-01T18:39:55.069Z", + "revision": 2, "history": [ { "from": null, @@ -34,5 +34,20 @@ "at": "2026-09-30T19:30:23.715Z", "note": "Task created." } + ], + "classificationHistory": [ + { + "actorId": "session-manager", + "at": "2026-10-01T18:39:55.069Z", + "reason": "Owner4ab asks independent implementable roadmap action. Selected Console-only site/owner-digest.js to render existing decidedAt and saved-window/structured-versus-unindexed coverage; live path ownerConsole and next idle read18:36, not process evidence. Precise scope requesta4f1e68b and QA88aecb41 for additive test/fleet/console-owner-digest.test.mjs plus exact append-only TIN; consent must return before implementation/assignment. No engine/API/schema/timers/external notifications. Preserve proposed unassigned full task, decision indexing/cadence/external opt-in remaining criteria. Health/mobile/thread workflow requests separate; no launch.", + "from": { + "feature": "Self-host development readiness", + "milestone": "Owner-reviewed first development backlog" + }, + "to": { + "feature": "Self-host development readiness", + "milestone": "Bounded Console saved-decision timestamps and coverage scenarios" + } + } ] } diff --git a/reports/audit/pilot-remaining-work-handoff-report-2026-10-01.md b/reports/audit/pilot-remaining-work-handoff-report-2026-10-01.md index 34b4032..701053b 100644 --- a/reports/audit/pilot-remaining-work-handoff-report-2026-10-01.md +++ b/reports/audit/pilot-remaining-work-handoff-report-2026-10-01.md @@ -1,5 +1,111 @@ # Current pilot remaining-work handoff +## Current addressed decisions and next owned actions, 18:40 UTC + +Current briefd7e6d69, explicitly addressed unread100, all56 task records, native +queue, manager observations and named approvals were refreshed. Source canonical +0c2 is clean and already landed/pushed; no duplicate316/c532 landing. Full roadmap +remains39proposed/9blocked/6completed/1verification/1assigned. Current check-in +and advisory evolution/hierarchy evidence favor existing owners and precise peer +contracts, not new roles or activation. Doctor healthy does not negate owner18:24 +229-unread observation or the50 current backlog findings (49 stale observed commits, +one resolved-dependency warning); no bulk acknowledgements, closes or cleanup. + +Actual QA455f3ac7 **ACCEPTS exact8fb58b232ed5e854f00125a3b96922a2c8615b98** +bounded Release source correction/provenance:9strict focused, four fresh native +PASS, all11 artifact hashes and unchanged170135-byte TIN prefix. This supersedes +the historical pending source review below; it is not integration/final merged QA. +Owner7b2c8cb6 actually resumed EXISTING Release for guarded convergence, not Manager +automation. Release2969e1d6 previews exactly one QA-owned conflict: TIN base blob +a2aef473cb21b09a9e420fea9603549924c30bba, canonical0c2 +a35e0339b1d9d0e19e823cfd08a1ef6255b2b45e, accepted8fb +6a2bc8c0c49564a2ace18f8a5d2623e17a4d9943. Named QAc9df5bae requests exact full +canonical prefix plus unchanged three Release block bodies in original order. +Manager cannot consent for QA. SQLite readonly convergence-plan refusal is an +external tool guard, distinct from peer consent; exact scoped escalation can be +reviewed, with no DB permissions/state copy/manual merge. Original18/978/9a +failures stay. Lossless clean convergence, new merged SHA/four exact gates/immutable +artifacts/final QA precede one request. No current Release integration acceptance. + +Complete addressed Work6038b6c1 now supplies original68d integrity contract plus +its explicit correction: strict ten-key record schema; ordered JSON UTF8/noBOM/LF +digest excluding record_sha256; source/approval binding; append-only discovery and +fail-closed malformed/duplicate/stale/unauthorized/orphan/replay/rewrite/delete +scenarios; anchor and all61sections/14mappings. The original941-byte/a80d vector +is INVALID (required legacy absent), rejected QA862dd6d6/ownerd7ed4a6a, retained. +Manager independently reproduces corrected legacy:null JSON+LF955bytes, +SHA903157bef00dc68913c628813530f1612fa8e1b51a287b7ad0966c6bfdb0f1ab, +explicit sourceabc+LF hex6162630a/4bytes/SHAedeaaff3f1774ad2888673770c6d64097e391bc362d7d6fb34982ddf0efd18cb. +Actual Git anchor07a is143955bytes/SHA239fb5539e9f7cfc8562ac5351c61e7e1d345f00737a557ce9fa1b6d702e941a/61H2. +The first verification attempt threw subprocess EPERM; a read-only Git-to-Node +pipeline subsequently reproduced these values. Fixture serialization is not real +source/approval/admission proof. Same corrected reviewf45947e4 awaits actual QA +decision; full a655 stays blocked, Work6e4 verification. No generic human hold. + +Approved ownership amendmentb103revision2 names Kernel to append ONLY QA +docs/test-integrity/records/** in both .torch/torch.yaml and .torch/roster.yaml after +safe current-work checkpoint. Current canonical0c2 hashes still match approved +4e21d6bf/fb17fd5 guards, but actual ownership remains unowned. Kernel52502f15 requests +exact safe continuity/two-config plan under existing approval; no new human answer +or B2 registration inferred. PATH_UNOWNED remains enforced until actual qualifying +landing/readback. Work source integrity-records.mjs and QA test-integrity-records +scenarios do not gain code authority from packet/hash success. + +Actual Workc106/e243 and Kernel2565351a ratify narrow future CheckService admission, +opaque parent, private FD3/4 closure and optional candidate_execution_policy parser. +Pinned B2 report now records exact current delta, real dependency/frozen-input/ +descendant requirements, and only remaining vector/adapter-versus-artifact/QA +allowlist decisions. Full seven native/source/consumer criteria remain required; +legacy2/current3/2 refusals preserved. No fixture-only or all-refusal completion. + +Independent next roadmap action selected under owner4ab: existing proposed +TASK-conversation-owner-digest, Console ONLY site/owner-digest.js saved-decision +timestamps and explicit structured-approval versus unindexed manager coverage. +The API already supplies decidedAt, but the renderer currently drops it. Existing +QA test/fleet/console-owner-digest.test.mjs gains additive deterministic boundary, +malformed/out-of-window/unknown/truncated/privacy/immutable-publication scenarios +and separately consented append-only TIN. Named Consolea4f1e68b/QA88aecb41 decisions +are the next implementation prerequisite; no engine/API/schema/timer/notification +changes. Native nextConsoleidle and ownership were checked, without claiming +process inactivity. This prepares one concrete source action, not a parallel +implementation or full digest completion. Real manager indexing and reviewed +external opt-in/cadence remain whole-task criteria. Health-label/mobile93b, +thread/supersessiond2feed and Kernel one-path current TODO handoff remain separate +existing workflow/documentation requests, not forgotten or duplicated tasks. + +Owner784c788c's concrete converge-plan writer incident was independently read at +canonical CLI1714/Kernel constructor264 and recorded in SAME6e4: future compatible +read-only initialized planning, no schema/identity/roster writes, exact missing/ +incompatible refusal and immutable before/after evidence. ReleaseCLI/Kernel API/ +Work guards/QA scenarios remain named owned contributions, not a parallel queue. +Immediate supported guarded convergence may request legitimate scoped tool +approval after actual QA conflict consent, preserving every external failure. + +Owner2f3e9343 corrects the actual QA/Kernel re-entry failure: both initial units +failed before agent turn because an arbiter temporary output probe incorrectly +handled plain codex --version. Its hermetically verified correction/retry belongs +to the arbiter, not an installed TORCH/model/QA refusal. No repo/installed executor +change or guard bypass; old failed receipts/units remain. Current owner reports +Manager+QA+Kernel active, Release prior handle terminal. Manager starts none; +only arbiter may re-enter Release after exact QA consent and slot availability. +Actual browser retry still returns noavailable/list[], so live UX remains open. + +Supported owned API updates only classification labels and timestamped reason +history for existing a655revision8,6e4revision17,workflowrevision26,digestrevision2. +All statuses/owners/candidates/integration links/full acceptance criteria/evidence +arrays/lifecycle histories are preserved. No same-state transition or manual ledger +edit manufactured evidence permission; current classification reasons and this +report supersede stale prior summary text while retaining it as history. + +Only actual human activation75pending remains human-specific; five-PNG approval +already satisfied does not resolve it. Installed alpha2/current live blockedReason, +served provenance, real browser/mobile acceptance remain unqualified. Owner12657 +reports Kernel terminal, Release and Manager active; starts stay arbiter-only and +bounded to three native identities plus root. No installation, live DDL/schema, +host/service/model/publication/default-main action; automatic wakesOFF. + +Historical entries below retain their dated evidence and superseded review states. + Latest actual Work **c90d7c8a** confirms the complete integrity-record V1 contract reached named QA in durable **68d4ea0e-aac8-4d00-bafb-9248266b205b**: schema/preimage/ vector/exact paths and61 legacy-section/14 commit-blob mapping. Manager routes that diff --git a/reports/protocol/candidate-source-phase-b-proposal-2026-10-01.md b/reports/protocol/candidate-source-phase-b-proposal-2026-10-01.md index 4bce2d2..60baf5d 100644 --- a/reports/protocol/candidate-source-phase-b-proposal-2026-10-01.md +++ b/reports/protocol/candidate-source-phase-b-proposal-2026-10-01.md @@ -12,6 +12,77 @@ ADR026 at 6fdb88ea supply design context, not normative gate changes. ## Current B2 owned decisions and remaining registration seam, 17:53 UTC +### Addressed native admission and policy delta, 18:40 UTC + +The original packet remains pinned at Manager commit683e9f8, SHA256 +84d062c358310a1428085b2287f3afbdb62fdbfac2f8554f3b113f1375f77a7b. +Read complete addressed Workc10696f6 and e2435195, plus Kernel2565351a. +These are read-only agreements, not B2 source or config permission. + +Work specifies the exact future existing checks/service.mjs admission hunk: +after identity/definition/resource/clean-subject validation and before +captureCheckSnapshot/executeConditionedCheck, issueCandidateNativeAdmissionV2 +from the authenticated registered plan, policy and E preflight. Missing policy +refuses CHECK_CANDIDATE_NATIVE_POLICY_UNREGISTERED before channel/spawn/state +transition. No live writer, receipt, migration or legacy consumer change. +The private capability binds project/area/check/plan/commit/definition/cleanGuard, +lease generations/policy/E/run/nonce/expiry (at most60s); no caller selectors, +ControlPlane, writer, DB or adapter handle. Bootstrap consumes it once, rejecting +replay, closure, expiry and cross-generation. Private inherited FD3 carries one +framed record at most64KiB; FD4 observes acknowledgement. Fixed private init +validates nonce/generation and closes both before candidate spawn; the child +inherits neither. Internal provenance does not authenticate hostile same-UID +host processes. The earlier1MiB general descriptor limit does not enlarge this +admission transport limit. + +Kernel agrees to the proposed named .torch/torch.yaml applier role. Exact future +registration is ONLY optional strict checks[].candidate_execution_policy on the +four existing test/check/test-dashboard/lint definitions, parsed in EXISTING +src/kernel/config.mjs; old configs remain valid. Parent parses/verifies and returns +an opaque binding/resolved policy without opening CP. Node/npm raw package+lock, +script/dependency bytes and actual Chromium/runtime/transitive dependencies remain +required. In-root .bin link text, lexical/resolved target and target bytes are +bound; product links refuse. Absolute pinned unshare/private PID1 init require +actual namespace/run/generation and tested close/reap barriers: direct exit, +empty PGID or namespace creation is not proof of escaped-descendant closure. +Unknown coverage cannot mint TerminalProof/PASS. + +Precise remaining recipient decisions, without another generic design cycle: + +- Kernel52502f15: addressed full executable canonical vector, including required + literal package_json_path/package_script_name, framing bytes/length/hash. + Owner12657cf8 and Worke243 identify those omitted frames in the prior932-byte + proposal; its hash alone is not an independently reproducible oracle. +- Kernel/Work52502f15/e4fe45de: distinguish c106's Phase-A sealed artifact manifest + from the pinned adapter-admission A tuple with explicit separate schema fields; + no silent reinterpretation of compatibility evidence. +- QA8e7bea6a: addressed exact aebbf six test paths/scenarios and separate exact + append-only Test Integrity Note consent. Owner reports consent exists; Manager + does not invent its allowlist from a delivery summary. +- Actual reviewed policy registration remains distinct from source implementation + and the separate approved b103 QA-record ownership amendment. No .torch edit, + live DDL, source receipt, installation or operational acceptance is granted here. + +Existing Workfull6e4 remains verification with all seven criteria. Positive actual +registered issuance, frozen-file consumption by all four real gates, observed +descendant fencing, compatible native adapter and eventual real consumers remain +required. B1 fixture acceptance, legacy2 receipts and current3/2 refusal are retained. +The supported revision-checked classify API records this current phase in existing +task classificationHistory; it does not alter lifecycle, ownership or native gates. + +Owner784c788c identifies a concrete related planning boundary, independently read +on canonical0c2: src/cli.mjs1714 opens normal mutable ControlPlane for converge +plan/guards; service initialization creates schema/inserts identities, and identity +assertion refreshes roster with writes. Future SAME6e4 native planning composition +must read compatible already-initialized state without any schema/identity/roster +writes, refuse precisely when missing/incompatible, and prove immutable schema, +data, identities, tasks, messages and resource guards before/after. Release owns +the CLI use, Kernel the read-only interface, Work convergence guards, QA boundary +scenarios (routed e92a36f1/9f012d8d). This is a source requirement, not permission to +open/migrate live state or substitute an older checker. Immediate convergence +still uses supported guarded tools with legitimate scoped tool approval and exact +QA conflict consent. Current external SQLite refusal and all earlier failures stay. + This section supersedes the 17:02 proposed map only by the specific deltas below. Actual Work **acc1d43e** and Kernel **9752d155**, with owner **7921552a** correcting two factual errors, are read-only protocol decisions. No B2 implementation,