Author	SHA1	Message	Date
Libby	7c2e514941	Unique-index vector: three-holder normal-form and astral-alias rows 34-37; walk counts raised in all four runtimes (#107)	2026-11-11 13:41:10 +00:00
Libby	a57397aa7f	Unique-index vector: group identity, distinct values, normal-form keys, single-put alias order (rows 26-33) (#104)	2026-11-11 11:42:27 +00:00
Libby	063835f679	Unique-index vector: holder identity and replaced set are ordinal (rows 23-25) (#100)	2026-11-11 10:47:13 +00:00
Libby	23d254a501	CultCache: a unique-index refusal names the least violation; shared refusals vector (#99)	2026-11-11 10:05:32 +00:00
Libby	7002c252ed	Element ids: the existing-member route and one-way v3/v5 rollback, documented (#98)	2026-11-11 08:53:13 +00:00
Libby	a6861adadb	Unique-index leftovers: TS registerIndex refuses a role, commit vector in TS/Rust, nil document in the change schema (#97)	2026-11-11 08:43:52 +00:00
Libby	447b310b4d	cultcache-py: load order, role-alias register_index refusal, C# two-change commit vector (#96)	2026-11-11 08:05:39 +00:00
Libby	31d86e2a50	cultcache-ts and cultnet-ts: indexes means unique, roles names selection aliases; commitId/commitCount on change messages (#92)	2026-11-11 05:13:08 +00:00
Libby	abd1a92eb2	Replica commit hardening: Reconcile sends its diff as one tagged commit; straggler guard inside the lock; real-server and budget pins (#91)	2026-11-11 04:57:59 +00:00
Libby	7760219b7c	CultCache: [CultIndex] is unique at commit and load; [CultRole] names a selection role; replicas apply a commit's changes as one batch (#90)	2026-11-11 03:48:08 +00:00
Libby	de8a062ab9	Fork card: stale answer over an oversize re-read is Refused(stale_fork), never counted; refusal text is informational (#89)	2026-11-11 02:10:37 +00:00
Libby	f6c9bf5f97	Fork card: fork_too_large (422) for a list whose first entry, or a read whose entry, is past the reply cap (#88)	2026-11-11 01:29:35 +00:00
Libby	9d6ee72eb3	Fork card: order is a unique rank per Mind; duplicate-order and order-0 vectors (#86)	2026-11-11 00:33:36 +00:00
Libby	e12ee63840	Fork desk digests: door-form legal_retraction golden (#75)	2026-11-10 18:19:26 +00:00
Libby	976f8c3bf2	Fork desk r4: refused retraction target, counted_answer_id, body digest vectors (#74)	2026-11-10 18:14:42 +00:00
Libby	8ca1d18454	Fork card: cap depends at 8 lines of 1000 bytes (#73)	2026-11-10 17:16:26 +00:00
Libby	e6a279248c	CultNet governance contracts: vote API and fork-desk card (#72)	2026-11-10 17:01:43 +00:00
soul	cc5a9cec9b	tests first: repeated messageId key, each runtime's declared policy (C# failing) ... Vectors admittedMessageIdDuplicates carry [invalid,valid], [valid,invalid], [valid,valid]. Decoders that see the duplicate (C#, Rust) must refuse all three; map-collapsing decoders (Python, TS, Kotlin) judge the last key. Python, TS, Kotlin and Rust already behave as declared; C# fails: it accepted [valid,valid]. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 16:04:58 +00:00
soul	f378d4fdb0	tests first: duplicate messageId, ill-formed id, scoped UTF-8 strictness, every table range pinned (failing) ... Failing before the fix: C# 1 (duplicate messageId, second is U+200B), TypeScript 1 (a + lone surrogate), Kotlin 1 (a document payload string with a lone surrogate no longer decodes). Python and Rust already pass the new vectors. The range probes read the generated write-admitted-message-id-ranges.json and pass on the correct tables; they exist to fail when any range is deleted or narrowed. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 15:11:15 +00:00
soul	d546ef9c7f	GameCult.Networking: refuse a write_admitted messageId without a letter or number, with a Default_Ignorable code point, or with invalid UTF-8 ... Raw compare. .NET Unicode categories for L/N, an embedded Default_Ignorable range table (Unicode 16.0). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 14:49:50 +00:00
soul	4571a0d4e7	tests first: write_admitted messageId rule vectors (failing) ... Pins Heimdall's rule: a write_admitted messageId needs a Unicode letter or number and no Default_Ignorable_Code_Point, compared raw. Shared vectors plus a runner test in TS, Python, Kotlin, C# and Rust. No decoder changed; the refuse vectors fail. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 14:39:51 +00:00
soul	96c5fb1ca4	interop peer: C# store holds the spec's admitted schema-id names (compatible ids) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 14:12:38 +00:00
Libby	4b5f343a44	Merge write-receipt-text-blank-rules (3b1b7697) into libby/write-receipt-ts-interop	2026-11-09 07:38:23 +00:00
Libby	e4d2446dbe	C# InteropPeer: receipt-serve (CultNetDatabaseServer on an ephemeral port) and receipt-relay (LiteNetLib byte shim for the TS client) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 22:06:55 +00:00
Libby	ccbe392b28	write-receipt vectors and tests: blank is Unicode White_Space, every code point checked ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 22:02:10 +00:00
Libby	98989f90ea	C# tests: a nil payload names nothing (mutant survivor) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 21:57:38 +00:00
Libby	bc9a1842f5	C# database server: refuse a put that names nothing, one unreadable text ... IsUnreadableDocument follows the spec's Required fields rule (blank storedAt, empty payload, blank source ids and tags join blank schemaId/recordKey); ForUnreadableMessage is the single owner of the fixed text. Tests replay the blankFields vectors on receipt and legacy connections. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 21:26:49 +00:00
Libby	1a228349f1	C#: a put or delete with an empty or blank schemaId or recordKey is refused message_invalid (as an unreadable frame, like the Rust server) and not applied ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:46:45 +00:00
Libby	34bf7aa0ee	C#: test kills the schema id detail-value mutant ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:03:36 +00:00
Libby	40b34295e3	C#: receipt writes need a reliable, non-sequenced channel; a refusal without a record key or schema id carries a null detail value ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:01:59 +00:00
Libby	48cf3b3323	C#: tests kill the replay-details and unreliable non-write mutants ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 16:45:29 +00:00
Libby	0a67b4d8aa	C#: a remembered refusal keeps its code and field, never the write's strings, and replays in fixed text; a write on an unreliable channel of a receipt session is refused message_invalid (channel) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 16:42:22 +00:00
Libby	ef5cd88111	C#: v0 errors for snapshot, shard log and variant refusals carry fixed text, never an exception's message ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:13:58 +00:00
Libby	d654cb2b99	C#: tests kill the refusal-set bound and abandoned-rehash mutants ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:12:31 +00:00
Libby	c4d1efe000	C#: receipt ids capped at 256 bytes and held as digests; limit refusals remembered, no slot freed; required fields refused with fixed text; RUDP server advertises no receipt frames ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:07:23 +00:00
Libby	541d734675	C#: a forward is retryable only when provably not sent; unconfirmed otherwise; refusals carry fixed text ... CultNetWriteNotSentException names the pre-send boundary (connect, hello, no endpoint, or a send port that proves nothing was written). Every other forwarding failure keeps the session claim. ForUnownedSchema and the routing refusal no longer carry exception text. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:02:56 +00:00
Libby	2e5df24e96	C#: loopback test for the unreadable-frame answer; Server.Port seam; the answer now reaches the wire ... An undecodable frame is classed legacy by Decode, so the schema-side guard was unreachable and a receipt peer was never answered. The guard moves to the legacy decode. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 14:58:17 +00:00
Libby	ed5f9d30d1	C#: receipt server follows Heimdall's review of #61 ... Look the id up first and authorize only on first sighting; remember refusals within the cap; never re-forward an id whose primary stayed silent; end the connection when an answer cannot be queued; fixed refusal texts; limit_reached cap refusal; commit-point doc on ApplyPut/Delete. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 14:32:39 +00:00
Libby	b0ea18371f	C#: database server answers writes with write_admitted / error.v1 (write-receipt spec) ... Opt-in per connection by the first hello (or first write); the server answers a capable hello with its own. A put or delete commits, then gets write_admitted under its id; every refusal is error.v1 with the id (an unreadable frame carries the id when it still holds one). (actor, messageId) dedupe is bound to the content hash and asked only after the write authority grants; same id other content is message_invalid. The shard write forwarder says hello, waits for the primary's receipt, and the server relays only what the primary answered under the original id. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 14:04:37 +00:00
Libby	09e6a528b8	C#: SubmitDocumentAsync and the shard write forwarder complete on the result frame ... CultNetWriteCompletion.SendAndAwaitResultAsync registers a refusal handler before the send, then waits a result window (default 500 ms; CultMeshClientOptions. SubmitResultWindow, CultNetSchemaWriteForwarderOptions.ResultWindow). A cultnet.error.v0 inside it rejects with the new CultNetWriteRefusedException (Code: write_not_authorized, message_invalid, ...) whatever its order against the send or transport ack; a send returning no longer completes the write. The forwarder's refusal now throws on the same path as an unreachable primary, so CultNetDatabaseServer.TryForwardPutAsync/DeleteAsync no longer report a refused forward as done. Raw send primitives (C# schema client/session, Python, Kotlin) carry the doc line: fire-and-forget, an ack or a return is not admission, read the result frame. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 13:24:27 +00:00
Libby	c1d24146db	GameCult.Networking test: the RUDP schema client delivers a refused put's result frame whatever the order of the ack ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 11:29:50 +00:00
Libby	0b1a468ddd	GameCult.Networking: resend the capped frame's answer until acknowledged, then end the session ... The schema server answered the 8th undecodable frame and ended the peer's session in the same call; ending clears the session's pending reliable packets, so a lost datagram was never resent. The session now stays until the peer has acknowledged every answer (a lost one is resent by PollResends) or a 2 s grace runs out, serves nothing after the capped frame meanwhile, and then sends the goodbye. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 11:10:48 +00:00
Libby	89bbb277bd	GameCult.Networking: answer an undecodable RUDP frame message_invalid and end the session at 8 in a row ... Heimdall's parity ruling. The schema server ended a peer's session on the first frame it could not decode. It now answers message_invalid (field "message") and keeps the session; RudpCultNetSchemaServer.MaxConsecutiveRefusedFrames (8) consecutive undecodable frames end it after the last is answered, and any decoded frame resets the run. Handler faults still end the session at once. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 09:47:08 +00:00
Libby	8f71bff69c	cultnet error contract: one message_invalid code replaces malformed_document_put/delete ... Q6-A of docs/cultnet-error-contract-cut.md. message_invalid joins the closed cultnet.error.v0 code enum (both schema copies), with details.field naming the request field at fault ("message" when the whole frame cannot be read). C# ForMessageInvalid, Rust CultNetErrorCode::MessageInvalid, TS cultNetMessageInvalidError and Python message_invalid_error all write the same captured bytes (error-vectors.json plus the C# and Rust cases). cultmesh-py and cultmesh-ts refuse malformed puts and deletes with it; the C# subscription servers use it for the missing subscriptionId. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 09:14:12 +00:00
Libby	d18def46b3	Merge remote-tracking branch 'origin/main' into t26	2026-11-07 12:27:39 +00:00
Libby	fc184b0888	Merge remote-tracking branch 'origin/main' into t20 ... # Conflicts: # packages/cultnet-ts/src/contracts.ts # packages/cultnet-ts/src/index.ts	2026-11-07 12:26:32 +00:00
Libby	95a4680dfe	Merge remote-tracking branch 'origin/main' into t19	2026-11-07 12:25:23 +00:00
Libby	0bffcf0f9f	cultnet: add unsupported_schema_version to the closed cultnet.error.v0 code set ... Ruling (steward): add the code across C#, Rust, TypeScript and Python, each with a captured-bytes case. details = { field: "schemaVersion", value: <offered version> }, no routingHint. - schema (both copies), C# ForUnsupportedSchemaVersion + CultNetErrorCode.UnsupportedSchemaVersion in Rust, TS code list, Python CULTNET_ERROR_CODES and schema catalog. - bytes: error-vectors.json gains unsupported_schema_version (C# serializer output, checked by the C# test, the Rust error_message.rs case, and the TS/Python vector tests; the Python builder reproduces them). - cultnet-py interop_peer and cultmesh-py server now answer with the contract-shaped error (no extra messageId, details {field,value}) via messages.unsupported_schema_version_error. - tests that used unsupported_schema_version as the example of an unknown code now use not_a_code. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 12:23:39 +00:00
Libby	51941fa61b	Carrier vectors: drop the derived hasHop member from the reference's expected JSON ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 01:39:57 +00:00
Libby	f5c2771192	cultnet-py: multi-peer RUDP socket server, with C#-captured transcript parity ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-07 01:36:55 +00:00