Author	SHA1	Message	Date
Libby	b47c590ad9	Slot tests, red: written-count marks, flatten through an unowned base, consent capped, IsWritable is the write's answer ... Vectors: extra-slot-store.cc gains the unit-arm record (tests.slot_unit); extra-slot-consent.cc (records under tests.union_surface.wide) and slot-outcomes.msgpack are new. The consent reader (SurfaceDeclaring, listing the wide id compatible) and UnitDoc move into UnionParityVectorTests; the in-test consent store construction, Relabel and AppendRootSlot go. Red against 115bc0a2: 9 tests (spec cultlib-gaps:cut_spec:cut-slot-tolerance.r5). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-12 00:30:02 +00:00
Libby	62a55682ae	union-parity README: what every runtime walks for a read-only payload ... Per vector: the object carrying the extra slot, its depth and the mark (type, slots carried, slots declared); the counting rule (highest key + 1, short arrays and retired gaps do not mark, a union adds no depth); the store-record assertions, the consent rule and the extra-slot-store.cc carry check that cut-slot-readonly-ts/-py/-rs assert. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-12 00:22:07 +00:00
Libby	98b919f635	Slot tests read vectors through VectorFiles; the variant read-past test is named for what it pins ... SlotReadOnlyTests reads the union-parity vectors through VectorFiles.Committed, the shared reader, so UnionParityVectorTests.Committed stays private. The variant test that only pins the read no longer says the extra slot is ignored: under the slot rule it is read past and the record is read-only. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-12 00:22:07 +00:00
soul	3f4f490403	SlotReadOnlyTests: a compatible id consents only to the depth-0 slot the catalog reports ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-12 00:22:07 +00:00
soul	3aa3e97c34	CultCache: a record whose payload carries slots past its reader's, at any depth, is held read-only ... The guard formatter counts each int-keyed object's slots into a thread-bound scope opened around the one payload decode; ToStoredDocument turns the finding into CultStoredDocument.UnreadSlots (explained only for depth-0 slots the catalog comparison reports ignored); HeldOwned refuses an unexplained mark whatever is declared; RefuseUndeclared throws the one refusal with UnreadSlots; CultCache.IsWritable asks the same predicate. Vectors: extra-slot-unit-arm, extra-slot-store.cc. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-12 00:22:07 +00:00
Libby	6d1684e1c2	Key-identity vector: retype refusal, foreign carry, key in two stores (C# rows, 12) (#120)	2026-11-11 23:42:09 +00:00
Libby	3a51bbabad	Fork card: decider_count, answerer_count, nullable answerer (reader views) (#117)	2026-11-11 18:12:00 +00:00
Libby	19b95ba2ab	Walk rows lows: Rust @directory error kind and delete, stale known-gaps (#116)	2026-11-11 18:11:55 +00:00
Libby	af9142539e	Fork card: raised_at, required nullable instant outside options_hash (#115)	2026-11-11 18:03:41 +00:00
Libby	f4eb2a04d1	Readability manifest: legacy-catalog c0 rows and directory-at-path, walked by all four runtimes (#114)	2026-11-11 17:25:05 +00:00
Libby	4246a37284	Single-file readers refuse duplicate keys in all four runtimes; c0 bad-canonical row (#110)	2026-11-11 15:07:48 +00:00
Libby	7c2e514941	Unique-index vector: three-holder normal-form and astral-alias rows 34-37; walk counts raised in all four runtimes (#107)	2026-11-11 13:41:10 +00:00
Libby	a57397aa7f	Unique-index vector: group identity, distinct values, normal-form keys, single-put alias order (rows 26-33) (#104)	2026-11-11 11:42:27 +00:00
Libby	063835f679	Unique-index vector: holder identity and replaced set are ordinal (rows 23-25) (#100)	2026-11-11 10:47:13 +00:00
Libby	23d254a501	CultCache: a unique-index refusal names the least violation; shared refusals vector (#99)	2026-11-11 10:05:32 +00:00
Libby	7002c252ed	Element ids: the existing-member route and one-way v3/v5 rollback, documented (#98)	2026-11-11 08:53:13 +00:00
Libby	a6861adadb	Unique-index leftovers: TS registerIndex refuses a role, commit vector in TS/Rust, nil document in the change schema (#97)	2026-11-11 08:43:52 +00:00
Libby	447b310b4d	cultcache-py: load order, role-alias register_index refusal, C# two-change commit vector (#96)	2026-11-11 08:05:39 +00:00
Libby	31d86e2a50	cultcache-ts and cultnet-ts: indexes means unique, roles names selection aliases; commitId/commitCount on change messages (#92)	2026-11-11 05:13:08 +00:00
Libby	abd1a92eb2	Replica commit hardening: Reconcile sends its diff as one tagged commit; straggler guard inside the lock; real-server and budget pins (#91)	2026-11-11 04:57:59 +00:00
Libby	7760219b7c	CultCache: [CultIndex] is unique at commit and load; [CultRole] names a selection role; replicas apply a commit's changes as one batch (#90)	2026-11-11 03:48:08 +00:00
Libby	de8a062ab9	Fork card: stale answer over an oversize re-read is Refused(stale_fork), never counted; refusal text is informational (#89)	2026-11-11 02:10:37 +00:00
Libby	f6c9bf5f97	Fork card: fork_too_large (422) for a list whose first entry, or a read whose entry, is past the reply cap (#88)	2026-11-11 01:29:35 +00:00
Libby	9d6ee72eb3	Fork card: order is a unique rank per Mind; duplicate-order and order-0 vectors (#86)	2026-11-11 00:33:36 +00:00
Libby	e12ee63840	Fork desk digests: door-form legal_retraction golden (#75)	2026-11-10 18:19:26 +00:00
Libby	976f8c3bf2	Fork desk r4: refused retraction target, counted_answer_id, body digest vectors (#74)	2026-11-10 18:14:42 +00:00
Libby	8ca1d18454	Fork card: cap depends at 8 lines of 1000 bytes (#73)	2026-11-10 17:16:26 +00:00
Libby	e6a279248c	CultNet governance contracts: vote API and fork-desk card (#72)	2026-11-10 17:01:43 +00:00
soul	cc5a9cec9b	tests first: repeated messageId key, each runtime's declared policy (C# failing) ... Vectors admittedMessageIdDuplicates carry [invalid,valid], [valid,invalid], [valid,valid]. Decoders that see the duplicate (C#, Rust) must refuse all three; map-collapsing decoders (Python, TS, Kotlin) judge the last key. Python, TS, Kotlin and Rust already behave as declared; C# fails: it accepted [valid,valid]. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 16:04:58 +00:00
soul	f378d4fdb0	tests first: duplicate messageId, ill-formed id, scoped UTF-8 strictness, every table range pinned (failing) ... Failing before the fix: C# 1 (duplicate messageId, second is U+200B), TypeScript 1 (a + lone surrogate), Kotlin 1 (a document payload string with a lone surrogate no longer decodes). Python and Rust already pass the new vectors. The range probes read the generated write-admitted-message-id-ranges.json and pass on the correct tables; they exist to fail when any range is deleted or narrowed. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 15:11:15 +00:00
soul	d546ef9c7f	GameCult.Networking: refuse a write_admitted messageId without a letter or number, with a Default_Ignorable code point, or with invalid UTF-8 ... Raw compare. .NET Unicode categories for L/N, an embedded Default_Ignorable range table (Unicode 16.0). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 14:49:50 +00:00
soul	4571a0d4e7	tests first: write_admitted messageId rule vectors (failing) ... Pins Heimdall's rule: a write_admitted messageId needs a Unicode letter or number and no Default_Ignorable_Code_Point, compared raw. Shared vectors plus a runner test in TS, Python, Kotlin, C# and Rust. No decoder changed; the refuse vectors fail. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 14:39:51 +00:00
soul	96c5fb1ca4	interop peer: C# store holds the spec's admitted schema-id names (compatible ids) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 14:12:38 +00:00
Libby	4b5f343a44	Merge write-receipt-text-blank-rules (3b1b7697) into libby/write-receipt-ts-interop	2026-11-09 07:38:23 +00:00
Libby	e4d2446dbe	C# InteropPeer: receipt-serve (CultNetDatabaseServer on an ephemeral port) and receipt-relay (LiteNetLib byte shim for the TS client) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 22:06:55 +00:00
Libby	ccbe392b28	write-receipt vectors and tests: blank is Unicode White_Space, every code point checked ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 22:02:10 +00:00
Libby	98989f90ea	C# tests: a nil payload names nothing (mutant survivor) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 21:57:38 +00:00
Libby	bc9a1842f5	C# database server: refuse a put that names nothing, one unreadable text ... IsUnreadableDocument follows the spec's Required fields rule (blank storedAt, empty payload, blank source ids and tags join blank schemaId/recordKey); ForUnreadableMessage is the single owner of the fixed text. Tests replay the blankFields vectors on receipt and legacy connections. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 21:26:49 +00:00
Libby	1a228349f1	C#: a put or delete with an empty or blank schemaId or recordKey is refused message_invalid (as an unreadable frame, like the Rust server) and not applied ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:46:45 +00:00
Libby	34bf7aa0ee	C#: test kills the schema id detail-value mutant ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:03:36 +00:00
Libby	40b34295e3	C#: receipt writes need a reliable, non-sequenced channel; a refusal without a record key or schema id carries a null detail value ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 17:01:59 +00:00
Libby	48cf3b3323	C#: tests kill the replay-details and unreliable non-write mutants ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 16:45:29 +00:00
Libby	0a67b4d8aa	C#: a remembered refusal keeps its code and field, never the write's strings, and replays in fixed text; a write on an unreliable channel of a receipt session is refused message_invalid (channel) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 16:42:22 +00:00
Libby	ef5cd88111	C#: v0 errors for snapshot, shard log and variant refusals carry fixed text, never an exception's message ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:13:58 +00:00
Libby	d654cb2b99	C#: tests kill the refusal-set bound and abandoned-rehash mutants ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:12:31 +00:00
Libby	c4d1efe000	C#: receipt ids capped at 256 bytes and held as digests; limit refusals remembered, no slot freed; required fields refused with fixed text; RUDP server advertises no receipt frames ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:07:23 +00:00
Libby	541d734675	C#: a forward is retryable only when provably not sent; unconfirmed otherwise; refusals carry fixed text ... CultNetWriteNotSentException names the pre-send boundary (connect, hello, no endpoint, or a send port that proves nothing was written). Every other forwarding failure keeps the session claim. ForUnownedSchema and the routing refusal no longer carry exception text. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:02:56 +00:00
Libby	2e5df24e96	C#: loopback test for the unreadable-frame answer; Server.Port seam; the answer now reaches the wire ... An undecodable frame is classed legacy by Decode, so the schema-side guard was unreachable and a receipt peer was never answered. The guard moves to the legacy decode. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 14:58:17 +00:00
Libby	ed5f9d30d1	C#: receipt server follows Heimdall's review of #61 ... Look the id up first and authorize only on first sighting; remember refusals within the cap; never re-forward an id whose primary stayed silent; end the connection when an answer cannot be queued; fixed refusal texts; limit_reached cap refusal; commit-point doc on ApplyPut/Delete. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 14:32:39 +00:00
Libby	b0ea18371f	C#: database server answers writes with write_admitted / error.v1 (write-receipt spec) ... Opt-in per connection by the first hello (or first write); the server answers a capable hello with its own. A put or delete commits, then gets write_admitted under its id; every refusal is error.v1 with the id (an unreadable frame carries the id when it still holds one). (actor, messageId) dedupe is bound to the content hash and asked only after the write authority grants; same id other content is message_invalid. The shard write forwarder says hello, waits for the primary's receipt, and the server relays only what the primary answered under the original id. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 14:04:37 +00:00