Author	SHA1	Message	Date
Libby	0c19eddb77	Fork card: a stripped read serves note: null (#84)	2026-11-10 20:59:52 +00:00
Libby	43db7af238	Fork card: no fork hidden by fork_unknown (#83)	2026-11-10 20:51:18 +00:00
Libby	eb8939011e	Fork card: Read visibility line agrees with ruling (c) (#82)	2026-11-10 20:50:47 +00:00
Libby	512e0e249f	Fork card: read visibility applied at the door (#81)	2026-11-10 20:49:43 +00:00
Libby	89755b08b5	Fork card: deciders holds at most 64 (#80)	2026-11-10 20:03:58 +00:00
Libby	3d70e3395d	Fork card M5: the desk envelope's names (#79)	2026-11-10 19:59:07 +00:00
Libby	7d2cde047f	Fork card M5: decider list sent per call (#78)	2026-11-10 19:27:52 +00:00
Libby	ef648d1a66	Fork card: stored Refused answers carry their 4xx status (#77)	2026-11-10 19:25:54 +00:00
Libby	6231ecad5d	Fork desk digests: confirmed on Huginn main f0ca504 (#76)	2026-11-10 18:30:43 +00:00
Libby	e12ee63840	Fork desk digests: door-form legal_retraction golden (#75)	2026-11-10 18:19:26 +00:00
Libby	976f8c3bf2	Fork desk r4: refused retraction target, counted_answer_id, body digest vectors (#74)	2026-11-10 18:14:42 +00:00
Libby	8ca1d18454	Fork card: cap depends at 8 lines of 1000 bytes (#73)	2026-11-10 17:16:26 +00:00
Libby	e6a279248c	CultNet governance contracts: vote API and fork-desk card (#72)	2026-11-10 17:01:43 +00:00
soul	2aade7fdd3	Docs and test comments: correct the Rust duplicate-key citation, say what the TS and Rust duplicate tests pin ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 16:25:50 +00:00
soul	27d9fbca94	write-receipt.md: where a received messageId decides, and the single-parser assumption it relies on ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 16:07:11 +00:00
soul	cc5a9cec9b	tests first: repeated messageId key, each runtime's declared policy (C# failing) ... Vectors admittedMessageIdDuplicates carry [invalid,valid], [valid,invalid], [valid,valid]. Decoders that see the duplicate (C#, Rust) must refuse all three; map-collapsing decoders (Python, TS, Kotlin) judge the last key. Python, TS, Kotlin and Rust already behave as declared; C# fails: it accepted [valid,valid]. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 16:04:58 +00:00
soul	a97861945c	write-receipt.md: the messageId rule is on the decoded string; byte-level UTF-8 strictness is the reader's, not required ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 15:13:09 +00:00
soul	f378d4fdb0	tests first: duplicate messageId, ill-formed id, scoped UTF-8 strictness, every table range pinned (failing) ... Failing before the fix: C# 1 (duplicate messageId, second is U+200B), TypeScript 1 (a + lone surrogate), Kotlin 1 (a document payload string with a lone surrogate no longer decodes). Python and Rust already pass the new vectors. The range probes read the generated write-admitted-message-id-ranges.json and pass on the correct tables; they exist to fail when any range is deleted or narrowed. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 15:11:15 +00:00
soul	3d37fda496	write_admitted messageId: pin Unicode 16.0, one generator for the embedded tables ... scripts/gen-unicode-messageid-tables.py emits each runtime's Letter-or-Number and Default_Ignorable tables from the two UCD 16.0 files; --check fails on a stale or hand-edited table. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 15:04:59 +00:00
soul	cc931932fc	tests first: Unicode 16.0 pin vectors (failing) ... Failing before the fix: Rust 1 (16100), Python 2 (16100, 10D40), Kotlin 4 (16100, 10D40, 2EBF0, 2EE5D). TypeScript and C# already pass: their platform data is 16.0 or later. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 15:00:54 +00:00
soul	bf55c10199	vector: write_admitted messageId refuses U+FEFF before a letter (kills a trim-before-check decoder) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 14:42:44 +00:00
soul	70f8135d2c	vector: write_admitted messageId accepts a NUL between letters (rule: letter present, no Default_Ignorable) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 14:41:11 +00:00
soul	4571a0d4e7	tests first: write_admitted messageId rule vectors (failing) ... Pins Heimdall's rule: a write_admitted messageId needs a Unicode letter or number and no Default_Ignorable_Code_Point, compared raw. Shared vectors plus a runner test in TS, Python, Kotlin, C# and Rust. No decoder changed; the refuse vectors fail. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 14:39:51 +00:00
Libby	325da81428	Merge pull request 'TS write-receipt client against the real Rust and C# receipt servers (interop harness)' (#67) from libby/write-receipt-ts-interop into main	2026-11-09 14:16:00 +00:00
Libby	2f3b30ab85	Merge remote-tracking branch 'origin/libby/write-receipt-text-blank-rules' into libby/rs-receipt-key-tests-per-frame	2026-11-09 10:37:49 +00:00
Libby	819df6a666	Merge remote-tracking branch 'origin/libby/write-receipt-text-blank-rules' into libby/write-receipt-ts-interop	2026-11-09 10:37:49 +00:00
Libby	f0c0f936ba	write-receipt: seven tracker vectors, a tracker that ends with its session, runners that count ... New scenario vectors: id-less error.v1 with one and with two writes unanswered, sendFailed, an id-less error after the window, a receipt one ms inside the window and at the exact boundary (late), a send after sessionEnd. The last exposed a TS tracker leaving such a write pending forever; it now settles session_ended. The file declares counts, and the TS replay runner fails on a count it did not run or an event key scenarios.semantics does not name. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 10:34:49 +00:00
Libby	636b387cf1	write-receipt spec: a repeated or unreceived sequenced packet draws no second answer ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 09:13:31 +00:00
Libby	4e89f07bff	Rust RUDP server: answer a superseded sequenced write; order frame and packet by serial arithmetic ... Superseded packet: a reliable-sequenced packet that arrives after a newer one delivers no frame, yet is acknowledged and never resent, so its write went unanswered. The test (red first: only "new" was refused, "old" got nothing) showed the drop happens in the session below frame decoding, but an unfragmented packet carries its whole frame, so the server can read the id from the packet payload. Chosen: refuse it from the packet payload. A superseded fragment of a larger write has no readable id in the packet, so write-receipt.md now says that write may go unanswered and the client's unconfirmed outcome covers it. Ordering: frame.sequence <= packet.sequence is replaced by sequence_at_or_before, serial arithmetic modulo 2^32. Deviation from the brief: cultnet-rs' at_or_before carries a 4096-sequence receive window made for duplicate detection; a frame's first fragment may lie further back than that, so reusing it would leave such a sequenced write unrefused and applied. The new test pins that, and a hand mutant with the window fails it. A wrapped sequence cannot reach this compare through the session today (it is judged a duplicate), so the unit test pins the helper, not an end-to-end wrap. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-09 09:13:18 +00:00
Libby	4b5f343a44	Merge write-receipt-text-blank-rules (3b1b7697) into libby/write-receipt-ts-interop	2026-11-09 07:38:23 +00:00
Libby	3b1b769762	write-receipt spec: name the platforms that disagree accurately ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 22:27:17 +00:00
Libby	52204c68c9	write-receipt vectors: U+001C to U+001F and padded names are not blank ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 22:26:28 +00:00
Libby	140eca5138	cultmesh-ts: TS write-receipt client against the real Rust and C# receipt servers (test:interop) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 22:06:55 +00:00
Libby	db5e8834f3	write-receipt: blank is exactly Unicode White_Space; C# server checks the listed set in one place ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 22:02:49 +00:00
Libby	ccbe392b28	write-receipt vectors and tests: blank is Unicode White_Space, every code point checked ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 22:02:10 +00:00
Libby	e99e9d4bc0	write-receipt spec: one unreadable text, one blank-field rule; Rust server tests pin both ... The unreadable-frame text is 'message_invalid: the message could not be read' (the servers' wording; the Rust wire never carried decoder text, only its local rejection display). A put that names nothing (blank schemaId/recordKey/storedAt, empty payload, blank present source ids or tags) is refused as unreadable on every connection; the vectors' blankFields section lists the cases and the Rust server tests replay them. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 21:26:49 +00:00
Libby	7665df33ae	Merge pull request 'TS: write_admitted / error.v1 decoder, WriteTracker, vector replay runner' (#62) from libby/ts-write-receipt-client into main	2026-11-08 19:52:37 +00:00
Libby	621b86ca15	Spec #59: an empty or blank schemaId or recordKey is message_invalid (details.field message, the write's id), never applied; vector for it ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:45:19 +00:00
Libby	0fbf2baea6	cultnet-ts, cultmesh-ts: Heimdall's five Lows on send-only (spec wording, error.v1 ack-time refusal tests, build errors keep their cause, presence changelog, ack-cut anchors) ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:32:49 +00:00
Libby	206dbe142b	cultmesh-ts: sendOnly tests use one fake server per publish (the reused one threw on the second connect and hung the run); spec names send-only and the presence publisher ... The hang was the fake server, not the writer: it is bound to one connection id, and two publishes in one test sent a second connect it rejected from inside the socket handler. The unacknowledged-send test also scripted an admit, whose reply piggybacks the put's ack. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 19:24:52 +00:00
Libby	74adad916a	Spec #59: receipt writes need a reliable, non-sequenced channel; error.v1 schema description names limit_reached; #55-#58 paragraph states which clients still window-succeed ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 16:59:39 +00:00
Libby	2c5203dc82	Spec #59: local_send_failed is its own unconfirmed reason ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 16:34:52 +00:00
Libby	3443e1dc93	Spec #59: error.v1 code enum names limit_reached; server-wide budget is a conformance column; an overflowed refusal set refuses unseen ids for the session ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 16:34:19 +00:00
Libby	734087766a	Spec #59: id size, digest memory, limit refusals remembered, required fields, reliable channel, local send failure, per-class conformance table ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 15:04:21 +00:00
Libby	b89a883700	spec: C# RUDP schema server is not receipt-capable; advertise only if end to end ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 14:58:51 +00:00
Libby	eafcdcdf7c	cultnet: add limit_reached to error.v1 code enum, with captured vector ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 14:29:18 +00:00
Libby	7a560b1984	spec: dedupe scope is at least the session; a resend after a reconnect is a new write ... Per Heimdall's review. The dedupe key lives for the life of its session, bounded per session without forgetting an id the server promised to answer. A longer retention is optional and never to be relied on. After a reconnect callers resend only writes that are idempotent by record key and read back before resending any other. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 13:58:39 +00:00
Libby	ab7bc771e3	spec: write receipt per Heimdall's review (dedupe by actor+content hash, admitted-late, 5 s window, capability is framing only) ... - messageId unique per authenticated actor and session; dedupe key (actor, id) bound to SHA-256 of [operation, schemaId, recordKey, payload]; same id with other content is message_invalid, never the old receipt. - A late answer after the window is recorded on the write (admitted_late / refused_late); no blind resend. - A forwarder with no primary answer relays nothing; the client reports unconfirmed. - RECEIPT_RESULT_WINDOW_MS 5000 (default), LEGACY_RESULT_WINDOW_MS 500 (fallback only), DEDUPE_RETENTION_MS as vector constants. - The hello capability changes framing only and never authorizes. - Batches can commit partially; the caller owns retry. - Vectors: constants, worked content hashes, 7 dedupe cases, late-answer and window scenarios. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 13:31:49 +00:00
Libby	662ae048d8	spec: cultnet write receipt (write_admitted.v0, error.v1 id echo, three-outcome clients) ... Specification and shared vectors only, no runtime code. A write is answered exactly once with cultnet.write_admitted.v0 or cultnet.error.v1 carrying its messageId; the new frames go only to connections whose hello lists them (today's TS decoder rejects unknown keys and versions, so "old clients ignore it" is false). Clients settle admitted | refused | unconfirmed; the result window is the pre-receipt fallback and ends unconfirmed. Wire vectors, schema-invalid cases and 16 replay scenarios in write-receipt-vectors.json. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 13:28:46 +00:00
Libby	8f71bff69c	cultnet error contract: one message_invalid code replaces malformed_document_put/delete ... Q6-A of docs/cultnet-error-contract-cut.md. message_invalid joins the closed cultnet.error.v0 code enum (both schema copies), with details.field naming the request field at fault ("message" when the whole frame cannot be read). C# ForMessageInvalid, Rust CultNetErrorCode::MessageInvalid, TS cultNetMessageInvalidError and Python message_invalid_error all write the same captured bytes (error-vectors.json plus the C# and Rust cases). cultmesh-py and cultmesh-ts refuse malformed puts and deletes with it; the C# subscription servers use it for the missing subscriptionId. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 09:14:12 +00:00