Extract workflow closure authority
This commit is contained in:
Meta Vens
parent
7ef86eeeed
commit
d1bcbae68f
9 changed files with 557 additions and 122 deletions
|
|
@ -1,2 +1,3 @@
|
|||
include!("closure_contracts/external_governance.rs");
|
||||
include!("closure_contracts/workflow.rs");
|
||||
include!("closure_contracts/operations.rs");
|
||||
|
|
|
|||
|
|
@ -650,75 +650,365 @@ pub(super) struct RepoSyncRequest {
|
|||
authority: RepoSyncAuthority,
|
||||
}
|
||||
impl RepoSyncRequest {
|
||||
pub(super) fn has_canonical_identity(&self) -> bool { self.schema_version == "epiphany.repo_sync_request.v0" && self.safe_action_family == "repo.sync_request" }
|
||||
pub(super) fn awaits_upstream_proof(&self) -> bool { self.request.status == "awaiting-upstream-main-proof" && self.request.requested_owner == "Bifrost" && self.request.requested_effect == "prove-published-commit-contained-by-upstream-main" && !self.request.publication_request_ref.is_empty() }
|
||||
pub(super) fn has_antecedent_contract(&self) -> bool { let a=&self.antecedents; a.publication_receipt_required && a.github_publication_required && a.maintainer_review_required && a.credit_ledger_required && a.public_proof_required }
|
||||
pub(super) fn has_receipt_contract(&self) -> bool { let r=&self.required_receipts; r.bifrost_publication == "gamecult.bifrost.public_proof_publication_receipt.v0" && r.github_publication == "gamecult.github.publication_receipt.v0" && r.maintainer_review == "gamecult.maintainer.review_receipt.v0" && r.credit_ledger == "gamecult.bifrost.credit_receipt.v0" && r.upstream_sync == "epiphany.repo_work_upstream_main_sync.v0" && r.ancestry_proof == "git.merge_base_is_ancestor" }
|
||||
pub(super) fn has_proof_contract(&self) -> bool { let p=&self.sync_proof; p.target_ref == "origin/main" && p.requires_fetch_before_check && p.requires_merge_base_ancestor_check && p.requires_clean_public_proof_readback && p.records_upstream_main_sha }
|
||||
pub(super) fn has_authority_seals(&self) -> bool { let a=&self.authority; a.branch_local_only && !a.merge_authorized && !a.push_authorized && !a.upstream_sync_authorized && !a.github_publication_authorized && !a.credit_ledger_authorized && !a.hands_action_authorized && !a.service_lifecycle_authority && !a.cross_body_mutation_authorized && !a.private_verse_rummaging && a.operator_or_maintainer_authority_required }
|
||||
pub(super) fn has_canonical_identity(&self) -> bool {
|
||||
self.schema_version == "epiphany.repo_sync_request.v0"
|
||||
&& self.safe_action_family == "repo.sync_request"
|
||||
}
|
||||
pub(super) fn awaits_upstream_proof(&self) -> bool {
|
||||
self.request.status == "awaiting-upstream-main-proof"
|
||||
&& self.request.requested_owner == "Bifrost"
|
||||
&& self.request.requested_effect == "prove-published-commit-contained-by-upstream-main"
|
||||
&& !self.request.publication_request_ref.is_empty()
|
||||
}
|
||||
pub(super) fn has_antecedent_contract(&self) -> bool {
|
||||
let a = &self.antecedents;
|
||||
a.publication_receipt_required
|
||||
&& a.github_publication_required
|
||||
&& a.maintainer_review_required
|
||||
&& a.credit_ledger_required
|
||||
&& a.public_proof_required
|
||||
}
|
||||
pub(super) fn has_receipt_contract(&self) -> bool {
|
||||
let r = &self.required_receipts;
|
||||
r.bifrost_publication == "gamecult.bifrost.public_proof_publication_receipt.v0"
|
||||
&& r.github_publication == "gamecult.github.publication_receipt.v0"
|
||||
&& r.maintainer_review == "gamecult.maintainer.review_receipt.v0"
|
||||
&& r.credit_ledger == "gamecult.bifrost.credit_receipt.v0"
|
||||
&& r.upstream_sync == "epiphany.repo_work_upstream_main_sync.v0"
|
||||
&& r.ancestry_proof == "git.merge_base_is_ancestor"
|
||||
}
|
||||
pub(super) fn has_proof_contract(&self) -> bool {
|
||||
let p = &self.sync_proof;
|
||||
p.target_ref == "origin/main"
|
||||
&& p.requires_fetch_before_check
|
||||
&& p.requires_merge_base_ancestor_check
|
||||
&& p.requires_clean_public_proof_readback
|
||||
&& p.records_upstream_main_sha
|
||||
}
|
||||
pub(super) fn has_authority_seals(&self) -> bool {
|
||||
let a = &self.authority;
|
||||
a.branch_local_only
|
||||
&& !a.merge_authorized
|
||||
&& !a.push_authorized
|
||||
&& !a.upstream_sync_authorized
|
||||
&& !a.github_publication_authorized
|
||||
&& !a.credit_ledger_authorized
|
||||
&& !a.hands_action_authorized
|
||||
&& !a.service_lifecycle_authority
|
||||
&& !a.cross_body_mutation_authorized
|
||||
&& !a.private_verse_rummaging
|
||||
&& a.operator_or_maintainer_authority_required
|
||||
}
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoSyncRequestBody {
|
||||
status: String,
|
||||
requested_owner: String,
|
||||
requested_effect: String,
|
||||
publication_request_ref: String,
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoSyncAntecedents {
|
||||
publication_receipt_required: bool,
|
||||
github_publication_required: bool,
|
||||
maintainer_review_required: bool,
|
||||
credit_ledger_required: bool,
|
||||
public_proof_required: bool,
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoSyncReceipts {
|
||||
bifrost_publication: String,
|
||||
github_publication: String,
|
||||
maintainer_review: String,
|
||||
credit_ledger: String,
|
||||
upstream_sync: String,
|
||||
ancestry_proof: String,
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoSyncProof {
|
||||
target_ref: String,
|
||||
requires_fetch_before_check: bool,
|
||||
requires_merge_base_ancestor_check: bool,
|
||||
requires_clean_public_proof_readback: bool,
|
||||
records_upstream_main_sha: bool,
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoSyncAuthority {
|
||||
branch_local_only: bool,
|
||||
merge_authorized: bool,
|
||||
push_authorized: bool,
|
||||
upstream_sync_authorized: bool,
|
||||
github_publication_authorized: bool,
|
||||
credit_ledger_authorized: bool,
|
||||
hands_action_authorized: bool,
|
||||
service_lifecycle_authority: bool,
|
||||
cross_body_mutation_authorized: bool,
|
||||
private_verse_rummaging: bool,
|
||||
operator_or_maintainer_authority_required: bool,
|
||||
}
|
||||
pub(super) fn parse_repo_sync_request(text: &str) -> Result<RepoSyncRequest> {
|
||||
toml::from_str(text).context("sync request is not valid typed TOML")
|
||||
}
|
||||
#[derive(Debug, Deserialize)] struct RepoSyncRequestBody { status:String, requested_owner:String, requested_effect:String, publication_request_ref:String }
|
||||
#[derive(Debug, Deserialize)] struct RepoSyncAntecedents { publication_receipt_required:bool, github_publication_required:bool, maintainer_review_required:bool, credit_ledger_required:bool, public_proof_required:bool }
|
||||
#[derive(Debug, Deserialize)] struct RepoSyncReceipts { bifrost_publication:String, github_publication:String, maintainer_review:String, credit_ledger:String, upstream_sync:String, ancestry_proof:String }
|
||||
#[derive(Debug, Deserialize)] struct RepoSyncProof { target_ref:String, requires_fetch_before_check:bool, requires_merge_base_ancestor_check:bool, requires_clean_public_proof_readback:bool, records_upstream_main_sha:bool }
|
||||
#[derive(Debug, Deserialize)] struct RepoSyncAuthority { branch_local_only:bool, merge_authorized:bool, push_authorized:bool, upstream_sync_authorized:bool, github_publication_authorized:bool, credit_ledger_authorized:bool, hands_action_authorized:bool, service_lifecycle_authority:bool, cross_body_mutation_authorized:bool, private_verse_rummaging:bool, operator_or_maintainer_authority_required:bool }
|
||||
pub(super) fn parse_repo_sync_request(text:&str)->Result<RepoSyncRequest>{toml::from_str(text).context("sync request is not valid typed TOML")}
|
||||
|
||||
|
||||
#[derive(Debug, Deserialize)]
|
||||
pub(super) struct RepoPrRequest {
|
||||
pub(super) schema_version:String, pub(super) safe_action_family:String,
|
||||
pub(super) summary:String, pub(super) private_state_exposed:bool,
|
||||
request:RepoPrRequestBody, antecedents:RepoPrAntecedents,
|
||||
required_receipts:RepoPrReceipts, pr_packet:RepoPrPacket, authority:RepoPrAuthority,
|
||||
pub(super) schema_version: String,
|
||||
pub(super) safe_action_family: String,
|
||||
pub(super) summary: String,
|
||||
pub(super) private_state_exposed: bool,
|
||||
request: RepoPrRequestBody,
|
||||
antecedents: RepoPrAntecedents,
|
||||
required_receipts: RepoPrReceipts,
|
||||
pr_packet: RepoPrPacket,
|
||||
authority: RepoPrAuthority,
|
||||
}
|
||||
impl RepoPrRequest {
|
||||
pub(super) fn has_canonical_identity(&self)->bool{self.schema_version=="epiphany.repo_pr_request.v0"&&self.safe_action_family=="repo.pr_request"}
|
||||
pub(super) fn awaits_owned_review(&self)->bool{let r=&self.request;r.status=="awaiting-pr-publication-review"&&r.requested_owner=="Bifrost/GitHub"&&r.requested_effect=="open-or-update-review-pr-from-redacted-proof-and-maintainer-context"&&!r.maintainer_review_request_ref.is_empty()&&!r.publication_request_ref.is_empty()&&!r.sync_request_ref.is_empty()}
|
||||
pub(super) fn has_antecedent_contract(&self)->bool{let a=&self.antecedents;a.closure_review_required&&a.soul_verdict_required&&a.mind_commit_required&&a.public_proof_required&&a.maintainer_review_required&&a.bifrost_publication_required&&a.credit_ledger_required}
|
||||
pub(super) fn has_receipt_contract(&self)->bool{let r=&self.required_receipts;r.closure_review=="epiphany.repo_work_closure_review.v0"&&r.soul_verdict=="epiphany.soul.verification_verdict"&&r.mind_commit=="epiphany.mind.state_commit_receipt"&&r.public_proof=="epiphany.repo_work_public_proof_bundle.v0"&&r.maintainer_review=="gamecult.maintainer.review_receipt.v0"&&r.bifrost_publication=="gamecult.bifrost.public_proof_publication_receipt.v0"&&r.credit_ledger=="gamecult.bifrost.credit_receipt.v0"&&r.pr_publication=="gamecult.github.pull_request_publication_receipt.v0"}
|
||||
pub(super) fn has_packet_contract(&self)->bool{let p=&self.pr_packet;p.base_ref=="origin/main"&&p.requires_branch_name&&p.requires_title&&p.requires_body&&p.requires_changed_path_list&&p.requires_public_proof_ref&&p.requires_maintainer_review_ref&&p.requires_credit_ref&&p.requires_private_state_redaction_check}
|
||||
pub(super) fn has_authority_seals(&self)->bool{let a=&self.authority;a.branch_local_only&&!a.github_pr_authorized&&!a.branch_push_authorized&&!a.merge_authorized&&!a.publication_authorized&&!a.upstream_sync_authorized&&!a.hands_action_authorized&&!a.service_lifecycle_authority&&!a.cross_body_mutation_authorized&&!a.private_verse_rummaging&&a.bifrost_or_maintainer_authority_required}
|
||||
pub(super) fn has_canonical_identity(&self) -> bool {
|
||||
self.schema_version == "epiphany.repo_pr_request.v0"
|
||||
&& self.safe_action_family == "repo.pr_request"
|
||||
}
|
||||
pub(super) fn awaits_owned_review(&self) -> bool {
|
||||
let r = &self.request;
|
||||
r.status == "awaiting-pr-publication-review"
|
||||
&& r.requested_owner == "Bifrost/GitHub"
|
||||
&& r.requested_effect
|
||||
== "open-or-update-review-pr-from-redacted-proof-and-maintainer-context"
|
||||
&& !r.maintainer_review_request_ref.is_empty()
|
||||
&& !r.publication_request_ref.is_empty()
|
||||
&& !r.sync_request_ref.is_empty()
|
||||
}
|
||||
pub(super) fn has_antecedent_contract(&self) -> bool {
|
||||
let a = &self.antecedents;
|
||||
a.closure_review_required
|
||||
&& a.soul_verdict_required
|
||||
&& a.mind_commit_required
|
||||
&& a.public_proof_required
|
||||
&& a.maintainer_review_required
|
||||
&& a.bifrost_publication_required
|
||||
&& a.credit_ledger_required
|
||||
}
|
||||
pub(super) fn has_receipt_contract(&self) -> bool {
|
||||
let r = &self.required_receipts;
|
||||
r.closure_review == "epiphany.repo_work_closure_review.v0"
|
||||
&& r.soul_verdict == "epiphany.soul.verification_verdict"
|
||||
&& r.mind_commit == "epiphany.mind.state_commit_receipt"
|
||||
&& r.public_proof == "epiphany.repo_work_public_proof_bundle.v0"
|
||||
&& r.maintainer_review == "gamecult.maintainer.review_receipt.v0"
|
||||
&& r.bifrost_publication == "gamecult.bifrost.public_proof_publication_receipt.v0"
|
||||
&& r.credit_ledger == "gamecult.bifrost.credit_receipt.v0"
|
||||
&& r.pr_publication == "gamecult.github.pull_request_publication_receipt.v0"
|
||||
}
|
||||
pub(super) fn has_packet_contract(&self) -> bool {
|
||||
let p = &self.pr_packet;
|
||||
p.base_ref == "origin/main"
|
||||
&& p.requires_branch_name
|
||||
&& p.requires_title
|
||||
&& p.requires_body
|
||||
&& p.requires_changed_path_list
|
||||
&& p.requires_public_proof_ref
|
||||
&& p.requires_maintainer_review_ref
|
||||
&& p.requires_credit_ref
|
||||
&& p.requires_private_state_redaction_check
|
||||
}
|
||||
pub(super) fn has_authority_seals(&self) -> bool {
|
||||
let a = &self.authority;
|
||||
a.branch_local_only
|
||||
&& !a.github_pr_authorized
|
||||
&& !a.branch_push_authorized
|
||||
&& !a.merge_authorized
|
||||
&& !a.publication_authorized
|
||||
&& !a.upstream_sync_authorized
|
||||
&& !a.hands_action_authorized
|
||||
&& !a.service_lifecycle_authority
|
||||
&& !a.cross_body_mutation_authorized
|
||||
&& !a.private_verse_rummaging
|
||||
&& a.bifrost_or_maintainer_authority_required
|
||||
}
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoPrRequestBody {
|
||||
status: String,
|
||||
requested_owner: String,
|
||||
requested_effect: String,
|
||||
maintainer_review_request_ref: String,
|
||||
publication_request_ref: String,
|
||||
sync_request_ref: String,
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoPrAntecedents {
|
||||
closure_review_required: bool,
|
||||
soul_verdict_required: bool,
|
||||
mind_commit_required: bool,
|
||||
public_proof_required: bool,
|
||||
maintainer_review_required: bool,
|
||||
bifrost_publication_required: bool,
|
||||
credit_ledger_required: bool,
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoPrReceipts {
|
||||
closure_review: String,
|
||||
soul_verdict: String,
|
||||
mind_commit: String,
|
||||
public_proof: String,
|
||||
maintainer_review: String,
|
||||
bifrost_publication: String,
|
||||
credit_ledger: String,
|
||||
pr_publication: String,
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoPrPacket {
|
||||
base_ref: String,
|
||||
requires_branch_name: bool,
|
||||
requires_title: bool,
|
||||
requires_body: bool,
|
||||
requires_changed_path_list: bool,
|
||||
requires_public_proof_ref: bool,
|
||||
requires_maintainer_review_ref: bool,
|
||||
requires_credit_ref: bool,
|
||||
requires_private_state_redaction_check: bool,
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoPrAuthority {
|
||||
branch_local_only: bool,
|
||||
github_pr_authorized: bool,
|
||||
branch_push_authorized: bool,
|
||||
merge_authorized: bool,
|
||||
publication_authorized: bool,
|
||||
upstream_sync_authorized: bool,
|
||||
hands_action_authorized: bool,
|
||||
service_lifecycle_authority: bool,
|
||||
cross_body_mutation_authorized: bool,
|
||||
private_verse_rummaging: bool,
|
||||
bifrost_or_maintainer_authority_required: bool,
|
||||
}
|
||||
pub(super) fn parse_repo_pr_request(text: &str) -> Result<RepoPrRequest> {
|
||||
toml::from_str(text).context("PR request is not valid typed TOML")
|
||||
}
|
||||
#[derive(Debug,Deserialize)] struct RepoPrRequestBody{status:String,requested_owner:String,requested_effect:String,maintainer_review_request_ref:String,publication_request_ref:String,sync_request_ref:String}
|
||||
#[derive(Debug,Deserialize)] struct RepoPrAntecedents{closure_review_required:bool,soul_verdict_required:bool,mind_commit_required:bool,public_proof_required:bool,maintainer_review_required:bool,bifrost_publication_required:bool,credit_ledger_required:bool}
|
||||
#[derive(Debug,Deserialize)] struct RepoPrReceipts{closure_review:String,soul_verdict:String,mind_commit:String,public_proof:String,maintainer_review:String,bifrost_publication:String,credit_ledger:String,pr_publication:String}
|
||||
#[derive(Debug,Deserialize)] struct RepoPrPacket{base_ref:String,requires_branch_name:bool,requires_title:bool,requires_body:bool,requires_changed_path_list:bool,requires_public_proof_ref:bool,requires_maintainer_review_ref:bool,requires_credit_ref:bool,requires_private_state_redaction_check:bool}
|
||||
#[derive(Debug,Deserialize)] struct RepoPrAuthority{branch_local_only:bool,github_pr_authorized:bool,branch_push_authorized:bool,merge_authorized:bool,publication_authorized:bool,upstream_sync_authorized:bool,hands_action_authorized:bool,service_lifecycle_authority:bool,cross_body_mutation_authorized:bool,private_verse_rummaging:bool,bifrost_or_maintainer_authority_required:bool}
|
||||
pub(super) fn parse_repo_pr_request(text:&str)->Result<RepoPrRequest>{toml::from_str(text).context("PR request is not valid typed TOML")}
|
||||
|
||||
#[derive(Debug,Deserialize)]
|
||||
pub(super) struct RepoMaintainerReviewRequest{pub(super) schema_version:String,pub(super) safe_action_family:String,pub(super) summary:String,pub(super) private_state_exposed:bool,request:RepoMaintainerReviewBody,antecedents:RepoMaintainerReviewAntecedents,required_receipts:RepoMaintainerReviewReceipts,review_packet:RepoMaintainerReviewPacket,authority:RepoMaintainerReviewAuthority}
|
||||
impl RepoMaintainerReviewRequest{
|
||||
pub(super) fn has_canonical_identity(&self)->bool{self.schema_version=="epiphany.repo_maintainer_review_request.v0"&&self.safe_action_family=="repo.maintainer_review_request"}
|
||||
pub(super) fn awaits_review(&self)->bool{let r=&self.request;r.status=="awaiting-maintainer-review"&&r.requested_owner=="Maintainer"&&r.requested_effect=="review-redacted-proof-and-branch-diff"&&!r.verification_request_ref.is_empty()&&!r.publication_request_ref.is_empty()}
|
||||
pub(super) fn has_antecedent_contract(&self)->bool{let a=&self.antecedents;a.closure_review_required&&a.soul_verdict_required&&a.mind_commit_required&&a.public_proof_required&&a.bifrost_publication_request_required}
|
||||
pub(super) fn has_receipt_contract(&self)->bool{let r=&self.required_receipts;r.closure_review=="epiphany.repo_work_closure_review.v0"&&r.soul_verdict=="epiphany.soul.verification_verdict"&&r.mind_commit=="epiphany.mind.state_commit_receipt"&&r.public_proof=="epiphany.repo_work_public_proof_bundle.v0"&&r.maintainer_review=="gamecult.maintainer.review_receipt.v0"&&r.bifrost_publication=="gamecult.bifrost.public_proof_publication_receipt.v0"}
|
||||
pub(super) fn has_review_packet(&self)->bool{let p=&self.review_packet;p.requires_reviewer_identity&&p.requires_review_verdict&&p.allowed_verdicts==["approved","changes-requested","rejected","needs-human-context"]&&p.requires_changed_path_list&&p.requires_public_proof_ref&&p.requires_private_state_redaction_check}
|
||||
pub(super) fn has_authority_seals(&self)->bool{let a=&self.authority;a.branch_local_only&&!a.maintainer_approval_authorized&&!a.merge_authorized&&!a.push_authorized&&!a.publication_authorized&&!a.upstream_sync_authorized&&!a.hands_action_authorized&&!a.service_lifecycle_authority&&!a.cross_body_mutation_authorized&&!a.private_verse_rummaging&&a.human_or_maintainer_response_required}
|
||||
#[derive(Debug, Deserialize)]
|
||||
pub(super) struct RepoMaintainerReviewRequest {
|
||||
pub(super) schema_version: String,
|
||||
pub(super) safe_action_family: String,
|
||||
pub(super) summary: String,
|
||||
pub(super) private_state_exposed: bool,
|
||||
request: RepoMaintainerReviewBody,
|
||||
antecedents: RepoMaintainerReviewAntecedents,
|
||||
required_receipts: RepoMaintainerReviewReceipts,
|
||||
review_packet: RepoMaintainerReviewPacket,
|
||||
authority: RepoMaintainerReviewAuthority,
|
||||
}
|
||||
#[derive(Debug,Deserialize)]struct RepoMaintainerReviewBody{status:String,requested_owner:String,requested_effect:String,verification_request_ref:String,publication_request_ref:String}
|
||||
#[derive(Debug,Deserialize)]struct RepoMaintainerReviewAntecedents{closure_review_required:bool,soul_verdict_required:bool,mind_commit_required:bool,public_proof_required:bool,bifrost_publication_request_required:bool}
|
||||
#[derive(Debug,Deserialize)]struct RepoMaintainerReviewReceipts{closure_review:String,soul_verdict:String,mind_commit:String,public_proof:String,maintainer_review:String,bifrost_publication:String}
|
||||
#[derive(Debug,Deserialize)]struct RepoMaintainerReviewPacket{requires_reviewer_identity:bool,requires_review_verdict:bool,allowed_verdicts:Vec<String>,requires_changed_path_list:bool,requires_public_proof_ref:bool,requires_private_state_redaction_check:bool}
|
||||
#[derive(Debug,Deserialize)]struct RepoMaintainerReviewAuthority{branch_local_only:bool,maintainer_approval_authorized:bool,merge_authorized:bool,push_authorized:bool,publication_authorized:bool,upstream_sync_authorized:bool,hands_action_authorized:bool,service_lifecycle_authority:bool,cross_body_mutation_authorized:bool,private_verse_rummaging:bool,human_or_maintainer_response_required:bool}
|
||||
pub(super) fn parse_repo_maintainer_review_request(text:&str)->Result<RepoMaintainerReviewRequest>{toml::from_str(text).context("maintainer review request is not valid typed TOML")}
|
||||
|
||||
#[derive(Debug,Deserialize)]
|
||||
pub(super) struct RepoVerificationRequest{pub(super)schema_version:String,pub(super)safe_action_family:String,pub(super)summary:String,pub(super)private_state_exposed:bool,request:RepoVerificationBody,antecedents:RepoVerificationAntecedents,required_receipts:RepoVerificationReceipts,checks:RepoVerificationChecks,authority:RepoVerificationAuthority}
|
||||
impl RepoVerificationRequest{
|
||||
pub(super)fn has_canonical_identity(&self)->bool{self.schema_version=="epiphany.repo_verification_request.v0"&&self.safe_action_family=="repo.verification_request"}
|
||||
pub(super)fn awaits_soul_review(&self)->bool{let r=&self.request;r.status=="awaiting-soul-review"&&r.requested_owner=="Soul"&&r.requested_effect=="verify-branch-local-hands-work"&&!r.work_order_ref.is_empty()}
|
||||
pub(super)fn has_antecedent_contract(&self)->bool{let a=&self.antecedents;a.substrate_gate_required&&a.hands_intent_required&&a.hands_review_required&&a.hands_patch_required&&a.hands_command_required&&a.hands_commit_required&&a.work_order_required}
|
||||
pub(super)fn has_receipt_contract(&self)->bool{let r=&self.required_receipts;r.hands_patch=="epiphany.hands.patch_receipt"&&r.hands_command=="epiphany.hands.command_receipt"&&r.hands_commit=="epiphany.hands.commit_receipt"&&r.soul_verdict=="epiphany.soul.verification_verdict"&&r.closure_review=="epiphany.repo_work_closure_review.v0"&&r.mind_review=="epiphany.mind.gateway_review"&&r.mind_commit=="epiphany.mind.state_commit_receipt"}
|
||||
pub(super)fn has_check_contract(&self)->bool{self.checks.required==["declared-paths-match-commit","hands-receipts-present","visible-diff-supports-summary","no-private-state-exposure","publication-remains-gated"]&&self.checks.model_verdict_allowed&&self.checks.failure_blocks_mind_admission}
|
||||
pub(super)fn has_authority_seals(&self)->bool{let a=&self.authority;a.branch_local_only&&!a.soul_verdict_authorized&&!a.state_commit_authorized&&!a.hands_action_authorized&&!a.rerun_authorized&&!a.publication_authorized&&!a.merge_authorized&&!a.service_lifecycle_authority&&!a.cross_body_mutation_authorized&&!a.private_verse_rummaging&&a.bifrost_publication_required}
|
||||
impl RepoMaintainerReviewRequest {
|
||||
pub(super) fn has_canonical_identity(&self) -> bool {
|
||||
self.schema_version == "epiphany.repo_maintainer_review_request.v0"
|
||||
&& self.safe_action_family == "repo.maintainer_review_request"
|
||||
}
|
||||
pub(super) fn awaits_review(&self) -> bool {
|
||||
let r = &self.request;
|
||||
r.status == "awaiting-maintainer-review"
|
||||
&& r.requested_owner == "Maintainer"
|
||||
&& r.requested_effect == "review-redacted-proof-and-branch-diff"
|
||||
&& !r.verification_request_ref.is_empty()
|
||||
&& !r.publication_request_ref.is_empty()
|
||||
}
|
||||
pub(super) fn has_antecedent_contract(&self) -> bool {
|
||||
let a = &self.antecedents;
|
||||
a.closure_review_required
|
||||
&& a.soul_verdict_required
|
||||
&& a.mind_commit_required
|
||||
&& a.public_proof_required
|
||||
&& a.bifrost_publication_request_required
|
||||
}
|
||||
pub(super) fn has_receipt_contract(&self) -> bool {
|
||||
let r = &self.required_receipts;
|
||||
r.closure_review == "epiphany.repo_work_closure_review.v0"
|
||||
&& r.soul_verdict == "epiphany.soul.verification_verdict"
|
||||
&& r.mind_commit == "epiphany.mind.state_commit_receipt"
|
||||
&& r.public_proof == "epiphany.repo_work_public_proof_bundle.v0"
|
||||
&& r.maintainer_review == "gamecult.maintainer.review_receipt.v0"
|
||||
&& r.bifrost_publication == "gamecult.bifrost.public_proof_publication_receipt.v0"
|
||||
}
|
||||
pub(super) fn has_review_packet(&self) -> bool {
|
||||
let p = &self.review_packet;
|
||||
p.requires_reviewer_identity
|
||||
&& p.requires_review_verdict
|
||||
&& p.allowed_verdicts
|
||||
== [
|
||||
"approved",
|
||||
"changes-requested",
|
||||
"rejected",
|
||||
"needs-human-context",
|
||||
]
|
||||
&& p.requires_changed_path_list
|
||||
&& p.requires_public_proof_ref
|
||||
&& p.requires_private_state_redaction_check
|
||||
}
|
||||
pub(super) fn has_authority_seals(&self) -> bool {
|
||||
let a = &self.authority;
|
||||
a.branch_local_only
|
||||
&& !a.maintainer_approval_authorized
|
||||
&& !a.merge_authorized
|
||||
&& !a.push_authorized
|
||||
&& !a.publication_authorized
|
||||
&& !a.upstream_sync_authorized
|
||||
&& !a.hands_action_authorized
|
||||
&& !a.service_lifecycle_authority
|
||||
&& !a.cross_body_mutation_authorized
|
||||
&& !a.private_verse_rummaging
|
||||
&& a.human_or_maintainer_response_required
|
||||
}
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoMaintainerReviewBody {
|
||||
status: String,
|
||||
requested_owner: String,
|
||||
requested_effect: String,
|
||||
verification_request_ref: String,
|
||||
publication_request_ref: String,
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoMaintainerReviewAntecedents {
|
||||
closure_review_required: bool,
|
||||
soul_verdict_required: bool,
|
||||
mind_commit_required: bool,
|
||||
public_proof_required: bool,
|
||||
bifrost_publication_request_required: bool,
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoMaintainerReviewReceipts {
|
||||
closure_review: String,
|
||||
soul_verdict: String,
|
||||
mind_commit: String,
|
||||
public_proof: String,
|
||||
maintainer_review: String,
|
||||
bifrost_publication: String,
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoMaintainerReviewPacket {
|
||||
requires_reviewer_identity: bool,
|
||||
requires_review_verdict: bool,
|
||||
allowed_verdicts: Vec<String>,
|
||||
requires_changed_path_list: bool,
|
||||
requires_public_proof_ref: bool,
|
||||
requires_private_state_redaction_check: bool,
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoMaintainerReviewAuthority {
|
||||
branch_local_only: bool,
|
||||
maintainer_approval_authorized: bool,
|
||||
merge_authorized: bool,
|
||||
push_authorized: bool,
|
||||
publication_authorized: bool,
|
||||
upstream_sync_authorized: bool,
|
||||
hands_action_authorized: bool,
|
||||
service_lifecycle_authority: bool,
|
||||
cross_body_mutation_authorized: bool,
|
||||
private_verse_rummaging: bool,
|
||||
human_or_maintainer_response_required: bool,
|
||||
}
|
||||
pub(super) fn parse_repo_maintainer_review_request(
|
||||
text: &str,
|
||||
) -> Result<RepoMaintainerReviewRequest> {
|
||||
toml::from_str(text).context("maintainer review request is not valid typed TOML")
|
||||
}
|
||||
#[derive(Debug,Deserialize)]struct RepoVerificationBody{status:String,requested_owner:String,requested_effect:String,work_order_ref:String}
|
||||
#[derive(Debug,Deserialize)]struct RepoVerificationAntecedents{substrate_gate_required:bool,hands_intent_required:bool,hands_review_required:bool,hands_patch_required:bool,hands_command_required:bool,hands_commit_required:bool,work_order_required:bool}
|
||||
#[derive(Debug,Deserialize)]struct RepoVerificationReceipts{hands_patch:String,hands_command:String,hands_commit:String,soul_verdict:String,closure_review:String,mind_review:String,mind_commit:String}
|
||||
#[derive(Debug,Deserialize)]struct RepoVerificationChecks{required:Vec<String>,model_verdict_allowed:bool,failure_blocks_mind_admission:bool}
|
||||
#[derive(Debug,Deserialize)]struct RepoVerificationAuthority{branch_local_only:bool,soul_verdict_authorized:bool,state_commit_authorized:bool,hands_action_authorized:bool,rerun_authorized:bool,publication_authorized:bool,merge_authorized:bool,service_lifecycle_authority:bool,cross_body_mutation_authorized:bool,private_verse_rummaging:bool,bifrost_publication_required:bool}
|
||||
pub(super)fn parse_repo_verification_request(text:&str)->Result<RepoVerificationRequest>{toml::from_str(text).context("verification request is not valid typed TOML")}
|
||||
|
||||
include!("external_governance_tests.rs");
|
||||
|
|
|
|||
|
|
@ -420,58 +420,7 @@ cross_body_mutation_authorized = false
|
|||
private_verse_rummaging = false
|
||||
human_or_maintainer_response_required = true
|
||||
"#;
|
||||
let request = parse_repo_maintainer_review_request(text)
|
||||
.expect("fixture is typed TOML");
|
||||
assert!(!request.has_authority_seals());
|
||||
}
|
||||
|
||||
#[test]
|
||||
fn verification_comment_cannot_counterfeit_soul_verdict_seal() {
|
||||
let text = r#"
|
||||
schema_version = "epiphany.repo_verification_request.v0"
|
||||
safe_action_family = "repo.verification_request"
|
||||
summary = "summary"
|
||||
private_state_exposed = false
|
||||
[request]
|
||||
status = "awaiting-soul-review"
|
||||
requested_owner = "Soul"
|
||||
requested_effect = "verify-branch-local-hands-work"
|
||||
work_order_ref = "work-order"
|
||||
[antecedents]
|
||||
substrate_gate_required = true
|
||||
hands_intent_required = true
|
||||
hands_review_required = true
|
||||
hands_patch_required = true
|
||||
hands_command_required = true
|
||||
hands_commit_required = true
|
||||
work_order_required = true
|
||||
[required_receipts]
|
||||
hands_patch = "epiphany.hands.patch_receipt"
|
||||
hands_command = "epiphany.hands.command_receipt"
|
||||
hands_commit = "epiphany.hands.commit_receipt"
|
||||
soul_verdict = "epiphany.soul.verification_verdict"
|
||||
closure_review = "epiphany.repo_work_closure_review.v0"
|
||||
mind_review = "epiphany.mind.gateway_review"
|
||||
mind_commit = "epiphany.mind.state_commit_receipt"
|
||||
[checks]
|
||||
required = ["declared-paths-match-commit", "hands-receipts-present", "visible-diff-supports-summary", "no-private-state-exposure", "publication-remains-gated"]
|
||||
model_verdict_allowed = true
|
||||
failure_blocks_mind_admission = true
|
||||
[authority]
|
||||
branch_local_only = true
|
||||
# soul_verdict_authorized = false
|
||||
soul_verdict_authorized = true
|
||||
state_commit_authorized = false
|
||||
hands_action_authorized = false
|
||||
rerun_authorized = false
|
||||
publication_authorized = false
|
||||
merge_authorized = false
|
||||
service_lifecycle_authority = false
|
||||
cross_body_mutation_authorized = false
|
||||
private_verse_rummaging = false
|
||||
bifrost_publication_required = true
|
||||
"#;
|
||||
let request = parse_repo_verification_request(text).expect("fixture is typed TOML");
|
||||
let request = parse_repo_maintainer_review_request(text).expect("fixture is typed TOML");
|
||||
assert!(!request.has_authority_seals());
|
||||
}
|
||||
}
|
||||
|
|
|
|||
|
|
@ -0,0 +1,123 @@
|
|||
#[derive(Debug, Deserialize)]
|
||||
pub(super) struct RepoVerificationRequest {
|
||||
pub(super) schema_version: String,
|
||||
pub(super) safe_action_family: String,
|
||||
pub(super) summary: String,
|
||||
pub(super) private_state_exposed: bool,
|
||||
request: RepoVerificationBody,
|
||||
antecedents: RepoVerificationAntecedents,
|
||||
required_receipts: RepoVerificationReceipts,
|
||||
checks: RepoVerificationChecks,
|
||||
authority: RepoVerificationAuthority,
|
||||
}
|
||||
impl RepoVerificationRequest {
|
||||
pub(super) fn has_canonical_identity(&self) -> bool {
|
||||
self.schema_version == "epiphany.repo_verification_request.v0"
|
||||
&& self.safe_action_family == "repo.verification_request"
|
||||
}
|
||||
pub(super) fn awaits_soul_review(&self) -> bool {
|
||||
let r = &self.request;
|
||||
r.status == "awaiting-soul-review"
|
||||
&& r.requested_owner == "Soul"
|
||||
&& r.requested_effect == "verify-branch-local-hands-work"
|
||||
&& !r.work_order_ref.is_empty()
|
||||
}
|
||||
pub(super) fn has_antecedent_contract(&self) -> bool {
|
||||
let a = &self.antecedents;
|
||||
a.substrate_gate_required
|
||||
&& a.hands_intent_required
|
||||
&& a.hands_review_required
|
||||
&& a.hands_patch_required
|
||||
&& a.hands_command_required
|
||||
&& a.hands_commit_required
|
||||
&& a.work_order_required
|
||||
}
|
||||
pub(super) fn has_receipt_contract(&self) -> bool {
|
||||
let r = &self.required_receipts;
|
||||
r.hands_patch == "epiphany.hands.patch_receipt"
|
||||
&& r.hands_command == "epiphany.hands.command_receipt"
|
||||
&& r.hands_commit == "epiphany.hands.commit_receipt"
|
||||
&& r.soul_verdict == "epiphany.soul.verification_verdict"
|
||||
&& r.closure_review == "epiphany.repo_work_closure_review.v0"
|
||||
&& r.mind_review == "epiphany.mind.gateway_review"
|
||||
&& r.mind_commit == "epiphany.mind.state_commit_receipt"
|
||||
}
|
||||
pub(super) fn has_check_contract(&self) -> bool {
|
||||
self.checks.required
|
||||
== [
|
||||
"declared-paths-match-commit",
|
||||
"hands-receipts-present",
|
||||
"visible-diff-supports-summary",
|
||||
"no-private-state-exposure",
|
||||
"publication-remains-gated",
|
||||
]
|
||||
&& self.checks.model_verdict_allowed
|
||||
&& self.checks.failure_blocks_mind_admission
|
||||
}
|
||||
pub(super) fn has_authority_seals(&self) -> bool {
|
||||
let a = &self.authority;
|
||||
a.branch_local_only
|
||||
&& !a.soul_verdict_authorized
|
||||
&& !a.state_commit_authorized
|
||||
&& !a.hands_action_authorized
|
||||
&& !a.rerun_authorized
|
||||
&& !a.publication_authorized
|
||||
&& !a.merge_authorized
|
||||
&& !a.service_lifecycle_authority
|
||||
&& !a.cross_body_mutation_authorized
|
||||
&& !a.private_verse_rummaging
|
||||
&& a.bifrost_publication_required
|
||||
}
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoVerificationBody {
|
||||
status: String,
|
||||
requested_owner: String,
|
||||
requested_effect: String,
|
||||
work_order_ref: String,
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoVerificationAntecedents {
|
||||
substrate_gate_required: bool,
|
||||
hands_intent_required: bool,
|
||||
hands_review_required: bool,
|
||||
hands_patch_required: bool,
|
||||
hands_command_required: bool,
|
||||
hands_commit_required: bool,
|
||||
work_order_required: bool,
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoVerificationReceipts {
|
||||
hands_patch: String,
|
||||
hands_command: String,
|
||||
hands_commit: String,
|
||||
soul_verdict: String,
|
||||
closure_review: String,
|
||||
mind_review: String,
|
||||
mind_commit: String,
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoVerificationChecks {
|
||||
required: Vec<String>,
|
||||
model_verdict_allowed: bool,
|
||||
failure_blocks_mind_admission: bool,
|
||||
}
|
||||
#[derive(Debug, Deserialize)]
|
||||
struct RepoVerificationAuthority {
|
||||
branch_local_only: bool,
|
||||
soul_verdict_authorized: bool,
|
||||
state_commit_authorized: bool,
|
||||
hands_action_authorized: bool,
|
||||
rerun_authorized: bool,
|
||||
publication_authorized: bool,
|
||||
merge_authorized: bool,
|
||||
service_lifecycle_authority: bool,
|
||||
cross_body_mutation_authorized: bool,
|
||||
private_verse_rummaging: bool,
|
||||
bifrost_publication_required: bool,
|
||||
}
|
||||
pub(super) fn parse_repo_verification_request(text: &str) -> Result<RepoVerificationRequest> {
|
||||
toml::from_str(text).context("verification request is not valid typed TOML")
|
||||
}
|
||||
|
||||
include!("workflow_tests.rs");
|
||||
|
|
@ -0,0 +1,54 @@
|
|||
#[cfg(test)]
|
||||
mod workflow_tests {
|
||||
use super::*;
|
||||
|
||||
#[test]
|
||||
fn verification_comment_cannot_counterfeit_soul_verdict_seal() {
|
||||
let text = r#"
|
||||
schema_version = "epiphany.repo_verification_request.v0"
|
||||
safe_action_family = "repo.verification_request"
|
||||
summary = "summary"
|
||||
private_state_exposed = false
|
||||
[request]
|
||||
status = "awaiting-soul-review"
|
||||
requested_owner = "Soul"
|
||||
requested_effect = "verify-branch-local-hands-work"
|
||||
work_order_ref = "work-order"
|
||||
[antecedents]
|
||||
substrate_gate_required = true
|
||||
hands_intent_required = true
|
||||
hands_review_required = true
|
||||
hands_patch_required = true
|
||||
hands_command_required = true
|
||||
hands_commit_required = true
|
||||
work_order_required = true
|
||||
[required_receipts]
|
||||
hands_patch = "epiphany.hands.patch_receipt"
|
||||
hands_command = "epiphany.hands.command_receipt"
|
||||
hands_commit = "epiphany.hands.commit_receipt"
|
||||
soul_verdict = "epiphany.soul.verification_verdict"
|
||||
closure_review = "epiphany.repo_work_closure_review.v0"
|
||||
mind_review = "epiphany.mind.gateway_review"
|
||||
mind_commit = "epiphany.mind.state_commit_receipt"
|
||||
[checks]
|
||||
required = ["declared-paths-match-commit", "hands-receipts-present", "visible-diff-supports-summary", "no-private-state-exposure", "publication-remains-gated"]
|
||||
model_verdict_allowed = true
|
||||
failure_blocks_mind_admission = true
|
||||
[authority]
|
||||
branch_local_only = true
|
||||
# soul_verdict_authorized = false
|
||||
soul_verdict_authorized = true
|
||||
state_commit_authorized = false
|
||||
hands_action_authorized = false
|
||||
rerun_authorized = false
|
||||
publication_authorized = false
|
||||
merge_authorized = false
|
||||
service_lifecycle_authority = false
|
||||
cross_body_mutation_authorized = false
|
||||
private_verse_rummaging = false
|
||||
bifrost_publication_required = true
|
||||
"#;
|
||||
let request = parse_repo_verification_request(text).expect("fixture is typed TOML");
|
||||
assert!(!request.has_authority_seals());
|
||||
}
|
||||
}
|
||||
|
|
@ -1014,6 +1014,20 @@ workflow contracts to external governance merely because its parser imports are
|
|||
nearby. External governance should converge on tooling plus
|
||||
publication/accounting; operations retains policy/deployment.
|
||||
|
||||
## Workflow authority physically separated
|
||||
|
||||
`repo.verification_request` and its counterfeit-Soul-verdict fixture now live
|
||||
under `closure_contracts/workflow.rs` and `workflow_tests.rs`. External
|
||||
governance no longer owns verification merely because the request arrives from
|
||||
outside the process. The facade composes workflow as a peer closure domain;
|
||||
adoption, scheduling, and work-order contracts should migrate into that owner
|
||||
as they are typed.
|
||||
|
||||
The included closure files also required direct `rustfmt`: Cargo's normal fmt
|
||||
walk does not discover these lexically included modules. Expanded line counts
|
||||
therefore measure readable source, not architectural growth. Ownership and
|
||||
imports remain the useful measures.
|
||||
|
||||
The same inspection found 33 consecutive duplicate `#[cfg(test)]` attributes
|
||||
on provider constructors/writers and their re-exports. One gate already makes
|
||||
each item test-only; the second owned nothing. The duplicates are removed.
|
||||
|
|
|
|||
|
|
@ -312,11 +312,15 @@ Verification-request closure is now typed and class-guarded. Current count:
|
|||
thirteen typed high-authority families and 543 remaining substring assertions.
|
||||
The explicit malicious Soul-verdict fixture now passes as a negative proof.
|
||||
|
||||
Closure-domain pressure: external governance 724 production lines, operations
|
||||
551, external fixtures 477. The next adoption/scheduling/work-order conversion
|
||||
must create `closure_contracts/workflow.rs` and migrate typed verification with
|
||||
it. This follows the generator's existing phase ownership; do not keep feeding
|
||||
the external-governance drawer.
|
||||
Closure-domain authority now has a physical workflow owner.
|
||||
`closure_contracts/workflow.rs` owns typed verification request closure and
|
||||
`workflow_tests.rs` owns its counterfeit-Soul-verdict fixture. The facade
|
||||
composes workflow beside external governance and operations. Direct `rustfmt`
|
||||
is required for these lexically included files because Cargo fmt does not find
|
||||
them. Next, type and move one adoption/scheduling/work-order family into
|
||||
workflow rather than feeding the external drawer. External governance should
|
||||
converge on tooling plus publication/accounting; operations retains
|
||||
policy/deployment.
|
||||
|
||||
The latest structural count is 32 closure family branches, 744 remaining
|
||||
substring assertions in the closure region, and 1,284 lines in
|
||||
|
|
|
|||
Binary file not shown.
|
|
@ -660,4 +660,4 @@ current_status:
|
|||
- Service lifecycle receipt history is now event-only: `load_epiphany_cultmesh_daemon_service_lifecycle_receipts` filters out the `epiphany-local/daemon-service-lifecycle-receipt/latest` mirror, while `load_latest_epiphany_cultmesh_daemon_service_lifecycle_receipt` remains the latest-state reader. Focused unit test `service_lifecycle_receipt_history_excludes_latest_mirror` proves two per-receipt writes return exactly two history records and latest points at the second. Fresh smoke `verse-query-lifecycle-history-filter-smoke` and live overview/triage `local-20260618-145632-497-efac6f0d` / `local-20260618-145632-321-867947af` prove compact swarm sights still expose service lifecycle attention plus the present elevated runbook artifact without daemon pokes or service mutation. Do not use a broad unscoped cargo test filter for this check on Windows; it fans out across bin harnesses and hit a broken pipe during this pass.
|
||||
- `epiphany-verse-query seed-compact` is the compact seed receipt for wrappers and read-only rites. The older `seed` command still prints the full local Verse context for explicit debugging, but compact wrapper modes now avoid full `seed`/final `query` readback after the combined overview proof exposed Windows debug stack overflow from full-context serialization pressure.
|
||||
last_completed_repo_swarm_cut: Huginn live-fire has crossed the first real repo Body from Persona pressure to branch-local Hands commit and Soul/Mind closure, and now has repeatable closure and redacted-public-proof mouths. On `E:\Projects\Huginn` branch `epiphany/huginn/first-awakening`, `tools/epiphany_local_run.ps1 -Mode repo-persona-intake` accepted item `huginn-inspection-readback-livefire`, Weksa/Persona intake remained sealed, and `epiphany-work derive-plan` lowered it to model-authored safe family `repo.status_section` for `README.md` only. `tools/epiphany_local_run.ps1 -Mode repo-swarm-run` advanced four bounded pulses: run-from-plan, adopt-from-plan, execute-from-plan, and close-from-execute. Huginn commit `e9b07c38fceabbdc89ea35c2156326c80c0393a2` updated only `README.md`; closure receipt `.epiphany\work\work-close-huginn-inspection-readback-livefire.json` records status `closed`, Soul verdict `passed`, Mind state commit `repo-work-close-huginn-inspection-readback-livefire-mind-commit`, safe family `repo.status_section`, path scope `README.md`, Bifrost publication gate, and `privateStateExposed=false`. Verification also ran Huginn's TypeScript compiler through concrete Node path: `C:\Program Files\nodejs\node.exe E:\Projects\Huginn\node_modules\typescript\bin\tsc -p tsconfig.json` passed. Native verifier `epiphany-repo-livefire-closure-smoke --workspace E:\Projects\Huginn --item huginn-inspection-readback-livefire --expected-path README.md --expected-family repo.status_section --expected-gate awaiting-publication --expected-blocker bifrost-publication-missing` checks closure receipt, Mind map entry, overview gate/blocker, authority seals, and `git show` changed paths, returning `status=ok`, `soulVerdict=passed`, `publicationGate=Bifrost`, and `privateStateExposed=false`. Wrapper `tools/epiphany_local_run.ps1 -Mode repo-livefire-closure -Workspace E:\Projects\Huginn -RepoWorkItem huginn-inspection-readback-livefire -SkipBuild` exposes the same read-only proof through the local operator mouth; artifact `local-20260621-190156-803-2f85ba15` printed commit, path, gate, blocker, Soul verdict, Mind commit receipt, and `privateStateExposed=False` without push, merge, publication, or target mutation. New wrapper `tools/epiphany_local_run.ps1 -Mode repo-work-public-proof -Workspace E:\Projects\Huginn -RepoWorkItem huginn-inspection-readback-livefire -SkipBuild` exports the redacted proof bundle and repo-local Verse index without publishing; artifact `local-20260621-190645-345-4555b1dc` wrote `.epiphany\public\proof-bundles\repo-work-public-proof-huginn-inspection-readback-livefire.json`, proof id `repo-work-public-proof-huginn-inspection-readback-livefire`, SHA-256 `857545b199f3e37eb06c2e757e5cfc201958e46667bb1f8403fd333a22620f63`, nine artifact rows, zero publication rows, and `privateStateExposed=False`. swarm overview readback `local-20260621-190701-140-b9519ec6` sees the `REPO-WORK-PUBLIC-PROOF` row and action row from Huginn's repo-local Verse with the same SHA-256 while Bifrost publication remains missing. Launcher compact modes are now named compact operator-context modes instead of read-only modes, and `bifrost-public-proof` summaries print item, target public Verse, room, proof SHA-256, review receipts, and credit receipts so publication receipts are auditable without claiming upstream sync.
|
||||
next_action: Continue the conceptual-substitution pass. Thirteen high-authority closure families are typed and guarded; 543 substring assertions remain. Physical pressure is external_governance 724 production lines, operations 551, and external fixtures 477. The next adoption/scheduling/work-order conversion must create workflow.rs and migrate typed verification with it, following the generator's existing phase ownership instead of feeding the external drawer. External governance should converge on tooling plus publication/accounting; operations retains policy/deployment. Provider chronology is explicitly external and guarded as arrival order. Continue auditing evidence/security mirrors and adapters for borrowed authority.
|
||||
next_action: Continue the conceptual-substitution pass. Thirteen high-authority closure families are typed and guarded; 543 substring assertions remain. Workflow is now a physical closure domain: workflow.rs owns typed verification request closure and workflow_tests.rs owns its counterfeit-Soul-verdict fixture. Direct rustfmt is required because Cargo fmt misses the lexically included files. Next type and move one adoption/scheduling/work-order family into workflow instead of feeding external governance. External governance should converge on tooling plus publication/accounting; operations retains policy/deployment. Provider chronology is explicitly external and guarded as arrival order. Continue auditing evidence/security mirrors and adapters for borrowed authority.
|
||||
|
|
|
|||
Reference in a new issue