From 41941715750e84318371150ac187bbe61827b391 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 14:44:50 +0900 Subject: [PATCH 1/3] docs: make fitness inventory explicitly time-bounded --- docs/DOCUMENTATION_FITNESS.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/DOCUMENTATION_FITNESS.md b/docs/DOCUMENTATION_FITNESS.md index 69f603252..88c01ecee 100644 --- a/docs/DOCUMENTATION_FITNESS.md +++ b/docs/DOCUMENTATION_FITNESS.md @@ -1,7 +1,7 @@ # OriginWeave Documentation Fitness Assessment - **Assessment date:** 2026-08-11 -- **Assessment scope:** protected `main`, every current OriginWeave implementation lane relevant to canonical product truth, and durable product decisions that must be reconstructable without chat history +- **Assessment scope:** protected `main`, the implementation lanes observed on the assessment date, and durable product decisions reconstructable without chat history; live GitHub PR/issue state supersedes every numbered active-PR example below, which is dated evidence rather than a current inventory - **Assessment type:** semantic fitness, not file-presence inventory - **Current verdict:** **DESIGN-SUFFICIENT / PROTECTED-MAIN-PARTIAL** From 74db58c2bb428b0db69bd1114c7120b13df288f6 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 14 Aug 2026 14:45:18 +0900 Subject: [PATCH 2/3] docs: record time-bounded fitness inventory --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 6e4bd39ca..6e561c1a9 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -31,6 +31,7 @@ All notable changes to OriginWeave are documented in this file. The format follo ### Changed +- Documentation fitness now treats numbered active-PR examples as dated assessment evidence and explicitly defers current PR/issue inventory to live GitHub state, preventing old branch examples from being presented as current implementation truth. - Separated logical origin authority from resolved network destination authority; an origin grant no longer implies permission to connect to every resolver result. - Separated resolved-address authorization from direct transport evidence; an approved IP now becomes a usable stream only after the operating system reports the exact requested IP and port. - Separated exact TCP peer proof from authenticated TLS service identity; an observed peer becomes an authenticated HTTPS stream only after explicit-root, fixed-time, SAN-bound WebPKI verification over that same stream. From 8491cf65b2a9b494371299f22042205939d2498a Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 28 Aug 2026 20:49:00 +0900 Subject: [PATCH 3/3] fix(docs): normalize changelog list markers --- CHANGELOG.md | 4 ++-- tests/test_documentation_active_pr_evidence_contract.py | 8 ++++++++ 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index cc2c0e9f8..dd2108d5a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -37,8 +37,8 @@ All notable changes to OriginWeave are documented in this file. The format follo ### Changed -- - Documentation fitness now treats numbered active-PR examples as dated assessment evidence and explicitly defers current PR/issue inventory to live GitHub state, preventing old branch examples from being presented as current implementation truth. -- - Aligned the hourly product-development branch-coverage toolchain and its one-shot materializer with the reviewed `nightly-2026-08-18` pin, and corrected the official Dependabot Rust-toolchain reference. +- Documentation fitness now treats numbered active-PR examples as dated assessment evidence and explicitly defers current PR/issue inventory to live GitHub state, preventing old branch examples from being presented as current implementation truth. +- Aligned the hourly product-development branch-coverage toolchain and its one-shot materializer with the reviewed `nightly-2026-08-18` pin, and corrected the official Dependabot Rust-toolchain reference. - Separated logical origin authority from resolved network destination authority; an origin grant no longer implies permission to connect to every resolver result. - Separated resolved-address authorization from direct transport evidence; an approved IP now becomes a usable stream only after the operating system reports the exact requested IP and port. - Separated exact TCP peer proof from authenticated TLS service identity; an observed peer becomes an authenticated HTTPS stream only after explicit-root, fixed-time, SAN-bound WebPKI verification over that same stream. diff --git a/tests/test_documentation_active_pr_evidence_contract.py b/tests/test_documentation_active_pr_evidence_contract.py index 34e8a0238..63e1a6284 100644 --- a/tests/test_documentation_active_pr_evidence_contract.py +++ b/tests/test_documentation_active_pr_evidence_contract.py @@ -56,6 +56,14 @@ def test_baseline_refresh_changelog_matches_the_live_snapshot(self) -> None: self.assertIn("150 open pull requests, 110 drafts", self.changelog) self.assertNotIn("150 open pull requests, 112 drafts", self.changelog) + def test_changed_changelog_entries_use_single_list_markers(self) -> None: + """Keep Changed entries as one-level Keep a Changelog bullets.""" + changed = self.changelog.split("### Changed", 1)[1].split("### Security", 1)[0] + self.assertFalse( + any(line.startswith("- - ") for line in changed.splitlines()), + "Changed entries must not contain nested list markers", + ) + def test_dependency_stacks_are_explicit_and_non_shipped(self) -> None: """Current browser, network, sensitive and compatibility stacks stay active-only.""" for pr_number in (52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66):