From bf035fce1b160e5b3d6cdda92b7f61420345ef92 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Mon, 17 Aug 2026 14:31:23 +0900 Subject: [PATCH 1/4] feat(relation): refuse a summary as the source identity A summary may point at earlier event time (ADR 0003). It cannot become a state transition or reuse the source document identity. Recovery is the computed share of summary kinds that match known truth versus collapsing every summary to the source. --- ARCHITECTURE.md | 1 + CHANGELOG.md | 1 + Cargo.lock | 4 + Cargo.toml | 2 + README.md | 3 +- crates/summarizes_edge/Cargo.toml | 17 +++ crates/summarizes_edge/src/error.rs | 53 +++++++ crates/summarizes_edge/src/kind.rs | 130 ++++++++++++++++++ crates/summarizes_edge/src/lib.rs | 22 +++ .../summarizes_edge/tests/crate_contract.rs | 7 + .../tests/summarizes_edge_contract.rs | 67 +++++++++ docs/TRACEABILITY.md | 2 +- ...03-relational-event-multiple-membership.md | 2 +- docs/adr/README.md | 2 +- docs/research/standards-and-literature.md | 2 +- docs/research/summarizes-edge-identity.md | 28 ++++ docs/validation/temporal-event-foundation.md | 1 + scripts/check_workspace_contract.py | 1 + 18 files changed, 340 insertions(+), 5 deletions(-) create mode 100644 crates/summarizes_edge/Cargo.toml create mode 100644 crates/summarizes_edge/src/error.rs create mode 100644 crates/summarizes_edge/src/kind.rs create mode 100644 crates/summarizes_edge/src/lib.rs create mode 100644 crates/summarizes_edge/tests/crate_contract.rs create mode 100644 crates/summarizes_edge/tests/summarizes_edge_contract.rs create mode 100644 docs/research/summarizes-edge-identity.md diff --git a/ARCHITECTURE.md b/ARCHITECTURE.md index ffe514db..e6b4f2ff 100644 --- a/ARCHITECTURE.md +++ b/ARCHITECTURE.md @@ -61,6 +61,7 @@ boundaries above remain the target modular MSA architecture. | `tepp_simulation` | known-truth temporal/event data generation | | `validation_core` | RMSE, bias, coverage, graph, and Monte Carlo metrics | | `tepp_api` | versioned DTO, schema, and export contracts | +| `summarizes_edge` | a summary is not a state transition and not the source document | No crate exposes placeholder production behavior in Task 1. This prevents an empty façade from becoming a de facto public API before its invariants and tests diff --git a/CHANGELOG.md b/CHANGELOG.md index f3764d25..d860a39b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,7 @@ All notable changes to TEPP are documented here. The format follows Keep a Chang ### Added +- `summarizes_edge` identity gate: a summary may point to earlier event time but cannot become a state transition or reuse the source document identity; recovered summary kinds match known truth at a higher computed rate than collapsing every summary to the source (ADR 0003). - `persistence_postgres` retention/deletion/legal-hold (migration `0007`): policy rows, legal holds that block completed deletion, evidence tombstones without raw-source restore, analysis exclusion only for `logical_revocation`/`identity_tombstone` (not `cache_export_removal`), and deletion requests bound to the cited retention policy's tenant/class/purpose. - `persistence_postgres` backup/restore integrity: restored snapshots stay unusable until tenant, canonical `SHA-256`, knowledge-cutoff eligibility, temporal window order, and append-only triggers revalidate; SQL probes raise `restore integrity failed` (ADR 0013). - `persistence_postgres` concurrent document-write stress: atomic revise `DO` block that requires exactly one open `system_to` close, SQLSTATE mapping onto `ConcurrentWriteConflict` / `DuplicateDocumentRecord`, and live multi-session insert/revise/append-only proofs. No new migration number. diff --git a/Cargo.lock b/Cargo.lock index 372a55f4..12130a2f 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1223,6 +1223,10 @@ version = "2.6.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292" +[[package]] +name = "summarizes_edge" +version = "0.1.0" + [[package]] name = "syn" version = "2.0.119" diff --git a/Cargo.toml b/Cargo.toml index 92565940..4645be1a 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -11,6 +11,7 @@ members = [ "crates/tepp_simulation", "crates/validation_core", "crates/tepp_api", + "crates/summarizes_edge", ] default-members = [ "crates/evidence_core", @@ -23,6 +24,7 @@ default-members = [ "crates/tepp_simulation", "crates/validation_core", "crates/tepp_api", + "crates/summarizes_edge", ] [workspace.package] diff --git a/README.md b/README.md index ae74015d..b3d0f4cc 100644 --- a/README.md +++ b/README.md @@ -7,7 +7,7 @@ implemented in Rust. ## Current implementation state This branch establishes the Task 1 Rust workspace and quality-gate foundation. -The ten bounded crates compile independently but intentionally expose no +The eleven bounded crates compile independently but intentionally expose no placeholder production APIs. Domain behavior begins in Task 2 with immutable evidence identifiers and source records. @@ -22,6 +22,7 @@ crates/corpus_split crates/tepp_simulation crates/validation_core crates/tepp_api +crates/summarizes_edge ``` ## Local verification diff --git a/crates/summarizes_edge/Cargo.toml b/crates/summarizes_edge/Cargo.toml new file mode 100644 index 00000000..2085e210 --- /dev/null +++ b/crates/summarizes_edge/Cargo.toml @@ -0,0 +1,17 @@ +[package] +name = "summarizes_edge" +description = "A summary is not a state transition and not the source document." +version.workspace = true +edition.workspace = true +rust-version.workspace = true +license.workspace = true +authors.workspace = true +repository.workspace = true +homepage.workspace = true +readme.workspace = true +keywords.workspace = true +categories.workspace = true +publish = false + +[lints] +workspace = true diff --git a/crates/summarizes_edge/src/error.rs b/crates/summarizes_edge/src/error.rs new file mode 100644 index 00000000..eaebdf29 --- /dev/null +++ b/crates/summarizes_edge/src/error.rs @@ -0,0 +1,53 @@ +//! Fail-closed summarizes-edge errors. + +use std::fmt; + +/// A fail-closed summarizes-edge error. +#[derive(Clone, Copy, Debug, Eq, PartialEq)] +#[non_exhaustive] +pub enum SummarizesEdgeError { + /// A summary was treated as a state transition. + SummaryIsNotTransition, + /// A summary was treated as the source document identity. + SummaryIsNotSourceIdentity, + /// A recovery slice was empty or length-mismatched. + InvalidEdgePayload, +} + +impl fmt::Display for SummarizesEdgeError { + fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result { + let message = match self { + Self::SummaryIsNotTransition => "a summary is not a state transition", + Self::SummaryIsNotSourceIdentity => "a summary is not the source document identity", + Self::InvalidEdgePayload => "invalid summarizes-edge payload", + }; + formatter.write_str(message) + } +} + +impl std::error::Error for SummarizesEdgeError {} + +#[cfg(test)] +mod tests { + use super::SummarizesEdgeError; + + #[test] + fn error_messages_are_stable() { + for (error, message) in [ + ( + SummarizesEdgeError::SummaryIsNotTransition, + "a summary is not a state transition", + ), + ( + SummarizesEdgeError::SummaryIsNotSourceIdentity, + "a summary is not the source document identity", + ), + ( + SummarizesEdgeError::InvalidEdgePayload, + "invalid summarizes-edge payload", + ), + ] { + assert_eq!(error.to_string(), message); + } + } +} diff --git a/crates/summarizes_edge/src/kind.rs b/crates/summarizes_edge/src/kind.rs new file mode 100644 index 00000000..a2cf6b8e --- /dev/null +++ b/crates/summarizes_edge/src/kind.rs @@ -0,0 +1,130 @@ +//! Summary provenance versus the summarized source document. + +use crate::SummarizesEdgeError; + +/// Closed vocabulary of summary-related document identities. +#[derive(Clone, Copy, Debug, Eq, PartialEq)] +pub enum SummarizesKind { + /// A summary of an earlier source (provenance; may point backward). + Summary, + /// The earlier source document being summarized. + SourceDocument, +} + +impl SummarizesKind { + /// Return the stable wire kind name. + #[must_use] + pub const fn wire_name(self) -> &'static str { + match self { + Self::Summary => "summarizes", + Self::SourceDocument => "source_document", + } + } + + /// Parse a stable wire kind name. + /// + /// # Errors + /// + /// Returns [`SummarizesEdgeError::InvalidEdgePayload`] for unrecognized + /// names. + pub fn from_wire_name(name: &str) -> Result { + match name { + "summarizes" => Ok(Self::Summary), + "source_document" => Ok(Self::SourceDocument), + _ => Err(SummarizesEdgeError::InvalidEdgePayload), + } + } +} + +/// Refuse to treat a summary as a forward state transition. +/// +/// # Errors +/// +/// Returns [`SummarizesEdgeError::SummaryIsNotTransition`] when `kind` is +/// [`SummarizesKind::Summary`]. +pub fn refuse_summary_as_transition(kind: SummarizesKind) -> Result<(), SummarizesEdgeError> { + match kind { + SummarizesKind::Summary => Err(SummarizesEdgeError::SummaryIsNotTransition), + SummarizesKind::SourceDocument => Ok(()), + } +} + +/// Refuse to treat a summary as the source document identity. +/// +/// # Errors +/// +/// Returns [`SummarizesEdgeError::SummaryIsNotSourceIdentity`] when `kind` is +/// [`SummarizesKind::Summary`]. +pub fn refuse_summary_as_source_identity(kind: SummarizesKind) -> Result<(), SummarizesEdgeError> { + match kind { + SummarizesKind::Summary => Err(SummarizesEdgeError::SummaryIsNotSourceIdentity), + SummarizesKind::SourceDocument => Ok(()), + } +} + +/// Fraction of recovered summary kinds that match known truth. +/// +/// # Errors +/// +/// Returns [`SummarizesEdgeError::InvalidEdgePayload`] when either slice is +/// empty or the lengths differ. +pub fn identity_recovery_rate( + truth: &[SummarizesKind], + decided: &[SummarizesKind], +) -> Result { + if truth.is_empty() || truth.len() != decided.len() { + return Err(SummarizesEdgeError::InvalidEdgePayload); + } + let mut matches = 0_u32; + for (truth_kind, decided_kind) in truth.iter().zip(decided) { + if truth_kind == decided_kind { + matches += 1; + } + } + Ok(f64::from(matches) / truth.len() as f64) +} + +#[cfg(test)] +mod tests { + use super::{ + identity_recovery_rate, refuse_summary_as_source_identity, refuse_summary_as_transition, + SummarizesKind, + }; + use crate::SummarizesEdgeError; + + #[test] + fn local_branches_cover_kinds_payloads_and_wire_names() { + assert_eq!( + refuse_summary_as_transition(SummarizesKind::Summary), + Err(SummarizesEdgeError::SummaryIsNotTransition) + ); + assert_eq!( + refuse_summary_as_source_identity(SummarizesKind::Summary), + Err(SummarizesEdgeError::SummaryIsNotSourceIdentity) + ); + refuse_summary_as_transition(SummarizesKind::SourceDocument).expect("source"); + refuse_summary_as_source_identity(SummarizesKind::SourceDocument).expect("source"); + for kind in [SummarizesKind::Summary, SummarizesKind::SourceDocument] { + assert_eq!( + SummarizesKind::from_wire_name(kind.wire_name()).expect("round-trip"), + kind + ); + } + assert_eq!( + SummarizesKind::from_wire_name("references"), + Err(SummarizesEdgeError::InvalidEdgePayload) + ); + let matched = + identity_recovery_rate(&[SummarizesKind::Summary], &[SummarizesKind::Summary]) + .expect("rate"); + assert!((matched - 1.0).abs() < f64::EPSILON); + assert_eq!( + identity_recovery_rate(&[], &[]), + Err(SummarizesEdgeError::InvalidEdgePayload) + ); + assert_eq!( + identity_recovery_rate(&[SummarizesKind::Summary], &[]), + Err(SummarizesEdgeError::InvalidEdgePayload) + ); + } +} diff --git a/crates/summarizes_edge/src/lib.rs b/crates/summarizes_edge/src/lib.rs new file mode 100644 index 00000000..6cef37c2 --- /dev/null +++ b/crates/summarizes_edge/src/lib.rs @@ -0,0 +1,22 @@ +#![forbid(unsafe_code)] +#![deny(missing_docs)] +#![allow(clippy::cast_precision_loss)] +//! A summary is not a state transition and not the source document. +//! +//! Summary provenance may point to earlier event time. It never becomes an +//! input-process-outcome edge and never reuses the source identity +//! (ADR 0003). + +mod error; +mod kind; + +/// Fail-closed summarizes-edge errors. +pub use error::SummarizesEdgeError; +/// Fraction of recovered summary kinds that match known truth. +pub use kind::identity_recovery_rate; +/// Refuse to treat a summary as the source document identity. +pub use kind::refuse_summary_as_source_identity; +/// Refuse to treat a summary as a forward state transition. +pub use kind::refuse_summary_as_transition; +/// Closed vocabulary of summary-related document identities. +pub use kind::SummarizesKind; diff --git a/crates/summarizes_edge/tests/crate_contract.rs b/crates/summarizes_edge/tests/crate_contract.rs new file mode 100644 index 00000000..730a50a8 --- /dev/null +++ b/crates/summarizes_edge/tests/crate_contract.rs @@ -0,0 +1,7 @@ +//! Integration contract for the `summarizes_edge` package identity. + +#[test] +fn package_identity_is_stable() { + let observed = std::hint::black_box(env!("CARGO_PKG_NAME")); + assert_eq!(observed, "summarizes_edge"); +} diff --git a/crates/summarizes_edge/tests/summarizes_edge_contract.rs b/crates/summarizes_edge/tests/summarizes_edge_contract.rs new file mode 100644 index 00000000..e38a2368 --- /dev/null +++ b/crates/summarizes_edge/tests/summarizes_edge_contract.rs @@ -0,0 +1,67 @@ +//! A summary is not a state transition and not the source document. + +use summarizes_edge::{ + identity_recovery_rate, refuse_summary_as_source_identity, refuse_summary_as_transition, + SummarizesEdgeError, SummarizesKind, +}; + +#[test] +fn a_summary_cannot_become_a_transition_or_the_source_identity() { + assert_eq!( + refuse_summary_as_transition(SummarizesKind::Summary), + Err(SummarizesEdgeError::SummaryIsNotTransition) + ); + assert_eq!( + refuse_summary_as_source_identity(SummarizesKind::Summary), + Err(SummarizesEdgeError::SummaryIsNotSourceIdentity) + ); + refuse_summary_as_transition(SummarizesKind::SourceDocument).expect("source"); + refuse_summary_as_source_identity(SummarizesKind::SourceDocument).expect("source"); +} + +#[test] +fn recovered_kinds_match_known_truth_better_than_a_source_collapse() { + let truth = [ + SummarizesKind::Summary, + SummarizesKind::SourceDocument, + SummarizesKind::Summary, + ]; + let recovered = truth; + let collapsed = [ + SummarizesKind::SourceDocument, + SummarizesKind::SourceDocument, + SummarizesKind::SourceDocument, + ]; + let recovered_rate = identity_recovery_rate(&truth, &recovered).expect("recovered"); + let collapsed_rate = identity_recovery_rate(&truth, &collapsed).expect("collapsed"); + let expected = { + let mut matches = 0_u32; + for (truth_kind, decided_kind) in truth.iter().zip(recovered.iter()) { + if truth_kind == decided_kind { + matches += 1; + } + } + f64::from(matches) / f64::from(u32::try_from(truth.len()).expect("len")) + }; + assert!((recovered_rate - expected).abs() < f64::EPSILON); + assert!(recovered_rate > collapsed_rate); +} + +#[test] +fn empty_or_mismatched_kind_payloads_fail_closed() { + assert_eq!( + identity_recovery_rate(&[], &[]), + Err(SummarizesEdgeError::InvalidEdgePayload) + ); + assert_eq!( + identity_recovery_rate(&[SummarizesKind::Summary], &[]), + Err(SummarizesEdgeError::InvalidEdgePayload) + ); + assert_eq!( + identity_recovery_rate( + &[SummarizesKind::Summary, SummarizesKind::SourceDocument], + &[SummarizesKind::Summary] + ), + Err(SummarizesEdgeError::InvalidEdgePayload) + ); +} diff --git a/docs/TRACEABILITY.md b/docs/TRACEABILITY.md index c29d9743..f19fe867 100644 --- a/docs/TRACEABILITY.md +++ b/docs/TRACEABILITY.md @@ -12,7 +12,7 @@ The full APA 7th standards/literature register remains `docs/research/standards- | Rust workspace/quality foundation | ADR 0007 | workspace/CI/repository contract | implemented-main | | six distinct clocks and uncertain intervals | PRD; ADR 0002 | PR #8 `temporal_core` on protected main; PR #5 historical only | implemented-main | | Allen relation algebra/bounded closure | ADR 0002; temporal research | PR #9 `temporal_core` path-consistency on protected main | implemented-main | -| forward-only transition subgraph | PRD; ADR 0002/0003 | `relation_graph` on protected main | implemented-main | +| forward-only transition subgraph | PRD; ADR 0002/0003 | `relation_graph` on protected main; `summarizes_edge` summary-versus-source identity on the active PR | partial | | event ontology/evidence mentions | PRD; ADR 0003 | `event_core` mention/instance separation on protected main; `persistence_postgres` mention SQL implemented-main refuses mention-as-instance; event-instance SQL (#39 implemented-main) refuses inverted windows; full intelligence stack remaining | partial | | time-varying cross-classified multiple membership | PRD; ADR 0003 | `membership_core` network on protected main; multilevel estimators remaining | partial | | leakage-safe availability/cutoff snapshots | PRD; ADR 0002/0013 | `corpus_split` on protected main | implemented-main | diff --git a/docs/adr/0003-relational-event-multiple-membership.md b/docs/adr/0003-relational-event-multiple-membership.md index c5b1a154..336570fe 100644 --- a/docs/adr/0003-relational-event-multiple-membership.md +++ b/docs/adr/0003-relational-event-multiple-membership.md @@ -1,7 +1,7 @@ # ADR 0003 — Relational event ontology and time-varying multiple membership **Decision status:** Accepted -**Implementation maturity:** partial — membership network and event mention/instance separation implemented-main; typed relation graph with forward-only transitions active-PR; multilevel estimators and persistence remain accepted-target +**Implementation maturity:** partial — membership network and event mention/instance separation implemented-main; summary-versus-source identity in `summarizes_edge` on the active PR; typed relation graph with forward-only transitions active-PR; multilevel estimators and persistence remain accepted-target **Date:** 2026-08-05 **Supersedes:** None. ADR 0016 owns TDT/CHRONOS event-intelligence task semantics; this ADR remains authoritative for ontology, relation, role, and membership structure. diff --git a/docs/adr/README.md b/docs/adr/README.md index 5d3aa546..87a95b0b 100644 --- a/docs/adr/README.md +++ b/docs/adr/README.md @@ -8,7 +8,7 @@ Read [`ADR_POLICY.md`](ADR_POLICY.md) first. **Decision status and implementatio |---|---|---|---|---| | [0001](0001-rust-first-modular-msa.md) | Rust-first numerical core and CPU `f64` reference | Accepted | partial | ADR 0011 owns cross-service/MSA authority; 0001 retains numerical/backend authority. | | [0002](0002-six-clock-temporal-semantics.md) | Six-clock temporal semantics and fail-closed historical leakage prevention | Accepted | active-PR | Unmerged PR #8 is the canonical Task 3 replacement implementing typed clocks/intervals against the current protected-main lineage; conflicted PR #5 is superseded lineage. Later graph/split enforcement remains target work. | -| [0003](0003-relational-event-multiple-membership.md) | Relational event ontology and time-varying cross-classified multiple membership | Accepted | partial | Weighted time-varying membership network/roles are active-PR (PR #12); full multilevel estimators, graph ontology, and persistence remain accepted-target. ADR 0016 owns event-intelligence tasks. | +| [0003](0003-relational-event-multiple-membership.md) | Relational event ontology and time-varying cross-classified multiple membership | Accepted | partial | Weighted time-varying membership network/roles are implemented-main (PR #12); summary-versus-source identity is `summarizes_edge` on the active PR; full multilevel estimators and persistence remain accepted-target. ADR 0016 owns event-intelligence tasks. | | [0004](0004-shared-multilingual-latent-space.md) | One shared multilingual latent space with explicit invariance status | Accepted | accepted-target | ADR 0012 owns the full topic-estimator/backend/global-topic contract. | | [0005](0005-posterior-esem-dsem.md) | Posterior-aware ESEM/DSEM and valid compositional coordinates | Accepted | accepted-target | Downstream psychometric authority; upstream topic/network model is clarified by ADR 0012. | | [0006](0006-vram-gpu-nvidia-orchestration.md) | VRAM-adaptive GPU compute and model-credential boundary | Accepted | accepted-target | LLM orchestration policy superseded by ADR 0010; autonomous development authority governed by ADR 0015. | diff --git a/docs/research/standards-and-literature.md b/docs/research/standards-and-literature.md index 75710ed3..9f060c3b 100644 --- a/docs/research/standards-and-literature.md +++ b/docs/research/standards-and-literature.md @@ -94,7 +94,7 @@ Lebo, T., Sahoo, S., & McGuinness, D. (Eds.). (2013). *PROV-O: The PROV ontology Moreau, L., & Missier, P. (Eds.). (2013). *PROV-DM: The PROV data model*. World Wide Web Consortium. https://www.w3.org/TR/prov-dm/ -TEPP separates stable record identity, content equality, exact text location, wire representation, authorization, and provenance. JSON wire records are explicit versioned DTOs with unknown-field rejection and reconstruct through domain validation. `SHA-256` detects content substitution but is not treated as proof of origin, authority, or chain of custody. +TEPP separates stable record identity, content equality, exact text location, wire representation, authorization, and provenance. JSON wire records are explicit versioned DTOs with unknown-field rejection and reconstruct through domain validation. `SHA-256` detects content substitution but is not treated as proof of origin, authority, or chain of custody. A summary is a PROV derivation of the source document, not a state transition and not a reuse of the source identity (Moreau & Missier, 2013). ## Privacy lifecycle, retention, and legal hold diff --git a/docs/research/summarizes-edge-identity.md b/docs/research/summarizes-edge-identity.md new file mode 100644 index 00000000..330cf10a --- /dev/null +++ b/docs/research/summarizes-edge-identity.md @@ -0,0 +1,28 @@ +# A summary is not a transition or the source document (doctoring) + +## Scope + +`summarizes_edge` keeps summaries out of the forward state-transition +vocabulary and out of the source-document identity. Recovery is the +computed share of recovered kinds that match known truth. + +This slice does not persist the graph, allocate migration `0008`, or +replace `relation_graph` or `citation_edge`. + +## Authority + +### Normative TEPP contract + +- `docs/adr/0003-relational-event-multiple-membership.md` — typed + relations distinguish transition from provenance. Translation, + revision, and copy variants keep distinct identities for + relation-aware splits. + +### Supporting literature + +Moreau and Missier (2013) treat a derived entity as distinct from the +entity it summarizes. A summary is a derivation, not a state transition +and not a reuse of the source identity. + +Moreau, L., & Missier, P. (Eds.). (2013). *PROV-DM: The PROV data +model*. World Wide Web Consortium. https://www.w3.org/TR/prov-dm/ diff --git a/docs/validation/temporal-event-foundation.md b/docs/validation/temporal-event-foundation.md index 295fbae0..2150f8e7 100644 --- a/docs/validation/temporal-event-foundation.md +++ b/docs/validation/temporal-event-foundation.md @@ -18,6 +18,7 @@ This report tracks exact-head scientific and engineering evidence required befor | Event mention/instance | `event_core` | partial | — | unit + fail-closed promotion | Task 5 / PR #13 | | Multiple membership | `membership_core` | partial | — | unit + ESS weights | Task 7 / PR #12 + #25 | | Forward transition DAG | `relation_graph` | implemented-main | — | unit + cycle rejection | Task 6 / PR #14 | +| Summary-versus-source identity | `summarizes_edge` | accepted-target | active PR | refuse summary-as-transition/source + recovery vs source collapse | ADR 0003 | | Bitemporal persistence + live SQL port | `persistence_postgres` | partial | backup/restore integrity | migration contracts + recording transport + optional PgPool + live CI + tenant RLS + `0005`/`0006` + event relation/mention/instance + source-artifact + audit-event + concurrent-write (#37–#43 implemented-main) + restore integrity probes (active PR) | Task 8 / PR #16 + #23 + #26 + #27 + #29 + #30–#43 + restore integrity | | Leakage-safe splits | `corpus_split` | implemented-main | — | cutoff + co-partition tests | Task 9 / PR #17 | | Truth corpora / manifests | `tepp_simulation` | implemented-main | — | deterministic generator tests | Task 10 / PR #18 | diff --git a/scripts/check_workspace_contract.py b/scripts/check_workspace_contract.py index c7b1ecf5..0d1a78a5 100644 --- a/scripts/check_workspace_contract.py +++ b/scripts/check_workspace_contract.py @@ -23,6 +23,7 @@ "tepp_simulation", "validation_core", "tepp_api", + "summarizes_edge", ) REQUIRED_CI_SNIPPETS: tuple[str, ...] = ( From bb277d91985f2d8f1a487d500a5e7f2e4f6e92a3 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 03:09:53 +0900 Subject: [PATCH 2/4] style: apply workspace rustfmt --- crates/summarizes_edge/src/kind.rs | 4 ++-- crates/summarizes_edge/src/lib.rs | 4 ++-- crates/summarizes_edge/tests/summarizes_edge_contract.rs | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/crates/summarizes_edge/src/kind.rs b/crates/summarizes_edge/src/kind.rs index a2cf6b8e..fbfc4dd7 100644 --- a/crates/summarizes_edge/src/kind.rs +++ b/crates/summarizes_edge/src/kind.rs @@ -87,8 +87,8 @@ pub fn identity_recovery_rate( #[cfg(test)] mod tests { use super::{ - identity_recovery_rate, refuse_summary_as_source_identity, refuse_summary_as_transition, - SummarizesKind, + SummarizesKind, identity_recovery_rate, refuse_summary_as_source_identity, + refuse_summary_as_transition, }; use crate::SummarizesEdgeError; diff --git a/crates/summarizes_edge/src/lib.rs b/crates/summarizes_edge/src/lib.rs index 6cef37c2..01d7fa03 100644 --- a/crates/summarizes_edge/src/lib.rs +++ b/crates/summarizes_edge/src/lib.rs @@ -12,11 +12,11 @@ mod kind; /// Fail-closed summarizes-edge errors. pub use error::SummarizesEdgeError; +/// Closed vocabulary of summary-related document identities. +pub use kind::SummarizesKind; /// Fraction of recovered summary kinds that match known truth. pub use kind::identity_recovery_rate; /// Refuse to treat a summary as the source document identity. pub use kind::refuse_summary_as_source_identity; /// Refuse to treat a summary as a forward state transition. pub use kind::refuse_summary_as_transition; -/// Closed vocabulary of summary-related document identities. -pub use kind::SummarizesKind; diff --git a/crates/summarizes_edge/tests/summarizes_edge_contract.rs b/crates/summarizes_edge/tests/summarizes_edge_contract.rs index e38a2368..4f8e7823 100644 --- a/crates/summarizes_edge/tests/summarizes_edge_contract.rs +++ b/crates/summarizes_edge/tests/summarizes_edge_contract.rs @@ -1,8 +1,8 @@ //! A summary is not a state transition and not the source document. use summarizes_edge::{ - identity_recovery_rate, refuse_summary_as_source_identity, refuse_summary_as_transition, - SummarizesEdgeError, SummarizesKind, + SummarizesEdgeError, SummarizesKind, identity_recovery_rate, refuse_summary_as_source_identity, + refuse_summary_as_transition, }; #[test] From 7108baa11d724265c2cd6422371642f3424ad205 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Fri, 21 Aug 2026 05:26:39 +0900 Subject: [PATCH 3/4] test: derive crate contract from workspace manifest --- tests/quality/test_check_docstrings.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/tests/quality/test_check_docstrings.py b/tests/quality/test_check_docstrings.py index 2c11f7a5..da59f799 100644 --- a/tests/quality/test_check_docstrings.py +++ b/tests/quality/test_check_docstrings.py @@ -11,6 +11,7 @@ from unittest import mock from scripts import check_docstrings as docstrings +from scripts import check_workspace_contract as workspace_contract REPOSITORY_ROOT = Path(__file__).resolve().parents[2] @@ -24,7 +25,7 @@ def test_live_repository_is_documented(self) -> None: sources = docstrings.rust_sources(REPOSITORY_ROOT) crate_roots = sorted(REPOSITORY_ROOT.glob("crates/*/src/lib.rs")) - self.assertEqual(len(crate_roots), 10) + self.assertEqual(len(crate_roots), len(workspace_contract.EXPECTED_CRATES)) self.assertTrue(set(crate_roots).issubset(sources)) self.assertGreaterEqual(len(sources), len(crate_roots)) self.assertEqual(docstrings.validate_repository(REPOSITORY_ROOT), []) From 5893d0e2091319d630c789edf219363eaced4390 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Mon, 24 Aug 2026 18:10:16 +0900 Subject: [PATCH 4/4] chore: regenerate Cargo.lock after main merge --- Cargo.lock | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Cargo.lock b/Cargo.lock index 1e2fc7db..aa7dd001 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1475,6 +1475,10 @@ version = "2.6.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292" +[[package]] +name = "summarizes_edge" +version = "0.1.0" + [[package]] name = "support_edge" version = "0.1.0"