fix(audio): establish canonical local-audio resource policy - #866

Draft

seonghobae wants to merge 88 commits into

fix/audio-resource-policy-781

Commits on Aug 16, 2026

test(audio): define canonical resource policy contract
seonghobae
committed
cb251f7
feat(audio): add canonical resource policy
seonghobae
committed
3e96ed6
test(score): require bounded validated PDF reads
seonghobae
committed
f83a1ba
refactor(core): expose bounded score reader module
seonghobae
committed
d659d9d
refactor(core): preserve public API through root module
seonghobae
committed
fc1af87
fix(score): bound stored PDF reads before allocation
seonghobae
committed
1df5fe0
fix(score): use bounded native PDF reader
seonghobae
committed
521fe12
style(score): keep bounded reader rustfmt-clean
seonghobae
committed
ca20dc5
docs(changelog): record bounded stored-score reads
seonghobae
committed
e6d31ee
fix(core): preserve desktop-core package contract
seonghobae
committed
051e39d
test(score): cover non-file stored score reads
seonghobae
committed
c11af77
test(score): prove same-descriptor growth detection
seonghobae
committed
f86e266
test(audio): require policy parity at orchestration and decode boundaries
seonghobae
committed
6aa0098
fix(audio): add one-sample decode probe to resource policy
seonghobae
committed
ee3b48c
fix(audio): bind temporal decode to canonical resource policy
seonghobae
committed
a982e7f
fix(audio): enforce canonical policy before stem inference
seonghobae
committed
38b3fb6
fix(audio): apply canonical byte policy at request preflight
seonghobae
committed
ed6e4f7
docs(audio): record resource-boundary evidence
seonghobae
committed
e7671de
docs(changelog): record canonical audio resource bounds
seonghobae
committed
9549647
docs(security): bind local audio to canonical resource policy
seonghobae
committed
b35bc12
test(audio): reject resource-policy arithmetic overflow
seonghobae
committed
710ed16
fix(audio): fail closed on extreme sample-rate arithmetic
seonghobae
committed
6e80527
style(audio): keep policy bounds formatter-clean
seonghobae
committed
572333e
test(audio): reject unrepresentable policy and decoder values
seonghobae
committed
adbfad0
fix(audio): make resource policy arithmetic fully fail closed
seonghobae
committed
428db0a
docs(audio): record checked policy arithmetic
seonghobae
committed
84f60b3
test(audio): reject oversized desktop selection at the bridge
seonghobae
committed
e42ff5c
test(audio): enforce encoded-byte parity for imported sources
seonghobae
committed
05fbbb3
fix(audio): enforce encoded-byte parity at desktop bridge
seonghobae
committed
b23e51a
docs(changelog): record desktop audio-policy parity
seonghobae
committed
509c18b
fix(changelog): restore full release history after parity note drift
seonghobae
committed
9823e0e
fix(ci): format audio resource policy regressions
seonghobae
committed
f631049
test(audio): reject fractional encoded byte metadata
seonghobae
committed
0ba0593
fix(audio): require integral encoded byte metadata
seonghobae
committed
ceb7f71
test(audio): require native encoded-byte admission
seonghobae
committed
84f7691
chore(audio): stack native resource policy on bounded core root
seonghobae
committed
da676cb
fix(audio): enforce native encoded-byte ceiling
seonghobae
committed
0488c8f
fix(audio): export native resource policy
seonghobae
committed
fbc7d7d
fix(audio): enforce native bootstrap byte ceiling
seonghobae
committed
e61e858
docs(audio): record native intake enforcement
seonghobae
committed
3f976e5
test(audio): require YouTube download to use canonical 100 MiB policy

cursoragent
and
seonghobae
committed
2b9d5e3
fix(audio): abort YouTube downloads at the canonical encoded-byte ceiling

cursoragent
and
seonghobae
committed
19064f4
docs(audio): record YouTube download-time policy evidence

cursoragent
and
seonghobae
committed
7b3b1e7
test(audio): cover fail-closed resource admission branches
seonghobae
committed
d1a75c9
merge(audio): consolidate YouTube admission repair into canonical #866
seonghobae
committed
1f3fdb8
fix(audio): delete owned YouTube partials on in-flight abort

cursoragent
and
seonghobae
committed
5e8fa77
style(audio): wrap zero-byte decoder regression
seonghobae
committed
6df13ae
test(audio): reject malformed YouTube duration metadata
seonghobae
committed
6d3b9b2
fix(audio): reject malformed YouTube duration metadata
seonghobae
committed
86f7272
docs(changelog): record YouTube duration metadata guard
seonghobae
committed
bc0fc98
test(audio): bound decoded buffer memory
seonghobae
committed
ec64aa7
fix(audio): enforce decoded memory budget
seonghobae
committed
104573a
docs(audio): record decoded memory admission
seonghobae
committed
c6d9368
docs(audio): record decoded memory budget
seonghobae
committed
f60eb17
test(youtube): cover fail-closed duration conversion
seonghobae
committed
aeb42da

Commits on Aug 17, 2026

test(youtube): avoid exceptional float subclasses
seonghobae
committed
f35f1d4
test(youtube): reject noncanonical numeric metadata
seonghobae
committed
f5f0c3d
fix(youtube): reject non-canonical duration numerics
seonghobae
committed
f4cee9e
docs(changelog): record strict duration metadata type gate
seonghobae
committed
69cdf8b
fix(youtube): remove unreachable duration conversion branch
seonghobae
committed
3ea49d3
test(youtube): require post-download duration revalidation
seonghobae
committed
97490c7
test(youtube): model owned cleanup on duration drift
seonghobae
committed
d58c24e
fix(youtube): revalidate duration after download
seonghobae
committed
d3e2792
test(privacy): fail on temporal path disclosure
seonghobae
committed
1c85058
fix(privacy): redact temporal analysis failure diagnostics
seonghobae
committed
4a6e269
test(privacy): align temporal diagnostics with redaction contract
seonghobae
committed
6d3c388

Commits on Aug 18, 2026

test(security): reject foreign YouTube download paths
seonghobae
committed
aa0191c
fix(security): bind completed YouTube path to import cache
seonghobae
committed
48d06cf
docs(security): record YouTube completed-path authority
seonghobae
committed
85424c9
docs(changelog): record YouTube completed-path containment
seonghobae
committed
7eca596
test(audio): exercise module entrypoint with owned path
seonghobae
committed
6a728fd
style(tests): restore Ruff formatting
seonghobae
committed
2b83681

Commits on Aug 19, 2026

test(audio): reject malformed model stem output
seonghobae
committed
2909bc8
fix(audio): reject malformed model stem output
seonghobae
committed
e5293a9
test(audio): use explicit raw error pattern
seonghobae
committed
2464ff9
test(audio): cover model conversion failures
seonghobae
committed
c35d55d
test(audio): reproduce GPU tensor NumPy boundary
seonghobae
committed
15a9edb
fix(audio): move accelerator stems to CPU before NumPy
seonghobae
committed
c5519a4
fix(audio): preserve CPU tests while bridging accelerator stems
seonghobae
committed
389f057

Commits on Aug 20, 2026

test(security): reproduce stem worker log disclosure
seonghobae
committed
2ea9e07
test(security): cover parent stem failure logs
seonghobae
committed
b7dd015
fix(security): redact analysis API tracebacks
seonghobae
committed
cf8b62e
fix(security): keep API privacy init lint-safe
seonghobae
committed
2f281be
test(security): scope analysis log redaction
seonghobae
committed
a8bbb77
fix(security): scope stem diagnostic redaction
seonghobae
committed
223dd78

Commits on Aug 28, 2026

fix(audio): preflight source metadata before decode
seonghobae
committed
c2cc5bb

Commits on Aug 29, 2026

Merge remote-tracking branch 'origin/develop' into HEAD
seonghobae
committed
b4a3513
fix(chords): handle zero-element layouts
seonghobae
committed
505a595