docs: refresh consolidation and protected validation checkpoint - #208
Open
BunsDev wants to merge 3 commits into
Open
docs: refresh consolidation and protected validation checkpoint#208BunsDev wants to merge 3 commits into
BunsDev wants to merge 3 commits into
Conversation
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
The new checkpoint table’s “Validator” row is inconsistent with the validator commit/PR referenced by the same section and should be corrected to avoid misleading documentation.
Once you've addressed the issues Copilot identified, you can request another Copilot review.
Pull request overview
Updates docs/roadmap.md to replace outdated “pending repair” language with a new consolidation checkpoint that records the latest protected-run outcome, links to merged work (authority + GLib + Windows diagnostics), and clearly marks older checkpoints as historical for audit traceability.
Changes:
- Add a new “Consolidation checkpoint, 2026-09-10 UTC” section summarizing protected-run results and current gating items.
- Introduce a status table capturing delivered evidence vs. remaining work across key tracks (authority, GLib, Windows status writer/identity, validator).
- Re-label prior checkpoints as “Historical …” to avoid implying they are current state.
File summaries
| File | Description |
|---|---|
| docs/roadmap.md | Adds the 2026-09-10 consolidation checkpoint and reclassifies older checkpoints as historical. |
Review details
- Files reviewed: 1/1 changed files
- Comments generated: 2
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Comment on lines
+9
to
+12
| `d1c9ddf2a7514e56fac26e20d571114ca97fe623`. Linux and Darwin records each passed | ||
| all 110 Cave, 46 SDK, and 41 Chat assertions, with verified identities, digests, | ||
| timing, and scans. Windows failed at | ||
| `phase1.runtime-observations.coven-rust-tests.status-replacement.assertion.writer-error.apply-owner-only-security.access-denied`. |
| | Linux GLib | [Chat #204](https://github.com/OpenCoven/chat/pull/204) merged as `8d5215e24755b671ef1caee6f62aafc66212e4c1`. Native Linux reproduced the pristine optimized crash, passed all 11 patched iterator tests and 158 application tests, and completed the desktop build. | [#188](https://github.com/OpenCoven/chat/issues/188) remains open: both frozen production Chat and the packaged harness lack the backport. Adopt both with vendor integrity proof and governed bindings before reconciling the advisory. | | ||
| | Windows status writer | [Chat #201](https://github.com/OpenCoven/chat/pull/201) merged as `7ca56c5c8c95fc1be4efecf22554cb4f3cc08e22`. Coven diagnostics distinguish requested from granted handle rights under the restricted directory. | [Coven #988](https://github.com/OpenCoven/coven/pull/988) remains draft at `093f278a9c868b78ed50591a83e1167f9f6250cd`: its 72 Windows tests pass, but the replacement fixture uses explicit alternate staging and does not prove the default path, trusted staging directory, safe replacement, or ownership-scoped cleanup. [#984](https://github.com/OpenCoven/coven/issues/984) remains open. | | ||
| | Windows process identity | [Chat #207](https://github.com/OpenCoven/chat/pull/207) adds bounded test-only observations for null WTS SIDs; it does not change supervisor acceptance. | Complete exact-head native CI and review. [#206](https://github.com/OpenCoven/chat/issues/206) still needs evidence explaining the original failure; a passing retry alone does not classify it. | | ||
| | Validator | [SDK #200](https://github.com/OpenCoven/sdk/pull/200) merged as `f431cf6a4a61183d95e40adf4b50d36d12f3292e`, binding Chat `7ca56c5`. Both repository and protected-environment scopes were rotated and read back to that SDK merge. | Rebind any subsequent producer changes before a fresh protected run. [SDK #38](https://github.com/OpenCoven/sdk/issues/38) and the final release gate remain open; publishing remains disabled. | |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The roadmap still leads with an obsolete Windows failure classification and pending repair claims. Add the verified protected-run result, merged authority and GLib work, current validator scopes, and remaining Windows/source-adoption gates. Label older checkpoints as historical and retain the unresolved worktree ownership boundary.
Validation: reviewed the documentation against run/PR receipts, current GitHub run and PR state, frozen lock/source paths, and both validator variable readbacks; git diff --check passed. Documentation only; no runtime, workflow, or frozen authority changes. Existing formatter targets do not include this roadmap. Preserve chat and active worktrees.
Terminal validation
CI run 34464298468 passed at signed, verified head
5daf42b790419ee68f4091c44fe596c2f131afc4. Applicable Web, changed-path, and contract-canary jobs passed; native/browser jobs were correctly skipped for this documentation-only change. Web logs report 598 normal tests passed (61 skipped) and 568 heavy tests passed (36 skipped).Both review comments are addressed: the prose was clarified, and the table now explicitly distinguishes the current SDK #200 configuration from the older SDK #197 validator used by protected run 34441519622. GitHub thread-resolution state is pending the scoped authorization request. No protected acceptance or worktree retirement is claimed.