Skip to content

SCOPE v0.8.0: session-correct institutional audit#5

Merged
fraware merged 80 commits into
mainfrom
release/v0.8.0
Jun 29, 2026
Merged

SCOPE v0.8.0: session-correct institutional audit#5
fraware merged 80 commits into
mainfrom
release/v0.8.0

Conversation

@fraware

@fraware fraware commented Jun 29, 2026

Copy link
Copy Markdown
Owner

Summary

  • Fix scope akta review --session control-flow for multi-role packets
  • Reviewer ID binding for registry signing
  • Session grant provenance aggregation for multi-review audit
  • Pilot fixture pack under examples/pilot/

Test plan

  • Local CI: 277 pytest, 22/22 extended evals
  • GitHub Actions CI on PR

fraware added 30 commits June 29, 2026 02:52
Keep local review outputs out of version control.
Align package metadata with the v0.8 institutional audit line.
Single source for runtime version reporting.
Document session mode, reviewer binding, and pilot fixtures.
Bump core policy bundle version for v0.8 releases.
Bump core policy bundle version for v0.8 releases.
Bump core policy bundle version for v0.8 releases.
Bump core policy bundle version for v0.8 releases.
Bump core policy bundle version for v0.8 releases.
Bump core policy bundle version for v0.8 releases.
Bump core policy bundle version for v0.8 releases.
Bump core policy bundle version for v0.8 releases.
Bump core policy bundle version for v0.8 releases.
Bump core policy bundle version for v0.8 releases.
Bump core policy bundle version for v0.8 releases.
Bump core policy bundle version for v0.8 releases.
Bump core policy bundle version for v0.8 releases.
Bump core policy bundle version for v0.8 releases.
Keep adapter contract constant in sync with v0.8 review outputs.
Report generation identifies the v0.8 metrics baseline.
Validate session_required summaries emitted under out_dir.
Multi-role packets can enter review session workflow instead of failing at the gate.
Surface session id and required roles when --session defers grant issue.
Lock control-flow and schema validation for --session.
Regression for session summary contract in eval harness.
Reject mismatched CLI reviewer_id before signing.
Expose v0.8 AKTA review parameters on the generic REST adapter.
Cover REST session summaries and reviewer_id mismatch errors.
Merge multi-review identity and authority fields into session grants.
Schema support for aggregated multi-review grant provenance.
fraware added 29 commits June 29, 2026 02:54
Multi-role genomics review session fixtures.
Expired queue reopen before grant issue.
Needs-information queue workflow fixtures.
Signed decision path with reviewer key registry enforcement.
Pin examples/pilot/registry_signed_decision/policy/approval_scopes.yaml for reproducible registry signing demo.
Pin examples/pilot/registry_signed_decision/policy/blocked_tool_severity.yaml for reproducible registry signing demo.
Pin examples/pilot/registry_signed_decision/policy/decision_options.yaml for reproducible registry signing demo.
Pin examples/pilot/registry_signed_decision/policy/expiration_rules.yaml for reproducible registry signing demo.
Pin examples/pilot/registry_signed_decision/policy/identity_mapping.yaml for reproducible registry signing demo.
Pin examples/pilot/registry_signed_decision/policy/minimum_signing_assurance.yaml for reproducible registry signing demo.
Pin examples/pilot/registry_signed_decision/policy/org_rbac.yaml for reproducible registry signing demo.
Pin examples/pilot/registry_signed_decision/policy/quality_metrics.yaml for reproducible registry signing demo.
Pin examples/pilot/registry_signed_decision/policy/reviewer_assignments.yaml for reproducible registry signing demo.
Pin examples/pilot/registry_signed_decision/policy/reviewer_key_registry.yaml for reproducible registry signing demo.
Pin examples/pilot/registry_signed_decision/policy/reviewer_roles.yaml for reproducible registry signing demo.
Pin examples/pilot/registry_signed_decision/policy/role_to_action_matrix.yaml for reproducible registry signing demo.
Pin examples/pilot/registry_signed_decision/policy/scope_to_tool_matrix.yaml for reproducible registry signing demo.
Pin examples/pilot/registry_signed_decision/policy/workflow_escalation.yaml for reproducible registry signing demo.
Pin examples/pilot/registry_signed_decision/policy/domain_overlays/clinical_research.yaml for reproducible registry signing demo.
Pin examples/pilot/registry_signed_decision/policy/domain_overlays/genomics_research.yaml for reproducible registry signing demo.
Schema and narrative checks for institutional pilot scenarios.
Update assertions after policy bundle version bump.
Update assertions after policy bundle version bump.
Update assertions after policy bundle version bump.
Update assertions after policy bundle version bump.
Update assertions after policy bundle version bump.
Update assertions after policy bundle version bump.
Update assertions after policy bundle version bump.
Update assertions after policy bundle version bump.
@fraware fraware merged commit 2b41c61 into main Jun 29, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant