From d1bbdcbbb882df5ba136272c6144fcd0ca14f2bb Mon Sep 17 00:00:00 2001 From: mattamior Date: Sun, 20 Sep 2026 17:39:43 +0800 Subject: [PATCH 1/5] ci: materialize pinned source for isolated readiness repair --- .github/workflows/readiness-source-once.yml | 26 +++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 .github/workflows/readiness-source-once.yml diff --git a/.github/workflows/readiness-source-once.yml b/.github/workflows/readiness-source-once.yml new file mode 100644 index 0000000..db1ea15 --- /dev/null +++ b/.github/workflows/readiness-source-once.yml @@ -0,0 +1,26 @@ +name: Materialize readiness source once +on: + push: + branches: [fix/local-readiness] + paths: [.github/workflows/readiness-source-once.yml] +permissions: + contents: read +jobs: + source: + runs-on: ubuntu-24.04 + steps: + - uses: actions/checkout@v4 + with: + fetch-depth: 0 + persist-credentials: false + - name: Export exact baseline and Git object metadata + run: | + mkdir -p "$RUNNER_TEMP/readiness-source" + git archive --format=zip 960526544da308ea8b0eb1d325b26609487ab856 -o "$RUNNER_TEMP/readiness-source/source.zip" + git bundle create "$RUNNER_TEMP/readiness-source/source.bundle" HEAD refs/remotes/origin/main refs/tags/v0.2.0-preview.1 + git ls-tree -r 960526544da308ea8b0eb1d325b26609487ab856 > "$RUNNER_TEMP/readiness-source/tree.txt" + - uses: actions/upload-artifact@v4 + with: + name: svif-readiness-source + path: ${{ runner.temp }}/readiness-source/ + retention-days: 7 From f5a90600186a2b522fd10d44eca8e309b3259d6c Mon Sep 17 00:00:00 2001 From: mattamior Date: Sun, 20 Sep 2026 18:11:02 +0800 Subject: [PATCH 2/5] ci: validate exact local-readiness candidate across native platforms --- .github/readiness-patch/0.b64 | 1 + .github/readiness-patch/1.b64 | 1 + .github/readiness-patch/2.b64 | 1 + .github/readiness-patch/3.b64 | 1 + .github/readiness-patch/4.b64 | 1 + .github/readiness-patch/5.b64 | 1 + .github/workflows/readiness-verify-once.yml | 135 ++++++++++++++++++++ 7 files changed, 141 insertions(+) create mode 100644 .github/readiness-patch/0.b64 create mode 100644 .github/readiness-patch/1.b64 create mode 100644 .github/readiness-patch/2.b64 create mode 100644 .github/readiness-patch/3.b64 create mode 100644 .github/readiness-patch/4.b64 create mode 100644 .github/readiness-patch/5.b64 create mode 100644 .github/workflows/readiness-verify-once.yml diff --git a/.github/readiness-patch/0.b64 b/.github/readiness-patch/0.b64 new file mode 100644 index 0000000..fba162d --- /dev/null +++ b/.github/readiness-patch/0.b64 @@ -0,0 +1 @@ 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 \ No newline at end of file diff --git a/.github/readiness-patch/1.b64 b/.github/readiness-patch/1.b64 new file mode 100644 index 0000000..6bbda6b --- /dev/null +++ b/.github/readiness-patch/1.b64 @@ -0,0 +1 @@ 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 \ No newline at end of file diff --git a/.github/readiness-patch/2.b64 b/.github/readiness-patch/2.b64 new file mode 100644 index 0000000..3bd9360 --- /dev/null +++ b/.github/readiness-patch/2.b64 @@ -0,0 +1 @@ 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 \ No newline at end of file diff --git a/.github/readiness-patch/3.b64 b/.github/readiness-patch/3.b64 new file mode 100644 index 0000000..88dddf7 --- /dev/null +++ b/.github/readiness-patch/3.b64 @@ -0,0 +1 @@ +IdJIa6xHEoJrTr2Mu6ZWptQvKb/H34p1LA9nHkw+ID3c/YymEqCgyaZzbbMeSZDP8O3hHTxT4MXtQApTrvttNnvQ1HtQvFLc4qIRdzNgPBZbCnuLAljz6clDaQopaHXSnhQFV8Zp3PURJlOJQRO5cC3mHqvqcaz1uozDJpRrkVh2U923UUGM4TP7QNFvb4iGZA+5yfxEL9yQDbcoHX6tByxrSLkaMMnD3NpyEQJmnjGSXXAjqstd5i40Ter3Mkx7CoA+gMWBHGp12X08BXZk9b93zn3m4z9fiblLS4Ix149fC+RAJ9l6skD+KFKk0wkMCVPvpo/AN1PpZ1Ywe6+IptKa6jYT7up+3QrqTe+ClfnTu6jYV61SeVq/m4sISewdie5UZoBMtVW24HRcytYk4c96qLXIICfSJeuo1xHs3MwbL1r4NWI6PcZdpeSqZ3jxTn4a3ySRY0vZml35CMXn+pDDB81okv9jLNsJoVmjJVuSVfdUSJ1HTVu/WAs3+LncIH2cDj2uY2wQ+Z8XjWTg8V6wfFhf2Yv8ro56MiILsfYpoqnL1008GIMijTxqxbjHG+/mn91sNAoyJydq8gkMp+VnqRHVblvM/FVdVcU0nTbFOiWBWpmcRT/NLiy2fL9IWUWIBCqpQku339uq2X2Nft7IwKFNxaxzKw6UNXHVrNvbwuoIks8ECpqw+wLtc4+MvxD2EUgzRDp8jj0IqUdjIJaUw/uBG1ZltcpDOGHdk6d8Uf53CjaZw9HJ6HmNYYjT4W0ouPWQQsSWzpQpMGE1l1F3DLiC5XrOTtRxmqx0+0OXNwvSweaMeAjOgyQiFU4AWDEmX3FSSZ4Fs7itvL6S2DPSefl4KZxSw2yVcnIJZx2C/4fhRCaE0jXC3N6/u73REyUQ9SOyUMxB9FoZwe6oDO/DjsdEXAZFiVT0K8XpMvy06tvy6UV2J23ns+nQsT+Av7kp2DyByI4UTEHEI2mNLm03tdRIXLzEl8Da4y7jPc/9/lnlCV3jBr9BghZgm6UpY1r1ZMoPGRi5O+5OhaRm94hIoUowg1nH2suPEToQKxvzBF4wHzTVEqROXkz4fkj8h4kxozIyvbmcptYO8dHsbHrjo6LeqwQSOte2nu55RGn+lrpVYQXOB45+L3lsdIyyISqGnUmqKjOf95aYX+xH6zWngRyHXEp4IcWlK9XPD4J6K6jChyNT3WN2nPxEJq7ZwZdreCSgZe5Rf3L8NVZKkcDZG1YhZuImWzsfrgVLszUZFm3TGeFJrCqtoX79523ZBEkz9IXxY5derpWBL7xY1xHC0RH+TK/EAC7QL2ubRpqbRi1Fq77Ia1ocj++VQZEejq+X3rp2vwpaGoDAbktVFrMc2qSRBU8TX5dfPYMDSrxhVRHfitZoKIVSqwd5lADBh2Y30liqSy6Ua6hPKBHkilhKYfoegDFud2d9pzbnZGqRPPW6unBXC/kX7X5YIrjT1ZLP4XgY5C4X6mCH8qWVG/G1SvowWSE32OstkmYriJGkOXgtDy+x5qS+kLdrJcvqLaQxfJ8KFwyhAPnyWgx+AmR4HCuVGlwUlQTjrYK8Gz8pDAlu7M2GyvRYwU78AkjMkGodOvA2qFDR4TNbVIwz6xuzjmtnI7aL8Vl8DleNY4tWmUWoLHBKk2UMguDpiWQ6YmZFhwPWKCrJxAc1kVz6x+mh+54q7wcX/l9sUppaMF+NDBG57CQsBPiu4ncsHTGTsW+8hAMz7yPUwKb+dxwWerS1gwDjzi/nwXsAND0nCqMiVOobEFnxW4RXKI/HPR61jLH7IoNSQMQiXq7R2pEYUlGdq12sJJv2PpKmvAmcUMcSi+eLvZf753/kho8GwuUEh3KjmGJcD9zYyIeivjeklM2gdT/kGyqOVPPEgp/s9KE7P5C6AY+nPx49DtMpRLf+WtRxYMm+IZPum2mEpb63X50+aAQS1XIHs06noJoMQLj12mPgKRKxHaHAg1NfLOd0oBGmvFBPWPdlNe6hKr1BbGiVv+OPyDkT51mGlMXNNy38Jdmd6bnsxNoheBgPJksj227QxC43ytWwu7G0u2PFCDgv3RtzF555sPD1ZFUct9n3X3RPLGDQenQW7RYH+q5eUrN/yUvtQluJa5Vw6Sc77099oDl6+zLN+vqh8Z2axuMciY6DsybwnXv0QfC8upTlh8JIrDvuVy7wbUSQ45vjrseUNiXm6esKKPtQQVv0Xjo35t6NadwTHMQANGubhnVo0/XUxIffWdk1he6Inejk4XZMdc2yD+4Mc32DgTgwnCEtRfxbOB8KPH+GLGlwn7V3QChw4P4/3qRZHHteNsUiG3eqqKxwhD6B6r8MiA0YK7UjaOHQ5aLoEsrIWcuPNMoLJ361R3qqk8SQdtARS+luJxJkkOGz/TeDW9RSKer2JvbulysBvnd3Ygg/N64/B4WcKSgvTnwSSPfvq8hX10SEEbLEV08uF5PXAZsKTmxQm/aCWQbHTe5JZs0srbjNSY58ZGW7oo8fhinCaaOwqE8v17LsZccixFBlA4cS+/idYEPDXQwdiuud6e2WpYQHoTW7vJV7NmKtBv5YVj5ygqg8kOvSWhC9fNSjUlLO/bO0ymqqJYM8oieD5iD0Hroma3851paqFmIVMQAxYxoskw8ZUfPpuxYuC9eePAZVegN0ln5H9lPbqEyUR5iTDKHADyNhSkv5lyX3IxEdYbUGfIYDiv4dLXxe61tKiEtXTEb+EhZxm0Qs2Go7kAmjmf6IDbRGbukjzM6oklSuMQh5iz6yUV58O9kiUZls5n8qHQn0eNIbwzXHkMcDRRy1m3xWWc5LzEUneNbdJLGx9kAt+Oh3561Tv25ALIBq/V4ng8VN3eQcxCONnL1cPZr1VkWEs2qsmNTRp0DVzRiFEFrXuxCm5dmS07KvREiEerGRBh9GyC8NDLQINfzsjNSQg8pEO9XDmJ3a1T7S6t07u6bBRMbDBXfUrNleC7rXLCJ5q9IDl8YiMFaWwRy75vZDj6cMSWVGRUPyk7lzUCFwY+YM65Vj71f2fw4eeQHyRuOIllQ2a15hI5g/x0SwurH0O1/P3PowheuYcfoa4kB6qYfxgMkD6ZInJUhL+vUNb/VRU7pBcgmQkYlQVykbYXX1OKoZPnCP4xNAO4SDMI+oyS5Y2q7RRqRF+E3BlN6RKxjYaElo3D8t7hnkWUhLsbTALGUcqExpZXTpG7X0Bu8adBWpHWotXBOHAoB+BxQQvYuwyY3BknEYJ+d20vtGui3EjU7EezijkcrF5oIgklqYv+dJdc7/kEICs+1m/QxD6jw+pPmo4WCDHkSjWcZVWmassztYHVmNHhIZQFcyNPI6T6cfKeDX4RVt2B2WQXYXoHmUc3I8T4W3LSNs0j9+pY+YsOFRqpxMLEqNASmq0kafotfG4xi0QbAASslnnUtkB82wlHPdJ5r/QZoFOxF+uluqr+Hv1LcBMfBH3YhCZrqzAYc43yD2ZE9VYKKaap60XHBcKR4aRdyb23VU9dN+BFxKNYIvuiKGOesVI3pzDt1oFU7yr5cqoGn979+lB1AvwhqXKshWsHqrdhvm+SqJ3phT9YKPO2qmtP2gG+5TQ5jF2yElhvjqpByQgBFLn6kwJ1OzQa0aVcmV0mS+pAsk9xrNzfDzPcig2aiayg/fY362PJvUHG+wIADoLlm6ZEocHyImX5kKIS2JF8Ig2+VoBZDiyQQMuKcZa3FQKmtEFDVBLIvluQm7B9QbZs56V7VKKFakTMU5V3B+4zFZuMfJh7/lokFEz+XPubv600DgTh2S33nHUNx7hQ3+7F5lD8MEWaWhvngIQd0liYmhIJGIKVQ/foYP2BrGICpoGFejU9E9o4vI8HjEjenO+xTJlVv6bpIw3uNiQjzLMM+kZ3LBskKGGgmz5NQvwDjZ/dcIvUQ3gltxu2A0QUCz3GdO/ESa/A4Hl5nXcfcWmiPgg1OnqppaTB3Rlf9gjVB6svs5D6MoXsc0N091sdeiQV/5pS0vh+M/23bRR/bpJgIBYNnLB3eoLOI0sJu3+0f1eR8uMycUlQrY8Rpgju3CMgFoqsXRV6GclKpSfFVWMJywdOFm8+ax2fBxp8Iu4mCbdkfKCDi5QZi6YabUdrxoYE6gRT3K8yJMgxwACysvaOH/5jiUMOS4vNfbqB4O/F6oOOfBmTEZyBSmEtC8BTcglxlTySQ5QMTlDx9pZjZJRU8xGlNZFg2RdkgZdQobwa8pVTWY2RbjwqdR4p9Mb4SRfE0hRCF192uNNsL5F1Qbntt233iuoT7QfcYdcbhMbSUrV9ER2qYWfKFRmWs9ySLnZS14ndcCcC0SM2H6tpJLDqlGsU2BJVQrdCS65qbJ7bbBlX7I7jphoROGoWAw68GRuEyoh+29T9bQFJNuwgymYSl5ZFYNCdgIz2eU+8/ATyn2EuU2mFSqkdubYtb71ZWgph3bEzP/xIOCSBCXnq83q/CcRFWAagaqK2H+d7/SRvjmSNF/OVC2wNsJ5UMkuKxU2+OjHP5EgbtcwS7wFmpi5egVTw5mUA96kiVDpkq8920kF0ba66sEMCGyP5TXS/0D3dWfQ9C2wQhTLchwrLpuA/ugrFN/bbjlsyzamgeiHr+qtS35xkTCB+940wOlhqN0zmXdEVjqnPsLiOV4pXm0OHIRieQSvzL/kimE222wXPZI57+LvBWd/3oLhMw9RCVYPWyNhfSUMuARVN6I5Iq//mEG5ZAZL3Nk3Xs3Y/nVKpbr8efcGN7O+0sK4bs2OOs2FuKJkTH8T3gsncIIZloDaASLxFUCRRqpE/0XYdwSm51Sq3kTXfjOJiUQcQlWGDghd4o02CzRecj4KSS8usY/nSrpAC30gLrYi49rF3ADIbMltk/5KwfRUmDdpwOVdK49EmxvoqE8PaPyy2qpiQDPBBjV26226lKMXhbzrZhY5SyHvYkLLIbTWxTqLCNGwgbPfOwEcR9HbLOtN/UYbxxk9oSV/yb3xf6g8r9P7+k/rigu7zBgP2hbzTN8Z6E8MeX1LDcwy1djo1ZYnARc9y/x0gAaPa58p8G56Gy98zgOVLSxvFThARXptinE+WZik4pKufF+mi67BXitZMaFMn8ha4heCdCHWblcOK7MjqbJ6PiZVg/XK+lk1lzM5aVePd0sQlY8D3m6Om2hZmrH5cSdeJpxmnyVAw9lD58ug28YFuEcvsZsT4r+XBDzg3T0H4bcVplXego4QFxpFCLIFKms9cDPTnnad2JcK2IbXPnwibeTLyPwI5Jb3Q+ZTBVWCmPQ6OkV3zwI3jRdAr0M/o9J4RZP7Gwj78/Vjla6CvX/j89XNBy6Z4/ChxESPhQaebCxMSj+BI/3k6c3PyjwjfpvhBM+Ad+MQxhOx9vhOSvXS5A9gCHO76qhSsbbMqxpFw1oHSGFszXzP9iGhn20U4VCARFFyfx8geCa4x6Coym82G4X+mGc08mcpMDXFki+OkEQrM2iIMuIwYaimn5MxRDAEnkUgsUCYwO5qTu0DfHuOrUoe4uQklDYEOLQ5JrNuFU7+oPsFFA8USiCnl4+FKlMtQioaCskUanC2tD5crNrX2vyOP5qKMVR5DhgRBSenulb1lAoKs7uVMHHsvEtT7qawsFBa1jSoRb5ivMuee1xe7o6TtAy529hmsxaS9MWF6yhAgtjoKGqwBQQoIVys3WnV9jmU0KAGBlPfaBw4JP4mD0KKVETYfYfrpFhfDOZE6lGukUzyNt5SwYrogeNNuDjxP/q/WxnqIIldPoeV1i4Pk1NN1Kuq1bBPSTpa3dRaOZwc/L2aZ9lei8AGycw91tiVFn5TEKbruoVyBO147A+A3ypAU0BhVPpny0NccwEt5XdMXt2vASJn75t8Qmohw0eu24fjXLlTbo/phCAH5kVUzW55V8e6wOjuviVJn21CMsaQASaNi5MhzYo2+HbMnRIbfWGZo2fuO87j+3hwNs0jytwssIs/+9Voj7PX+joV4dSi3zeb9AdHObW2/Kko3momZ86w7TOAW5IDgpTxFeHhE+JFOkgkXXBdAel2wy20xEq+x7+XNPn1idAFMJR9Bf6fwk1k7AETr9mUMGATUxfCTcDFjjFqUrlEjKqlNPXMy9tJhUamapewqyKQp+mjy0y5mnLPbrVMrO4e8GOtlluev9LjmJrUt62oQqKKVeXPPdxTj3rHVA78xDmYZwnV6STfkXweozW4Zj6EtJSO9zQYPFy2JeciPuadxFVjxDJ/vscxhTxb+IrJhLIrrhGQQJ3bkNxXe/B4hzaRmKLQRiXbwYCYERGmL7rJetgmXfF1UWzWcaJq7rl44TAY39Ou3hhVd1/mIxI50968u1vkrcrKTmhElHJXtsYhl9t/hCLbS7sKQuUSgt+tMLwObSwQVHQNRFMePIV1t/1YYCLJcS7u2KBuRVoAOajekh3mdn33ovGRz/PYYQ+XS+QAgMpsahrctqlgcimcZx7oH6igQqLQNuzGMp3nR/NKjl0tXZgc/44eO9MSLYGh7Mr23v5AP9SIqqVI1ZotVZzDc8pDkDmHQGTqEFQYjtK8dNshS8yjhgTa4EaFjTPiQNfALmiv1w/Qh3rjusEXSVuVBREuK5AuQXQ03Ep5IE6aGKv5FVQuwNTJrPYdjrIAXy7+cA5NjUJBgED7xmQ+8qlmRBZWWA49YEfff28EcRQzBzX1DslPrtINTcIixph7fbuWXBw47d9FFwZqH8ewAAo9rDJZXVkkjkl30mHImU5gK//K/BokbRFpcVa4hQ6VUSiy6DNB4eSeEtxA3+oo+96V4zoTUfcZCf3Zgg9uUl+6PpJQWoPEKjP/4Why1INNcqdIrMCrruEhsAb0MBJ9JNyfB02oiqr7vTll4x5vSqO2uFhRfwcTN+QzSVrgtRCI5Bef874C5laYL+ffuSoHNC/Y98GMq+Hq2Gx44TtUwjYNARdb6bEpovw3u3kFbL5zocMKXBOFQiaeMR4o6CoCEK9jOXrtkFpmo5k0t0ucC9nvUaiarXZeT4Sk/7AdJ3YoDTJXpXJpZcHje2FyphLyABWz/ZM5RrBt0iKTxRcjyEL8htxVeg99WQUwT20x56cReAXsVbmMvcw/JICUu6ZcSH9rYOPzFnzB3jJ/Cy3X+dMa51QOXI58SrcYzjmlNwTArr05LvTRoQmjxFuSwV1IcVAGfOLfOTLHM3cxE4fGBXomGoTXiqPPwOc/Tvw8TQHqQC2rWghwS53kpWSAbN/yDDGIBYjFv7puf1i/RA8JPahxFXOAU4kQSCNT8h0lyZY7uhef0xvwpeG/EwCD3y8EuIOIJLkLVRDNrGRf9IxnXHDKmaJ/iCZzFPYxnn5JUhDgXWJz2So/wxCZb9RTW/OJBxwHtz/IPEG1hBuHpuRg0V15CGyrSrdw7Gll5Jv/OzH+LHD4Jn2mDGTSftA4mHAqUW/ItfV6mZq7F/ng1LijM3H1GDEbtQI783oRkHaFWum2ujRUe0B4Fp5o0hHEshyg3f3X2G49NeGLnqzgSvfd7dkR/Z0TbjfohAj1O+vmUeQ7TTQauNxHU+43YDxrqgBfAkvBFamkrHy4jozYdmYxqzjfb9HKV+iWRgzA2b2aZ5s7fmy/dXx/Gcxuho2 \ No newline at end of file diff --git a/.github/readiness-patch/4.b64 b/.github/readiness-patch/4.b64 new file mode 100644 index 0000000..4c58803 --- /dev/null +++ b/.github/readiness-patch/4.b64 @@ -0,0 +1 @@ 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 \ No newline at end of file diff --git a/.github/readiness-patch/5.b64 b/.github/readiness-patch/5.b64 new file mode 100644 index 0000000..dba2789 --- /dev/null +++ b/.github/readiness-patch/5.b64 @@ -0,0 +1 @@ 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 \ No newline at end of file diff --git a/.github/workflows/readiness-verify-once.yml b/.github/workflows/readiness-verify-once.yml new file mode 100644 index 0000000..e9424ed --- /dev/null +++ b/.github/workflows/readiness-verify-once.yml @@ -0,0 +1,135 @@ +name: Verify pinned functional hardening once +on: + push: + branches: [fix/local-readiness] + paths: [.github/workflows/readiness-verify-once.yml] +permissions: + contents: read +jobs: + prepare: + runs-on: ubuntu-24.04 + permissions: + contents: write + outputs: + candidate: ${{ steps.candidate.outputs.sha }} + steps: + - uses: actions/checkout@v4 + with: + fetch-depth: 0 + - uses: actions/setup-python@v5 + with: + python-version: '3.12' + - name: Apply the hash-verified locally tested patch + shell: bash + run: | + set -euo pipefail + test "$(git rev-parse HEAD^)" = d1bbdcbbb882df5ba136272c6144fcd0ca14f2bb + test "$(git ls-remote origin refs/heads/fix/local-readiness | cut -f1)" = "$GITHUB_SHA" + python - <<'PY' + import base64, hashlib, lzma, pathlib, subprocess + parts = pathlib.Path('.github/readiness-patch') + encoded = ''.join((parts / f'{i}.b64').read_text().strip() for i in range(6)) + patch = lzma.decompress(base64.b64decode(encoded, validate=True)) + assert hashlib.sha256(patch).hexdigest() == '09de14549ab59b95f2c08f274ee0da136efc5984cb9a96544c4d3a1f030fe494' + subprocess.run(['git', 'apply', '--check', '-'], input=patch, check=True) + subprocess.run(['git', 'apply', '-'], input=patch, check=True) + PY + git rm -r .github/readiness-patch .github/workflows/readiness-source-once.yml .github/workflows/readiness-verify-once.yml + git add -A + test "$(git write-tree)" = 9e5615b79fdb3acbde93155b73c16046a84f284f + python checks/check_repository.py + python conformance/check_contracts.py + PYTHONPATH=src python -m unittest discover -s tests -v + - name: Persist verified candidate only to the staging branch + id: candidate + shell: bash + run: | + set -euo pipefail + test "$(git ls-remote origin refs/heads/fix/local-readiness | cut -f1)" = "$GITHUB_SHA" + git config user.name 'github-actions[bot]' + git config user.email '41898282+github-actions[bot]@users.noreply.github.com' + git commit -m 'fix: enforce trusted authority and recoverable continuity' + git push origin HEAD:refs/heads/fix/local-readiness + echo "sha=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT" + printf 'candidate=%s\ntree=%s\nplugin=%s\n' "$(git rev-parse HEAD)" "$(git rev-parse HEAD^{tree})" "$(git rev-parse HEAD:plugin)" | tee "$RUNNER_TEMP/readiness-candidate.txt" + - uses: actions/upload-artifact@v4 + with: + name: readiness-candidate-receipt + path: ${{ runner.temp }}/readiness-candidate.txt + retention-days: 14 + platform-tests: + needs: prepare + strategy: + fail-fast: false + matrix: + include: + - os: ubuntu-24.04 + python: '3.12' + - os: ubuntu-24.04 + python: '3.13' + - os: macos-14 + python: '3.12' + - os: windows-2022 + python: '3.12' + runs-on: ${{ matrix.os }} + env: + PYTHONPATH: src + PYTHONUTF8: '1' + steps: + - uses: actions/checkout@v4 + with: + ref: ${{ needs.prepare.outputs.candidate }} + persist-credentials: false + - uses: actions/setup-python@v5 + with: + python-version: ${{ matrix.python }} + - name: Verify the exact candidate on this platform + shell: bash + run: | + set -euo pipefail + test "$(git rev-parse HEAD^{tree})" = 9e5615b79fdb3acbde93155b73c16046a84f284f + python checks/check_repository.py + python conformance/check_contracts.py + python -m unittest discover -s tests -v 2>&1 | tee "$RUNNER_TEMP/readiness-tests.log" + - uses: actions/upload-artifact@v4 + if: always() + with: + name: readiness-tests-${{ matrix.os }}-${{ matrix.python }} + path: ${{ runner.temp }}/readiness-tests.log + retention-days: 14 + native-install: + needs: prepare + runs-on: ubuntu-24.04 + steps: + - uses: actions/checkout@v4 + with: + ref: ${{ needs.prepare.outputs.candidate }} + persist-credentials: false + - uses: actions/setup-python@v5 + with: + python-version: '3.12' + - uses: actions/setup-node@v4 + with: + node-version: '22' + - name: Install the official native Codex client in an isolated tools directory + shell: bash + run: | + set -euo pipefail + version="$(npm view @openai/codex version)" + printf 'resolved_codex_npm_version=%s\n' "$version" + npm install --prefix "$RUNNER_TEMP/native-tools" "@openai/codex@$version" + - name: Observe exact native installation and new-process Skill discovery + shell: bash + run: | + set -euo pipefail + test "$(git rev-parse HEAD^{tree})" = 9e5615b79fdb3acbde93155b73c16046a84f284f + python checks/check_native_install.py --codex "$RUNNER_TEMP/native-tools/node_modules/.bin/codex" --output "$RUNNER_TEMP/native-acceptance" + - uses: actions/upload-artifact@v4 + if: always() + with: + name: readiness-native-install-receipt + path: | + ${{ runner.temp }}/native-acceptance/receipt.json + ${{ runner.temp }}/native-acceptance/app-server.stderr.log + if-no-files-found: warn + retention-days: 14 From ce6954c73ef90ce8a419aacff5ac7aa1afc1e230 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Sun, 20 Sep 2026 10:11:35 +0000 Subject: [PATCH 3/5] fix: enforce trusted authority and recoverable continuity --- .agnir/decisions.md | 10 + .../2026-09-20-functional-hardening.md | 31 ++ .agnir/next-actions.md | 14 +- .agnir/state.md | 58 +-- .github/readiness-patch/0.b64 | 1 - .github/readiness-patch/1.b64 | 1 - .github/readiness-patch/2.b64 | 1 - .github/readiness-patch/3.b64 | 1 - .github/readiness-patch/4.b64 | 1 - .github/readiness-patch/5.b64 | 1 - .github/workflows/readiness-source-once.yml | 26 -- .github/workflows/readiness-verify-once.yml | 135 ------- .gitignore | 6 + ARCHITECTURE.md | 4 +- LOCAL_ACCEPTANCE.md | 63 +++ README.md | 5 +- README.zh-CN.md | 4 + RELEASE_READINESS.md | 26 ++ REPOSITORY_TREE.md | 7 + SVIF.yaml | 6 + checks/check_native_install.py | 142 +++++++ checks/check_repository.py | 4 +- integrations/chatgpt/README.md | 6 + plugin/README.md | 2 + plugin/skills/svif/SKILL.md | 6 + spec/CORE.md | 10 +- src/svif/capabilities/cloudflare.py | 8 +- src/svif/continuity/_filesystem.py | 242 +++++++++++ src/svif/continuity/agnir.py | 258 +++++++++--- src/svif/execution/chatgpt.py | 11 +- src/svif/runtime.py | 200 ++++++--- tests/test_readiness_regressions.py | 380 ++++++++++++++++++ tests/test_runtime.py | 4 + 33 files changed, 1337 insertions(+), 337 deletions(-) create mode 100644 .agnir/evidence/2026-09-20-functional-hardening.md delete mode 100644 .github/readiness-patch/0.b64 delete mode 100644 .github/readiness-patch/1.b64 delete mode 100644 .github/readiness-patch/2.b64 delete mode 100644 .github/readiness-patch/3.b64 delete mode 100644 .github/readiness-patch/4.b64 delete mode 100644 .github/readiness-patch/5.b64 delete mode 100644 .github/workflows/readiness-source-once.yml delete mode 100644 .github/workflows/readiness-verify-once.yml create mode 100644 .gitignore create mode 100644 LOCAL_ACCEPTANCE.md create mode 100644 RELEASE_READINESS.md create mode 100644 checks/check_native_install.py create mode 100644 src/svif/continuity/_filesystem.py create mode 100644 tests/test_readiness_regressions.py diff --git a/.agnir/decisions.md b/.agnir/decisions.md index 08c8211..bb71290 100644 --- a/.agnir/decisions.md +++ b/.agnir/decisions.md @@ -207,3 +207,13 @@ - Final repair CI run `35317245771` passed all product-check jobs; final acceptance-checkpoint run `35317410100` also passed all product-check jobs. - Continuity-only commits after `f9026f7e3db4db8956cfc88ba1990daf0757a011` may advance authoritative `main` without changing the accepted Plugin tree. External submission evidence MUST identify the exact submitted Plugin subject, not merely a moving branch. - The immutable released Repository Preview `v0.2.0-preview.1` remains a different historical subject and is not rewritten. + + +## 2026-09-20 — Release-quality hardening before local acceptance + +- The Principal authorized implementing existing Svif functionality to release-quality standards, while public Platform publication remains paused. +- `CapabilityPolicy` is trusted Provider/operation metadata, not result-selected authority. Missing policy fails closed; optional requested authority can only strengthen it. +- `OperationRequest` owns required verification/check IDs. The default requires exact-subject success; non-applicability needs an explicit trusted reason. Failed checks never justify completion. Integrations authenticate actual receipts rather than treating JSON as proof. +- The founding filesystem adapter uses cooperating-reader locks, revision checks, full preflight and a recoverable multi-file journal without changing Agnir identity/lineage/locators. Conflicting outside edits stop recovery. +- Completion sessions are single-use. Uncertain external attempts survive restart and cannot be blindly replayed; independently observed effects require trusted reconciliation. This is not a live Cloudflare implementation or authorization. +- Native install/discovery and actual task/bootstrap/idempotency/fresh-session effectiveness remain separately observed gates on the same Plugin subject. Local test success is not release authorization; no new tag or public publication occurs here. diff --git a/.agnir/evidence/2026-09-20-functional-hardening.md b/.agnir/evidence/2026-09-20-functional-hardening.md new file mode 100644 index 0000000..8871e1d --- /dev/null +++ b/.agnir/evidence/2026-09-20-functional-hardening.md @@ -0,0 +1,31 @@ +# Functional hardening candidate — 2026-09-20 + +Status: locally verified implementation candidate; native effectiveness/release sign-off remains pending. OpenAI publication stays paused. No live Cloudflare transport or protected credentials were used. + +## Source and changes + +Captured authoritative source: `960526544da308ea8b0eb1d325b26609487ab856`. The earlier source `fe7788bd53d3a240f663860133b741799d0470e3` is the reproduced-defect subject. Preparation branch `fix/local-readiness` is temporary, not a continuity authority. A pinned source artifact was materialized by workflow `35502924625` (artifact `10602459592`) for isolated local implementation; Git objects retain the exact captured source identity. + +Implemented F1: trusted `CapabilityPolicy` comes from the registered provider's operation metadata. Missing metadata fails closed. Omitted/null/empty/weaker result authority never removes mandatory `protected-delivery`. Extra requested classes only strengthen it. The real provider policy is tested against its descriptor. + +Implemented F4: trusted `OperationRequest` declares required verification/check IDs (default verification required). Failed/blocked/unknown, missing or wrong-subject checks reject completion before effects/checkpoint. Explicit non-applicability requires a reason and cannot excuse a failed check. Parsing model JSON does not authenticate verifier receipts; the trusted integration retains that responsibility. + +Implemented F2: all text values and required destinations are preflighted before any memory writes. The filesystem adapter serializes cooperating readers/writers, rejects stale snapshots before effects, and journals the complete State/Next/Decisions/Evidence write set. Prepared transactions roll back after interruption; committed transactions complete recovery. Conflicting outside edits require reconciliation. Six actual child-process exit boundaries exercise prepared/partial/committed states on Core/profile 0.1, 0.2 and 1.0. Ordinary I/O faults exercise rollback without partial publication. + +Implemented F3: each actual read/write is confined, including discovery, evidence children, lock, receipt and temporary paths. POSIX opens walk directory descriptors with no-follow flags. Symlinks, junctions and multi-linked regular targets are rejected; uniquely created temporary files replace predictable paths. Windows uses no-link/reparse checks and OS locking but does not claim protection against hostile concurrent parent-directory replacement by equally privileged processes. + +Additional safety: exact Orchestrator sessions are single-use; duplicate persisted operation receipts cannot be overwritten; uncertain external attempts leave a persistent marker across restart. Reconciliation of an independently confirmed effect requires matching observation and trusted `effect-reconciliation` authority; it never replays delivery. Provider delivery/observation errors preserve their own failure classes rather than being called continuity I/O failures. + +The shared Skill now carries the same operational guards without bundling or duplicating the Python kernel. Both READMEs, architecture, applicable contract/integration notes, Project artifact registration and repository tree are updated. Native install/discovery is tested separately by `checks/check_native_install.py`; actual task/bootstrap/idempotency/fresh-session acceptance is specified in `LOCAL_ACCEPTANCE.md`. `RELEASE_READINESS.md` maps existing requirements to implementation and evidence boundaries. + +## Local observed verification + +The complete repository was materialized from the pinned Git bundle, not reconstructed from excerpts. Baseline: 87 tests passed. After changes: 109 tests passed on Python 3.13.5; repository integrity and portable contracts passed; source/check/test compilation passed. All external providers in these tests are injected fakes. The new test methods include parameterized cases and 18 actual process-death trials (six points on each of three compatibility lines). + +The local sandbox has no Codex binary. The native harness correctly emitted `native_install=not-observed`, `native_discovery=not-observed`, `native_task_and_fresh_session=not-observed`, `release_ready=false`, and exit 2. This is blocker reporting, NOT native-host acceptance. Connected plugin discovery did not expose a suitable authorized local-host execution capability. + +Remote candidate CI/native installation observations, if obtained, must be appended with exact candidate and Plugin identities. Passing those still does not replace a real authenticated native task and fresh LLM-session receipt. + +## Preserved boundaries + +Core/profile and Project identity/lineage/selector/locators are unchanged. The repository still self-hosts Agnir Core/profile 1.0 and preserves historical 0.1/0.2 support; the founding Skill bootstrap is still 0.1. The old Preview tag is immutable. Old ZIP/package-only receipts remain historical; changes to the Skill create a NEW Plugin tree that must be independently identified. No new release tag, GitHub Release, OpenAI submission or production delivery is authorized by this candidate. diff --git a/.agnir/next-actions.md b/.agnir/next-actions.md index eca4570..f82ecad 100644 --- a/.agnir/next-actions.md +++ b/.agnir/next-actions.md @@ -1,15 +1,15 @@ # Svif Next Actions -## Active priority: local effectiveness and functional completion +## Active priority: finish same-revision local acceptance -The Principal has paused OpenAI Platform publication. Confirm local installation/effectiveness and complete Svif's existing functionality before returning to distribution paperwork. Current `0.2.0` is not signed off as locally effective or feature-complete. Do not repeat the superseded conclusion that only publisher prerequisites remain. +The Principal authorized functional implementation to release-quality standards, while OpenAI Platform publication remains paused. The F1-F4 hardening candidate is implemented and passed 109 local tests; this is not a claim of native-task effectiveness or blanket feature completion. -1. **Repair the reproduced authority and continuity blockers.** At audited source `fe7788bd53d3a240f663860133b741799d0470e3`, omitted/null/empty model-supplied authority classes bypassed protected delivery in the real Orchestrator + ChatGPT bridge + Cloudflare provider using fake transport; invalid Decisions updates partially changed State/Next Actions before checkpoint failure; evidence-child symlinks loaded a dummy outside-root file. Repair using trusted provider/operation authority policy, full checkpoint preflight/coherent publication and recovery, and resolved-path containment for every read/write. Add executable regression tests across Agnir `0.1`, `0.2`, and `1.0`, not just Skill-text markers. -2. **Close the verification-completion gap and finish the requirement-to-test audit.** A failed non-effectful verification result could still checkpoint a completion State/Next update. Define required verification from trusted operation context, preserve legitimate not-applicable cases, and prevent failed required verification from being recorded as successful completion. Check current CORE, Project Binding, Evidence, Capability Adapter, software-delivery and Skill commitments against implementation and positive/negative tests. The current findings are a targeted audit, not an exhaustive defect list. Do not add MCP merely to manufacture a completion gate. -3. **Run same-revision native local installation/effectiveness acceptance.** Freeze a reviewed local candidate without moving released tags. Use an isolated Codex CLI home or a real ChatGPT desktop/Codex local Project, record host/version and exact installed package revision, and verify installed + enabled + actual Skill discovery. Start from an ordinary Project without Agnir; perform a concrete file task, verify its exact content, checkpoint, then use a genuinely new session without prior transcript to recover the result and next action. Re-run on an existing Project to prove identity/instruction preservation and idempotency. Exercise broken discovery, another Continuity Provider, failed verification, missing authority and unavailable observation as negative cases. Archive registration, ZIP extraction, Python-provider tests and old Preview receipts cannot substitute for this evidence. -4. **Keep both acceptance conclusions explicit.** Record (a) local host installation and actual effect, and (b) completion of the bounded Skill-first MVP and applicable runtime commitments. Clearly separate optional future integrations from defects in already-promised behavior. Do not mark either gate passed without its own evidence. The current executor could retrieve the ZIP and execute blob-verified Python modules, but had no installed Codex binary and no access to the Principal's local host; current-version native installation remains unobserved. +1. **Accept the exact hardening candidate through remote checks and native install/discovery.** Preserve the captured source `960526544da308ea8b0eb1d325b26609487ab856`, compare the staged code/tree against the locally tested candidate, run repository integrity, portable contracts and the full regression suite. Exercise real native Codex installation and new-process Skill discovery with `checks/check_native_install.py`; record actual host/version, installed/enabled state and byte-exact Plugin identity. Never convert an unavailable host into a passing result. +2. **Run actual native local work and fresh-session acceptance on the same Plugin tree.** Follow `LOCAL_ACCEPTANCE.md`: ordinary Project without Agnir -> installed Skill -> real file task -> exact verification -> checkpoint -> genuinely new session without old transcript. Recheck existing-Project identity/instruction preservation, idempotency and the negative fixtures. Native package discovery alone is not functional effectiveness. +3. **Close the bounded release-readiness matrix.** Review `RELEASE_READINESS.md`, CI and native receipts. Keep trust assumptions and unsupported boundaries explicit. Do not add MCP merely to create a completion gate; do not silently narrow Windows, production or cross-provider claims. Release readiness stays unaccepted until its distinct evidence gates are satisfied. +4. **Preserve failure/recovery semantics.** Required authority comes from trusted Provider/operation metadata. Required checks come from trusted operation context; model JSON cannot authenticate its own receipts. Pending filesystem transactions must be recovered before normal continuation; conflicting outside edits require reconciliation. Unconfirmed external effects must not be blindly retried after restart; explicit independent observation and trusted reconciliation are required. -Reproduction details and observed results: `.agnir/evidence/2026-09-18-public-submission-candidate-audit.md`, 2026-09-20 local-readiness audit. All newly reported gaps are open; this checkpoint changes continuity only, not product code. +Implementation and local observations: `.agnir/evidence/2026-09-20-functional-hardening.md`. Historical defect reproductions remain in `.agnir/evidence/2026-09-18-public-submission-candidate-audit.md`. Preparation branch `fix/local-readiness` is temporary and must not become canonical continuity; integrate only after fresh stale-base and verification checks, then archive/retire it. ## Deferred public/personal ChatGPT path diff --git a/.agnir/state.md b/.agnir/state.md index d002b51..e710f2e 100644 --- a/.agnir/state.md +++ b/.agnir/state.md @@ -2,52 +2,36 @@ Svif is the authoritative active **Project orchestration product** in `iorLab/svif`. The former `iorLab/svif-cloudflare-reference` project is retired. Repository-managed Agnir continuity on `main` remains canonical. -## Active direction — local effectiveness and functional readiness first +## Active direction: local effectiveness and release-quality functionality -The Principal explicitly paused OpenAI Platform publication and requested two confirmations: (1) Svif can be installed locally and actually takes effect; (2) Svif's functionality is developed and complete. Publisher prerequisites and portal submission are no longer the active P0. Public publication requires a later explicit resumption instruction. +The Principal paused OpenAI Platform publication, then authorized implementation to release-quality standards. Local installation/effectiveness and bounded functional readiness take priority; publication requires a later explicit resumption instruction. -**Current verdict: neither current-version local effectiveness nor whole-product functional completion is signed off.** Historical package/CI acceptance is not withdrawn as a historical observation, but it does not establish either requested conclusion. The earlier assumption that only publisher/account blockers remain is superseded by the functional findings below. +The 2026-09-20 hardening candidate implements the four reproduced functional findings, with full local regression verification. **It is not yet signed off as release-ready or current-version native-task effective.** Native installation/discovery, real task/bootstrap/idempotency, and genuinely fresh-session recovery remain separate evidence gates. -## Audited subject and evidence levels +## Functional candidate -- Audited authoritative source: `fe7788bd53d3a240f663860133b741799d0470e3`. -- Svif product line remains `0.2`; Project Binding, Software Delivery, Capability Adapter and Evidence Record remain their `0.2` contracts. -- Active source/package version remains unpublished `0.2.0`. -- The package-only accepted Plugin subtree remains `5ab4b6147dbd096c052f042b23e37f0ec39f7091`, materialized by `f9026f7e3db4db8956cfc88ba1990daf0757a011`. No product or Plugin source is changed by this readiness checkpoint. -- The actual `svif-0.2.0.zip` was retrieved from Actions artifact `10542750132`. Independent extraction verified CRC, all five member Git blob identities, and inner ZIP SHA-256 `bc2315562f7bdeb4232aadb9b583a7442f8cd868dbeacd13bb57caf0c785177c`. This proves package identity/integrity, not native installation or activation. -- Released **Plugin MVP** / Repository Preview `v0.2.0-preview.1` remains immutable at `2b07b6b5ea0bc8feee59f9f647be9af3069d056e`, annotated tag object `2535cb89426c2d38c2e061948e81954a7c7c26d7`. -- Historical Preview.1 evidence records real Codex CLI and ChatGPT desktop/Codex installation, first-use bootstrap, work, checkpoint and fresh-context recovery. It does not establish current `0.2.0` native-host acceptance or certify all failure paths in Preview.1. -- Baseline run `35334521502` / runtime job `105566170085` reports 87 tests passed. Several Plugin behavior guards, including first-use bootstrap, assert Skill text rather than executing an installed host. Existing green tests do not cover the newly reproduced gaps. -- Four source modules were re-materialized from connector reads, verified byte-for-byte against their Git blob SHAs, and exercised in an isolated Python 3.13.5 environment. The audit did not run the full repository suite locally, did not install a native Codex/desktop host, and did not operate the Principal's computer. -- Basic Agnir load -> checkpoint -> fresh provider load succeeded in isolated fixtures on compatibility lines `0.1`, `0.2`, and `1.0`. This is provider behavior evidence, not a fresh LLM-session or native-client acceptance result. +- Captured source: `960526544da308ea8b0eb1d325b26609487ab856`; implementation staged on temporary `fix/local-readiness`, without changing Project authority. +- F1 repaired in candidate: mandatory authority comes from trusted registered Provider/operation metadata; missing policy fails closed and optional result fields cannot weaken it. +- F4 repaired in candidate: trusted required-verification/check IDs, explicit non-applicability, rejection of failed/blocked/unknown/missing/wrong-subject checks before successful completion. +- F2 repaired in candidate: full checkpoint preflight, cooperating cross-process lock, stale-snapshot rejection, multi-file journal, rollback/committed recovery and conflict refusal. +- F3 repaired in candidate: confined discovery/evidence/lock/receipt I/O, no-follow POSIX directory walks, rejection of symlinks/junctions/multi-linked file targets, and unique temporary files. +- Additional guards: single-use sessions, duplicate receipt rejection, persistent uncertain-effect marker and trusted observation-based reconciliation without re-delivery. +- Local complete suite: 109 tests passed (baseline 87), repository-integrity and portable-contracts passed, compile checks passed. Fault injection includes 18 real child-process crash trials across Core/profile 0.1, 0.2 and 1.0. +- Native harness: `checks/check_native_install.py` isolates HOME/CODEX_HOME, observes native install/enabled state, validates exact package bytes, and starts a new native process for Skill discovery. No local Codex binary was present; this local attempt truthfully remained not-observed. +- Evidence: `.agnir/evidence/2026-09-20-functional-hardening.md`. Scope/test/acceptance map: `RELEASE_READINESS.md`; actual local exercise: `LOCAL_ACCEPTANCE.md`. -## Open functional blockers — reproduced, not repaired +## Product and package boundaries -1. **Trusted authority can be bypassed by omitting the requested authority class.** `ChatGPTExecutionSurface.parse_result()` accepts a model-controlled optional `authority_class`; `Orchestrator.complete()` enforces only that supplied class. For the actual Cloudflare provider operation whose descriptor requires `protected-delivery`, omitted/null/empty values reached the injected fake deploy/observe transport and checkpointed with no trusted grants. Explicit `protected-delivery` correctly blocked the control case. Authority requirements must come from trusted provider/operation policy, not optional result data. -2. **A failed checkpoint can partially publish durable truth.** A valid discovery record with `decisions: null` loads successfully, but an outcome requesting State + Next Actions + Decisions writes State and Next Actions before raising for the unavailable Decisions locator. All three supported compatibility lines reproduced changed State/Next Actions with no new evidence receipt. Preflight, coherent publication and interruption/recovery behavior need repair and executable regression coverage. -3. **Evidence-child symlinks bypass Project-root containment.** The declared evidence directory is contained, but `_read_evidence()` follows its child-file symlinks without rechecking their resolved paths. On all three compatibility lines a dummy file outside the selected Project root was loaded as evidence without an authorized external binding. Only dummy temporary data was used. -4. **Failed non-effectful verification does not prevent a success-state checkpoint.** A result carrying a failed verification record and a completion State/Next update, with no capability request, was checkpointed. Required verification needs a trusted operation-level contract and failure handling; not every trivial non-effectful operation must necessarily require verification. +The four first-class components remain Orchestrator (`src/svif/runtime.py`), Continuity Provider (`src/svif/continuity/agnir.py`), Execution Surface (`src/svif/execution/chatgpt.py`), and Capability Provider (`src/svif/capabilities/cloudflare.py`). The shared Skills-only **Plugin MVP** guides the host; it does not contain the Python kernel. Python tests therefore do not prove installed Skill effectiveness. -Detailed reproduction inputs, controls, results and acceptance criteria are appended under the 2026-09-20 readiness audit in `.agnir/evidence/2026-09-18-public-submission-candidate-audit.md`. This is a targeted audit, not a claim that these are the only remaining defects. +Svif remains product line `0.2` / `project-binding/0.2`, active unpublished source version `0.2.0`. README.md and `README.zh-CN.md` retain synchronized user/Agent entry points and now link the local acceptance/readiness contracts. -## Product architecture and scope +The old package-only Plugin tree `5ab4b6147dbd096c052f042b23e37f0ec39f7091` and ZIP `bc2315562f7bdeb4232aadb9b583a7442f8cd868dbeacd13bb57caf0c785177c` remain historical packaging evidence, not the new hardening package or a release approval. The updated Skill changes the Plugin subject; identify its new exact tree when accepting the candidate. -The four first-class components remain Orchestrator (`src/svif/runtime.py`), Continuity Provider (`src/svif/continuity/agnir.py`), Execution Surface (`src/svif/execution/chatgpt.py`), and Capability Provider (`src/svif/capabilities/cloudflare.py`). +Released `v0.2.0-preview.1` remains immutable at `2b07b6b5ea0bc8feee59f9f647be9af3069d056e`. Historical Codex CLI / ChatGPT desktop/Codex acceptance remains valid for its tested paths only; no current-candidate native effect is inferred from it. -The installed Skills-only package guides the host through Svif workflow semantics; it does not package the Python Orchestrator. Skill effectiveness and Python runtime enforcement therefore need separate evidence. Remote MCP/App packaging remains an optional increment, not an invented prerequisite for accepting the Skill-first MVP. Live Cloudflare transport/production delivery is not claimed and remains disabled unless explicitly authorized. +## Canonical continuity and limits -## Canonical continuity and preserved boundaries +Project identity `urn:svif:project:svif-core`, Agnir Core/profile `1.0` / `repository-filesystem/1.0`, logical lineage `urn:svif:lineage:authoritative`, VCS selector `refs/heads/main`, and all four memory locators are unchanged. Applied Agnir remains `v1.0.0@6d16dcfd17b8e9f22fd25804e22b9f8a516d06c3`. Accepted promotion/adoption and brand integration remain complete. -- Project identity: `urn:svif:project:svif-core`. -- Agnir Core/profile: `1.0` / `repository-filesystem/1.0`. -- Logical lineage: `urn:svif:lineage:authoritative`; VCS selector: `refs/heads/main`. -- Durable locators remain `.agnir/state.md`, `.agnir/next-actions.md`, `.agnir/decisions.md`, `.agnir/evidence/`. -- Applied Agnir operational release remains `v1.0.0@6d16dcfd17b8e9f22fd25804e22b9f8a516d06c3`; no Agnir upgrade or compatibility promotion is performed here. -- The current adapter retains `0.1` / `0.2` / `1.0` support. The existing Skill founding bootstrap remains Core/profile `0.1`; installing a newer distribution is not permission to relabel an existing Project. -- Accepted 0.2 -> 1.0 repository promotion receipts remain in `.agnir/evidence/2026-09-07-agnir-1.0-main-promotion.md`; the cross-project adoption handoff is already complete in `iorLab/agnir/.agnir/evidence/2026-09-07-svif-agnir-1.0-adoption.md`. -- Approved brand integration remains PR #5 / commit `77ff3d0e8b3d0d691bb47529e065571c17a0aa81`. Approved assets and package-local 128x128 icon are unchanged. Root OpenAI metadata and its compatibility fallback are unchanged. -- `README.md` and `README.zh-CN.md` remain synchronized user/Agent entry points; the release/install entry currently selects immutable Preview.1, not moving `main` or the unaccepted 0.2.0 candidate. -- Historical PR #3 is closed unmerged; its tip `d42489f72cc8985d353ccbf2f9b6ae7249fe6480` remains archived pending physical branch-ref retirement. It is not an active feature or release dependency. -- No `v0.2.0` tag, GitHub Release, OpenAI submission, review, Publish, directory availability, current-version consumer installation, or live provider effect is claimed. - -`.agnir/next-actions.md` is the canonical ordered resume plan. +The filesystem adapter transaction coordinates its own readers/writers, not arbitrary editors or network filesystems. Windows does not yet claim hostile concurrent-directory-replacement containment. Trusted integrations must authenticate evidence receipts and enforce real account/target/credential scopes; model-authored success fields are not proof. Live Cloudflare delivery and remote MCP/App hosting are not claimed; live delivery remains disabled unless explicitly authorized. No public submission, Publish, release tag or GitHub Release is performed here. diff --git a/.github/readiness-patch/0.b64 b/.github/readiness-patch/0.b64 deleted file mode 100644 index fba162d..0000000 --- a/.github/readiness-patch/0.b64 +++ /dev/null @@ -1 +0,0 @@ -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 \ No newline at end of file diff --git a/.github/readiness-patch/1.b64 b/.github/readiness-patch/1.b64 deleted file mode 100644 index 6bbda6b..0000000 --- a/.github/readiness-patch/1.b64 +++ /dev/null @@ -1 +0,0 @@ -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 \ No newline at end of file diff --git a/.github/readiness-patch/2.b64 b/.github/readiness-patch/2.b64 deleted file mode 100644 index 3bd9360..0000000 --- a/.github/readiness-patch/2.b64 +++ /dev/null @@ -1 +0,0 @@ -OEMoeM+vuOfvooJzpMohaIWX6BrhX4ySdP23ml3TASvvpcgZnnmiyfiDjJgmSVN4nkajX6hFfXW4m2jWSsvxXbIhDw37giWLZ7UDOmpejs6rBM6Dndw9xuEvymYO2MRh7LcC4eIm+J22hmpkgR6gfnmbQNd70jcV4vGSJqg1QFIvdcVi4OMjwvjt9ZwVWqR9ONIFS6zMTrE0iB6Y6CL9mKrVPEvR4oibhiI4KEfLjRLgZByAfiEJcNlew/87jysmRjJjGrL0Q5TlC0csOCuO+NZovo3jkIuipVZji/MtSpvhw07hh7qSyAX95bgfxB06ZLftwUHviiCOn4zXgy1+5SOnlb8w71WRuB0eNGNQLqL9Wbgm8RWWqXGQGaH5K7FWXmr19RvZtZ1pOVVjPIMdVsFUD+oOCquY6X0WgMWTl2OXBOvl58Z2g+j0QWio5w2HniWELK6XETjBaWPvUGGcDKGk8/9uKqpz7r68Ma/GkqGCXoFjpJInzdwTWBA2Q68/qVm/VRr9hZN4gQDSjgyvOkrDXYx6C/jLfTCdJSL6+C8gHjzoNLIWTwfxLXxMCAcXCNXjotuhf8TRXxcPDjpY809RUxk0U6dVCCInNCs/dBSHi6R2M7NTYBKu86CT2B4spwEMLK1ntxTqu6ayfVTdfY2HcY8JBeN9MCj6g5Jtq8w2Con3WiEo7qwEYFsDesW8p618RILxW9ScwLn7/nCrpnmMeVl3gph6FBw4tioLetiuqVZtHm9CD3jME2P2dJRrstTXvYy9dkClpzcbRJZg+mnK2viU2K130W/fDIHjo3FSq+KYKET+fqGqpJ1TzhFGWk7OHqNTAoRmeMcU7WvlDXAppMFNexvUS3EHIYOq+GpTAYsS4sEdUSySQ5oWtoP2Pt3gJTDn1bXSiGginXOEcqaQCYOsimjlbeYBO98Fqxn//VPz0GKpePj1sSlQN4KkGHay9mtorn0MZStqkCuhFTlWF7O3AeP4fmTEGrDYQNFZgsTrPyZVAoeW+0EYbDjCaquggvLfvXDKoLjUjlaCadlF33RKhf3OrVcA2Wtm2oZGs5yqL+w9rjg8zTnyO0BlFUBp/8XWeBPUmKENp1JvqZIq8IQoXhNf6F4/uDgUvGSYNYbe0HUE8zHt/QyWBzV6DbBkYlDwiVVj7H/88By0qJYby4wO6HhAFqNeuS+sAW4qqQaSE5tqaOKAdZodRGciCYkh0pWGgj2N+4yioQUKplBqxjGN3lqmUoExmvaUmpDRXnvMQeOBL7cvbN89dqGjBRh0woD1QFEG1E0byBHJ/JsZDqwLwUqg4WTgIMyTYddxvlB4Ha1GxxZRuj5pehdkyuPdIDyNgQLnX0N658UP369BbSrq1ECulQR3YUjv66n5XADOkjxvj+ZDeYKq/LDD/zN4+N29/iPxQI+l06j6skeWvoEbMUcsuLICvOWwtnb0FWT8AAglQOur0MtT2q2MmG0xBRTGp3fK6exnl+I1jUriD41HaDrsWsnzWcSVs47vNkcsGgOaaJ6uwLjI1VMFXC9uy+gZILSy1IukOnsSfBEuQlGgQzdcTNsDw/V7bSCXphPN12arpd6Z3rx+e7ddRB8QCgHy74wsVGTF//QMPYkLzFRCkWIsWYfJ5gbWx7q03a9t7yF+w996CsmCjuis17EQM9a3LbuRZ/uWEqco5sb+OQKIh24sNXANd/kGgb0JTkkhUjpTWqiiMSLG2LxwFkPaZzGdDqjv/U2o9jbC/5xy3P4bNDMQ/CPgKbrf2yOzz8gwocjJuBNgJqegmgHT9S8Jx5VmUb93RtbdOOYCCjBd3bzgciUKazrZSHB2/duMtzrDFKbOHDY1NWhtmCryR31bWjrxuck3U3GyMJ4799sPR9sSY9j8wSorBvGBIsnFIm6khmsOWDhOBUyB2FQWPXuHTonIRiL6FNelrUCgN+Ek6S8qufB5d8Xmk7iqu+A2oG/obPxxCCMh2CNHgPOFOFxuzsGZy8dH/uQjSTaFSMQRLpI13AXITd85bMANIgK0XXx96d0NvU5BYIBNAHKSR2VF3ufqOVeSBXBIhTXwAmMBRLoXU7wNrjc+BpclcVTilPNifK5if8d33F2T/yaXQoIqu4fi0nZWwBzsnjiaGVfa1wIzCkOnbD57zjDiYAzpV0XO1IgS4N+PCEeCTOvzYeuM89nK0fCRgvD8VF/w+5sB+ofFxP02Evtn3W+fMIM1vcFHKS9aHhQXI8yRty7xq8Li7bOQrQtIhHF8MdkqQEObpX57cB31bFYY5mu+FcibbbI71Qph8X9NP6hJ09BBj1d2V3a1D4NS4F2UHcAwoXNOmoIVISnIrxJBzLDNrwZ9dB14BBK7ghgWP1ZI0ngq1k3gGVrEC29G7fb6OTHjKgzmrfbVohzQY0yliJEaZy0SCqFg4Tsd5QCWl3PyxkY42houGtdPpCMRXnSB+M/oS5m97mid0kpWVlHyRonU73e4jv2s2fEP+e+MdPnaPB20ZQXayoThwliyUeyjd6CvBmfVpnaNa3E2Eetk6wTpACA4OxwP7PFi3A1mdOqeSc/3umSKwMgamRVnToNMmhHEedQZD9Pyaz1H6njAyB9NzmE+0F5qtAzb8aPV+0QUpW2+yLdkniwIQq7HScslO4XyT8Tp+BU2mS8zQRJO7RB0Ayk/CuCY3+uNRc4ZSx/PTIJ9KndYrMefxBNE87IFaoSPGjJRJZv6xNn/MJQD6DaIitmLS7JY0rF7f3v93A46ZjiFF5l82kh+6yAp4W6rKiUu3fLHwjZ5Mi/mD/qwks1zB4H1La/NL0O2P9MlDlsTqOLISeBp1np2nIPZedzgex/MB03+Gbo2dPga4oPpODjtH9OEfriyYZvnfme7Z9BDkDuuybXBQEahfpwAa94zXbKzPR6tNL6Uk9aGGRR5yJvABpKkiajNvZIANMyzpVWAFCaDCNYj0/eyNhYT2AtjJvcNO9boM84iUVJ20mHXGiwnDNFpkQiYo8OhA5sbEMsCgt9cTJdC8tBec/VDmQzyZdMAviUMKP7COrxEAoNcFPJAeQFKfTUW0RXTQ4FYPdi3p5rYLe2hjD9sM6SvV2InNhXZP6Z4wNN3Kz4w5uRPuiMuyMpjzVJRdMAwd/RMDNr5mH8Uf8Xg8+YFbGRiZ7BjPA6CU902InN2B3iEXWNC7h3XZB75r7197I2sCsJ+GwXd4gyn5MWzk22jvmo8IErdDGsIS1N9JkTvaRjuCgujHb2AjwJFleYA/MN738GIXSljNRCzOnjOrn7b+sPyUu9jNQWA8q8bJOWhc3SNw7iY4EmfB5ByoBB0MebA4XMsUhgWSPQn83tfnDwtDQWdALYNNqx7bXpaGHffo4VEOAyxCAqMGMz6wOEz4g+17x7YQBKDb2+QGWgSMn3A3rKcmBA6fxKGor6zXMlU5jqqLA15H2fGwkWL+Y9E8dwEZN6MIRKntezENTXgwMx5BDRSGgvs2OvTU/FrBteagVf159bu7H+HFpT/2NQnQ3mIX0LXMphv28w/m1i5HEbwUoWjXYvex5ZmckPu2A1vfpJqgZ4h0/QQnAS5EbIXPz4oDhhfrDxFGa4t5SA8Fj6HzuUBeUtMW8N92FSwUoGBhGl4/eeOy8vQ31H0Y56Yz7gs2dI+ZefYaDdjpV4rgae6d/soFwbo0PkYWKs1qmA8j2iUCwrzIw2WcEwQSmVZxLp73uvizXmCNGjtSb69MVoXQfqfG8prhMTmvifJGJId95YdGfHIecSnpvygPH16UUxBLSBF/KB2yysyKtvVBv8V4KTVG6p02pgM1feOq39UaFruemLL4/AWHTooKByZxjhChTXbO+Wp1WAIQ2T6+WQv2yFnyl0x+4ntDFB4efBBBshUdljRWeJPgPt6tTAde5qkny8jVgELGK5HeU3qT6bjTn3DTXlRyRY/X/4y1Xkz9xfe2TRYhdiA/DzqqUKx1Gs+PuZJJTeU8JuSGsOn/N8+9a39YZjR43ZzfCQo50lwS2y1otu9hFIBScpcleOAxXftx1v8Ptv61dKmCNzL9utOi7tv1uie5EwFtgjM7aRScwj1Us5xAPH7mtRrao33ds3j3CIK1vIPUXntPoIjPIa8CIzxkU6EQwsPrKrToG7EE+a+k/ntl9RxTUnXPl2uk25hPwOquFqdpK+Ru7G3yrqo40z5GpT7kNqziBp2vC1Tkkoduuw9KKMu1d25bsRk/IBNizMaHGJlf7GN5ynfvcBgi6EJVYC8So0rZqMGdwgTWs7/GnwUKbwF0f+T16gM842eu6tOfGQ7ZrYJhD+dmcCZDCo49UTVQpRjEkhBDrlZEM0rLdCtz6l4zWc6TOIXIC0Bxi37zRLWdziKM8VRJGfLdFVXKCcCP2J1nWqmi/+1qho6X6jpkLWbYKPdWQAlSJjcmqv1DuV9B5qzYKhA0Inu8ULWgM6x08D0gOPyecluzSq8KvXfjdrtS1otqsQh+UIbc0455SKlNa7nH36bmPYAFKDCJiqyRgrNJdXAbsW5XZgzDLC9cCyilRzSuUNbCiD5a7ScSMqo4m7uBfBHBcB3cObqv/Xo3VzBiDEj8DxSYE+7znwNaBbuBwuaesdfm0HbRhFG0rBBTGVsiyHqIyfdkGgQc+Lt3ruCYokGe3QlTW7UH3loYARUifHbCX75pePfo94KK0GLR2lfCScUvNUNwqOeFzXEhMUqu0qPKTziXM2FukBS7j6a/iJDfWe1H/8GXsjsBVMv8wpcdyFkojyw1VWK33x7M5J5TqcCFx+1tOkLwymAbqGIM1Q8XkbWvS4oUorNQJU4GrlGLEkbR0CosnQAwZPJoLe/kYM8bz+7xzw5azTXr85N8fTrFFohmri3nMPyEn1ok5J4rW01isKkb9YcEglBV7CKhsnOLgM5PTP+9ElZaGqhKk2jxmkI5Jgt1yQ5KAkXAM1htXdD9uKlSAiqwFTyd3UcEGlI90rqr96fUPesD1Dd1QHLNTLYV49+On+Ygl46PWtcTnIdzyjKO0pEopxICGeifrwbqa0kiNjQ685cjco/EEQBZRRKOkIrdSmPNuaxdETf06rlk6FT0Xvvi7N0kdssWmeUe6BTCTZ3zTPULT5sEIul/Wh4JPotfuhuqqbuxOZAMnVWLjH/t/MvaFYiGxkxWWF3F+uAYAIE1096byjvvKxhid6M64CrUaBfjNuN0dIzp8PqcxjVhjKDo8SDDfvpZUJ9oakpNMzwegKva/CVU48r45gdnnmLfupWvI0Fsl3gI68SG3BDEGLdjl+eKj8WTzENrBOYxOOHLkHHXI8V0WqaGRmwsNia5hV4lOcVhIBbkXxHhruSvmE0hNCFRMZYJ49yIf2qXneg7DBtV+z8s9OJZZCk49WZqS9RC71E3etxxN/KXOr+LAiSN1r+rzh5fRiwsmZS/Cvn2hmNENs+THE9PXe/WA/dXdzddvIk2qEwiD0S48oRX6SZxd+vM0wW5EgY41byZ66HO/Ihj/9MpZ/GnkG8j9q4o50IAar8xcdl/XE6b7YZaKt0030rKHCXgaV6tTqSnl1BJ+/mcscL3E1Xfgo0sHNYSGXDBB7zgJT9NZDax89WPiuQlDfPUXH2zBQAs5XzWHjaZnb3cY+626yEu2JgX0tfD5pMopvrUmyDCjiEfjkwSAfn6OVagJkjZ3NZZAfjYpfYb9F3d8oHp+sbjVPon5REt81Oiy9nDcDFpTNCi7phbMmBrg/A4lsSLIwG+V+3DfF7SvKjf14litWhyzyobqbAtjEmSHsTQQqTMWekK73wphTKFSSQMr7nb8wgZ70K0eA64n33lmk1vc0kvbFwlV+kn5MfG9mxybIq4LG6QPVEnAytpHXRpFnJ9nfpbbodBJSyfS1n1sGt8u92Vvm0V5yNeqM1sHhJRe2EBaM5AB2xxOzzMJAvHEMd442SmhfD7QxrQyuB1rdpBPEJjko7i/I+rj32/uX8BvLoo9jFBXQquYU+ZXS+TrJlcE/LJ3AJu4X7rx1KXf0K7GxGC7duXVMB0zDkusFD+bSziH7RDGCOBXeFE9XQkHtOOg3vKzr0IqYDpHSs2dXEge6KsMkzMjoKQXzmpnDfWDy8gy66XWYHDqFJNNL4R0FN0keOA8El6yrVUcHEFDuPOT2muHROfHGXqeI+D6EwtQnGyMz/glOixfQWR2jD/Gu73KQ4GTl3LCusTDTpSlNSaHGkgDMwwN6TCETXa2NY+AIx/1dB8IONTdmX5M2dpr9Xyfci7530HaT1LBEUp4FF8rZ6Uc3JTVkyVl1GT3o4uZC3uBAH9pzjfXY4vGvPguFZphzVYq80Ce4n+N85MKH7Apvhwu+kRXxv3J7nQPYPrAuBEZB0wjhR02inTTFhMi9gn4rx6S2W7u2hXn+23Uj8rfiCmQcMeUqoVOJvsh9l4m4nZm9AnBE5D70BekqGA9p1f8/BUSeIju3rn3jKy8xMruUiobpVRYasb6JhaHZT8+QevUc9OXvLTxCuK8ObEDeFN+0keTxovtgNoqoi5ceN50tMVngW4eGR8Dr961ChzTXqF87REjXalY1PI9n6pWQBzqjIf2X0bjazTg+OuQKp8ZlkbTyVgnoYgnKGOPevnffW199mT9ng4je2Wr/53qtacWxNNlh8G/b1t7TuTCJnre3Q4479SpPLejDeV9NkfRfvyltmmHzuZFMyVAynmvlEInlXGCS1IuQ54+6i9nDV+9uWPYZ0qTP/3PhSpng2k3Zee7L2NocPQl0quCGHNpQxS6p4IPzf9RrgAzy2hOQg0ifwq7JLeCH+kpzMxgKqCtL5cZzAhw91+iKYDPWoVQEdUZoNidUIkGM44/yyIGn3At0dmkwxA8JQpo6gKbRXxA1vKF81w5KrBNsiit23d42uL6YNtHwP4gmreYyHaxbXb38B0WaiHTT/ficBWrSO3ntPUUK+XJJnXIo/Sw3H71A/jXgfmlOFnI0iBmgkc2xSC8ZXc3SFylV3ACrJkLIBdmjXUWKjF9F+izoUqFj/x/RogvC/OWG3XYEeBAZklr1ggSCCMF7I6Z8NssCtY+oBwdaBsdAId8nrM5tor3a7Dw4BI7Xqex5qsuZ7QU5u5Yv5YKaooQ4OxvAftMRI9xWV/+ndi3l0k2P3/4DxcNsvA0BwuED2D4JNN7xQzm1Ks4DFi3d8WEyruyEatB44seMsXVk6lt0loboCj2E83H7Z2hlcasVaF9GYGw24bemuqqMDnLD7DMz2KEIE0CEizaApkg9szzWfLuqR0Mix9FjEXqd0a6lXQJLPVeFutdSeKPrBMfrnvOez9uRCg/rIbx4YjIRgypJjvU+zJLRkvxIIR2D4y2iDgd+KFwQ9q67Bw9Pu0eCn1CjXTuB0chPB6GLf3eR+5ejmV3n4NGDuqUgslszatDj7usPPxJfgTNIDJbCu2BM6bN7+nMV8ojy1lsP16PE5iAkk5UMYdLZj9qaNkcy14muZ404sDi/6cVWBM4d5Z1Hg+JAxw47PYZiEptE14ZdncbwXWjZXkQ+WAM1z0JX+lzu95N2FsKhMS/dLhPWIEsn4YmXucslCGyQ1gr327Uat6rNPGm92PvClE2LiM8noURgb4XtjjcAojMFfhA9TeACfVc8l \ No newline at end of file diff --git a/.github/readiness-patch/3.b64 b/.github/readiness-patch/3.b64 deleted file mode 100644 index 88dddf7..0000000 --- a/.github/readiness-patch/3.b64 +++ /dev/null @@ -1 +0,0 @@ -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 \ No newline at end of file diff --git a/.github/readiness-patch/4.b64 b/.github/readiness-patch/4.b64 deleted file mode 100644 index 4c58803..0000000 --- a/.github/readiness-patch/4.b64 +++ /dev/null @@ -1 +0,0 @@ -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 \ No newline at end of file diff --git a/.github/readiness-patch/5.b64 b/.github/readiness-patch/5.b64 deleted file mode 100644 index dba2789..0000000 --- a/.github/readiness-patch/5.b64 +++ /dev/null @@ -1 +0,0 @@ -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 \ No newline at end of file diff --git a/.github/workflows/readiness-source-once.yml b/.github/workflows/readiness-source-once.yml deleted file mode 100644 index db1ea15..0000000 --- a/.github/workflows/readiness-source-once.yml +++ /dev/null @@ -1,26 +0,0 @@ -name: Materialize readiness source once -on: - push: - branches: [fix/local-readiness] - paths: [.github/workflows/readiness-source-once.yml] -permissions: - contents: read -jobs: - source: - runs-on: ubuntu-24.04 - steps: - - uses: actions/checkout@v4 - with: - fetch-depth: 0 - persist-credentials: false - - name: Export exact baseline and Git object metadata - run: | - mkdir -p "$RUNNER_TEMP/readiness-source" - git archive --format=zip 960526544da308ea8b0eb1d325b26609487ab856 -o "$RUNNER_TEMP/readiness-source/source.zip" - git bundle create "$RUNNER_TEMP/readiness-source/source.bundle" HEAD refs/remotes/origin/main refs/tags/v0.2.0-preview.1 - git ls-tree -r 960526544da308ea8b0eb1d325b26609487ab856 > "$RUNNER_TEMP/readiness-source/tree.txt" - - uses: actions/upload-artifact@v4 - with: - name: svif-readiness-source - path: ${{ runner.temp }}/readiness-source/ - retention-days: 7 diff --git a/.github/workflows/readiness-verify-once.yml b/.github/workflows/readiness-verify-once.yml deleted file mode 100644 index e9424ed..0000000 --- a/.github/workflows/readiness-verify-once.yml +++ /dev/null @@ -1,135 +0,0 @@ -name: Verify pinned functional hardening once -on: - push: - branches: [fix/local-readiness] - paths: [.github/workflows/readiness-verify-once.yml] -permissions: - contents: read -jobs: - prepare: - runs-on: ubuntu-24.04 - permissions: - contents: write - outputs: - candidate: ${{ steps.candidate.outputs.sha }} - steps: - - uses: actions/checkout@v4 - with: - fetch-depth: 0 - - uses: actions/setup-python@v5 - with: - python-version: '3.12' - - name: Apply the hash-verified locally tested patch - shell: bash - run: | - set -euo pipefail - test "$(git rev-parse HEAD^)" = d1bbdcbbb882df5ba136272c6144fcd0ca14f2bb - test "$(git ls-remote origin refs/heads/fix/local-readiness | cut -f1)" = "$GITHUB_SHA" - python - <<'PY' - import base64, hashlib, lzma, pathlib, subprocess - parts = pathlib.Path('.github/readiness-patch') - encoded = ''.join((parts / f'{i}.b64').read_text().strip() for i in range(6)) - patch = lzma.decompress(base64.b64decode(encoded, validate=True)) - assert hashlib.sha256(patch).hexdigest() == '09de14549ab59b95f2c08f274ee0da136efc5984cb9a96544c4d3a1f030fe494' - subprocess.run(['git', 'apply', '--check', '-'], input=patch, check=True) - subprocess.run(['git', 'apply', '-'], input=patch, check=True) - PY - git rm -r .github/readiness-patch .github/workflows/readiness-source-once.yml .github/workflows/readiness-verify-once.yml - git add -A - test "$(git write-tree)" = 9e5615b79fdb3acbde93155b73c16046a84f284f - python checks/check_repository.py - python conformance/check_contracts.py - PYTHONPATH=src python -m unittest discover -s tests -v - - name: Persist verified candidate only to the staging branch - id: candidate - shell: bash - run: | - set -euo pipefail - test "$(git ls-remote origin refs/heads/fix/local-readiness | cut -f1)" = "$GITHUB_SHA" - git config user.name 'github-actions[bot]' - git config user.email '41898282+github-actions[bot]@users.noreply.github.com' - git commit -m 'fix: enforce trusted authority and recoverable continuity' - git push origin HEAD:refs/heads/fix/local-readiness - echo "sha=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT" - printf 'candidate=%s\ntree=%s\nplugin=%s\n' "$(git rev-parse HEAD)" "$(git rev-parse HEAD^{tree})" "$(git rev-parse HEAD:plugin)" | tee "$RUNNER_TEMP/readiness-candidate.txt" - - uses: actions/upload-artifact@v4 - with: - name: readiness-candidate-receipt - path: ${{ runner.temp }}/readiness-candidate.txt - retention-days: 14 - platform-tests: - needs: prepare - strategy: - fail-fast: false - matrix: - include: - - os: ubuntu-24.04 - python: '3.12' - - os: ubuntu-24.04 - python: '3.13' - - os: macos-14 - python: '3.12' - - os: windows-2022 - python: '3.12' - runs-on: ${{ matrix.os }} - env: - PYTHONPATH: src - PYTHONUTF8: '1' - steps: - - uses: actions/checkout@v4 - with: - ref: ${{ needs.prepare.outputs.candidate }} - persist-credentials: false - - uses: actions/setup-python@v5 - with: - python-version: ${{ matrix.python }} - - name: Verify the exact candidate on this platform - shell: bash - run: | - set -euo pipefail - test "$(git rev-parse HEAD^{tree})" = 9e5615b79fdb3acbde93155b73c16046a84f284f - python checks/check_repository.py - python conformance/check_contracts.py - python -m unittest discover -s tests -v 2>&1 | tee "$RUNNER_TEMP/readiness-tests.log" - - uses: actions/upload-artifact@v4 - if: always() - with: - name: readiness-tests-${{ matrix.os }}-${{ matrix.python }} - path: ${{ runner.temp }}/readiness-tests.log - retention-days: 14 - native-install: - needs: prepare - runs-on: ubuntu-24.04 - steps: - - uses: actions/checkout@v4 - with: - ref: ${{ needs.prepare.outputs.candidate }} - persist-credentials: false - - uses: actions/setup-python@v5 - with: - python-version: '3.12' - - uses: actions/setup-node@v4 - with: - node-version: '22' - - name: Install the official native Codex client in an isolated tools directory - shell: bash - run: | - set -euo pipefail - version="$(npm view @openai/codex version)" - printf 'resolved_codex_npm_version=%s\n' "$version" - npm install --prefix "$RUNNER_TEMP/native-tools" "@openai/codex@$version" - - name: Observe exact native installation and new-process Skill discovery - shell: bash - run: | - set -euo pipefail - test "$(git rev-parse HEAD^{tree})" = 9e5615b79fdb3acbde93155b73c16046a84f284f - python checks/check_native_install.py --codex "$RUNNER_TEMP/native-tools/node_modules/.bin/codex" --output "$RUNNER_TEMP/native-acceptance" - - uses: actions/upload-artifact@v4 - if: always() - with: - name: readiness-native-install-receipt - path: | - ${{ runner.temp }}/native-acceptance/receipt.json - ${{ runner.temp }}/native-acceptance/app-server.stderr.log - if-no-files-found: warn - retention-days: 14 diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..7b03fec --- /dev/null +++ b/.gitignore @@ -0,0 +1,6 @@ +__pycache__/ +*.py[cod] +.svif-continuity.lock +.svif-checkpoint.json +.svif-effect-pending.json +.*.svif-tmp diff --git a/ARCHITECTURE.md b/ARCHITECTURE.md index 728a68d..d97a5b5 100644 --- a/ARCHITECTURE.md +++ b/ARCHITECTURE.md @@ -38,6 +38,8 @@ The default internal lifecycle remains: `REPAIR` returns to the earliest violated invariant. +Trusted provider `operation_policy()` supplies mandatory authority requirements. `OperationRequest` supplies required verification and check IDs; model result fields cannot weaken either. Completion sessions are single-use. The Agnir filesystem adapter holds a cooperating-reader/writer lock through preflight, optional effects and checkpoint; it rejects stale snapshots, journals multi-file writes and preserves uncertain external attempts for explicit reconciliation. + ### Execution handoff modes - **Synchronous surfaces:** `Orchestrator.run()` calls a surface `execute()` implementation. @@ -49,7 +51,7 @@ ChatGPT uses the externally driven form. Untrusted model/result payloads cannot A Continuity Provider supplies durable Project truth and resumability. The Svif kernel depends on this interface, not permanently on Agnir. -`src/svif/continuity/agnir.py` is the founding adapter for Agnir Core `0.1` repository/filesystem discovery and checkpoint semantics. +`src/svif/continuity/agnir.py` is the founding adapter for Agnir Core `0.1`, `0.2`, and `1.0` repository/filesystem discovery and checkpoint semantics. ## 5. Execution Surface diff --git a/LOCAL_ACCEPTANCE.md b/LOCAL_ACCEPTANCE.md new file mode 100644 index 0000000..aeea4ef --- /dev/null +++ b/LOCAL_ACCEPTANCE.md @@ -0,0 +1,63 @@ +# Local acceptance — Svif 0.2.0 development candidate + +OpenAI Platform publication remains paused. Use the exact candidate commit and Plugin tree recorded in Agnir, not the released Preview tag and not an unspecified moving branch. Installing a Plugin and executing its Skill are two different observations. + +## Native install and discovery (no model calls) + +From a clean checkout of the candidate on a computer with Codex installed: + +```bash +python checks/check_native_install.py --output /absolute/path/to/new-svif-acceptance +``` + +The destination must be new. The harness creates an isolated HOME and CODEX_HOME, copies the exact Plugin and marketplace into that directory, installs using the native CLI, independently reads installed/enabled state, checks every installed file against the candidate, then starts a new App Server process and calls `skills/list`. It does not copy credentials or touch the user's existing Plugin configuration. It writes `receipt.json`; a missing host, changed package, unsupported command, or missing Skill returns nonzero. `release_ready` remains false even when installation/discovery pass. + +The CLI command contract used by the harness was checked on 2026-09-20: +- https://developers.openai.com/codex/cli/reference — `plugin marketplace add`, `plugin add --json`, `plugin list --json`; +- https://developers.openai.com/codex/app-server/ — initialization and `skills/list`; +- https://developers.openai.com/plugins/build/plugins — local marketplace roots. + +Use a compatible native version and retain its actual version in the receipt. Do not reinterpret marketplace registration as installation or substitute ZIP extraction for native discovery. + +## Actual work and genuinely fresh sessions + +After native installation/discovery, use the same test CODEX_HOME in an authenticated local Codex session, or install the identical candidate in ChatGPT desktop/Codex. Authenticate through the host's normal login UI. Never paste credentials into Project files, test receipts, or chat. The harness's `ordinary-project/` has only README and AGENTS sentinel text; do not pre-initialize Agnir. + +First session request: + +```text +Use the installed Svif Skill for this ordinary Project. Create RESULT.md containing exactly "Svif local acceptance passed" followed by one newline. Preserve the original README and AGENTS instructions. Verify the file, checkpoint the resulting Project state, and leave the next action as "Add a second acceptance result". Do not access external providers. +``` + +Independently inspect the filesystem, not just the model's answer: exact RESULT bytes; a shared stable Project identity in AGNIR.yaml and SVIF.yaml; preserved original instructions; working AGENTS -> README -> AGNIR activation; State, Next Actions and inspectable verification evidence. Retain the native transcript/tool trace and compute file hashes. + +End that session. Start a **new** process/chat at the same Project root, without copying the earlier conversation: + +```text +Continue this Project using installed Svif and its durable state. Tell me the completed result, its verification, and the next action. Do not change Project files. +``` + +The new context must independently recover the exact file, verification and next action from durable Project surfaces. Then repeat enablement on this initialized Project: AGNIR.yaml, SVIF.yaml and unrelated README/AGENTS content must remain unchanged; no duplicate identity, locator or instructions may appear. + +## Negative fixtures + +Run in separate disposable copies, never a live Project: + +| Fixture | Required outcome | +|---|---| +| Partial/broken AGNIR artifacts or missing required locator | Explicit repair/blocker; no re-bootstrap or sibling-Project fallback. | +| Intentionally selected other Continuity Provider | Preserve binding; use it only if supported. | +| Failed/missing/wrong-subject required check | No successful completion checkpoint. | +| Effect with missing/null/empty/weaker requested authority | Trusted provider policy still blocks; zero actuation. | +| Unavailable/mismatched observation or terminated effect process | No success claim or blind retry; explicit repair/reconciliation. | +| Existing initialized Project | Stable identity and non-destructive/idempotent enablement. | + +Only after these same-revision observations have been reviewed can local **effectiveness** be accepted. Python fixtures and old Preview.1 evidence cannot fill these cells. + +## Filesystem recovery boundary + +The Python Agnir adapter uses `.svif-continuity.lock`, `.svif-checkpoint.json` (only while a transaction is pending), and `.svif-effect-pending.json` (only while an external attempt is unconfirmed). These are adapter coordination metadata, not a second Project memory protocol. All declared memory locators stay unchanged. Keep journal/attempt files local and protected; do not discard them to make a check pass. + +A cooperating reader recovers a prepared transaction to its before-state, or finishes a committed transaction. Conflicting external edits stop recovery without overwriting them. `AGNIR_CHECKPOINT_BUSY` means retry discovery after the other operation finishes. `AGNIR_CHECKPOINT_STALE` requires reload/reconciliation. Unconfirmed effects require independent observation and trusted `effect-reconciliation` authority via `reconcile_effect()`; this never retries delivery. Unknown/absent effects stay blocked for explicit Principal/provider reconciliation. + +Multi-file isolation applies to cooperating adapter readers/writers. Direct editors, filesystem watchers, network filesystems, and malicious processes with the same OS permissions are not transaction participants. POSIX path access uses directory descriptors and no-follow opens. Windows uses reparse/link checks and an OS file lock, but does not claim containment against hostile concurrent parent-directory replacement. Native desktop/Windows effectiveness must be evidenced on that surface, not inferred from Linux tests. diff --git a/README.md b/README.md index 1bb82bd..4be2b4c 100644 --- a/README.md +++ b/README.md @@ -65,7 +65,6 @@ Project/ ├── AGENTS.md # [EDIT: add entry only] add Agnir activation locator; preserve existing instructions ├── README.md # [EDIT: add entry only] add ## Agnir Project Instructions; preserve existing content ├── AGNIR.yaml # [ADD] founding Agnir discovery anchor -├── brand/ # approved brand masters, exports, QA, references, and handoff ├── .agnir/ # [ADD] Project-owned durable continuity │ ├── state.md # [ADD] current durable Project truth │ ├── next-actions.md # [ADD] outstanding ordered work for the next Executor @@ -275,3 +274,7 @@ PYTHONPATH=src python -m unittest discover -s tests -v ## Next First, complete the self-distributed `v0.2.0-preview.1` acceptance path in Codex CLI and ChatGPT desktop/Codex using the exact immutable candidate. Then publish the verified tag as a GitHub Prerelease and retain the same Skills-only package for the later OpenAI Platform submission. Universal-directory publication still requires the applicable publisher identity and review flow; MCP/App packaging remains a later capability increment, not a release gate. Live Cloudflare actuation remains separately gated. + +## Local functional acceptance + +OpenAI Platform publication is paused. The development candidate uses independent behavioral tests for trusted authority, required verification, path confinement and checkpoint recovery. Native installation, Skill discovery and real fresh-session recovery are accepted separately. See [local acceptance](LOCAL_ACCEPTANCE.md) and the [requirement/evidence matrix](RELEASE_READINESS.md). Old Preview receipts, ZIP checks and Python tests do not replace current-candidate client evidence. diff --git a/README.zh-CN.md b/README.zh-CN.md index a1b5459..f70b923 100644 --- a/README.zh-CN.md +++ b/README.zh-CN.md @@ -277,3 +277,7 @@ PYTHONPATH=src python -m unittest discover -s tests -v ## 下一步 先在 Codex CLI 与 ChatGPT 桌面版/Codex 中，针对同一个不可变候选完成自分发 `v0.2.0-preview.1` 的验收；随后把已验证 tag 发布为 GitHub Prerelease，并保留同一份 Skills-only package 供以后提交 OpenAI Platform。通用目录 publication 仍需满足相应 publisher identity 与 review 流程；MCP/App packaging 继续作为后续能力增量，而不是 release gate。真实 Cloudflare actuation 仍然单独受权限门控。 + +## 本地功能验收 + +OpenAI Platform 发布暂缓。当前开发候选的授权、必需验证、路径边界与 checkpoint 恢复采用独立行为测试；原生宿主安装、Skill 加载和真实新会话恢复仍分别验收。参见 [本地验收步骤](LOCAL_ACCEPTANCE.md) 与 [功能／证据矩阵](RELEASE_READINESS.md)。不要用旧 Preview、压缩包校验或 Python 测试替代当前候选的客户端证据。 diff --git a/RELEASE_READINESS.md b/RELEASE_READINESS.md new file mode 100644 index 0000000..fda008c --- /dev/null +++ b/RELEASE_READINESS.md @@ -0,0 +1,26 @@ +# Svif functional release-readiness matrix + +Scope: the existing Skill-first MVP and the founding Python runtime/provider contracts. Remote MCP/App hosting and real Cloudflare transport remain separate integration increments; neither is invented as a prerequisite for accepting the Skill-first product. Public submission remains paused. + +**This document is an acceptance contract, not a blanket release approval.** Native installation/discovery receipts and actual-work/fresh-session receipts are distinct. Refer to `.agnir/state.md` for observed status and the exact current candidate. + +| Existing commitment | Implementation / executable evidence | Acceptance boundary | +|---|---|---| +| Ordinary Project first-use bootstrap, preservation, idempotency | Shared `plugin/skills/svif/SKILL.md`; `test_plugin_first_use_bootstrap.py` guards instructions | Current native actual-work evidence required; text checks are not behavior evidence. | +| Agnir 0.1 / 0.2 / 1.0 identity, lineage, selector and load/checkpoint | `agnir.py`; `test_agnir_continuity.py`, `test_agnir_stable_migration.py` | Executable provider fixtures; trusted integration supplies selected Project/ref context. | +| Exact-subject verification before completion/effects | `OperationRequest`, `EvidenceRecord.check_id`; `RuntimeReadinessTests` | Required checks are trusted configuration. Integration authenticates verifier receipts; JSON parsing does not authenticate claims. | +| Mandatory authority independent of model data | Provider `operation_policy()` + Orchestrator; omitted/null/empty/weaker-class tests, descriptor parity | Missing trusted policy fails closed. Real platform consent and target/credential scope remain integration responsibilities. | +| Single-use completion / no blind retry | Orchestrator session registry; session forgery/replay tests | In-memory session cannot be replayed; filesystem pending-effect marker additionally survives process restart. | +| Exact delivery + independent observation | Cloudflare semantic Provider; founding E2E and negative provider/runtime tests | Fake/injected transport only. No live deployment claimed or authorized. | +| Coherent checkpoint and crash recovery | `_filesystem.py` journal and cross-process lock; `ContinuityReadinessTests` | Full preflight; actual process death at six write boundaries on all three compatibility lines; cooperating-reader isolation. | +| Stale/concurrent state safety | Snapshot revision; preflight/operation guard; stale and cross-process tests | Rejects before effect when discovered state changed; same-Project effects serialized by filesystem adapter. Other providers must supply equivalent coordination. | +| Confined reads/writes and safe temporary files | Directory-descriptor/no-follow I/O on POSIX; child/anchor/lock/receipt-link tests | No authorized external-locator support added. Windows hostile directory-replacement race is outside current claim. | +| Unconfirmed external-effect repair | Persistent pending marker; `reconcile_effect()` with trusted authority and exact observation | Never automatically replays delivery; unresolved/absent effects require explicit Principal/provider reconciliation. | +| Portable package / manifests / installation mechanics | Existing package/distribution suites, `check_native_install.py` | Native host receipt must include matching installed bytes, enabled state and new-process discovery. | +| Fresh Executor recovers real Project work | `LOCAL_ACCEPTANCE.md` procedure | Must run on actual native host with no prior transcript; not simulated by constructing a new Python object. | + +## Release acceptance rule + +A local release requires all repository/portable/runtime checks passing on the exact candidate, closure of applicable failed-behavior regressions, a native install/discovery receipt for the same Plugin bytes, and reviewed real-task/bootstrap/idempotency/fresh-session/negative-case evidence. A receipt from a different commit is reusable only after exact relevant-content equivalence is established. No aggregate test count substitutes for a missing gate. + +Current code adds no plaintext credentials, no automatic production deployment, and no OpenAI publication. `v0.2.0-preview.1` stays immutable. Active `0.2.0` remains a development candidate until these acceptance conditions are actually satisfied. diff --git a/REPOSITORY_TREE.md b/REPOSITORY_TREE.md index 7ea97e9..9a47733 100644 --- a/REPOSITORY_TREE.md +++ b/REPOSITORY_TREE.md @@ -43,6 +43,7 @@ svif/ # Svif 产品主仓库 │ ├── 2026-09-07-agnir-1.0-main-promotion.md # Agnir 1.0 authoritative publication、fresh verification 与 branch retirement 完整证据 │ ├── 2026-09-18-public-submission-candidate-audit.md # Svif 0.2.0 public-submission candidate 版本边界、package tree、OpenAI packaging 审计与 CI 证据 │ ├── 2026-09-18-skills-only-submission-archive.md # exact Plugin tree 的 deterministic ZIP、archive guards、CI 与外部 submission evidence 边界 +│ ├── 2026-09-20-functional-hardening.md # F1-F4 实现、故障/崩溃/并发回归、候选与独立 native 验收边界 │ └── checkpoint-2026-08-28-validation-2.md # Validation 2 的持久 checkpoint 记录 │ ├── .github/ # GitHub 托管侧自动化配置 @@ -68,6 +69,7 @@ svif/ # Svif 产品主仓库 │ ├── runtime.py # Orchestrator 核心：begin/run/complete、验证、权限、reconcile、checkpoint │ ├── continuity/ # Continuity Provider 实现 / 适配层 │ │ ├── __init__.py # continuity 子包入口 +│ │ ├── _filesystem.py # confined I/O、跨进程锁、multi-file checkpoint journal/recovery │ │ └── agnir.py # founding Agnir repository/filesystem Continuity Provider；兼容 0.1/0.2 并支持当前 stable 1.0 lineage/binding │ ├── execution/ # Execution Surface 桥接层 │ │ ├── __init__.py # execution 子包入口 @@ -121,6 +123,7 @@ svif/ # Svif 产品主仓库 │ ├── test_plugin_installation_docs.py # 双语入口与 Plugin README 的安装证据边界 guardrail，含 GitHub marketplace 路径但禁止把 repository validation 写成 client validation │ ├── test_plugin_openai_distribution.py # OpenAI/Codex marketplace source、Codex manifest 与 portable identity metadata 一致性测试 │ ├── test_plugin_submission_bundle.py # Skills-only ZIP 的 deterministic byte mirror、path/size/normalization archive guards +│ ├── test_readiness_regressions.py # 授权、必需验证、崩溃恢复、路径越界、并发与重放的行为回归 │ └── test_plugin_package.py # Plugin manifest/Skill/package、filesystem failure isolation 与 Agnir activation boundary 验证 │ ├── conformance/ # Portable contracts 的一致性验证，不等同于产品 runtime @@ -137,6 +140,7 @@ svif/ # Svif 产品主仓库 │ ├── checks/ # 仓库与产品结构完整性检查 │ ├── build_submission_bundle.py # 从 accepted plugin/ tree 构建 deterministic Skills-only portal ZIP 并输出 SHA-256 +│ ├── check_native_install.py # 隔离 native Codex 安装、精确包校验与新进程 Skill discovery │ └── check_repository.py # 防止关键模块、README、Plugin packaging、Agnir activation、canonical topology 漂移 │ ├── history/ # 前身 / 已退休项目历史；仅作 lineage 与 provenance 记录 @@ -150,6 +154,9 @@ svif/ # Svif 产品主仓库 ├── ARCHITECTURE.md # 详细产品架构、依赖方向、provider ownership 和 distribution 边界 ├── README.md # 英文项目入口与 canonical `Agnir Project Instructions` ├── README.zh-CN.md # 简体中文项目入口；与英文版保持同一 canonical 产品语义 +├── LOCAL_ACCEPTANCE.md # 当前候选的 native 安装、真实任务、独立新会话及反例验收 +├── RELEASE_READINESS.md # 既有功能 -> 实现/测试 -> 独立验收 gate 矩阵 +├── .gitignore # 排除运行时锁、journal、临时文件与 Python 缓存 ├── REPOSITORY_TREE.md # 本文件：完整文件级仓库结构与职责说明 └── VERSION # 当前 Svif 产品 / release version ``` diff --git a/SVIF.yaml b/SVIF.yaml index cfe1713..667ef7b 100644 --- a/SVIF.yaml +++ b/SVIF.yaml @@ -35,6 +35,10 @@ product: plugin_openai_marketplace: ".agents/plugins/marketplace.json" plugin_skill: "plugin/skills/svif/SKILL.md" plugin_readme: "plugin/README.md" + local_acceptance: "LOCAL_ACCEPTANCE.md" + release_readiness: "RELEASE_READINESS.md" + native_install_check: "checks/check_native_install.py" + agnir_checkpoint_storage: "src/svif/continuity/_filesystem.py" orchestration_contract: "spec/CORE.md" project_binding_contract: "spec/PROJECT_BINDING.md" capability_adapter_contract: "spec/CAPABILITY_ADAPTER.md" @@ -55,6 +59,8 @@ checks: plugin_agnir_discovery: "tests/test_plugin_agnir_discovery.py" plugin_first_use_bootstrap: "tests/test_plugin_first_use_bootstrap.py" plugin_openai_distribution: "tests/test_plugin_openai_distribution.py" + readiness_regressions: "tests/test_readiness_regressions.py" + plugin_submission_bundle: "tests/test_plugin_submission_bundle.py" extensions: svif/repository: diff --git a/checks/check_native_install.py b/checks/check_native_install.py new file mode 100644 index 0000000..af8707a --- /dev/null +++ b/checks/check_native_install.py @@ -0,0 +1,142 @@ +#!/usr/bin/env python3 +"""Observe native Codex installation/discovery without model calls or user auth. + +Uses a new HOME/CODEX_HOME and a frozen copy of the local Plugin tree. Never +modifies the user's installed plugins. This does NOT certify task execution or +fresh-LLM-session recovery; those require the exercises in LOCAL_ACCEPTANCE.md. +""" +from __future__ import annotations + +import argparse +import hashlib +import json +import os +import platform +import queue +import shutil +import subprocess +import threading +import time +from pathlib import Path + +ROOT = Path(__file__).resolve().parents[1] + + +def tree_hashes(root: Path) -> dict[str, str]: + result = {} + for path in sorted(root.rglob("*")): + if path.is_symlink(): + raise ValueError("package contains a symlink") + if path.is_file(): + result[path.relative_to(root).as_posix()] = hashlib.sha256(path.read_bytes()).hexdigest() + return result + + +def discovered_skills(codex: str, env: dict[str, str], project: Path) -> dict: + """Ask a genuinely new native App Server process to enumerate its skills.""" + messages: queue.Queue[str | None] = queue.Queue() + with (project.parent / "app-server.stderr.log").open("w", encoding="utf-8") as errors: + process = subprocess.Popen([codex, "app-server"], cwd=project, env=env, + stdin=subprocess.PIPE, stdout=subprocess.PIPE, + stderr=errors, text=True, encoding="utf-8") + def receive(): + for line in process.stdout: + messages.put(line) + messages.put(None) + reader = threading.Thread(target=receive, daemon=True) + reader.start() + def request(identifier, method, params): + process.stdin.write(json.dumps({"id": identifier, "method": method, "params": params}) + "\n") + process.stdin.flush() + deadline = time.monotonic() + 30 + while time.monotonic() < deadline: + line = messages.get(timeout=max(0.1, deadline - time.monotonic())) + if line is None: + raise RuntimeError("native App Server exited before its response") + message = json.loads(line) + if message.get("id") == identifier: + if "error" in message: raise RuntimeError(str(message["error"])) + return message["result"] + raise TimeoutError("native skill discovery timed out") + try: + request(1, "initialize", {"clientInfo": {"name": "svif-readiness", "version": "0.2.0"}, + "capabilities": {"experimentalApi": True}}) + process.stdin.write(json.dumps({"method": "initialized"}) + "\n") + process.stdin.flush() + return request(2, "skills/list", {"cwds": [str(project)], "forceReload": True}) + finally: + process.terminate() + try: process.wait(timeout=5) + except subprocess.TimeoutExpired: process.kill(); process.wait() + reader.join(timeout=5) + process.stdin.close() + process.stdout.close() + + +def main() -> int: + parser = argparse.ArgumentParser(description=__doc__) + parser.add_argument("--output", required=True, type=Path, help="new isolated acceptance directory") + parser.add_argument("--codex", default="codex") + args = parser.parse_args() + output = args.output.resolve() + if output.exists(): + parser.error("output must not already exist; do not reuse a populated test home") + if output.is_relative_to(ROOT / "plugin"): + parser.error("output must not be inside the Plugin source") + output.mkdir(parents=True) + report = {"native_install": "not-observed", "native_discovery": "not-observed", + "native_task_and_fresh_session": "not-observed", "release_ready": False, + "host": platform.platform(), "source_file_sha256": tree_hashes(ROOT / "plugin")} + try: + codex = shutil.which(args.codex) + if codex is None: raise RuntimeError("native Codex executable is unavailable") + home, codex_home, market, project = [output / x for x in ("home", "codex-home", "marketplace", "ordinary-project")] + for path in (home, codex_home, market, project): path.mkdir() + shutil.copytree(ROOT / "plugin", market / "plugin") + marketplace_path = market / ".agents/plugins" + marketplace_path.mkdir(parents=True) + shutil.copyfile(ROOT / ".agents/plugins/marketplace.json", marketplace_path / "marketplace.json") + (project / "README.md").write_text("# Ordinary acceptance Project\nPreserve this original sentence.\n", encoding="utf-8") + (project / "AGENTS.md").write_text("Preserve original Project instructions.\n", encoding="utf-8") + # Do not inherit API keys, provider credentials or the user's plugin state. + env = {k: v for k, v in os.environ.items() if k in {"PATH", "SystemRoot", "WINDIR", "TEMP", "TMP", "LANG"}} + env.update({"HOME": str(home), "USERPROFILE": str(home), "CODEX_HOME": str(codex_home)}) + def run(*command): + result = subprocess.run([codex, *command], env=env, cwd=project, capture_output=True, + text=True, encoding="utf-8", timeout=60) + if result.returncode: + raise RuntimeError(f"native command failed: {' '.join(command)}: {result.stderr[-3000:]}") + return result.stdout + report["codex_version"] = run("--version").strip() + report["marketplace"] = run("plugin", "marketplace", "add", str(market), "--json") + installed = json.loads(run("plugin", "add", "svif@svif", "--json")) + report["installation_receipt"] = installed + report["listing"] = json.loads(run("plugin", "list", "--json")) + matches = [x for x in report["listing"].get("installed", []) if x.get("name") == "svif" and x.get("installed") is True and x.get("enabled") is True] + if len(matches) != 1: raise RuntimeError("native host did not report exactly one installed/enabled Svif") + version = json.loads((ROOT / "plugin/plugin.json").read_text())["version"] + if matches[0].get("version") != version: raise RuntimeError("native version differs from tested source") + installed_path = Path(installed["installedPath"]) + if tree_hashes(installed_path) != report["source_file_sha256"]: + raise RuntimeError("installed package bytes differ from tested source") + report["native_install"] = "passed" + result = discovered_skills(codex, env, project) + report["skills_list"] = result + skills = [s for item in result.get("data", []) for s in item.get("skills", []) if s.get("name") == "svif" and s.get("enabled", True)] + if len(skills) != 1: raise RuntimeError("new native process did not discover one enabled Svif Skill") + skill = Path(skills[0]["path"]) + if hashlib.sha256(skill.read_bytes()).hexdigest() != report["source_file_sha256"]["skills/svif/SKILL.md"]: + raise RuntimeError("discovered native Skill differs from tested source") + report["native_discovery"] = "passed" + return_code = 0 + except (OSError, ValueError, KeyError, RuntimeError, TimeoutError, queue.Empty, subprocess.SubprocessError) as exc: + report["blocker"] = str(exc) + return_code = 2 + (output / "receipt.json").write_text(json.dumps(report, indent=2, ensure_ascii=False) + "\n", encoding="utf-8") + print(json.dumps({k: report[k] for k in ("native_install", "native_discovery", "native_task_and_fresh_session", "release_ready")})) + print(output / "receipt.json") + return return_code + + +if __name__ == "__main__": + raise SystemExit(main()) diff --git a/checks/check_repository.py b/checks/check_repository.py index 884ade5..1c60555 100755 --- a/checks/check_repository.py +++ b/checks/check_repository.py @@ -285,7 +285,9 @@ def main() -> None: "src/svif/capabilities/cloudflare.py", "tests/test_runtime.py", "tests/test_agnir_continuity.py", "tests/test_chatgpt_surface.py", "tests/test_cloudflare_capability.py", "tests/test_founding_e2e.py", "tests/test_plugin_package.py", - "tests/test_plugin_component_discovery.py", + "tests/test_plugin_component_discovery.py", "tests/test_readiness_regressions.py", + "src/svif/continuity/_filesystem.py", "checks/check_native_install.py", + "LOCAL_ACCEPTANCE.md", "RELEASE_READINESS.md", "integrations/chatgpt/README.md", "integrations/cloudflare/README.md", "integrations/cloudflare/adapter.json", "plugin/plugin.json", "plugin/README.md", "plugin/skills/svif/SKILL.md", "spec/CORE.md", "spec/PROJECT_BINDING.md", "spec/CAPABILITY_ADAPTER.md", "spec/EVIDENCE.md", diff --git a/integrations/chatgpt/README.md b/integrations/chatgpt/README.md index 63ddc38..93da061 100644 --- a/integrations/chatgpt/README.md +++ b/integrations/chatgpt/README.md @@ -71,3 +71,9 @@ Implement a remote Apps SDK/MCP wrapper that exposes at minimum: - clear tool metadata distinguishing read-only preparation from effectful completion paths. That wrapper should reuse this bridge and Orchestrator rather than duplicate Project continuity, provenance, or authority logic. + +## Trusted completion configuration + +The wrapper supplies `OperationRequest.verification_required` (default true), optional `required_checks`, and a reason for any not-applicable exemption. `parse_result()` exposes but cannot override these requirements. Evidence `check_id` values identify required checks separately from producers. The wrapper MUST authenticate tool/verifier receipts before passing them to completion; parsing JSON does not authenticate a model's claim. + +Capability Providers MUST expose trusted `operation_policy(operation)` metadata. Missing policy fails closed; a result's optional `authority_class` can only strengthen the provider requirement. `complete()` consumes its exact session once, even on a failed/uncertain attempt. The Agnir provider rejects stale contexts before effects and retains an unresolved-effect marker across process restart. `reconcile_effect()` requires trusted `effect-reconciliation` authority and a matching successful independent observation; it never retries delivery. diff --git a/plugin/README.md b/plugin/README.md index 7510dba..5ecf32b 100644 --- a/plugin/README.md +++ b/plugin/README.md @@ -22,6 +22,8 @@ A Skill-only Plugin is structurally useful without an MCP server. MCP packaging ## Current validation status +Public publication is paused while local effectiveness and functional readiness are accepted. The current development candidate includes stronger trusted-authority, required-verification, confined-I/O, and recoverable-checkpoint guidance. Package tests do not certify native task execution; the repository's `LOCAL_ACCEPTANCE.md` and `RELEASE_READINESS.md` define the remaining acceptance boundary. The Python runtime is not bundled into this Skills-only package. + Repository CI validates the portable package structure, Agent Plugins 1.0.0 manifest constraints used by this package, Agent Skills frontmatter/guardrails, Plugin-root filesystem containment and component isolation, Agnir activation/discovery guards, OpenAI/Codex distribution metadata, public-directory listing limits, required square `logo` / `composerIcon` branding assets, and the boundary that prevents the Plugin from shadowing the Svif runtime. Current `main` carries the **unpublished `0.2.0` public-submission candidate**. The already released Repository Preview remains immutable as `v0.2.0-preview.1`; these are distinct versioned subjects. diff --git a/plugin/skills/svif/SKILL.md b/plugin/skills/svif/SKILL.md index 87f5c51..ed7f632 100644 --- a/plugin/skills/svif/SKILL.md +++ b/plugin/skills/svif/SKILL.md @@ -118,6 +118,8 @@ Before an external effect that depends on verification: Untrusted model/result payloads must never self-grant protected authority. +Resolve required authority from trusted Project/provider/operation policy, never from an optional authority field in a result. An omitted, null, empty, or weaker requested class cannot remove a provider's mandatory authorization. Establish required checks before work; failed, blocked, unknown, missing, or wrong-subject required verification prevents completion, including repository-only work. A verification-not-applicable decision needs an explicit trusted reason and cannot excuse a failed check. Authenticate evidence using the actual tool/CI/verification receipts; a model-authored success field is not a receipt. + If authority is missing, stop before actuation. If observation is unavailable or contradicts the requested result, record the effect as unconfirmed/failed rather than successful. ## 5. Keep execution surfaces replaceable @@ -130,6 +132,10 @@ Do not introduce an unnecessary dependency on ChatGPT, GitHub, Cloudflare, Git, Checkpoint after a meaningful state transition and whenever the user asks to checkpoint, save progress, stop, finish, or equivalent. +Before any checkpoint write, validate every requested value and destination, including optional Decisions and Evidence. Confine each actual child read/write to the authorized Project root; a contained parent directory does not authorize an out-of-root symlink or reparse target. Reject stale State/Next snapshots and reconcile rather than overwriting newer Project truth. + +Publish related State, Next Actions, Decisions and Evidence as one coherent checkpoint using the available repository transaction or provider's recoverable transaction boundary. Per-file atomic replacement alone is insufficient. If an interruption leaves a pending transaction, recover it through that provider before normal continuation; if a concurrent external edit conflicts, stop for reconciliation rather than choosing old or new arbitrarily. Do not replay a delivery after an uncertain outcome; independently observe and reconcile it first. A checkpoint-capability blocker must be reported rather than claiming resumability. + Write the checkpoint through the Project's declared Agnir memory locations. Update, as applicable: - Current State: what is now demonstrably true, including the verified subject/version; diff --git a/spec/CORE.md b/spec/CORE.md index 605110c..e5968ad 100644 --- a/spec/CORE.md +++ b/spec/CORE.md @@ -12,7 +12,7 @@ Svif coordinates a configured Continuity Provider, Execution Surface, and Capabi Svif Core MUST NOT require ChatGPT, an AI agent, Git, GitHub, a repository, local-only or remote-only execution, a specific CI product, Skill/Plugin packaging, Agnir-specific storage layout, or any provider such as Cloudflare. -ZeroLocal v0.1 remains predecessor evidence on the dedicated legacy branch and MUST NOT be silently relabeled as Svif conformance. +ZeroLocal v0.1 remains predecessor evidence through archived commit history and MUST NOT be silently relabeled as Svif conformance. ## 2. Core concepts @@ -53,7 +53,7 @@ Svif Core requires durable Project continuity through the configured Continuity - Svif MUST NOT define a competing durable Project Memory protocol. - Continuity failure/authorization failure MUST be distinguishable from an empty/new Project state when evidence permits. -The active `0.2` Project binding uses Agnir Core `0.1` as the first provider. Agnir remains an independent protocol/project. +The founding `0.2` Project binding used Agnir Core `0.1`; the current Svif repository self-host uses Core/profile `1.0` and the adapter retains `0.1` / `0.2` support. Agnir remains an independent protocol/project. ## 4. Lifecycle @@ -203,3 +203,9 @@ Adapters/providers/profiles MAY add subcodes while mapping back to a portable cl Skill, Plugin, CLI, SDK, IDE extension, CI automation, and similar forms are Svif distribution/integration surfaces, not canonical Project-memory layers. The mature product target remains a Plugin. Concrete packaging MAY integrate deeply with ChatGPT or another surface while canonical Project truth remains surface-neutral. + +## 10. Reference runtime enforcement + +Required authority is resolved from trusted provider/operation metadata, independently of model-result fields. Required verification is declared before completion through trusted operation context; not-applicable verification needs an explicit reason. Failed/blocked/unknown or wrong-subject required verification cannot justify a successful completion checkpoint. Actual evidence authenticity is the trusted integration's responsibility, not something proved by parsing a result JSON object. + +The filesystem reference adapter preflights all checkpoint destinations/values, serializes cooperating operations, rejects stale discovered state, and journals multi-file publication with crash recovery. Generic Capability/Continuity Providers must supply equivalent coordination where their operations require it. An uncertain external attempt is not automatically retried; observation and explicitly authorized reconciliation are required. diff --git a/src/svif/capabilities/cloudflare.py b/src/svif/capabilities/cloudflare.py index 0f6836d..2be457a 100644 --- a/src/svif/capabilities/cloudflare.py +++ b/src/svif/capabilities/cloudflare.py @@ -2,7 +2,7 @@ from typing import Protocol -from svif.runtime import BindingError, CapabilityRequest, EvidenceRecord +from svif.runtime import BindingError, CapabilityPolicy, CapabilityRequest, EvidenceRecord class CloudflareWorkersTransport(Protocol): @@ -30,6 +30,12 @@ class CloudflareWorkersCapabilityProvider: def __init__(self, transport: CloudflareWorkersTransport) -> None: self._transport = transport + @staticmethod + def operation_policy(operation: str) -> CapabilityPolicy: + if operation != "deploy_verified_worker": + raise BindingError("unsupported Cloudflare Workers capability operation") + return CapabilityPolicy(operation, "actuate", frozenset({"protected-delivery"})) + def actuate(self, request: CapabilityRequest) -> EvidenceRecord: if request.provider != self.provider_id: raise BindingError("Cloudflare provider received a request for another provider") diff --git a/src/svif/continuity/_filesystem.py b/src/svif/continuity/_filesystem.py new file mode 100644 index 0000000..d0f017d --- /dev/null +++ b/src/svif/continuity/_filesystem.py @@ -0,0 +1,242 @@ +"""Confined file access and recoverable, cooperating-reader transactions. + +POSIX access walks directory descriptors with O_NOFOLLOW. Windows uses the same +no-link validation and a process lock; hostile concurrent directory replacement +by another process with the same filesystem permissions is outside its boundary. +Readers/writers must use locked() and recover() before accessing memory. Ordinary +filesystem readers do not receive multi-file snapshot isolation. +""" +from __future__ import annotations + +import json +import os +import stat +import threading +import uuid +from contextlib import contextmanager +from pathlib import Path +from typing import Callable, Iterator + + +class StorageError(RuntimeError): + def __init__(self, code: str, message: str) -> None: + super().__init__(message) + self.code = code + + +class ProjectFiles: + LOCK = ".svif-continuity.lock" + JOURNAL = ".svif-checkpoint.json" + PENDING_EFFECT = ".svif-effect-pending.json" + MAX_JOURNAL_BYTES = 64 * 1024 * 1024 + + def __init__(self, root: Path) -> None: + self.root = root.resolve() + self._mutex = threading.RLock() + self._local = threading.local() + + def path(self, value: str | Path, *, internal: bool = False) -> Path: + path = Path(value) + if not path.is_absolute(): + path = self.root / path + try: + parts = path.relative_to(self.root).parts + except ValueError as exc: + raise StorageError("AGNIR_DISCOVERY_UNRESOLVABLE", "path escapes selected Project") from exc + if not parts or ".." in parts or (not internal and parts[0] in {self.LOCK, self.JOURNAL, self.PENDING_EFFECT}): + raise StorageError("AGNIR_DISCOVERY_UNRESOLVABLE", "invalid/reserved continuity path") + current = self.root + for part in parts: + current /= part + if current.is_symlink() or (hasattr(current, "is_junction") and current.is_junction()): + raise StorageError("AGNIR_DISCOVERY_UNRESOLVABLE", f"continuity path contains a link: {path}") + return path + + @contextmanager + def _parent(self, path: Path) -> Iterator[tuple[int | None, str]]: + path = self.path(path, internal=True) + if os.name != "posix": + yield None, str(path) + return + fd = os.open(self.root, os.O_RDONLY | os.O_DIRECTORY | os.O_NOFOLLOW) + try: + for part in path.relative_to(self.root).parts[:-1]: + new_fd = os.open(part, os.O_RDONLY | os.O_DIRECTORY | os.O_NOFOLLOW, dir_fd=fd) + os.close(fd) + fd = new_fd + yield fd, path.name + finally: + os.close(fd) + + @staticmethod + def _regular(fd: int) -> None: + info = os.fstat(fd) + if not stat.S_ISREG(info.st_mode) or info.st_nlink != 1: + raise StorageError("AGNIR_DISCOVERY_UNRESOLVABLE", "continuity target must be a single-link regular file") + + def read(self, path: Path, *, missing: bool = False) -> str | None: + with self._parent(path) as (parent, name): + try: + fd = os.open(name, os.O_RDONLY | getattr(os, "O_NOFOLLOW", 0) | getattr(os, "O_NONBLOCK", 0), dir_fd=parent) + except FileNotFoundError: + if missing: + return None + raise + try: + self._regular(fd) + with os.fdopen(fd, "r", encoding="utf-8", newline="") as stream: + fd = -1 + return stream.read() + finally: + if fd != -1: + os.close(fd) + + def write(self, path: Path, content: str) -> None: + """Durably replace one file without opening a predictable temporary path.""" + with self._parent(path) as (parent, name): + mode = 0o600 + try: + info = os.stat(name, dir_fd=parent, follow_symlinks=False) + if not stat.S_ISREG(info.st_mode) or info.st_nlink != 1: + raise StorageError("AGNIR_DISCOVERY_UNRESOLVABLE", "unsafe write target") + mode = stat.S_IMODE(info.st_mode) + except FileNotFoundError: + pass + temporary = f".{Path(name).name}.{uuid.uuid4().hex}.svif-tmp" + if parent is None: + temporary = str(Path(name).parent / temporary) + fd = os.open(temporary, os.O_WRONLY | os.O_CREAT | os.O_EXCL | getattr(os, "O_NOFOLLOW", 0), mode, dir_fd=parent) + try: + with os.fdopen(fd, "w", encoding="utf-8", newline="") as stream: + fd = -1 + stream.write(content) + stream.flush() + os.fsync(stream.fileno()) + os.replace(temporary, name, src_dir_fd=parent, dst_dir_fd=parent) + if parent is not None: + os.fsync(parent) + finally: + if fd != -1: + os.close(fd) + try: + os.unlink(temporary, dir_fd=parent) + except FileNotFoundError: + pass + + def remove(self, path: Path) -> None: + with self._parent(path) as (parent, name): + try: + info = os.stat(name, dir_fd=parent, follow_symlinks=False) + except FileNotFoundError: + return + if not stat.S_ISREG(info.st_mode) or info.st_nlink != 1: + raise StorageError("AGNIR_DISCOVERY_UNRESOLVABLE", "unsafe removal target") + os.unlink(name, dir_fd=parent) + if parent is not None: + os.fsync(parent) + + @contextmanager + def locked(self) -> Iterator[None]: + """Fail busy rather than return a mixed snapshot or wait indefinitely.""" + if not self._mutex.acquire(blocking=False): + raise StorageError("AGNIR_CHECKPOINT_BUSY", "Project continuity is busy") + fd = None + nested = getattr(self._local, "depth", 0) > 0 + try: + if not nested: + with self._parent(self.root / self.LOCK) as (parent, name): + fd = os.open(name, os.O_RDWR | os.O_CREAT | getattr(os, "O_NOFOLLOW", 0), 0o600, dir_fd=parent) + self._regular(fd) + try: + if os.name == "posix": + import fcntl + fcntl.flock(fd, fcntl.LOCK_EX | fcntl.LOCK_NB) + elif os.name == "nt": + import msvcrt + if os.fstat(fd).st_size == 0: + os.write(fd, b"\0") + os.lseek(fd, 0, os.SEEK_SET) + msvcrt.locking(fd, msvcrt.LK_NBLCK, 1) + else: + raise StorageError("AGNIR_CHECKPOINT_UNSUPPORTED", "OS has no supported Project lock") + except OSError as exc: + raise StorageError("AGNIR_CHECKPOINT_BUSY", "another process owns Project continuity") from exc + self._local.depth = getattr(self._local, "depth", 0) + 1 + try: + yield + finally: + self._local.depth -= 1 + finally: + if fd is not None: + # Closing releases the OS lock, including after abrupt process exit. + os.close(fd) + self._mutex.release() + + def recover(self, authorize: Callable[[dict], set[Path]]) -> None: + journal_path = self.root / self.JOURNAL + text = self.read(journal_path, missing=True) + if text is None: + return + try: + if len(text.encode("utf-8")) > self.MAX_JOURNAL_BYTES: + raise ValueError("oversized journal") + journal = json.loads(text) + if journal["version"] != 1 or journal["phase"] not in {"prepared", "committed"}: + raise ValueError("unsupported journal") + allowed = authorize(journal["context"]) + entries = journal["entries"] + if not isinstance(entries, list) or not entries: + raise ValueError("empty journal") + checked = [] + seen = set() + # Validate EVERY target and before/after pair before any recovery write. + for entry in entries: + path = self.path(entry["path"]) + if path not in allowed or path in seen: + raise ValueError("journal target not authorized or duplicated") + seen.add(path) + before, after = entry["before"], entry["after"] + if (before is not None and not isinstance(before, str)) or not isinstance(after, str): + raise ValueError("invalid journal value") + current = self.read(path, missing=True) + if current not in (before, after): + raise ValueError("external edit conflicts with incomplete checkpoint") + checked.append((path, before if journal["phase"] == "prepared" else after)) + for path, value in checked: + if value is None: + self.remove(path) + else: + self.write(path, value) + self.remove(journal_path) + except (KeyError, TypeError, ValueError, OSError, StorageError) as exc: + raise StorageError("AGNIR_CHECKPOINT_RECOVERY_REQUIRED", "cannot safely recover checkpoint; preserve journal and reconcile") from exc + + def publish(self, writes: dict[Path, str], context: dict, authorize: Callable[[dict], set[Path]]) -> None: + entries = [] + for path, after in writes.items(): + path = self.path(path) + if path not in authorize(context): + raise StorageError("AGNIR_DISCOVERY_UNRESOLVABLE", "checkpoint target not authorized") + entries.append({"path": path.relative_to(self.root).as_posix(), "before": self.read(path, missing=True), "after": after}) + if not entries: + return + journal = {"version": 1, "phase": "prepared", "context": context, "entries": entries} + text = json.dumps(journal, ensure_ascii=False, sort_keys=True) + if len(text.encode("utf-8")) > self.MAX_JOURNAL_BYTES: + raise StorageError("AGNIR_CHECKPOINT_LIMIT", "checkpoint journal exceeds configured safety limit") + journal_path = self.root / self.JOURNAL + self.write(journal_path, text) + try: + for path, after in writes.items(): + self.write(path, after) + journal["phase"] = "committed" + self.write(journal_path, json.dumps(journal, ensure_ascii=False, sort_keys=True)) + except Exception: + self.recover(authorize) + raise + # The commit marker is the durable decision. Cleanup failure is not rollback: + # the next cooperating reader finishes the committed transaction. + try: + self.remove(journal_path) + except OSError: + pass diff --git a/src/svif/continuity/agnir.py b/src/svif/continuity/agnir.py index bed682e..e5287cb 100644 --- a/src/svif/continuity/agnir.py +++ b/src/svif/continuity/agnir.py @@ -2,12 +2,14 @@ import hashlib import json -import os import re +import threading +from contextlib import contextmanager from dataclasses import asdict, dataclass from pathlib import Path -from svif.runtime import BindingError, ContinuitySnapshot, OperationOutcome +from svif.runtime import AuthorityRequired, BindingError, ContinuitySnapshot, OperationOutcome +from ._filesystem import ProjectFiles, StorageError class AgnirDiscoveryError(BindingError): @@ -58,6 +60,8 @@ def __init__( self.expected_core_version = expected_core_version self.expected_profile = expected_profile self.selected_vcs_selector = selected_vcs_selector + self._files = ProjectFiles(self.project_root) + self._effect_context = threading.local() @staticmethod def _strip_scalar(value: str) -> str | None: @@ -95,6 +99,8 @@ def _parse_discovery(cls, text: str) -> dict[tuple[str, ...], str | None]: stack.append((indent, key)) continue path = tuple([item[1] for item in stack] + [key]) + if path in values: + raise AgnirDiscoveryError("AGNIR_DISCOVERY_INCONSISTENT", "duplicate discovery key") values[path] = cls._strip_scalar(scalar_text) return values @@ -117,7 +123,7 @@ def _resolve_locator( ) return None - candidate = (self.project_root / locator).resolve() + candidate = self._files.path(locator) if not candidate.is_relative_to(self.project_root): raise self._fail( "AGNIR_DISCOVERY_UNRESOLVABLE", @@ -131,14 +137,14 @@ def _resolve_locator( return candidate def _discover(self, project_identity: str) -> _ResolvedAgnir: - discovery = self.project_root / "AGNIR.yaml" + discovery = self._files.path("AGNIR.yaml") if not discovery.is_file(): raise self._fail( "AGNIR_DISCOVERY_NOT_FOUND", "repository/filesystem profile could not resolve AGNIR.yaml at the Project Entry Point", ) - values = self._parse_discovery(discovery.read_text(encoding="utf-8")) + values = self._parse_discovery(self._files.read(discovery)) version = values.get(("agnir", "version")) profile = values.get(("agnir", "discovery_profile")) @@ -219,7 +225,13 @@ def _discover(self, project_identity: str) -> _ResolvedAgnir: f"{kind} locator is not a file", ) + memory_paths = [p for p in paths.values() if p is not None] + if len(set(memory_paths)) != len(memory_paths) or discovery in memory_paths: + raise self._fail("AGNIR_DISCOVERY_INCONSISTENT", "memory locators alias each other or discovery") + # Each memory file is distinct and must not become an evidence receipt. evidence = paths["evidence"] + if evidence is not None and any(p.parent == evidence for p in memory_paths if p != evidence): + raise self._fail("AGNIR_DISCOVERY_INCONSISTENT", "memory files cannot be evidence children") if evidence is not None and not evidence.is_dir(): raise self._fail( "AGNIR_DISCOVERY_UNRESOLVABLE", @@ -237,33 +249,108 @@ def _discover(self, project_identity: str) -> _ResolvedAgnir: evidence=paths["evidence"], ) - @staticmethod - def _read_optional(path: Path | None) -> str | None: - return None if path is None else path.read_text(encoding="utf-8") + @contextmanager + def _locked(self): + try: + with self._files.locked(): + yield + except StorageError as exc: + raise self._fail(exc.code, str(exc)) from exc + except (OSError, UnicodeError) as exc: + raise self._fail("AGNIR_DISCOVERY_UNRESOLVABLE", "continuity I/O failed") from exc - @staticmethod - def _read_evidence(path: Path | None) -> dict[str, str]: + def _read_optional(self, path: Path | None) -> str | None: + return None if path is None else self._files.read(path) + + def _read_evidence(self, path: Path | None) -> dict[str, str]: if path is None: return {} + result = {} + for item in sorted(path.iterdir()): + # Validate before is_file(): is_file itself follows links. + item = self._files.path(item) + if item.is_file(): + result[item.name] = self._files.read(item) + return result + + def _evidence_path(self, resolved: _ResolvedAgnir, project: str, operation: str) -> Path | None: + if resolved.evidence is None: + return None + digest = hashlib.sha256( + f"{project}\0{resolved.lineage_identity or ''}\0{operation}".encode("utf-8") + ).hexdigest()[:16] + return self._files.path(resolved.evidence / f"svif-operation-{digest}.json") + + def _context(self, resolved: _ResolvedAgnir, project: str, operation: str) -> dict: return { - item.name: item.read_text(encoding="utf-8") - for item in sorted(path.iterdir()) - if item.is_file() + "project_identity": project, "lineage": resolved.lineage_identity, + "operation_id": operation, + "discovery_sha256": hashlib.sha256(self._files.read(self.project_root / "AGNIR.yaml").encode("utf-8")).hexdigest(), } + def _authorize(self, resolved: _ResolvedAgnir, project: str, context: dict) -> set[Path]: + if not isinstance(context, dict) or not isinstance(context.get("operation_id"), str) or not context["operation_id"]: + raise ValueError("invalid checkpoint context") + if context != self._context(resolved, project, context["operation_id"]): + raise ValueError("checkpoint context/binding changed") + paths = {resolved.state, resolved.next_actions} + if resolved.decisions is not None: + paths.add(resolved.decisions) + receipt = self._evidence_path(resolved, project, context["operation_id"]) + if receipt is not None: + paths.add(receipt) + return paths + + def _recover(self, project: str) -> _ResolvedAgnir: + resolved = self._discover(project) + self._files.recover(lambda context: self._authorize(resolved, project, context)) + pending = self._files.read(self.project_root / ProjectFiles.PENDING_EFFECT, missing=True) + if pending is not None: + try: + data = json.loads(pending) + self._authorize(resolved, project, data["context"]) + receipt = self._evidence_path(resolved, project, data["context"]["operation_id"]) + saved = self._files.read(receipt, missing=True) if receipt is not None else None + if saved is not None: + recorded = json.loads(saved) + if (recorded.get("operation_id") != data["context"]["operation_id"] + or recorded.get("project_identity") != project + or recorded.get("subject_identity") != data["subject_identity"] + or recorded.get("target_identity") != data["target_identity"] + or recorded.get("externally_effectful") is not True + or recorded.get("agnir_lineage") != resolved.lineage_identity + or not any(isinstance(r, dict) and r.get("kind") == "observation" + and r.get("status") == "succeeded" + and r.get("subject_identity") == data["subject_identity"] + and r.get("target_identity") == data["target_identity"] + for r in recorded.get("evidence", []))): + raise ValueError("pending effect and completion receipt disagree") + self._files.remove(self.project_root / ProjectFiles.PENDING_EFFECT) + except (ValueError, TypeError, KeyError) as exc: + raise self._fail("AGNIR_EXTERNAL_EFFECT_UNCONFIRMED", "pending effect requires explicit reconciliation") from exc + return self._discover(project) + + def _snapshot(self, project: str, resolved: _ResolvedAgnir) -> ContinuitySnapshot: + values = { + "state": self._read_optional(resolved.state), + "next_actions": self._read_optional(resolved.next_actions), + "decisions": self._read_optional(resolved.decisions), + "evidence": self._read_evidence(resolved.evidence), + } + revision = hashlib.sha256(json.dumps( + {"discovery": self._files.read(self.project_root / "AGNIR.yaml"), **values}, + sort_keys=True, ensure_ascii=False, + ).encode("utf-8")).hexdigest() + pending = self._files.read(self.project_root / ProjectFiles.PENDING_EFFECT, missing=True) + return ContinuitySnapshot(project_identity=project, revision=revision, pending_effect=pending, **values) + def resolve_lineage(self, project_identity: str) -> str | None: - """Return the selected logical Agnir lineage, if the compatibility line has one.""" - return self._discover(project_identity).lineage_identity + with self._locked(): + return self._recover(project_identity).lineage_identity def load(self, project_identity: str) -> ContinuitySnapshot: - resolved = self._discover(project_identity) - return ContinuitySnapshot( - project_identity=project_identity, - state=self._read_optional(resolved.state), - next_actions=self._read_optional(resolved.next_actions), - decisions=self._read_optional(resolved.decisions), - evidence=self._read_evidence(resolved.evidence), - ) + with self._locked(): + return self._snapshot(project_identity, self._recover(project_identity)) @staticmethod def _require_text_update(value: object | None, label: str) -> str | None: @@ -273,40 +360,34 @@ def _require_text_update(value: object | None, label: str) -> str | None: raise BindingError(f"Agnir filesystem {label} update must be text") return value - @staticmethod - def _atomic_write(path: Path, content: str) -> None: - tmp = path.with_name(f".{path.name}.svif-tmp") - tmp.write_text(content, encoding="utf-8") - os.replace(tmp, path) - - def checkpoint(self, outcome: OperationOutcome) -> None: - resolved = self._discover(outcome.project_identity) + def _preflight(self, outcome: OperationOutcome) -> tuple[_ResolvedAgnir, dict[Path, str]]: + resolved = self._recover(outcome.project_identity) + snapshot = self._snapshot(outcome.project_identity, resolved) + if snapshot.pending_effect is not None and snapshot.pending_effect != getattr(self._effect_context, "active", None): + raise self._fail("AGNIR_EXTERNAL_EFFECT_UNCONFIRMED", "an earlier external effect is unresolved; observe and reconcile before retry") + if outcome.externally_effectful and resolved.evidence is None: + raise self._fail("AGNIR_DISCOVERY_UNRESOLVABLE", "external effects require a durable evidence locator") + if outcome.expected_revision is not None and snapshot.revision != outcome.expected_revision: + raise self._fail("AGNIR_CHECKPOINT_STALE", "Project changed after DISCOVER; reload and reconcile") + if not isinstance(outcome.operation_id, str) or not outcome.operation_id.strip(): + raise BindingError("checkpoint requires a stable operation id") + writes = {} update = outcome.continuity_update - - state = self._require_text_update(update.state, "Current State") - next_actions = self._require_text_update(update.next_actions, "Next Actions") - decisions = self._require_text_update(update.decisions, "Decisions") - - if state is not None: - self._atomic_write(resolved.state, state) - if next_actions is not None: - self._atomic_write(resolved.next_actions, next_actions) - if decisions is not None: - if resolved.decisions is None: - raise self._fail( - "AGNIR_DISCOVERY_UNRESOLVABLE", - "cannot persist Decisions because the Discovery Record has no Decisions locator", - ) - self._atomic_write(resolved.decisions, decisions) - - if resolved.evidence is not None: - digest = hashlib.sha256( - ( - f"{outcome.project_identity}\0{resolved.lineage_identity or ''}\0" - f"{outcome.operation_id}" - ).encode("utf-8") - ).hexdigest()[:16] - evidence_path = resolved.evidence / f"svif-operation-{digest}.json" + # Validate every update and locator before mutating ANY memory file. + for label, value, path in ( + ("Current State", update.state, resolved.state), + ("Next Actions", update.next_actions, resolved.next_actions), + ("Decisions", update.decisions, resolved.decisions), + ): + text = self._require_text_update(value, label) + if text is not None: + if path is None: + raise self._fail("AGNIR_DISCOVERY_UNRESOLVABLE", f"cannot persist {label}: locator missing") + writes[path] = text + receipt = self._evidence_path(resolved, outcome.project_identity, outcome.operation_id) + if receipt is not None: + if self._files.read(receipt, missing=True) is not None: + raise self._fail("AGNIR_CHECKPOINT_DUPLICATE_OPERATION", "operation already checkpointed; do not replay") payload = { "svif_runtime_checkpoint": "0.1", "project_identity": outcome.project_identity, @@ -314,13 +395,66 @@ def checkpoint(self, outcome: OperationOutcome) -> None: "operation_id": outcome.operation_id, "subject_identity": outcome.subject_identity, "externally_effectful": outcome.externally_effectful, + "target_identity": outcome.target_identity, "evidence": [asdict(record) for record in outcome.evidence], } - self._atomic_write( - evidence_path, - json.dumps(payload, indent=2, sort_keys=True) + "\n", + writes[receipt] = json.dumps(payload, indent=2, sort_keys=True) + "\n" + return resolved, writes + + @contextmanager + def operation_guard(self, outcome: OperationOutcome): + """Serialize this Project's complete boundary, including external effects.""" + with self._locked(): + resolved, _ = self._preflight(outcome) + if outcome.externally_effectful: + pending = json.dumps({ + "context": self._context(resolved, outcome.project_identity, outcome.operation_id), + "subject_identity": outcome.subject_identity, "target_identity": outcome.target_identity, + "status": "attempted-unconfirmed", + }, sort_keys=True) + self._files.write(self.project_root / ProjectFiles.PENDING_EFFECT, pending) + self._effect_context.active = pending + try: + yield + finally: + self._effect_context.active = None + # Successful checkpoint recovery removes the marker. Failure keeps it + # so a restarted process cannot blindly replay an uncertain effect. + + def checkpoint(self, outcome: OperationOutcome) -> None: + with self._locked(): + resolved, writes = self._preflight(outcome) + self._files.publish( + writes, self._context(resolved, outcome.project_identity, outcome.operation_id), + lambda context: self._authorize(resolved, outcome.project_identity, context), ) + # A complete reload must succeed before resumability is claimed. + self._snapshot(outcome.project_identity, self._recover(outcome.project_identity)) - # Do not claim resumability until the resulting locator chain, Project - # identity, logical lineage, and optional VCS selector binding resolve. - self._discover(outcome.project_identity) + def reconcile_effect(self, outcome: OperationOutcome, *, authority_grants: frozenset[str]) -> None: + """Trusted integration entry point for an independently confirmed effect. + + This does not retry delivery. Unknown/absent effects remain blocked until + a Principal reconciles the provider/account and selected Project state. + """ + if "effect-reconciliation" not in authority_grants: + raise AuthorityRequired("pending-effect reconciliation requires trusted authority") + with self._locked(): + resolved = self._recover(outcome.project_identity) + pending = self._files.read(self.project_root / ProjectFiles.PENDING_EFFECT, missing=True) + if pending is None: + raise BindingError("no pending effect to reconcile") + data = json.loads(pending) + if (not outcome.externally_effectful + or outcome.operation_id != data["context"]["operation_id"] + or outcome.subject_identity != data["subject_identity"] + or outcome.target_identity != data["target_identity"] + or not any(r.kind == "observation" and r.status == "succeeded" + and r.subject_identity == outcome.subject_identity + and r.target_identity == outcome.target_identity for r in outcome.evidence)): + raise BindingError("reconciliation requires matching independent successful observation") + self._effect_context.active = pending + try: + self.checkpoint(outcome) + finally: + self._effect_context.active = None diff --git a/src/svif/execution/chatgpt.py b/src/svif/execution/chatgpt.py index 6b32a6a..2e25e85 100644 --- a/src/svif/execution/chatgpt.py +++ b/src/svif/execution/chatgpt.py @@ -28,14 +28,14 @@ class ChatGPTExecutionSurface: @staticmethod def _serializable(value: object) -> object: try: - json.dumps(value) - except TypeError as exc: + json.dumps(value, allow_nan=False) + except (TypeError, ValueError) as exc: raise BindingError("ChatGPT surface context is not JSON-serializable") from exc return value @staticmethod def _required_string(value: object, label: str) -> str: - if not isinstance(value, str) or not value: + if not isinstance(value, str) or not value.strip(): raise BindingError(f"ChatGPT result requires non-empty {label}") return value @@ -58,6 +58,10 @@ def materialize(self, session: OperationSession) -> dict[str, Any]: "intent": session.request.intent, "bound_capabilities": sorted(session.binding.capabilities), "authority_grants": sorted(session.request.authority_grants), + "verification_required": session.request.verification_required, + "required_checks": sorted(session.request.required_checks), + "continuity_revision": session.context.continuity.revision, + "pending_effect": self._serializable(session.context.continuity.pending_effect), "continuity": { "state": self._serializable(continuity.state), "next_actions": self._serializable(continuity.next_actions), @@ -106,6 +110,7 @@ def parse_result( target_identity=self._optional_string( item.get("target_identity"), "evidence.target_identity" ), + check_id=self._optional_string(item.get("check_id"), "evidence.check_id"), producer=self._optional_string( item.get("producer"), "evidence.producer" ), diff --git a/src/svif/runtime.py b/src/svif/runtime.py index 5d68ed8..9d22b76 100644 --- a/src/svif/runtime.py +++ b/src/svif/runtime.py @@ -1,6 +1,8 @@ from __future__ import annotations +from contextlib import nullcontext from dataclasses import dataclass +from threading import RLock from typing import Protocol @@ -20,6 +22,22 @@ class ProvenanceMismatch(SvifRuntimeError): """Evidence/candidate identity does not justify the requested transition.""" +class VerificationFailed(ProvenanceMismatch): + """Required verification did not succeed for the exact completion subject.""" + + +class SessionConsumed(BindingError): + """A completion was replayed, forged, or belongs to another Orchestrator.""" + + +class DeliveryFailed(SvifRuntimeError): + """The external delivery failed or its outcome is uncertain.""" + + +class ObservationFailed(SvifRuntimeError): + """Independent resulting-state observation was unavailable.""" + + class ObservationMismatch(SvifRuntimeError): """Observed resulting state does not correspond to the delivered subject/target.""" @@ -44,6 +62,15 @@ class EvidenceRecord: status: str = "succeeded" target_identity: str | None = None producer: str | None = None + check_id: str | None = None + + def __post_init__(self) -> None: + if self.kind not in {"candidate", "transformation", "verification", "delivery", "observation", "checkpoint"}: + raise BindingError("unsupported evidence kind") + if self.status not in {"succeeded", "failed", "blocked", "unknown"}: + raise BindingError("unsupported evidence status") + if not isinstance(self.subject_identity, str) or not self.subject_identity.strip(): + raise BindingError("evidence requires a stable subject identity") @dataclass(frozen=True) @@ -53,6 +80,8 @@ class ContinuitySnapshot: next_actions: object | None = None decisions: object | None = None evidence: object | None = None + revision: str | None = None + pending_effect: object | None = None @dataclass(frozen=True) @@ -85,6 +114,15 @@ class CapabilityRequest: authority_class: str | None = None +@dataclass(frozen=True) +class CapabilityPolicy: + """Trusted provider metadata, never read from a WorkResult.""" + + operation: str + effect: str + authority_classes: frozenset[str] + + @dataclass(frozen=True) class WorkResult: subject_identity: str @@ -98,6 +136,22 @@ class OperationRequest: operation_id: str intent: str authority_grants: frozenset[str] = frozenset() + verification_required: bool = True + required_checks: frozenset[str] = frozenset() + verification_not_applicable_reason: str | None = None + + def __post_init__(self) -> None: + if not isinstance(self.operation_id, str) or not self.operation_id.strip(): + raise BindingError("operation_id must be non-empty") + for label, values in (("authority_grants", self.authority_grants), ("required_checks", self.required_checks)): + if not isinstance(values, frozenset) or any(not isinstance(x, str) or not x.strip() for x in values): + raise BindingError(f"{label} must contain non-empty trusted names") + if type(self.verification_required) is not bool: + raise BindingError("verification_required must be a trusted boolean") + if not self.verification_required and ( + self.required_checks or not isinstance(self.verification_not_applicable_reason, str) or not self.verification_not_applicable_reason.strip() + ): + raise BindingError("verification exemption requires a reason and no required checks") @dataclass(frozen=True) @@ -108,6 +162,8 @@ class OperationOutcome: evidence: tuple[EvidenceRecord, ...] externally_effectful: bool continuity_update: ContinuityUpdate = ContinuityUpdate() + expected_revision: str | None = None + target_identity: str | None = None @dataclass(frozen=True) @@ -140,6 +196,8 @@ class ExecutionSurface(Protocol): class CapabilityProvider(Protocol): provider_id: str + def operation_policy(self, operation: str) -> CapabilityPolicy: ... + def actuate(self, request: CapabilityRequest) -> EvidenceRecord: ... def observe(self, delivery: EvidenceRecord) -> EvidenceRecord: ... @@ -163,6 +221,8 @@ def __init__( self._continuity = self._index(continuity_providers, "provider_id", "Continuity Provider") self._surfaces = self._index(execution_surfaces, "surface_id", "Execution Surface") self._capabilities = self._index(capability_providers, "provider_id", "Capability Provider") + self._sessions: dict[int, OperationSession] = {} + self._session_lock = RLock() @staticmethod def _index(items: tuple[object, ...], attr: str, label: str) -> dict[str, object]: @@ -242,7 +302,10 @@ def begin(self, binding: ProjectBinding, request: OperationRequest) -> Operation operation_id=request.operation_id, continuity=snapshot, ) - return OperationSession(binding=binding, request=request, context=context) + session = OperationSession(binding=binding, request=request, context=context) + with self._session_lock: + self._sessions[id(session)] = session + return session def complete( self, @@ -257,78 +320,100 @@ def complete( untrusted model/result payload cannot grant itself protected authority. """ + # Consume once before effects. A failed/uncertain delivery must be reconciled, + # not blindly repeated by calling complete() again. + with self._session_lock: + if self._sessions.pop(id(session), None) is not session: + raise SessionConsumed("operation session is foreign or already consumed") binding = session.binding request = session.request continuity = self._continuity_for(binding) - if not work.subject_identity: + if not isinstance(work.subject_identity, str) or not work.subject_identity.strip(): raise ProvenanceMismatch("Execution Surface returned no stable subject identity") - evidence = list(work.evidence) - externally_effectful = False - effective_authority = request.authority_grants | authority_grants + checks = [r for r in evidence if r.kind == "verification" and r.subject_identity == work.subject_identity] + if any(r.status != "succeeded" for r in checks): + raise VerificationFailed("failed/blocked/unknown verification cannot checkpoint completion") + required = request.verification_required or work.capability_request is not None + if required and not self._successful_verification(tuple(checks), work.subject_identity): + raise VerificationFailed("completion requires successful verification for the exact subject") + if not request.required_checks.issubset({r.check_id for r in checks}): + raise VerificationFailed("not all trusted required checks succeeded for the exact subject") capability_request = work.capability_request + provider = None if capability_request is not None: - externally_effectful = True - if capability_request.provider not in binding.capabilities: - raise BindingError( - f"Capability Provider is not bound to this Project: {capability_request.provider}" - ) + raise BindingError(f"Capability Provider is not bound to this Project: {capability_request.provider}") provider = self._capabilities.get(capability_request.provider) if provider is None: raise BindingError(f"unavailable Capability Provider: {capability_request.provider}") - - if capability_request.effect != "actuate": - raise BindingError( - "minimal Svif kernel supports only an actuate request at the external-effect boundary" - ) - + resolver = getattr(provider, "operation_policy", None) + if not callable(resolver): + raise BindingError("Capability Provider has no trusted operation policy") + policy = resolver(capability_request.operation) + if not isinstance(policy, CapabilityPolicy) or ( + policy.operation != capability_request.operation + or policy.effect != capability_request.effect or policy.effect != "actuate" + or not isinstance(policy.authority_classes, frozenset) + or any(not isinstance(a, str) or not a.strip() for a in policy.authority_classes) + ): + raise BindingError("missing/inconsistent trusted capability operation policy") if capability_request.subject_identity != work.subject_identity: - raise ProvenanceMismatch( - "Capability request subject differs from the Execution Surface result subject" - ) - - if not self._successful_verification(tuple(evidence), work.subject_identity): - raise ProvenanceMismatch( - "external actuation requires successful verification evidence for the exact subject" - ) - - required_authority = capability_request.authority_class - if required_authority and required_authority not in effective_authority: - raise AuthorityRequired( - f"external actuation requires authority class: {required_authority}" - ) - - delivery = provider.actuate(capability_request) - self._require_delivery_match( - delivery, - subject=work.subject_identity, - target=capability_request.target_identity, - ) - evidence.append(delivery) - - observation = provider.observe(delivery) - self._require_observation_match(observation, delivery) - evidence.append(observation) - - outcome = OperationOutcome( - project_identity=binding.project_identity, - operation_id=request.operation_id, - subject_identity=work.subject_identity, - evidence=tuple(evidence), - externally_effectful=externally_effectful, + raise ProvenanceMismatch("Capability request subject differs from the Execution Surface result subject") + # external actuation requires successful verification evidence for the exact subject + effective_authority = request.authority_grants | authority_grants + required_authority = policy.authority_classes + if capability_request.authority_class: + required_authority |= frozenset({capability_request.authority_class}) + missing = required_authority - effective_authority + if missing: + raise AuthorityRequired(f"external actuation requires authority classes: {sorted(missing)}") + + preliminary = OperationOutcome( + project_identity=binding.project_identity, operation_id=request.operation_id, + subject_identity=work.subject_identity, evidence=tuple(evidence), + externally_effectful=capability_request is not None, continuity_update=work.continuity_update, + expected_revision=session.context.continuity.revision, + target_identity=capability_request.target_identity if capability_request else None, ) - - continuity.checkpoint(outcome) - return outcome + # A filesystem provider holds its cross-process lock from preflight through + # delivery/observation/checkpoint, and rejects stale contexts before effects. + guard = getattr(continuity, "operation_guard", None) + with guard(preliminary) if callable(guard) else nullcontext(): + if capability_request is not None: + try: + delivery = provider.actuate(capability_request) + except SvifRuntimeError: + raise + except Exception as exc: + raise DeliveryFailed("external delivery failed; reconcile before retry") from exc + self._require_delivery_match(delivery, subject=work.subject_identity, target=capability_request.target_identity) + evidence.append(delivery) + try: + observation = provider.observe(delivery) + except SvifRuntimeError: + raise + except Exception as exc: + raise ObservationFailed("independent observation unavailable; effect remains unconfirmed") from exc + self._require_observation_match(observation, delivery) + evidence.append(observation) + outcome = OperationOutcome( + project_identity=binding.project_identity, operation_id=request.operation_id, + subject_identity=work.subject_identity, evidence=tuple(evidence), + externally_effectful=capability_request is not None, + continuity_update=work.continuity_update, + expected_revision=session.context.continuity.revision, + target_identity=capability_request.target_identity if capability_request else None, + ) + continuity.checkpoint(outcome) + return outcome def run(self, binding: ProjectBinding, request: OperationRequest) -> OperationOutcome: """Convenience path for an Execution Surface that supports synchronous execute().""" - session = self.begin(binding, request) surface = self._surface_for(binding) execute = getattr(surface, "execute", None) if not callable(execute): @@ -336,5 +421,10 @@ def run(self, binding: ProjectBinding, request: OperationRequest) -> OperationOu f"Execution Surface {binding.execution_surface!r} is externally driven; " "use begin()/complete() through its integration bridge" ) - work = execute(session.context, request) - return self.complete(session, work) + session = self.begin(binding, request) + try: + work = execute(session.context, request) + return self.complete(session, work) + finally: + with self._session_lock: + self._sessions.pop(id(session), None) diff --git a/tests/test_readiness_regressions.py b/tests/test_readiness_regressions.py new file mode 100644 index 0000000..aa4a17b --- /dev/null +++ b/tests/test_readiness_regressions.py @@ -0,0 +1,380 @@ +"""Executable acceptance of the four 2026-09-20 functional findings. + +All transports are fake. Crash tests really terminate a child interpreter; they +are not native Codex, LLM-session, or production-delivery acceptance. +""" +from __future__ import annotations + +import json +import os +import subprocess +import sys +import tempfile +import unittest +from dataclasses import replace +from pathlib import Path +from unittest.mock import patch + +from svif.capabilities.cloudflare import CloudflareWorkersCapabilityProvider +from svif.continuity.agnir import AgnirDiscoveryError, AgnirFilesystemContinuityProvider +from svif.continuity._filesystem import ProjectFiles +from svif.execution.chatgpt import ChatGPTExecutionSurface +from svif.runtime import ( + AuthorityRequired, BindingError, CapabilityPolicy, ContinuitySnapshot, + ContinuityUpdate, EvidenceRecord, OperationOutcome, OperationRequest, + Orchestrator, ProjectBinding, ProviderBinding, SessionConsumed, ObservationFailed, + VerificationFailed, WorkResult, +) +from test_agnir_continuity import write_project, PROJECT + +SUBJECT = "sha256:readiness-candidate" +TARGET = "fixture://worker" +VERSIONS = ("0.1", "0.2", "1.0") +ROOT = Path(__file__).resolve().parents[1] + + +class Memory: + provider_id = "fixture" + def __init__(self): self.saved = [] + def load(self, identity): return ContinuitySnapshot(identity) + def checkpoint(self, outcome): self.saved.append(outcome) + + +class Transport: + def __init__(self): self.calls = [] + def deploy_worker(self, **kwargs): self.calls.append("deploy") + def observe_worker(self, **kwargs): self.calls.append("observe"); return True + + +def payload(operation="op", authority="omitted"): + value = { + "project_identity": PROJECT, "operation_id": operation, + "subject_identity": SUBJECT, + "evidence": [{"kind": "verification", "subject_identity": SUBJECT, "status": "succeeded"}], + "capability_request": {"provider": "cloudflare.workers", "operation": "deploy_verified_worker", + "effect": "actuate", "subject_identity": SUBJECT, "target_identity": TARGET}, + } + if authority != "omitted": value["capability_request"]["authority_class"] = authority + return value + + +def setup_engine(memory=None): + memory = memory or Memory() + transport, surface = Transport(), ChatGPTExecutionSurface() + engine = Orchestrator(continuity_providers=(memory,), execution_surfaces=(surface,), + capability_providers=(CloudflareWorkersCapabilityProvider(transport),)) + binding = ProjectBinding(PROJECT, ProviderBinding(memory.provider_id), "chatgpt", frozenset({"cloudflare.workers"})) + return engine, binding, memory, transport, surface + + +def outcome(operation="update", expected_revision=None, decisions="new decision"): + return OperationOutcome(PROJECT, operation, SUBJECT, (), False, + ContinuityUpdate("new state", "new next", decisions), expected_revision) + + +class RuntimeReadinessTests(unittest.TestCase): + def test_missing_null_empty_and_weakened_authority_cannot_bypass_provider(self): + for authority in ("omitted", None, "", "read", "none", "protected-delivery"): + with self.subTest(authority=authority): + engine, binding, memory, transport, surface = setup_engine() + session = engine.begin(binding, OperationRequest("op", "test")) + data = payload(authority=authority) + data["authority_grants"] = ["protected-delivery"] # never accepted from result + with self.assertRaises(AuthorityRequired): + engine.complete(session, surface.parse_result(session, data)) + self.assertEqual(transport.calls, []) + self.assertEqual(memory.saved, []) + + def test_trusted_grant_satisfies_provider_policy_with_omitted_class(self): + engine, binding, memory, transport, surface = setup_engine() + session = engine.begin(binding, OperationRequest("op", "test")) + engine.complete(session, surface.parse_result(session, payload()), authority_grants=frozenset({"protected-delivery"})) + self.assertEqual(transport.calls, ["deploy", "observe"]) + self.assertEqual(len(memory.saved), 1) + + def test_requested_additional_class_can_only_strengthen_policy(self): + engine, binding, memory, transport, surface = setup_engine() + session = engine.begin(binding, OperationRequest("op", "test")) + with self.assertRaises(AuthorityRequired): + engine.complete(session, surface.parse_result(session, payload(authority="principal-action")), + authority_grants=frozenset({"protected-delivery"})) + self.assertEqual(transport.calls, []) + + def test_unknown_operation_and_absent_provider_policy_fail_closed(self): + for absent in (False, True): + with self.subTest(absent=absent): + engine, binding, memory, transport, surface = setup_engine() + if absent: engine._capabilities["cloudflare.workers"].operation_policy = None + data = payload() + if not absent: data["capability_request"]["operation"] = "unregistered" + session = engine.begin(binding, OperationRequest("op", "test")) + with self.assertRaises(BindingError): + engine.complete(session, surface.parse_result(session, data), authority_grants=frozenset({"protected-delivery"})) + self.assertEqual(transport.calls, []) + + def test_provider_policy_matches_descriptor(self): + descriptor = json.loads((ROOT / "integrations/cloudflare/adapter.json").read_text()) + operation = next(x for x in descriptor["operations"] if x["effect"] == "actuate") + policy = CloudflareWorkersCapabilityProvider.operation_policy(operation["name"]) + self.assertEqual(policy, CapabilityPolicy(operation["name"], "actuate", frozenset({operation["authority"]}))) + + def test_failed_blocked_unknown_or_missing_checks_prevent_completion(self): + for status in ("failed", "blocked", "unknown", "missing", "foreign"): + with self.subTest(status=status): + engine, binding, memory, _, _ = setup_engine() + evidence = () if status == "missing" else (EvidenceRecord("verification", "foreign" if status == "foreign" else SUBJECT, + "succeeded" if status == "foreign" else status),) + work = WorkResult(SUBJECT, evidence, continuity_update=ContinuityUpdate("complete", "none")) + session = engine.begin(binding, OperationRequest("op", "test")) + with self.assertRaises(VerificationFailed): engine.complete(session, work) + self.assertEqual(memory.saved, []) + + def test_required_check_set_is_trusted_not_overridden_by_payload(self): + engine, binding, memory, _, surface = setup_engine() + session = engine.begin(binding, OperationRequest("op", "test", required_checks=frozenset({"unit", "integration"}))) + data = payload(); data.pop("capability_request") + data["verification_required"] = False + data["required_checks"] = [] + data["evidence"][0]["check_id"] = "unit" + with self.assertRaises(VerificationFailed): engine.complete(session, surface.parse_result(session, data)) + self.assertEqual(memory.saved, []) + session = engine.begin(binding, OperationRequest("op-2", "test", required_checks=frozenset({"unit", "integration"}))) + work = WorkResult(SUBJECT, tuple(EvidenceRecord("verification", SUBJECT, check_id=c) for c in ("unit", "integration"))) + engine.complete(session, work) + self.assertEqual(len(memory.saved), 1) + + def test_no_check_exemption_is_explicit_and_does_not_override_failed_check(self): + with self.assertRaises(BindingError): OperationRequest("op", "test", verification_required=False) + for failed in (False, True): + engine, binding, memory, _, _ = setup_engine() + session = engine.begin(binding, OperationRequest("op", "inspection only", verification_required=False, + verification_not_applicable_reason="no artifact change")) + work = WorkResult(SUBJECT, (EvidenceRecord("verification", SUBJECT, "failed"),) if failed else ()) + if failed: + with self.assertRaises(VerificationFailed): engine.complete(session, work) + self.assertEqual(memory.saved, []) + else: + engine.complete(session, work) + self.assertEqual(len(memory.saved), 1) + + def test_sessions_are_single_use_and_cannot_be_forged(self): + engine, binding, memory, transport, surface = setup_engine() + session = engine.begin(binding, OperationRequest("op", "test")) + work = surface.parse_result(session, payload()) + with self.assertRaises(SessionConsumed): engine.complete(replace(session), work) + engine.complete(session, work, authority_grants=frozenset({"protected-delivery"})) + with self.assertRaises(SessionConsumed): engine.complete(session, work, authority_grants=frozenset({"protected-delivery"})) + self.assertEqual(transport.calls, ["deploy", "observe"]) + + def test_conflicting_success_and_failure_is_not_verified(self): + engine, binding, memory, _, _ = setup_engine() + session = engine.begin(binding, OperationRequest("op", "test")) + evidence = (EvidenceRecord("verification", SUBJECT), EvidenceRecord("verification", SUBJECT, "failed")) + with self.assertRaises(VerificationFailed): engine.complete(session, WorkResult(SUBJECT, evidence)) + self.assertEqual(memory.saved, []) + + +class ContinuityReadinessTests(unittest.TestCase): + def test_preflight_missing_decisions_never_writes_partial_state(self): + for version in VERSIONS: + with self.subTest(version=version), tempfile.TemporaryDirectory() as temporary: + root = Path(temporary); write_project(root, version=version) + anchor = root / "AGNIR.yaml" + anchor.write_text(anchor.read_text().replace('decisions: ".agnir/decisions.md"', 'decisions: null')) + provider = AgnirFilesystemContinuityProvider(root) + before = provider.load(PROJECT) + with self.assertRaises(AgnirDiscoveryError): provider.checkpoint(outcome()) + self.assertEqual(provider.load(PROJECT), before) + self.assertFalse((root / ProjectFiles.JOURNAL).exists()) + + def test_each_write_failure_rolls_back_the_whole_checkpoint(self): + for version in VERSIONS: + for failure_at in range(2, 7): # state, next, decisions, receipt, commit decision + with self.subTest(version=version, failure_at=failure_at), tempfile.TemporaryDirectory() as temporary: + root = Path(temporary); write_project(root, version=version) + provider = AgnirFilesystemContinuityProvider(root); before = provider.load(PROJECT) + original = provider._files.write + calls = 0 + def failing(path, content): + nonlocal calls + calls += 1 + if calls == failure_at: raise OSError("injected write failure") + return original(path, content) + with patch.object(provider._files, "write", failing): + with self.assertRaises(AgnirDiscoveryError): provider.checkpoint(outcome()) + self.assertEqual(AgnirFilesystemContinuityProvider(root).load(PROJECT), before) + self.assertFalse((root / ProjectFiles.JOURNAL).exists()) + + def test_actual_process_death_recovers_old_or_committed_snapshot(self): + script = ''' +import os, sys +from pathlib import Path +from svif.continuity.agnir import AgnirFilesystemContinuityProvider +from svif.runtime import OperationOutcome, ContinuityUpdate +p=AgnirFilesystemContinuityProvider(Path(sys.argv[1])) +write=p._files.write +count=0 +limit=int(sys.argv[2]) +def crash(path, content): + global count + write(path, content) + count+=1 + if count==limit: os._exit(73) +p._files.write=crash +p.checkpoint(OperationOutcome(sys.argv[3], "crash", "sha256:readiness-candidate", (), False, ContinuityUpdate("new state", "new next", "new decision"))) +''' + for version in VERSIONS: + for crash_after in (1, 2, 3, 4, 5, 6): + with self.subTest(version=version, crash_after=crash_after), tempfile.TemporaryDirectory() as temporary: + root = Path(temporary); write_project(root, version=version) + before = AgnirFilesystemContinuityProvider(root).load(PROJECT) + env = {**os.environ, "PYTHONPATH": str(ROOT / "src")} + result = subprocess.run([sys.executable, "-c", script, str(root), str(crash_after), PROJECT], env=env, capture_output=True, timeout=15) + self.assertEqual(result.returncode, 73, result.stderr) + after = AgnirFilesystemContinuityProvider(root).load(PROJECT) + if crash_after < 6: + self.assertEqual(after, before) + else: + self.assertEqual((after.state, after.next_actions, after.decisions), ("new state", "new next", "new decision")) + self.assertEqual(len(after.evidence), 2) + self.assertFalse((root / ProjectFiles.JOURNAL).exists()) + + def test_child_symlink_anchor_symlink_and_write_symlink_are_rejected(self): + for version in VERSIONS: + for surface in ("evidence", "anchor", "lock", "receipt"): + with self.subTest(version=version, surface=surface), tempfile.TemporaryDirectory() as temporary: + base = Path(temporary); root=base / "project"; root.mkdir(); write_project(root, version=version) + outside = base / "dummy.txt"; outside.write_text("DUMMY OUTSIDE") + provider = AgnirFilesystemContinuityProvider(root) + if surface == "evidence": target = root / ".agnir/evidence/escape.md" + elif surface == "anchor": target = root / "AGNIR.yaml"; target.unlink() + elif surface == "lock": target = root / ProjectFiles.LOCK + else: + resolved = provider._discover(PROJECT) + target = provider._evidence_path(resolved, PROJECT, "update") + target.symlink_to(outside) + with self.assertRaises(AgnirDiscoveryError): + if surface == "receipt": provider.checkpoint(outcome()) + else: provider.load(PROJECT) + self.assertEqual(outside.read_text(), "DUMMY OUTSIDE") + + def test_predictable_legacy_temp_symlink_is_not_followed(self): + with tempfile.TemporaryDirectory() as temporary: + root = Path(temporary) / "project"; root.mkdir(); write_project(root) + outside = root.parent / "dummy"; outside.write_text("DUMMY") + (root / ".agnir/.state.md.svif-tmp").symlink_to(outside) + AgnirFilesystemContinuityProvider(root).checkpoint(outcome()) + self.assertEqual(outside.read_text(), "DUMMY") + + def test_stale_snapshot_is_rejected_and_newer_state_preserved(self): + for version in VERSIONS: + with self.subTest(version=version), tempfile.TemporaryDirectory() as temporary: + root=Path(temporary); write_project(root, version=version) + provider=AgnirFilesystemContinuityProvider(root) + before=provider.load(PROJECT) + provider.checkpoint(outcome("first", before.revision)) + current=provider.load(PROJECT) + with self.assertRaises(AgnirDiscoveryError) as raised: + provider.checkpoint(outcome("stale", before.revision)) + self.assertEqual(raised.exception.code, "AGNIR_CHECKPOINT_STALE") + self.assertEqual(provider.load(PROJECT), current) + + def test_stale_context_blocks_external_effect_before_transport(self): + with tempfile.TemporaryDirectory() as temporary: + root=Path(temporary); write_project(root, version="1.0") + provider=AgnirFilesystemContinuityProvider(root) + engine, binding, _, transport, surface=setup_engine(provider) + session=engine.begin(binding, OperationRequest("op", "test")) + provider.checkpoint(outcome("other")) + with self.assertRaises(AgnirDiscoveryError): + engine.complete(session, surface.parse_result(session, payload()), authority_grants=frozenset({"protected-delivery"})) + self.assertEqual(transport.calls, []) + + def test_cross_process_reader_is_busy_not_mixed(self): + script=''' +from svif.continuity.agnir import AgnirFilesystemContinuityProvider, AgnirDiscoveryError +import sys +try: AgnirFilesystemContinuityProvider(sys.argv[1]).load(sys.argv[2]) +except AgnirDiscoveryError as e: + print(e.code); sys.exit(0 if e.code=="AGNIR_CHECKPOINT_BUSY" else 2) +sys.exit(3) +''' + with tempfile.TemporaryDirectory() as temporary: + root=Path(temporary); write_project(root) + provider=AgnirFilesystemContinuityProvider(root) + with provider._locked(): + result=subprocess.run([sys.executable, "-c", script, str(root), PROJECT], env={**os.environ,"PYTHONPATH":str(ROOT/"src")}, capture_output=True, text=True, timeout=15) + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("AGNIR_CHECKPOINT_BUSY", result.stdout) + self.assertIsNotNone(AgnirFilesystemContinuityProvider(root).load(PROJECT)) + + def test_recovery_does_not_overwrite_conflicting_external_edits(self): + with tempfile.TemporaryDirectory() as temporary: + root=Path(temporary); write_project(root) + provider=AgnirFilesystemContinuityProvider(root) + original=provider._files.write; count=0 + def interrupt(path, content): + nonlocal count + original(path, content); count+=1 + if count==2: raise KeyboardInterrupt() + with patch.object(provider._files, "write", interrupt): + with self.assertRaises(KeyboardInterrupt): provider.checkpoint(outcome()) + (root/".agnir/state.md").write_text("external concurrent edit") + with self.assertRaises(AgnirDiscoveryError) as raised: provider.load(PROJECT) + self.assertEqual(raised.exception.code, "AGNIR_CHECKPOINT_RECOVERY_REQUIRED") + self.assertEqual((root/".agnir/state.md").read_text(), "external concurrent edit") + self.assertTrue((root/ProjectFiles.JOURNAL).exists()) + + def test_duplicate_operation_receipt_is_not_overwritten(self): + with tempfile.TemporaryDirectory() as temporary: + root=Path(temporary); write_project(root) + provider=AgnirFilesystemContinuityProvider(root); provider.checkpoint(outcome()) + before=provider.load(PROJECT) + with self.assertRaises(AgnirDiscoveryError) as raised: provider.checkpoint(outcome()) + self.assertEqual(raised.exception.code, "AGNIR_CHECKPOINT_DUPLICATE_OPERATION") + self.assertEqual(provider.load(PROJECT), before) + + def test_uncertain_effect_survives_restart_and_requires_authorized_reconciliation(self): + with tempfile.TemporaryDirectory() as temporary: + root=Path(temporary); write_project(root, version="1.0") + provider=AgnirFilesystemContinuityProvider(root) + engine, binding, _, transport, surface=setup_engine(provider) + def unavailable(**kwargs): raise OSError("observation unavailable") + transport.observe_worker=unavailable + session=engine.begin(binding, OperationRequest("op", "test")) + with self.assertRaises(ObservationFailed): + engine.complete(session, surface.parse_result(session, payload()), authority_grants=frozenset({"protected-delivery"})) + self.assertEqual(transport.calls, ["deploy"]) + restarted=AgnirFilesystemContinuityProvider(root) + snapshot=restarted.load(PROJECT) + self.assertIsNotNone(snapshot.pending_effect) + engine2, binding2, _, transport2, surface2=setup_engine(restarted) + session2=engine2.begin(binding2, OperationRequest("op", "retry")) + with self.assertRaises(AgnirDiscoveryError) as raised: + engine2.complete(session2, surface2.parse_result(session2, payload()), authority_grants=frozenset({"protected-delivery"})) + self.assertEqual(raised.exception.code, "AGNIR_EXTERNAL_EFFECT_UNCONFIRMED") + self.assertEqual(transport2.calls, []) + recovered=OperationOutcome(PROJECT, "op", SUBJECT, + (EvidenceRecord("observation", SUBJECT, target_identity=TARGET),), True, + ContinuityUpdate("independently observed", "continue"), snapshot.revision, TARGET) + with self.assertRaises(AuthorityRequired): restarted.reconcile_effect(recovered, authority_grants=frozenset()) + with self.assertRaises(BindingError): + restarted.reconcile_effect(replace(recovered, target_identity="wrong"), authority_grants=frozenset({"effect-reconciliation"})) + restarted.reconcile_effect(recovered, authority_grants=frozenset({"effect-reconciliation"})) + self.assertIsNone(restarted.load(PROJECT).pending_effect) + self.assertEqual(restarted.load(PROJECT).state, "independently observed") + self.assertEqual(transport2.calls, []) + + def test_duplicate_discovery_keys_and_locator_aliases_fail(self): + for change in ("duplicate", "alias", "discovery"): + with self.subTest(change=change), tempfile.TemporaryDirectory() as temporary: + root=Path(temporary); write_project(root) + anchor=root/"AGNIR.yaml"; text=anchor.read_text() + if change=="duplicate": text += '\nproject:\n identity: "other"\n' + elif change=="alias": text=text.replace('next_actions: ".agnir/next-actions.md"','next_actions: ".agnir/state.md"') + else: text=text.replace('state: ".agnir/state.md"','state: "AGNIR.yaml"') + anchor.write_text(text) + with self.assertRaises(AgnirDiscoveryError): AgnirFilesystemContinuityProvider(root).load(PROJECT) + + +if __name__ == "__main__": unittest.main() diff --git a/tests/test_runtime.py b/tests/test_runtime.py index 9edcceb..161522d 100644 --- a/tests/test_runtime.py +++ b/tests/test_runtime.py @@ -4,6 +4,7 @@ from svif.runtime import ( AuthorityRequired, + CapabilityPolicy, CapabilityRequest, ContinuitySnapshot, EvidenceRecord, @@ -60,6 +61,9 @@ def __init__(self, events: list[str], *, observation_subject: str = SUBJECT) -> self.observation_subject = observation_subject self.actuation_count = 0 + def operation_policy(self, operation: str) -> CapabilityPolicy: + return CapabilityPolicy(operation, "actuate", frozenset({"protected-delivery"})) + def actuate(self, request: CapabilityRequest) -> EvidenceRecord: self.events.append("actuate") self.actuation_count += 1 From b6978287a9d5c1ac9b01e92cb7cd094bf45188ee Mon Sep 17 00:00:00 2001 From: mattamior Date: Sun, 20 Sep 2026 18:19:23 +0800 Subject: [PATCH 4/5] ci: apply reviewed native acceptance matcher and persistent checks --- .github/native-evidence-fix.b64 | 1 + .../workflows/native-evidence-fix-once.yml | 43 +++++++++++++++++++ 2 files changed, 44 insertions(+) create mode 100644 .github/native-evidence-fix.b64 create mode 100644 .github/workflows/native-evidence-fix-once.yml diff --git a/.github/native-evidence-fix.b64 b/.github/native-evidence-fix.b64 new file mode 100644 index 0000000..e56c2f8 --- /dev/null +++ b/.github/native-evidence-fix.b64 @@ -0,0 +1 @@ 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 \ No newline at end of file diff --git a/.github/workflows/native-evidence-fix-once.yml b/.github/workflows/native-evidence-fix-once.yml new file mode 100644 index 0000000..cbccf79 --- /dev/null +++ b/.github/workflows/native-evidence-fix-once.yml @@ -0,0 +1,43 @@ +name: Apply native evidence matcher fix once +on: + push: + branches: [fix/local-readiness] + paths: [.github/workflows/native-evidence-fix-once.yml] +permissions: + contents: write +jobs: + prepare: + runs-on: ubuntu-24.04 + steps: + - uses: actions/checkout@v4 + with: + fetch-depth: 0 + - uses: actions/setup-python@v5 + with: + python-version: '3.12' + - name: Apply only the locally verified candidate delta + shell: bash + run: | + set -euo pipefail + test "$(git rev-parse HEAD^)" = ce6954c73ef90ce8a419aacff5ac7aa1afc1e230 + test "$(git ls-remote origin refs/heads/fix/local-readiness | cut -f1)" = "$GITHUB_SHA" + python - <<'PY' + import base64, hashlib, lzma, pathlib, subprocess + encoded = pathlib.Path('.github/native-evidence-fix.b64').read_text().strip() + patch = lzma.decompress(base64.b64decode(encoded, validate=True)) + assert hashlib.sha256(patch).hexdigest() == '0f91a7b581d8418c7f22ed5d733ae5e1f85fe6dff4debca824c9c4a4f85fa760' + subprocess.run(['git', 'apply', '--check', '-'], input=patch, check=True) + subprocess.run(['git', 'apply', '-'], input=patch, check=True) + PY + git rm .github/native-evidence-fix.b64 .github/workflows/native-evidence-fix-once.yml + git add -A + test "$(git write-tree)" = 34024c16a4ac15f97f801bfbdd02d8382ab1c6fe + python checks/check_repository.py + python conformance/check_contracts.py + PYTHONPATH=src python -m unittest discover -s tests -v + test "$(git ls-remote origin refs/heads/fix/local-readiness | cut -f1)" = "$GITHUB_SHA" + git config user.name 'github-actions[bot]' + git config user.email '41898282+github-actions[bot]@users.noreply.github.com' + git commit -m 'fix: validate namespaced native Skill evidence and retain readiness CI' + git push origin HEAD:refs/heads/fix/local-readiness + git rev-parse HEAD HEAD:plugin From 043464c6883518fb626bb0ea8e75020be42faf17 Mon Sep 17 00:00:00 2001 From: mattamior Date: Sun, 20 Sep 2026 18:21:27 +0800 Subject: [PATCH 5/5] fix: validate native Skill origin and retain cross-platform readiness CI --- .github/native-evidence-fix.b64 | 1 - .github/workflows/local-readiness.yml | 83 +++++++++++++++++ .../workflows/native-evidence-fix-once.yml | 43 --------- LOCAL_ACCEPTANCE.md | 6 +- RELEASE_READINESS.md | 6 +- REPOSITORY_TREE.md | 2 + SVIF.yaml | 1 + checks/check_native_install.py | 56 ++++++++++-- checks/check_repository.py | 2 +- tests/test_native_install_evidence.py | 88 +++++++++++++++++++ 10 files changed, 235 insertions(+), 53 deletions(-) delete mode 100644 .github/native-evidence-fix.b64 create mode 100644 .github/workflows/local-readiness.yml delete mode 100644 .github/workflows/native-evidence-fix-once.yml create mode 100644 tests/test_native_install_evidence.py diff --git a/.github/native-evidence-fix.b64 b/.github/native-evidence-fix.b64 deleted file mode 100644 index e56c2f8..0000000 --- a/.github/native-evidence-fix.b64 +++ /dev/null @@ -1 +0,0 @@ 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 \ No newline at end of file diff --git a/.github/workflows/local-readiness.yml b/.github/workflows/local-readiness.yml new file mode 100644 index 0000000..27e00fb --- /dev/null +++ b/.github/workflows/local-readiness.yml @@ -0,0 +1,83 @@ +name: Svif local readiness + +on: + push: + branches: [main] + pull_request: + +permissions: + contents: read + +jobs: + platform-tests: + timeout-minutes: 10 + strategy: + fail-fast: false + matrix: + include: + - os: ubuntu-24.04 + python: '3.13' + - os: macos-14 + python: '3.12' + - os: windows-2022 + python: '3.12' + runs-on: ${{ matrix.os }} + env: + PYTHONPATH: src + PYTHONUTF8: '1' + steps: + - uses: actions/checkout@v4 + with: + persist-credentials: false + - uses: actions/setup-python@v5 + with: + python-version: ${{ matrix.python }} + - name: Verify this checkout and recovery behavior + shell: bash + run: | + set -euo pipefail + git rev-parse HEAD HEAD:plugin + python checks/check_repository.py + python conformance/check_contracts.py + python -m unittest discover -s tests -v 2>&1 | tee "$RUNNER_TEMP/readiness-tests.log" + - uses: actions/upload-artifact@v4 + if: always() + with: + name: readiness-tests-${{ matrix.os }}-${{ matrix.python }} + path: ${{ runner.temp }}/readiness-tests.log + if-no-files-found: warn + retention-days: 14 + + native-install-discovery: + timeout-minutes: 10 + runs-on: ubuntu-24.04 + steps: + - uses: actions/checkout@v4 + with: + persist-credentials: false + - uses: actions/setup-python@v5 + with: + python-version: '3.12' + - uses: actions/setup-node@v4 + with: + node-version: '22' + - name: Install the previously observed official native client + shell: bash + run: | + set -euo pipefail + npm install --prefix "$RUNNER_TEMP/native-tools" '@openai/codex@0.155.1' + - name: Observe isolated installation and fresh-process Skill discovery + shell: bash + run: | + set -euo pipefail + git rev-parse HEAD HEAD:plugin + python checks/check_native_install.py --codex "$RUNNER_TEMP/native-tools/node_modules/.bin/codex" --output "$RUNNER_TEMP/native-acceptance" + - uses: actions/upload-artifact@v4 + if: always() + with: + name: readiness-native-install-receipt + path: | + ${{ runner.temp }}/native-acceptance/receipt.json + ${{ runner.temp }}/native-acceptance/app-server.stderr.log + if-no-files-found: warn + retention-days: 14 diff --git a/.github/workflows/native-evidence-fix-once.yml b/.github/workflows/native-evidence-fix-once.yml deleted file mode 100644 index cbccf79..0000000 --- a/.github/workflows/native-evidence-fix-once.yml +++ /dev/null @@ -1,43 +0,0 @@ -name: Apply native evidence matcher fix once -on: - push: - branches: [fix/local-readiness] - paths: [.github/workflows/native-evidence-fix-once.yml] -permissions: - contents: write -jobs: - prepare: - runs-on: ubuntu-24.04 - steps: - - uses: actions/checkout@v4 - with: - fetch-depth: 0 - - uses: actions/setup-python@v5 - with: - python-version: '3.12' - - name: Apply only the locally verified candidate delta - shell: bash - run: | - set -euo pipefail - test "$(git rev-parse HEAD^)" = ce6954c73ef90ce8a419aacff5ac7aa1afc1e230 - test "$(git ls-remote origin refs/heads/fix/local-readiness | cut -f1)" = "$GITHUB_SHA" - python - <<'PY' - import base64, hashlib, lzma, pathlib, subprocess - encoded = pathlib.Path('.github/native-evidence-fix.b64').read_text().strip() - patch = lzma.decompress(base64.b64decode(encoded, validate=True)) - assert hashlib.sha256(patch).hexdigest() == '0f91a7b581d8418c7f22ed5d733ae5e1f85fe6dff4debca824c9c4a4f85fa760' - subprocess.run(['git', 'apply', '--check', '-'], input=patch, check=True) - subprocess.run(['git', 'apply', '-'], input=patch, check=True) - PY - git rm .github/native-evidence-fix.b64 .github/workflows/native-evidence-fix-once.yml - git add -A - test "$(git write-tree)" = 34024c16a4ac15f97f801bfbdd02d8382ab1c6fe - python checks/check_repository.py - python conformance/check_contracts.py - PYTHONPATH=src python -m unittest discover -s tests -v - test "$(git ls-remote origin refs/heads/fix/local-readiness | cut -f1)" = "$GITHUB_SHA" - git config user.name 'github-actions[bot]' - git config user.email '41898282+github-actions[bot]@users.noreply.github.com' - git commit -m 'fix: validate namespaced native Skill evidence and retain readiness CI' - git push origin HEAD:refs/heads/fix/local-readiness - git rev-parse HEAD HEAD:plugin diff --git a/LOCAL_ACCEPTANCE.md b/LOCAL_ACCEPTANCE.md index aeea4ef..745b2d0 100644 --- a/LOCAL_ACCEPTANCE.md +++ b/LOCAL_ACCEPTANCE.md @@ -10,7 +10,7 @@ From a clean checkout of the candidate on a computer with Codex installed: python checks/check_native_install.py --output /absolute/path/to/new-svif-acceptance ``` -The destination must be new. The harness creates an isolated HOME and CODEX_HOME, copies the exact Plugin and marketplace into that directory, installs using the native CLI, independently reads installed/enabled state, checks every installed file against the candidate, then starts a new App Server process and calls `skills/list`. It does not copy credentials or touch the user's existing Plugin configuration. It writes `receipt.json`; a missing host, changed package, unsupported command, or missing Skill returns nonzero. `release_ready` remains false even when installation/discovery pass. +The destination must be new. The harness creates an isolated HOME and CODEX_HOME, copies the exact Plugin and marketplace into that directory, installs using the native CLI, independently reads installed/enabled state, checks every installed file against the candidate, then starts a new App Server process and calls `skills/list`. It does not copy credentials or touch the user's existing Plugin configuration. Codex may expose the Skill as `svif:svif`; acceptance also requires exact `pluginId=svif@svif`, explicit enabled state, the installed Skill path and matching bytes. It writes `receipt.json`; a missing host, changed package, unsupported command, or missing Skill returns nonzero. `release_ready` remains false even when installation/discovery pass. The CLI command contract used by the harness was checked on 2026-09-20: - https://developers.openai.com/codex/cli/reference — `plugin marketplace add`, `plugin add --json`, `plugin list --json`; @@ -19,6 +19,10 @@ The CLI command contract used by the harness was checked on 2026-09-20: Use a compatible native version and retain its actual version in the receipt. Do not reinterpret marketplace registration as installation or substitute ZIP extraction for native discovery. +## Continuous repository checks + +`.github/workflows/local-readiness.yml` runs Python tests on Linux, macOS and Windows, plus an isolated native install/discovery job on Linux using the observed `@openai/codex@0.155.1`. The existing product workflow supplies the Linux/Python 3.12 baseline. Each native receipt carries the source commit/Plugin tree and file hashes when the checkout is clean. The CI jobs never read a user login, call a model, or claim the actual-work gate passed. + ## Actual work and genuinely fresh sessions After native installation/discovery, use the same test CODEX_HOME in an authenticated local Codex session, or install the identical candidate in ChatGPT desktop/Codex. Authenticate through the host's normal login UI. Never paste credentials into Project files, test receipts, or chat. The harness's `ordinary-project/` has only README and AGENTS sentinel text; do not pre-initialize Agnir. diff --git a/RELEASE_READINESS.md b/RELEASE_READINESS.md index fda008c..d67d596 100644 --- a/RELEASE_READINESS.md +++ b/RELEASE_READINESS.md @@ -16,7 +16,7 @@ Scope: the existing Skill-first MVP and the founding Python runtime/provider con | Stale/concurrent state safety | Snapshot revision; preflight/operation guard; stale and cross-process tests | Rejects before effect when discovered state changed; same-Project effects serialized by filesystem adapter. Other providers must supply equivalent coordination. | | Confined reads/writes and safe temporary files | Directory-descriptor/no-follow I/O on POSIX; child/anchor/lock/receipt-link tests | No authorized external-locator support added. Windows hostile directory-replacement race is outside current claim. | | Unconfirmed external-effect repair | Persistent pending marker; `reconcile_effect()` with trusted authority and exact observation | Never automatically replays delivery; unresolved/absent effects require explicit Principal/provider reconciliation. | -| Portable package / manifests / installation mechanics | Existing package/distribution suites, `check_native_install.py` | Native host receipt must include matching installed bytes, enabled state and new-process discovery. | +| Portable package / manifests / installation mechanics | Existing package/distribution suites, `check_native_install.py`, `test_native_install_evidence.py` | Native host receipt must include matching installed bytes, enabled state and new-process discovery. | | Fresh Executor recovers real Project work | `LOCAL_ACCEPTANCE.md` procedure | Must run on actual native host with no prior transcript; not simulated by constructing a new Python object. | ## Release acceptance rule @@ -24,3 +24,7 @@ Scope: the existing Skill-first MVP and the founding Python runtime/provider con A local release requires all repository/portable/runtime checks passing on the exact candidate, closure of applicable failed-behavior regressions, a native install/discovery receipt for the same Plugin bytes, and reviewed real-task/bootstrap/idempotency/fresh-session/negative-case evidence. A receipt from a different commit is reusable only after exact relevant-content equivalence is established. No aggregate test count substitutes for a missing gate. Current code adds no plaintext credentials, no automatic production deployment, and no OpenAI publication. `v0.2.0-preview.1` stays immutable. Active `0.2.0` remains a development candidate until these acceptance conditions are actually satisfied. + +## Continuous gate + +`Svif product checks` and `Svif local readiness` run on every pull request and main push. Native discovery accepts a namespaced Skill only with the exact Plugin origin, explicit enablement, installed path and file digest. This gate intentionally performs no authenticated model work; that remaining acceptance must not be inferred from CI success. diff --git a/REPOSITORY_TREE.md b/REPOSITORY_TREE.md index 9a47733..44cd3eb 100644 --- a/REPOSITORY_TREE.md +++ b/REPOSITORY_TREE.md @@ -48,6 +48,7 @@ svif/ # Svif 产品主仓库 │ ├── .github/ # GitHub 托管侧自动化配置 │ └── workflows/ +│ ├── local-readiness.yml # 持续跨平台故障恢复测试与隔离原生 Codex 安装/Skill 发现；不调用模型 │ └── conformance.yml # CI：repository integrity、runtime tests、portable contracts │ ├── brand/ # Svif 品牌识别与 fidelity-first production asset surface @@ -124,6 +125,7 @@ svif/ # Svif 产品主仓库 │ ├── test_plugin_openai_distribution.py # OpenAI/Codex marketplace source、Codex manifest 与 portable identity metadata 一致性测试 │ ├── test_plugin_submission_bundle.py # Skills-only ZIP 的 deterministic byte mirror、path/size/normalization archive guards │ ├── test_readiness_regressions.py # 授权、必需验证、崩溃恢复、路径越界、并发与重放的行为回归 +│ ├── test_native_install_evidence.py # 原生 Skill 命名空间、Plugin 身份、启用状态、路径和字节证据判定反例 │ └── test_plugin_package.py # Plugin manifest/Skill/package、filesystem failure isolation 与 Agnir activation boundary 验证 │ ├── conformance/ # Portable contracts 的一致性验证，不等同于产品 runtime diff --git a/SVIF.yaml b/SVIF.yaml index 667ef7b..caa18e2 100644 --- a/SVIF.yaml +++ b/SVIF.yaml @@ -60,6 +60,7 @@ checks: plugin_first_use_bootstrap: "tests/test_plugin_first_use_bootstrap.py" plugin_openai_distribution: "tests/test_plugin_openai_distribution.py" readiness_regressions: "tests/test_readiness_regressions.py" + native_install_evidence: "tests/test_native_install_evidence.py" plugin_submission_bundle: "tests/test_plugin_submission_bundle.py" extensions: diff --git a/checks/check_native_install.py b/checks/check_native_install.py index af8707a..36188ab 100644 --- a/checks/check_native_install.py +++ b/checks/check_native_install.py @@ -32,6 +32,39 @@ def tree_hashes(root: Path) -> dict[str, str]: return result + +def validate_discovery(result: dict, project: Path, installed_path: Path, + expected_sha256: str) -> dict: + """Accept a native Skill only when its origin, state, path and bytes match. + + Codex 0.155.1 exposes plugin skills as ``svif:svif``. The unqualified form + remains acceptable only with the same explicit plugin identity and path; + matching an arbitrary suffix or trusting a missing enabled flag is unsafe. + """ + rows = result.get("data") + if not isinstance(rows, list) or len(rows) != 1 or not isinstance(rows[0], dict): + raise RuntimeError("native discovery must return exactly the selected Project") + row = rows[0] + cwd = row.get("cwd") + if not isinstance(cwd, str) or Path(cwd).resolve() != project.resolve(): + raise RuntimeError("native discovery returned a different Project") + if row.get("errors") != [] or not isinstance(row.get("skills"), list): + raise RuntimeError("native discovery reported errors or omitted its Skill list") + matches = [skill for skill in row["skills"] + if isinstance(skill, dict) and skill.get("pluginId") == "svif@svif" + and skill.get("name") in {"svif:svif", "svif"}] + if len(matches) != 1 or matches[0].get("enabled") is not True: + raise RuntimeError("new native process did not discover one enabled Svif Skill") + skill = matches[0] + expected_path = installed_path / "skills/svif/SKILL.md" + value = skill.get("path") + if not isinstance(value, str) or Path(value).resolve() != expected_path.resolve(): + raise RuntimeError("native Skill does not originate from the installed candidate") + if hashlib.sha256(expected_path.read_bytes()).hexdigest() != expected_sha256: + raise RuntimeError("discovered native Skill differs from tested source") + return skill + + def discovered_skills(codex: str, env: dict[str, str], project: Path) -> dict: """Ask a genuinely new native App Server process to enumerate its skills.""" messages: queue.Queue[str | None] = queue.Queue() @@ -107,12 +140,20 @@ def run(*command): if result.returncode: raise RuntimeError(f"native command failed: {' '.join(command)}: {result.stderr[-3000:]}") return result.stdout + metadata = subprocess.run(["git", "rev-parse", "HEAD", "HEAD:plugin"], cwd=ROOT, + capture_output=True, text=True, timeout=10) + clean = subprocess.run(["git", "diff", "--quiet", "HEAD", "--", "plugin", + ".agents/plugins/marketplace.json"], cwd=ROOT, + capture_output=True, timeout=10) + if metadata.returncode == 0 and clean.returncode == 0: + report["source_commit"], report["source_plugin_tree"] = metadata.stdout.splitlines() + original_project = tree_hashes(project) report["codex_version"] = run("--version").strip() report["marketplace"] = run("plugin", "marketplace", "add", str(market), "--json") installed = json.loads(run("plugin", "add", "svif@svif", "--json")) report["installation_receipt"] = installed report["listing"] = json.loads(run("plugin", "list", "--json")) - matches = [x for x in report["listing"].get("installed", []) if x.get("name") == "svif" and x.get("installed") is True and x.get("enabled") is True] + matches = [x for x in report["listing"].get("installed", []) if x.get("pluginId") == "svif@svif" and x.get("name") == "svif" and x.get("installed") is True and x.get("enabled") is True] if len(matches) != 1: raise RuntimeError("native host did not report exactly one installed/enabled Svif") version = json.loads((ROOT / "plugin/plugin.json").read_text())["version"] if matches[0].get("version") != version: raise RuntimeError("native version differs from tested source") @@ -122,11 +163,14 @@ def run(*command): report["native_install"] = "passed" result = discovered_skills(codex, env, project) report["skills_list"] = result - skills = [s for item in result.get("data", []) for s in item.get("skills", []) if s.get("name") == "svif" and s.get("enabled", True)] - if len(skills) != 1: raise RuntimeError("new native process did not discover one enabled Svif Skill") - skill = Path(skills[0]["path"]) - if hashlib.sha256(skill.read_bytes()).hexdigest() != report["source_file_sha256"]["skills/svif/SKILL.md"]: - raise RuntimeError("discovered native Skill differs from tested source") + skill = validate_discovery(result, project, installed_path, + report["source_file_sha256"]["skills/svif/SKILL.md"]) + report["discovered_skill"] = {key: skill[key] for key in ("name", "pluginId", "enabled", "path")} + if tree_hashes(installed_path) != report["source_file_sha256"]: + raise RuntimeError("native discovery changed the installed candidate") + if tree_hashes(project) != original_project: + raise RuntimeError("install/discovery unexpectedly changed the ordinary Project") + report["ordinary_project_unchanged"] = True report["native_discovery"] = "passed" return_code = 0 except (OSError, ValueError, KeyError, RuntimeError, TimeoutError, queue.Empty, subprocess.SubprocessError) as exc: diff --git a/checks/check_repository.py b/checks/check_repository.py index 1c60555..fef603b 100755 --- a/checks/check_repository.py +++ b/checks/check_repository.py @@ -285,7 +285,7 @@ def main() -> None: "src/svif/capabilities/cloudflare.py", "tests/test_runtime.py", "tests/test_agnir_continuity.py", "tests/test_chatgpt_surface.py", "tests/test_cloudflare_capability.py", "tests/test_founding_e2e.py", "tests/test_plugin_package.py", - "tests/test_plugin_component_discovery.py", "tests/test_readiness_regressions.py", + "tests/test_plugin_component_discovery.py", "tests/test_readiness_regressions.py", "tests/test_native_install_evidence.py", ".github/workflows/local-readiness.yml", "src/svif/continuity/_filesystem.py", "checks/check_native_install.py", "LOCAL_ACCEPTANCE.md", "RELEASE_READINESS.md", "integrations/chatgpt/README.md", "integrations/cloudflare/README.md", "integrations/cloudflare/adapter.json", diff --git a/tests/test_native_install_evidence.py b/tests/test_native_install_evidence.py new file mode 100644 index 0000000..1f65fd0 --- /dev/null +++ b/tests/test_native_install_evidence.py @@ -0,0 +1,88 @@ +"""Validate native receipt matching; no model calls or simulated install claims.""" +from __future__ import annotations + +import copy +import hashlib +import importlib.util +import tempfile +import unittest +from pathlib import Path + +ROOT = Path(__file__).resolve().parents[1] +spec = importlib.util.spec_from_file_location("native_acceptance", ROOT / "checks/check_native_install.py") +assert spec is not None and spec.loader is not None +native = importlib.util.module_from_spec(spec) +spec.loader.exec_module(native) + + +class NativeInstallEvidenceTests(unittest.TestCase): + def setUp(self) -> None: + self.temp = tempfile.TemporaryDirectory() + self.addCleanup(self.temp.cleanup) + self.root = Path(self.temp.name) + self.project = self.root / "ordinary-project" + self.project.mkdir() + self.installed = self.root / "installed" + self.skill = self.installed / "skills/svif/SKILL.md" + self.skill.parent.mkdir(parents=True) + self.skill.write_bytes(b"fixture Skill bytes\n") + self.digest = hashlib.sha256(self.skill.read_bytes()).hexdigest() + self.response = {"data": [{"cwd": str(self.project), "errors": [], "skills": [ + {"name": "svif:svif", "pluginId": "svif@svif", "enabled": True, + "path": str(self.skill)}]}]} + + def check(self, response: dict) -> dict: + return native.validate_discovery(response, self.project, self.installed, self.digest) + + def test_namespaced_native_skill_and_explicit_legacy_origin(self) -> None: + for name in ("svif:svif", "svif"): + with self.subTest(name=name): + self.response["data"][0]["skills"][0]["name"] = name + self.assertEqual(self.check(self.response)["name"], name) + + def test_rejects_missing_or_wrong_plugin_origin_and_disabled_states(self) -> None: + for key, value in (("pluginId", None), ("pluginId", "svif@untrusted"), + ("enabled", None), ("enabled", False), ("enabled", "true"), + ("name", "another:svif")): + with self.subTest(key=key, value=value): + response = copy.deepcopy(self.response) + skill = response["data"][0]["skills"][0] + if value is None: + skill.pop(key) + else: + skill[key] = value + with self.assertRaises(RuntimeError): + self.check(response) + + def test_rejects_other_project_duplicate_results_and_error_reports(self) -> None: + for change in ("cwd", "duplicate_rows", "duplicate_skills", "errors", "missing_errors"): + with self.subTest(change=change): + response = copy.deepcopy(self.response) + row = response["data"][0] + if change == "cwd": row["cwd"] = str(self.root) + elif change == "duplicate_rows": response["data"].append(copy.deepcopy(row)) + elif change == "duplicate_skills": row["skills"] *= 2 + elif change == "errors": row["errors"] = [{"message": "parse failure"}] + else: row.pop("errors") + with self.assertRaises(RuntimeError): + self.check(response) + + def test_identical_bytes_at_another_path_are_not_installation_evidence(self) -> None: + impostor = self.root / "SKILL.md" + impostor.write_bytes(self.skill.read_bytes()) + self.response["data"][0]["skills"][0]["path"] = str(impostor) + with self.assertRaises(RuntimeError): + self.check(self.response) + + def test_changed_skill_bytes_fail(self) -> None: + self.skill.write_bytes(b"changed\n") + with self.assertRaises(RuntimeError): + self.check(self.response) + + def test_builtin_unrelated_skills_are_not_mistaken_for_svif(self) -> None: + self.response["data"][0]["skills"].append({"name": "skill-creator", "enabled": True}) + self.assertEqual(self.check(self.response)["pluginId"], "svif@svif") + + +if __name__ == "__main__": + unittest.main()