Skip to content

Integrate evidence-backed source admission and production-reality coverage #309

Closed

Description

@jacksonpradolima

Parent: #261. Milestone: M5 — Generalizable TCPCI benchmark.

Objective and bounded deliverable

Reuse registry/manifests/data cards, local profiles and source-specific receipts to produce one auditable coverage view; do not create a second source registry or experiment runner.

  • Reconcile legacy source-specific terms, duration units, identity conflicts, observation/group definitions, time span/availability, failure/churn/missingness and actual conversion evidence. Retain explicit rejected/unavailable sources.
  • Link implemented source workflows to actual verified artifacts without relabeling planned adapter metadata as implementation evidence.
  • Generate data cards and an aggregate diversity/production-reality matrix: languages/build systems/providers, triggers/test levels, setup/shared fixtures/order dependencies, serial/parallel/matrix/shards/reruns, queue/runner/cancellation, retries/quarantine/flakiness/timeouts, monorepo/vendor changes, overrides and partial/delayed/corrected outcomes.
  • Represent observed/reconstructed/missing/synthetic facts explicitly. Count dependence groups and unique-fault mappings correctly.
  • Admit each of the seven required regimes only with passing source-specific evidence. At least two materially different CI execution models must be represented without losing job/stage identity. Failed admission leaves the cell uncovered and blocks final closure.

Dependencies

#302, #303, #304, #305, #306, #307, #308

Existing implementations remain the starting point: registry/profiles/materialization, RTPTorrent/LRTS readers, 4.7 LRTS ETL, controlled/JUnit producer, native policies/API/checkpoints and #251–#260 foundations. Inspect the actual code before proposing APIs. This issue covers only the remaining work above; already delivered slices are not reopened.

Shared acceptance gates

  • Reuse the existing runner, RunSpec, cache, results, immutable artifacts and checkpoints; keep the domain independent of CLI/MCP/network transports. No unrelated refactor or replacement framework.
  • Version new contracts; preserve legacy semantics, explicit units/missingness, deterministic identities/serialization and strict future-version rejection.
  • Include meaningful unit/golden/compatibility/property or metamorphic tests as applicable, interruption/concurrency/idempotence/recovery checks, and a real installed-package workflow outside checkout without mocking the principal component. Normal tests stay network-free with owned tiny fixtures.
  • Human documentation and Mermaid where appropriate must describe actual usable behavior, terms, provenance and evidence limits. No foreign large data/code is vendored.
  • Before push: full merge-base review, OpenCodeReview 1.12.13 local delegation/rules plus manual coverage of all exclusions, all relevant tests/lint/format/types/Pylint/strict-docs/package checks and git diff --check. Fix confirmed critical/high/medium findings, review the exact pushed head and resolve valid PR threads before merge.
  • Publish actual source/result evidence in the closing PR. Seeds do not establish independence; negative/inconclusive results remain valid.

Activity

  1. jacksonpradolima commented on Oct 18, 2026

    @jacksonpradolima
    OwnerAuthor

    Pre-implementation protocol for #309. Dependencies #302–#308 are delivered; #308 source #328 and documentation #329 are integrated, the actual signed 4.14 wheel and deployed documentation were qualified. This freezes the rules before computing new admission results; it is a plan, not a result.

    Purpose: produce one evidence-backed source-admission and production-reality view using the existing CorpusRegistry/DataCard/manifests, native profiles, source-specific completion receipts, SourceCache, ArtifactWriter and independent temporal contracts. Do not replace the runner or legacy phase-one readiness. The default registry/card artifacts and all historic result semantics remain readable unchanged.

    1. Freeze source bindings before computing an admission outcome. Every actual input needs source/receipt/schema/producer/writer identity and actual cache/output verification through its existing source-specific validator. Mere registration, child closure, metadata-only labels and claimed self-digests cannot qualify a source. Retain explicitly unavailable/rejected/planned sources.
    2. Reuse the existing CorpusRegistry and DataCard types for the integrated inventory. Preserve original registry cards/IDs and record any new derived card version/identity explicitly. Do not silently relabel a legacy planned native adapter as implemented. Keep source-specific component terms, pins and redistribution rules; a report's own license cannot clear its inputs.
    3. Separate purposes: historical/protected temporal evaluation, controlled functional reproduction, seeded/constructed evidence and deterministic stress mechanism checks. An admitted functional or synthetic slice cannot fill an observed historical CI cell. Passing source integrity alone is insufficient for any scientific admission; articulate the exact additional source-specific checks. Negative/both-pass/both-fail/inconclusive observations remain eligible evidence, never dropped because they do not support a desired result.
    4. Historical clocks must establish event, label and feature availability before decisions, along with expected-universe/identity/group rules and protected protocol. RTPTorrent job labels, scheduled LRTS timestamps and HCS pipeline order remain insufficient when actual availability is missing. Do not manufacture missing clocks or turn reported serial durations into parallel latency/work savings.
    5. Keep row/test counts separate from source project/dependence groups, curated fault/context groups and genuinely mapped unique faults. Multiple Log4j stage views share project/build evidence; HCS variants and stress copies share logical tests; locales/repeated trials/seeds do not add independent projects/faults. Curated fault labels alone do not establish a unique-fault mapping.
    6. Production matrix must include languages/build systems, provider or execution model, triggers/test levels, setup/shared fixtures/order dependence, serial/parallel/matrix/shard/rerun scope, runner/queue/concurrency/cancellation, retries/quarantine/flakiness/timeouts/infrastructure failures, vendor/monorepo/renames/change-to-test traceability, protection/mandatory suites/overrides, partial/omitted feedback, delayed/corrected outcomes and retention. Each fact explicitly observed/reconstructed/missing/synthetic (or inapplicable with reason), with a source-bound locator. Unknown is not zero, unsupported is not absent, source labels do not certify actual runtime topology.
    7. Reuse explicit units/Measurement/NumericProfile where applicable. Compute descriptions from actual verified rows, and distinguish reported label/ordering assumptions from observed CI continuity. Keep non-finite, negative, zero, null/unavailable and non-applicable semantics explicit. Churn in unverified label order cannot become observed chronological churn.
    8. Deterministic versioned artifacts, bounded metadata/rows/bytes, future-schema rejection, no implicit migration, atomic complete-last publication, idempotent retries and conflict rejection. Reading checks structural/derived invariants; explicit validation/publication rechecks actual external bytes. No CLI/MCP/provider imports in the domain and no network/subject execution during offline admission.
    9. All seven required regimes remain in the matrix. Admit a cell only with passing source-specific evidence for its stated purpose; any failed admission stays uncovered and blocks final parent closure. Represent two materially different source CI models without flattening original project/job/stage/pipeline identities. No predetermined admitted count or efficacy claim.
    10. Qualification: meaningful contract/golden/round-trip/legacy/futureversion/units/missingness/negative/nonfinite/property/metamorphic/tampering/leakage/dependence tests; actual interrupted publication and retry/concurrency; installed wheel outside checkout with transport import guard; at least one real existing runner/checkpoint flow and actual available public-source artifacts verified offline. Normal tests network-free/owned tiny fixtures. Full frozen suite, lint/format/types/Pylint/strict docs/build/install/diff, all-file local Alibaba1.12.13 rules/manual review, exact-head PR reviews/checks before normal merge.

    The issue and all comments were refreshed (no comments at this point), current main is clean at 5c934d55c5957cef4f9557002eae3bee5a72e3d6, and ancestor/repository AGENTS checks found no applicable files. Existing contracts and actual prior source artifacts were inspected; begin with their existing offline validators. Do not weaken admission requirements to close #261. Remaining source/evidence blockers belong within the existing children/parent, not duplicate issues.

  2. jacksonpradolima commented on Oct 18, 2026

    @jacksonpradolima
    OwnerAuthor

    Source-verification clarification before the complete corpus qualification:

    The generic controlled converter validates pinned source/report bytes and observation accounting, but it does not reparse producer-specific raw packets. That is insufficient by itself for controlled-functional source admission. The existing capture producers also bind their entire installed SDK and package version; unchanged individual legacy modules do not authorize relabeling a capture to a newer release.

    The development implementation therefore requires an explicit typed raw-producer verifier binding for a positive controlled-functional purpose. The domain records a versioned proof and re-invokes that binding during source validation/publication; reading proof metadata alone grants no verification. The separate application adapter checks a caller-pinned original wheel, every installed SDK resource/version and invokes the original package's existing Python/C/Java-matrix raw-wire/source/context validators offline. Its interpreter/plan/receipt/output paths are local bindings, excluded from portable identity. The portable proof retains original wheel/version/producer, raw packet digests, receipt/plan identity, verifier code identity, Python and dependency versions. No network, Docker, source test execution, automatic installation or old-artifact rewrite occurs; existing validators may republish identical owned cache metadata. The original wheels remain available from reviewed public releases.

    The domain imports no CLI/MCP/capture transport. Metadata-only controlled inputs remain blocked with original_raw_producer_verification_missing. Actual original-wire correspondence still does not prove authentic physical execution, legal permission, independent faults or policy efficacy. Human source/terms/curated-fault review remains separately explicit.

    An initial development check revalidated the previously collected PySnooper ASCII evidence with its original published 4.13 wheel and full original producer identity. Both raw role packets and normalized observations agree; the test-error/pass pair remains inconclusive, qualifying only for the reviewed functional purpose. It does not become historical CI or an assertion-failure detection. This is not the complete corpus qualification or a released 4.15 API. Full frozen tests, actual complete-source evidence and local/PR review remain required before delivery.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions