Skip to content
Open
39 changes: 39 additions & 0 deletions .audit/code-review-reset.tsv
Original file line number Diff line number Diff line change
@@ -0,0 +1,39 @@
ts phase decision why evidence result
2026-10-16T00:00:00+02:00 frame Deliver planning artifacts and GitHub alignment only The user explicitly leaves production implementation to follow-up sessions user-approved Replace capsules with project-aware local code review plan open
2026-10-16T19:09:41.540133+00:00 github Created code-review-17-project-runtime-bootstrap Create the user-approved replacement story before retiring predecessors https://github.com/nold-ai/specfact-cli-modules/issues/513 planned
2026-10-16T19:09:48.996899+00:00 github Created code-review-18-project-standards-and-checks Create the user-approved replacement story before retiring predecessors https://github.com/nold-ai/specfact-cli-modules/issues/514 planned
2026-10-16T19:09:57.187959+00:00 github Created code-review-19-local-report-and-cutover Create the user-approved replacement story before retiring predecessors https://github.com/nold-ai/specfact-cli-modules/issues/515 planned
2026-10-16T19:10:05.175425+00:00 github Created code-review-20-external-installation-acceptance Create the user-approved replacement story before retiring predecessors https://github.com/nold-ai/specfact-cli-modules/issues/516 planned
2026-10-16T19:10:13.879369+00:00 github Created code-review-local-report-adoption Create the user-approved replacement story before retiring predecessors https://github.com/nold-ai/specfact-cli/issues/769 planned
2026-10-16T19:10:31.140352+00:00 github Linked all five replacement stories Keep parent, project, type and direct dependencies explicit .audit/code-review-reset-state.json metadata configured
2026-10-16T19:15:07.994829+00:00 correction Correct the initial trail timestamp Row 2 used a date-only placeholder at midnight rather than an observed execution time; subsequent entries use actual UTC timestamps .audit/code-review-reset.tsv:2 timestamp corrected by append-only note
2026-10-16T19:15:07.994954+00:00 frame Created isolated artifact branches at current public dev baselines Keep production implementation and primary checkouts outside this planning delivery modules 593656f6; core 729a53bd VERIFIED branch bases
2026-10-16T19:15:07.994995+00:00 artifacts Created four modules planning changes and paired core artifacts Make the approved architecture reviewable without implementing it openspec/changes/code-review-17-project-runtime-bootstrap/design.md runtime unverified; artifact validation pending
2026-10-16T19:23:20.367503+00:00 verification Corrected core inspection scenario identifiers after real mapping validation failed The source validator resolves requirement-level scenario identities; the initial core sidecar used scenario titles instead /private/tmp/specfact-code-review-reset-core/openspec/changes/code-review-local-report-adoption/requirements-evidence.yaml initial failure retained; revalidation pending
2026-10-16T19:29:00.526489+00:00 github Published the reviewed design and requirement scenarios in replacement issues Keep the public planning record reviewable while repository artifact branches remain local https://github.com/nold-ai/specfact-cli-modules/issues/513 planned artifacts published; no runtime claim
2026-10-16T19:30:00.590855+00:00 verification Strict OpenSpec validation passed for the five new changes and touched active lineage Validate the saved requirements rather than claiming runtime support openspec validate <change-id> --strict; .audit/code-review-reset-structure.json VERIFIED planning structure only; existing core lineage has informational archive warnings
2026-10-16T19:30:00.591015+00:00 verification Requirements lifecycle validation now passes for all five sources at planned maturity The corrected core scenario identifiers are checked by the actual source validator .audit/code-review-reset-requirements.json VERIFIED planned / proposal-only / implementation evidence not yet available
2026-10-16T19:30:00.591061+00:00 review Independent artifact review accepted the architecture and requested one roadmap-count correction The reviewer read actual artifacts and retained failures rather than relying on completion claims openspec/CHANGE_ORDER.md:81; .audit/code-review-reset-structure.json count/date corrected; no architecture blocker; final GitHub readback pending
2026-10-16T19:30:07.282373+00:00 github Published the reviewed design and requirement scenarios in replacement issues Keep the public planning record reviewable while repository artifact branches remain local https://github.com/nold-ai/specfact-cli-modules/issues/513 planned artifacts published; no runtime claim
2026-10-16T19:30:33.815947+00:00 disposition Closed modules #460 as Not Planned The owner explicitly superseded remaining capsule delivery, preserving historical evidence https://github.com/nold-ai/specfact-cli-modules/issues/460 closed / not_planned / Rejected
2026-10-16T19:30:39.753608+00:00 disposition Closed modules #488 as Not Planned The owner explicitly superseded remaining capsule delivery, preserving historical evidence https://github.com/nold-ai/specfact-cli-modules/issues/488 closed / not_planned / Rejected
2026-10-16T19:30:45.948962+00:00 disposition Closed modules #495 as Not Planned The owner explicitly superseded remaining capsule delivery, preserving historical evidence https://github.com/nold-ai/specfact-cli-modules/issues/495 closed / not_planned / Rejected
2026-10-16T19:30:52.040711+00:00 disposition Closed modules #512 as Not Planned The owner explicitly superseded remaining capsule delivery, preserving historical evidence https://github.com/nold-ai/specfact-cli-modules/issues/512 closed / not_planned / Rejected
2026-10-16T19:30:58.406592+00:00 disposition Closed capsule PR #506 without merging The owner approved retiring the capsule repair/release queue https://github.com/nold-ai/specfact-cli-modules/pull/506 closed unmerged; branch preserved
2026-10-16T19:31:05.887833+00:00 disposition Closed capsule PR #509 without merging The owner approved retiring the capsule repair/release queue https://github.com/nold-ai/specfact-cli-modules/pull/509 closed unmerged; branch preserved
2026-10-16T19:31:11.906106+00:00 disposition Closed capsule PR #510 without merging The owner approved retiring the capsule repair/release queue https://github.com/nold-ai/specfact-cli-modules/pull/510 closed unmerged; branch preserved
2026-10-16T19:31:24.503815+00:00 disposition Recorded explicit-test and C15/protected coordination without changing their status Retain independent acceptance and active ownership while aligning the replacement graph modules #480/#417; core #679/#680 coordination comments and #480 blocker configured
2026-10-16T19:31:34.465658+00:00 verification Read back replacement metadata and predecessor dispositions from GitHub Check real states, direct edges and preserved ownership rather than inferring mutation success .audit/code-review-reset-github-after.json VERIFIED five stories, four not-planned closures, three unmerged PR closures and preserved independent metadata
2026-10-16T19:35:18.534359+00:00 review Final independent recheck accepted artifact structure and saved GitHub evidence The reviewer checked counter corrections, exact preserved metadata, PR heads, planned mappings and unchecked tasks .audit/code-review-reset-github-after.json; openspec/changes/code-review-17-project-runtime-bootstrap/CHANGE_VALIDATION.md VERIFIED planning delivery; wiki merge prerequisite and runtime acceptance remain explicit
2026-10-16T19:35:18.534544+00:00 handoff Preserved local artifact branches and public design/scenarios without runtime implementation Deliver reviewable planning work while leaving all 83 implementation tasks to follow-up sessions modules #513-#516; core #769; .audit/code-review-reset-core.patch artifact delivery complete; no commit, merge or publication
2026-10-16T19:35:52.951332+00:00 clarification Public planning records are published; no runtime publication occurred Clarify the handoff row: publication refers to module/runtime release, not the GitHub issue design text https://github.com/nold-ai/specfact-cli-modules/issues/513 public design/scenarios retained; repository artifact branches local and uncommitted
2026-10-16T19:45:40.412366+00:00 publication User authorized both planning branch commits, pushes and PRs to dev Keep runtime implementation in later sessions user instruction 2026-10-16 planning publication authorized; merge excluded
2026-10-16T19:45:40.412550+00:00 wiki Aligned core source, C14/C15 notes, index and generated graph Finish the requested core wiki alignment while preserving unrelated dirty source pages core #769; native wiki health and graph scripts 0/12 implementation tasks; 59 pre-existing errors vs baseline 62; no new errors; 169 unrelated pages unchanged
2026-10-16T19:45:40.412598+00:00 worktree Moved the core planning worktree from temporary storage to a durable task branch location The wiki must cite the real public proposal without relying on temporary storage core branch codex/code-review-local-report-planning worktree and all uncommitted planning artifacts preserved
2026-10-16T19:45:40.412640+00:00 forge Resolved GitHub and the built-in PR creation tool Origin is absent; use gh for readback and the connector for PR creation command -v origin; github_create_pull_request GitHub CLI readback with built-in PR creation
2026-10-16T19:46:14.877680+00:00 verification Read back replacement metadata and predecessor dispositions from GitHub Check real states, direct edges and preserved ownership rather than inferring mutation success .audit/code-review-reset-github-after.json VERIFIED five stories, four not-planned closures, three unmerged PR closures and preserved independent metadata
2026-10-16T19:46:47.993388+00:00 review Completed bounded no-comments and own deslop checks PR playbook requires a comment pass before review and artifact cleanup before commit read-only planning_pr_comment_review; inspected both HEAD-relative diffs 0 deletions; 0 MUST KILL flags; all scoped production paths unchanged
2026-10-16T19:46:47.993631+00:00 verification Refreshed both dev references and strictly revalidated all five changes Publish against the actual current dev baselines git fetch origin dev; openspec validate --strict both branch bases remain exact dev; five strict passes; live issue graph and dispositions reverified
2026-10-16T19:49:40.297238+00:00 verification Normal applicable staged hooks passed in both repositories Use native evidence and preserve existing signature/security checks modules pre-commit run with paired core; core pre-commit with pinned fixture modules 28 contract tests passed; planned evidence passed both; no replacement runtime claimed; existing core YAML errors remain outside scope
2026-10-16T19:49:40.297535+00:00 signing Core signed commit failed after applicable hooks passed No signing secret key is available for the configured author; do not bypass required signing git commit -S; gpg No secret key; docs/agent-rules/70-release-commit-and-docs.md files remain staged; requested existing signing configuration; push and PR creation wait for signed commits
2026-10-16T19:50:31.413835+00:00 signing Resolved the signing failure to unselected key and mismatched author email The user authorized using the existing official local key; elevated metadata lookup found both keys GitHub users/djm81/gpg_keys; verified noreply signing key D90AAF92921066C1 select existing key and matching noreply email per commit; no global settings changed; signing retry pending
36 changes: 29 additions & 7 deletions openspec/CHANGE_ORDER.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,25 @@
# OpenSpec Change Order

## Trusted local review reset (2026-10-16)

The owner approved a hard cut from capsule/sandbox review to trusted local project-aware execution. This delivery creates planning artifacts and aligns GitHub work only. No runtime, workflow, signature or published-support change is established here. This section supersedes older capsule implementation ordering below.

| Order | Change | Issue | Direct implementation blockers |
| --- | --- | --- | --- |
| 1 | [code-review-17-project-runtime-bootstrap](changes/code-review-17-project-runtime-bootstrap/proposal.md) | [modules #513](https://github.com/nold-ai/specfact-cli-modules/issues/513) | None. |
| 2 | [code-review-18-project-standards-and-checks](changes/code-review-18-project-standards-and-checks/proposal.md) | [modules #514](https://github.com/nold-ai/specfact-cli-modules/issues/514) | #513. |
| 3 | [code-review-19-local-report-and-cutover](changes/code-review-19-local-report-and-cutover/proposal.md) | [modules #515](https://github.com/nold-ai/specfact-cli-modules/issues/515) | #513 and #514. |
| 4 | code-review-local-report-adoption | [core #769](https://github.com/nold-ai/specfact-cli/issues/769) | modules #515. |
| 5 | [code-review-20-external-installation-acceptance](changes/code-review-20-external-installation-acceptance/proposal.md) | [modules #516](https://github.com/nold-ai/specfact-cli-modules/issues/516) | #515 and core #769. |

[The canonical design](changes/code-review-17-project-runtime-bootstrap/design.md) records the confirmed trust model, interface sketch, alternatives, independent architecture judgment and installed acceptance matrix. [GitHub alignment](changes/code-review-17-project-runtime-bootstrap/GITHUB_ALIGNMENT.md) records predecessor dispositions. All implementation tasks in the five new changes remain unchecked.

Capsule delivery #460, optional Apple signing #488, Windows capsule #495 and baseline capsule prerequisite #512 are superseded, together with the #509 -> #510 -> #506 repair/release queue. Historical signed releases and delivered fixes are preserved. The native/portable-reviewer proposals retain evidence but authorize no remaining capsule implementation. Never-delivered #488/#495 proposals move to non-canonical abandoned history without spec promotion. Closed #416/#459/#466/#472/#473 remain historical and are not reopened or archived by this planning delivery.

Keep #480 open until native explicit-test selection is proved in #514. Preserve independent module signing/security #511. C15 modules #417 is In Progress and retains its owner, status, acceptance and current blockers; this reset adds only a compatibility coordination note. Protected core #680 and C15 core #679 remain separate contracts. Local schema 2.0 evidence cannot satisfy their existing capsule/protected assumptions automatically.

Optional preflight #431/#432/#434, requirement context #491 and architecture #164/#230 may later consume the shared project context and local reports. They do not block the local review release or acquire its runtime ownership. Preserve their separate prerequisite graphs. Recheck ownership, current releases and dependency metadata at implementation start.

This document is the modules-side source of truth for active OpenSpec work. It
must be read together with the core repo change order in `nold-ai/specfact-cli`.

Expand Down Expand Up @@ -55,12 +75,12 @@ Core #680/#679 and modules #417 were recovered from uncommitted planning-only fe

| Bucket | Count | Location |
|---|---:|---|
| **Active-tree entries** | 33 | [`openspec/changes/`](changes/) |
| **Active-tree entries** | 36 | [`openspec/changes/`](changes/) |
| **Parking-lot entries** | 16 | [`openspec/parking-lot/`](parking-lot/) |
| **Archived** | 50 | [`openspec/changes/archive/`](changes/archive/) |
| **Abandoned history** | 1 | [`openspec/history/abandoned/`](history/abandoned/) |
| **Abandoned history** | 3 | [`openspec/history/abandoned/`](history/abandoned/) |

`openspec list` reflects all 33 direct active-tree entries (verified 2026-10-08). The closed R08
`openspec list` reflects all 36 direct active-tree entries (verified 2026-10-16). The closed R08
proposal is retained under non-canonical abandoned history, outside
`openspec/changes/` and its completed-change archive; no unimplemented delta
entered canonical specifications. Completed changes still use native OpenSpec
Expand All @@ -72,6 +92,8 @@ implementation-ready.
| Change | GitHub issue | Historical status |
|---|---|---|
| [`requirements-08-bounded-red-green-proof`](history/abandoned/2026-08-30-requirements-08-bounded-red-green-proof/) | [#414](https://github.com/nold-ai/specfact-cli-modules/issues/414) | Closed Not Planned on 2026-08-27; never implemented; retained outside the completed-change archive; canonical specs unchanged |
| [`code-review-macos-developer-id-distribution`](history/abandoned/2026-10-16-code-review-macos-developer-id-distribution/) | [#488](https://github.com/nold-ai/specfact-cli-modules/issues/488) | Superseded on 2026-10-16; optional Apple capsule distribution was never delivered; no specification promotion |
| [`code-review-windows-native-platform-execution`](history/abandoned/2026-10-16-code-review-windows-native-platform-execution/) | [#495](https://github.com/nold-ai/specfact-cli-modules/issues/495) | Superseded on 2026-10-16; Windows capsule capability was never delivered; local Windows acceptance belongs to #516 |

This non-canonical history is not an OpenSpec archive and is not implementation
authority. Completed work must use `openspec archive` so implemented deltas are
Expand Down Expand Up @@ -113,7 +135,7 @@ These archived specs are now the shipped basis for the flagship demo: run review
produce JSON evidence, identify AI-bloat findings, hand remediation packets to an
AI IDE, rerun, and compare improved evidence.

## Portable External Project Runtime
## Historical portable capsule runtime

| Change | Issue | Status | Dependencies |
|---|---|---|---|
Expand Down Expand Up @@ -172,7 +194,7 @@ Security records under the repository security policy.
|---:|---|---|---|---|
| 1 | `archive/2026-08-23-ci-01-workflow-dispatch-core-ref-trust` | [#422](https://github.com/nold-ai/specfact-cli-modules/pull/422) | Shipped and archived: preserve paired feature-branch validation for non-manual events while restricting manual paired-core execution to literal `main` or `dev` refs | ancestry sync PR [#421](https://github.com/nold-ai/specfact-cli-modules/pull/421) |

## Native macOS ARM64 Capsule — managed-process revision
## Superseded native capsule history
Comment thread
djm81 marked this conversation as resolved.

Physical-host startup, private-control and two sealed-analyzer fixture checkpoints
are implemented under the same change; they are partial native evidence, not
Expand Down Expand Up @@ -211,9 +233,9 @@ Mach-O/dyld dependencies, all required analyzers, fresh signed installation,
cold/offline reuse and Linux regression coverage. Close/archive only after
production publication and acceptance.

## Recovered C15 planning
## C15 lineage and active-owner coordination

`code-review-15-signal-calibrated-blocking-gate` / #417 was recovered into local dev from its proposal-only feature worktree; it remains planned and retains the real C14/profile/policy/exception prerequisites. Remote integration remains pending. Modules C14 #416 shipped but its existing proposal remains unarchived.
The 2026-10-16 live project status for #417 is In Progress; preserve its active owner. The following dated record is historical. `code-review-15-signal-calibrated-blocking-gate` / #417 was recovered into local dev from its proposal-only feature worktree; it remains planned and retains the real C14/profile/policy/exception prerequisites. Remote integration remains pending. Modules C14 #416 shipped but its existing proposal remains unarchived.

## Lean current-run delivery

Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,9 @@
# Design: Signal-Calibrated Blocking Gate

## Local-runtime compatibility coordination (2026-10-16)

Modules #513-#516 and core #769 plan trusted-local project review and a separately versioned schema 2.0. Issue #417 remains In Progress with its existing owner, status, acceptance and native blocker relationships. This additive note does not authorize edits to active C15 implementation or reinterpret schema 1.7/protected C14 evidence as local evidence. Review the replacement producer/ordinary-consumer compatibility before later integration. C15 and protected core #680 are not blanket prerequisites for local review. Runtime behavior is unchanged by this planning note.

## Scope rescope — 2026-09-20

Remove optional preflight hardening #432 as a prerequisite. Preserve C14 protected adoption, policy/profile and exception authority, measured calibration, meaningful dogfood checks and signatures. Use current-run results; historical RED and development seals are not required.
Expand Down
Loading
Loading