bootstrap(trust-root): validate Memory Queue v0.3–v0.5 CI identities - #288

Draft

safal207 wants to merge 92 commits into

mainfrom

agent/memory-queue-trust-root-bootstrap-v0-5

Commits on Aug 15, 2026

feat(experimental): add memory proposal queue auditor
safal207
committed
0008124
test(experimental): freeze current memory proposal queue
safal207
committed
b3faa60
test(experimental): cover memory proposal queue audit
safal207
committed
921e225
docs(experimental): define memory proposal queue auditor
safal207
committed
4c7b2ea
chore(experimental): remove unused queue-auditor import
safal207
committed
26c173b
feat(experimental): add memory proposal revalidation planner
safal207
committed
a32d363
test(experimental): add planner conformance fixture
safal207
committed
d892d73
test(experimental): cover queue revalidation planner
safal207
committed
01aa6e2
docs(experimental): define queue grouping revalidation planner
safal207
committed
878e7ce
fix(experimental): align planner style before CI
safal207
committed
11604b9
feat(experimental): add real queue revalidation adapter v0.3
safal207
committed
053ccfc
feat(experimental): collect live memory queue revalidation evidence
safal207
committed
46279ae
test(experimental): cover real queue revalidation adapter v0.3
safal207
committed
4de284c
docs(experimental): define live queue revalidation v0.3
safal207
committed
18418b8
ci(experimental): run live memory queue revalidation v0.3
safal207
committed
d2a4bca
fix(experimental): separate stable provenance from operational replay drift
safal207
committed
6a9cf25
fix(experimental): classify memory replay divergence by evidence component
safal207
committed
af2ba0e
test(experimental): distinguish operational evidence from stable source drift
safal207
committed
fc6d636
fix(experimental): mirror source-owned latest-check query
safal207
committed
efc970a
fix(experimental): keep mutable PR metadata outside stable source identity
safal207
committed
a27112a
fix(experimental): bind stable source core to immutable code evidence
safal207
committed
a36cb55
test(experimental): cover mutable PR narrative drift
safal207
committed
d48bbc0
docs(experimental): record live v0.3 verifier-boundary result
safal207
committed
1d4f8b8
ci(experimental): assert stable-source coverage boundary
safal207
committed
be03288
feat(experimental): add semantic acceptance intake v0.4
safal207
committed
1d0fb99
test(experimental): cover semantic acceptance intake v0.4
safal207
committed
493be50
docs(experimental): define semantic acceptance intake v0.4
safal207
committed
4f44de0
ci(experimental): add live semantic acceptance intake v0.4
safal207
committed
c9e8d1e

Commits on Aug 16, 2026

feat(experimental): add human review workbench v0.5
safal207
committed
2ec1816
test(experimental): cover human review workbench v0.5
safal207
committed
fb6060a
feat(experimental): collect live workbench context v0.5
safal207
committed
96f8006
ci(experimental): add live human review workbench v0.5
safal207
committed
f4b6d4a
docs(experimental): specify human review workbench v0.5
safal207
committed
28df7fa
ci(experimental): include workbench contract docs in trigger
safal207
committed
2cb30ea
noop
safal207
committed
dba60dd
chore: remove accidental placeholder
safal207
committed
5b384c6
bootstrap(trust-root): approve memory queue v0.3-v0.5 identities
safal207
committed
3794d20
fix(memory-queue): bind snapshot records and reject duplicate JSON keys
safal207
committed
9bde682
fix(memory-queue): bind planner mode into plan digest
safal207
committed
fbe3898
fix(memory-queue): reject unknown evidence components
safal207
committed
861ff22
fix(memory-queue): verify frozen semantic intake identities
safal207
committed
6717839
fix(memory-queue): verify intake and escape review markdown
safal207
committed
f9dbac3
fix(trust-root): harden live queue collector inputs and transport
safal207
committed
8b210bd
fix(trust-root): bind workbench collection to exact identities
safal207
committed
c6a96f3
fix(trust-root): preserve revalidation manifests on failure
safal207
committed
e60442f
fix(trust-root): make workbench evidence manifests reproducible
safal207
committed
eb1d26b
fix(trust-root): fail closed and make semantic evidence reproducible
safal207
committed
8808ef7
test(memory-queue): cover substitution and duplicate JSON keys
safal207
committed
8950760
test(memory-queue): prove plan digest sensitivity
safal207
committed
15c91c7
test(memory-queue): reject unknown evidence components
safal207
committed
f876fdd
test(memory-queue): reject duplicate decisions and tampered intake
safal207
committed
74f616e
test(memory-queue): use verified intake and block markdown injection
safal207
committed
5c74ac8
test(trust-root): add adversarial collector regression coverage
safal207
committed
e04f495
bootstrap(trust-root): bind hardened Memory Queue identities
safal207
committed
3b88198
fix(memory-queue): bind semantic intake to canonical planner result
safal207
committed
4b2f56e
test(memory-queue): reject detached planner decisions
safal207
committed
505680d
fix(trust-root): bind revalidation artifact to exact head
safal207
committed
13c8af9
fix(trust-root): bind workbench artifact to exact head
safal207
committed
e34f4f1
fix(trust-root): bind semantic artifact to exact head
safal207
committed
8d18a86
bootstrap(trust-root): bind exact-head manifest workflows
safal207
committed
050fdd5

Commits on Aug 17, 2026

bootstrap(trust-root): pin memory queue CI dependencies
safal207
committed
f61184d
bootstrap(trust-root): use pinned revalidation environment
safal207
committed
06ba397
bootstrap(trust-root): pin semantic acceptance environment
safal207
committed
8163567
bootstrap(trust-root): pin workbench environment and review eligibility
safal207
committed
d8fe035
fix(workbench): gate submission templates by review eligibility
safal207
committed
786d338
test(workbench): cover non-review-eligible packets
safal207
committed
459e9b9
fix(revalidation): bind evidence to captured main state
safal207
committed
456b615
test(revalidation): exercise stale evidence state binding
safal207
committed
53dd29b
bootstrap(trust-root): bind pinned memory queue environment
safal207
committed
693a5f7
bootstrap(trust-root): hash-bind pip bootstrap
safal207
committed
82ed9ec
bootstrap(trust-root): hash-bind memory queue dependencies
safal207
committed
d9a6fb1
bootstrap(trust-root): verify hash-bound dependency installs
safal207
committed
55fe5eb
bootstrap(trust-root): enforce hashed revalidation dependencies
safal207
committed
fc23266
bootstrap(trust-root): enforce hashed semantic dependencies
safal207
committed
4494417
bootstrap(trust-root): enforce hashed workbench dependencies
safal207
committed
0ac5f4c
fix(workbench): bind source context and complete card digest
safal207
committed
2602144
test(workbench): bind source PR and complete digest context
safal207
committed
e767e15
test(revalidation): isolate stale binding and digest sensitivity
safal207
committed
06f55fc
bootstrap(trust-root): bind hash-enforced memory queue environment
safal207
committed
10a2ad0
harden(trust-root): parse protected pip installs canonically
safal207
committed
104005c
test(trust-root): cover dependency command substitution
safal207
committed
74dea16
test(memory-queue): isolate final revalidation invariants
safal207
committed
e00bda2
trust-root: bind hardened dependency verifier identity
safal207
committed
f4ff06c
fix(trust-root): parse only pip install command lines
safal207
committed
30fd853
test(trust-root): ignore unrelated shell continuations
safal207
committed
265ef99
trust-root: bind final dependency verifier identity
safal207
committed
7aedbb0

Commits on Aug 25, 2026

merge: sync Memory Queue bootstrap with current main
safal207
committed
474f558
fix(trust-root): reject continued plain run scalars
safal207
committed
58e1ade