Skip to content
Draft
Show file tree
Hide file tree
Changes from 91 commits
Commits
Show all changes
92 commits
Select commit Hold shift + click to select a range
0008124
feat(experimental): add memory proposal queue auditor
safal207 Aug 15, 2026
b3faa60
test(experimental): freeze current memory proposal queue
safal207 Aug 15, 2026
921e225
test(experimental): cover memory proposal queue audit
safal207 Aug 15, 2026
4c7b2ea
docs(experimental): define memory proposal queue auditor
safal207 Aug 15, 2026
26c173b
chore(experimental): remove unused queue-auditor import
safal207 Aug 15, 2026
a32d363
feat(experimental): add memory proposal revalidation planner
safal207 Aug 15, 2026
d892d73
test(experimental): add planner conformance fixture
safal207 Aug 15, 2026
01aa6e2
test(experimental): cover queue revalidation planner
safal207 Aug 15, 2026
878e7ce
docs(experimental): define queue grouping revalidation planner
safal207 Aug 15, 2026
11604b9
fix(experimental): align planner style before CI
safal207 Aug 15, 2026
053ccfc
feat(experimental): add real queue revalidation adapter v0.3
safal207 Aug 15, 2026
46279ae
feat(experimental): collect live memory queue revalidation evidence
safal207 Aug 15, 2026
4de284c
test(experimental): cover real queue revalidation adapter v0.3
safal207 Aug 15, 2026
18418b8
docs(experimental): define live queue revalidation v0.3
safal207 Aug 15, 2026
d2a4bca
ci(experimental): run live memory queue revalidation v0.3
safal207 Aug 15, 2026
6a9cf25
fix(experimental): separate stable provenance from operational replay…
safal207 Aug 15, 2026
af2ba0e
fix(experimental): classify memory replay divergence by evidence comp…
safal207 Aug 15, 2026
fc6d636
test(experimental): distinguish operational evidence from stable sour…
safal207 Aug 15, 2026
efc970a
fix(experimental): mirror source-owned latest-check query
safal207 Aug 15, 2026
a27112a
fix(experimental): keep mutable PR metadata outside stable source ide…
safal207 Aug 15, 2026
a36cb55
fix(experimental): bind stable source core to immutable code evidence
safal207 Aug 15, 2026
d48bbc0
test(experimental): cover mutable PR narrative drift
safal207 Aug 15, 2026
1d4f8b8
docs(experimental): record live v0.3 verifier-boundary result
safal207 Aug 15, 2026
be03288
ci(experimental): assert stable-source coverage boundary
safal207 Aug 15, 2026
1d0fb99
feat(experimental): add semantic acceptance intake v0.4
safal207 Aug 15, 2026
493be50
test(experimental): cover semantic acceptance intake v0.4
safal207 Aug 15, 2026
4f44de0
docs(experimental): define semantic acceptance intake v0.4
safal207 Aug 15, 2026
c9e8d1e
ci(experimental): add live semantic acceptance intake v0.4
safal207 Aug 15, 2026
2ec1816
feat(experimental): add human review workbench v0.5
safal207 Aug 16, 2026
fb6060a
test(experimental): cover human review workbench v0.5
safal207 Aug 16, 2026
96f8006
feat(experimental): collect live workbench context v0.5
safal207 Aug 16, 2026
f4b6d4a
ci(experimental): add live human review workbench v0.5
safal207 Aug 16, 2026
28df7fa
docs(experimental): specify human review workbench v0.5
safal207 Aug 16, 2026
2cb30ea
ci(experimental): include workbench contract docs in trigger
safal207 Aug 16, 2026
dba60dd
noop
safal207 Aug 16, 2026
5b384c6
chore: remove accidental placeholder
safal207 Aug 16, 2026
3794d20
bootstrap(trust-root): approve memory queue v0.3-v0.5 identities
safal207 Aug 16, 2026
9bde682
fix(memory-queue): bind snapshot records and reject duplicate JSON keys
safal207 Aug 16, 2026
fbe3898
fix(memory-queue): bind planner mode into plan digest
safal207 Aug 16, 2026
861ff22
fix(memory-queue): reject unknown evidence components
safal207 Aug 16, 2026
6717839
fix(memory-queue): verify frozen semantic intake identities
safal207 Aug 16, 2026
f9dbac3
fix(memory-queue): verify intake and escape review markdown
safal207 Aug 16, 2026
8b210bd
fix(trust-root): harden live queue collector inputs and transport
safal207 Aug 16, 2026
c6a96f3
fix(trust-root): bind workbench collection to exact identities
safal207 Aug 16, 2026
e60442f
fix(trust-root): preserve revalidation manifests on failure
safal207 Aug 16, 2026
eb1d26b
fix(trust-root): make workbench evidence manifests reproducible
safal207 Aug 16, 2026
8808ef7
fix(trust-root): fail closed and make semantic evidence reproducible
safal207 Aug 16, 2026
8950760
test(memory-queue): cover substitution and duplicate JSON keys
safal207 Aug 16, 2026
15c91c7
test(memory-queue): prove plan digest sensitivity
safal207 Aug 16, 2026
f876fdd
test(memory-queue): reject unknown evidence components
safal207 Aug 16, 2026
74f616e
test(memory-queue): reject duplicate decisions and tampered intake
safal207 Aug 16, 2026
5c74ac8
test(memory-queue): use verified intake and block markdown injection
safal207 Aug 16, 2026
e04f495
test(trust-root): add adversarial collector regression coverage
safal207 Aug 16, 2026
3b88198
bootstrap(trust-root): bind hardened Memory Queue identities
safal207 Aug 16, 2026
4b2f56e
fix(memory-queue): bind semantic intake to canonical planner result
safal207 Aug 16, 2026
505680d
test(memory-queue): reject detached planner decisions
safal207 Aug 16, 2026
13c8af9
fix(trust-root): bind revalidation artifact to exact head
safal207 Aug 16, 2026
e34f4f1
fix(trust-root): bind workbench artifact to exact head
safal207 Aug 16, 2026
8d18a86
fix(trust-root): bind semantic artifact to exact head
safal207 Aug 16, 2026
050fdd5
bootstrap(trust-root): bind exact-head manifest workflows
safal207 Aug 16, 2026
f61184d
bootstrap(trust-root): pin memory queue CI dependencies
safal207 Aug 17, 2026
06ba397
bootstrap(trust-root): use pinned revalidation environment
safal207 Aug 17, 2026
8163567
bootstrap(trust-root): pin semantic acceptance environment
safal207 Aug 17, 2026
d8fe035
bootstrap(trust-root): pin workbench environment and review eligibility
safal207 Aug 17, 2026
786d338
fix(workbench): gate submission templates by review eligibility
safal207 Aug 17, 2026
459e9b9
test(workbench): cover non-review-eligible packets
safal207 Aug 17, 2026
456b615
fix(revalidation): bind evidence to captured main state
safal207 Aug 17, 2026
53dd29b
test(revalidation): exercise stale evidence state binding
safal207 Aug 17, 2026
693a5f7
bootstrap(trust-root): bind pinned memory queue environment
safal207 Aug 17, 2026
82ed9ec
bootstrap(trust-root): hash-bind pip bootstrap
safal207 Aug 17, 2026
d9a6fb1
bootstrap(trust-root): hash-bind memory queue dependencies
safal207 Aug 17, 2026
55fe5eb
bootstrap(trust-root): verify hash-bound dependency installs
safal207 Aug 17, 2026
fc23266
bootstrap(trust-root): enforce hashed revalidation dependencies
safal207 Aug 17, 2026
4494417
bootstrap(trust-root): enforce hashed semantic dependencies
safal207 Aug 17, 2026
0ac5f4c
bootstrap(trust-root): enforce hashed workbench dependencies
safal207 Aug 17, 2026
2602144
fix(workbench): bind source context and complete card digest
safal207 Aug 17, 2026
e767e15
test(workbench): bind source PR and complete digest context
safal207 Aug 17, 2026
06f55fc
test(revalidation): isolate stale binding and digest sensitivity
safal207 Aug 17, 2026
10a2ad0
bootstrap(trust-root): bind hash-enforced memory queue environment
safal207 Aug 17, 2026
104005c
harden(trust-root): parse protected pip installs canonically
safal207 Aug 17, 2026
74dea16
test(trust-root): cover dependency command substitution
safal207 Aug 17, 2026
e00bda2
test(memory-queue): isolate final revalidation invariants
safal207 Aug 17, 2026
f4ff06c
trust-root: bind hardened dependency verifier identity
safal207 Aug 17, 2026
30fd853
fix(trust-root): parse only pip install command lines
safal207 Aug 17, 2026
265ef99
test(trust-root): ignore unrelated shell continuations
safal207 Aug 17, 2026
7aedbb0
trust-root: bind final dependency verifier identity
safal207 Aug 17, 2026
97e03a1
fix(trust-root): bind dependency install step structurally
safal207 Aug 22, 2026
420d3ea
test(trust-root): reject dynamically assembled dependency installs
safal207 Aug 22, 2026
0605bcb
chore(trust-root): record hardened dependency verifier identity
safal207 Aug 22, 2026
1d79af1
fix(trust-root): reject installer indirection outside protected step
safal207 Aug 22, 2026
474f558
merge: sync Memory Queue bootstrap with current main
safal207 Aug 25, 2026
58e1ade
fix(trust-root): reject continued plain run scalars
safal207 Aug 25, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions .github/trust-root/memory_queue_ci_requirements.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
# Frozen dependency artifacts for protected Memory Queue evidence workflows.
# ubuntu-latest / Python 3.12 is intentionally wheel-only. Each selected wheel
# is exact-version and SHA-256 bound; workflows must install with
# --require-hashes --only-binary=:all:.
iniconfig==2.3.0 --hash=sha256:f631c04d2c48c52b84d0d0549c99ff3859c98df65b3101406327ecc7d53fbf12
packaging==26.3 --hash=sha256:d7193f7c8e4e93f444fde0262bf90af30e16fa0ad0ad44cb553c87339b23cd1c
pluggy==1.6.0 --hash=sha256:e920276dd6813095e9377c0bc5566d94c932c33b27a3e3945d8389c374dd4746
Pygments==2.20.0 --hash=sha256:81a9e26dd42fd28a23a2d169d86d7ac03b46e2f8b59ed4698fb4785f946d0176
pytest==9.1.1 --hash=sha256:37a86b45efb9a47a61a36449063e8e18d0cab3161329fc099eb21783169c4f0c
PyYAML==6.0.3 --hash=sha256:ba1cc08a7ccde2d2ec775841541641e4548226580ab850948cbfda66a1befcdc
3 changes: 3 additions & 0 deletions .github/trust-root/memory_queue_pip_bootstrap.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
# Frozen pip bootstrap artifact for protected Memory Queue evidence workflows.
# ubuntu-latest / Python 3.12 is intentionally wheel-only.
pip==26.1.2 --hash=sha256:382ff9f685ee3bc25864f820aa50505825f10f5458ffff07e30a6d96e5715cab
8 changes: 8 additions & 0 deletions .github/trust-root/protected_files.json
Original file line number Diff line number Diff line change
@@ -1,22 +1,30 @@
{
"files": {
".bandit": "5568293d2e15266a57eb51cc81b0bef223c2b269",
".github/trust-root/memory_queue_ci_requirements.txt": "047a1ba13cc17f9ef566936c6d5e104217d140bd",
".github/trust-root/memory_queue_pip_bootstrap.txt": "64cf8462e4e31152f4c1c056b0265fc53fd53b8d",
".github/trust-root/scripts/memory_learning_core.py": "9df0bfffac466dca5128d21d5f3cfba9f0b663b3",
".github/trust-root/scripts/memory_learning_fallback.py": "cb70887f2a5afa1b07fa970f3252a85a977de260",
".github/trust-root/scripts/memory_learning_github.py": "d4d679ef1956e7ab072d95e496152675f2f298df",
".github/trust-root/scripts/memory_learning_loop.py": "f7bf7d06d5b8cb41c67ab2ba9bed04cd4168dc17",
".github/trust-root/scripts/memory_queue_revalidation_collect.py": "e1d0552a05306f64d768d31b3b73a180357f3583",
".github/trust-root/scripts/memory_retrieval_core.py": "433b4cd302e6bfd3e10bc188aaf5774919892052",
".github/trust-root/scripts/memory_retrieval_github.py": "2598b3f903676f3705f7f69399c9158257af462a",
".github/trust-root/scripts/memory_retrieval_hardened.py": "21334e2e235a9bd0506449a4adcefc70c2427d07",
".github/trust-root/scripts/memory_retrieval_hardened_loop.py": "80db30dc486d46bdf767815a2d501c6176bd446a",
".github/trust-root/scripts/memory_retrieval_loop.py": "bea8f6ac10f2da9221f3ed52b41fee1daa3b1d79",
".github/trust-root/scripts/memory_review_workbench_collect.py": "04191973e6425f19e44edc52eddab1c21bcac3ab",
".github/trust-root/scripts/reviewer_fallback.py": "e17b2fb720cc46f91e82ab0482486091b456bc9e",
".github/trust-root/scripts/reviewer_fallback_entrypoint.py": "0cdf6a3f43724d8754361ad46fc996d98ef4b8b6",
".github/trust-root/scripts/reviewer_fallback_reconcile.py": "74b0bc06c899a9ee3462c203831215a9ac39af64",
".github/trust-root/scripts/reviewer_fallback_runtime.py": "041c602be70bf61f0f6c84b85c9e84e559986556",
".github/trust-root/scripts/verify_memory_queue_dependency_contract.py": "ae7b4b5b2cfb2c2f8e2bbdc7968bf6e9d6b00fe8",
".github/workflows/ci.yml": "ae103606ca5b4b99609ee48c2f867e6bde1d55ec",
".github/workflows/ebpf-runtime-proof.yml": "19baaa8f66ab586ca747a52b3e3b4486e1ff3ee3",
".github/workflows/memory-learning-loop.yml": "8627fbeea2db9bbaeb0fb10c8095479cf2a04829",
".github/workflows/memory-queue-revalidation.yml": "8d830bd83cd061728761bc9c9c2b6935296a51f6",
".github/workflows/memory-queue-review-workbench.yml": "b97ab9d4f3bf35e3b90d5c7901a98d8212cdd612",
".github/workflows/memory-queue-semantic-acceptance.yml": "49d0da91c0fa065a8c706b027c63c1ad592bb743",
".github/workflows/memory-retrieval.yml": "4a226ab2caacfc1fc840659572dde66df622058e",
".github/workflows/python-package-validation.yml": "13bd15e4010a1cc04f64b972a69c8da07f0e58a7",
".github/workflows/reviewer-fallback.yml": "0646491db9729279a36f89d3a14f3203c94e029c",
Expand Down
Loading
Loading