Repository navigation

016 harden session integrity - #37

Merged

S2thend merged 116 commits into

mainfrom

016-harden-session-integrity

Aug 16, 2026

Commits on Aug 5, 2026
- docs(spec): define session integrity hardening rollout
  S2thend
  committed
  d62900b
- docs(spec): finalize session integrity compatibility hardening
  S2thend
  committed
  f99e5a0
- feat(core): establish session integrity contracts
  S2thend
  committed
  ce074c5
- test(compat): add deterministic session integrity harnesses
  S2thend
  committed
  0f0b269
- feat(identity): freeze v0.16 Composer-derived keys
  S2thend
  committed
  9011b7b
- feat(database): select SQLite drivers by capability
  S2thend
  committed
  b7da185
- build(deps): lock SQLite provider capability baseline
  S2thend
  committed
  f50bee3
- ci(release): fail closed on incomplete validation
  S2thend
  committed
  5647879
- feat(catalog): reconcile physical session replicas
  S2thend
  committed
  5003071
- build(package): generate the advertised CommonJS entry
  S2thend
  committed
  e2f0649
- feat(merge): preserve Composer identities across Store enrichment
  S2thend
  committed
  d7fc03b
- feat(security): isolate temporary plaintext workspaces
  S2thend
  committed
  cd20b99
- fix(backup): confine plaintext database snapshots
  S2thend
  committed
  fe4a60e
- test(compatibility): lock synthetic v0.16 upgrade fixtures
  S2thend
  committed
  aac1440
- fix(backup): stamp archives with the running package version
  S2thend
  committed
  618f88a
- docs(compatibility): publish the corrective data contract
  S2thend
  committed
  69bdd7d
- build(release): smoke the exact packed candidate
  S2thend
  committed
  515c1b6
- feat(cli): parse repeatable source read limits
  S2thend
  committed
  000e310
- fix(store): make merged source parsing identity-safe
  S2thend
  committed
  3f971fa
- test(release): add private source-limit preflight
  S2thend
  committed
  14b139b
- feat(store): preserve attachment evidence across merges
  S2thend
  committed
  062c8eb
- feat(backup): stream bounded private ZIP archives
  S2thend
  committed
  b80497c
- feat(cli): centralize structured fatal serialization
  S2thend
  committed
  a9f3122
- fix(timestamps): make inferred provenance deterministic
  S2thend
  committed
  f07bed4
- fix(storage): fail closed across Store and backup reads
  S2thend
  committed
  73e87e5
- fix(timestamps): remove nondeterministic session fallbacks
  S2thend
  committed
  f55262b
- feat(migration): bind and revalidate destructive session targets
  S2thend
  committed
  f5ba47b
Commits on Aug 12, 2026
- fix(cli): bind scoped session selectors before reads
  S2thend
  committed
  e12f8e6
- fix(migration): close scoped target binding lifecycle
  S2thend
  committed
  2d175d0
- fix(identity): freeze Composer keys before Store reconciliation
  S2thend
  committed
  0f3eace
- fix(storage): reconcile scoped logical sessions safely
  S2thend
  committed
  55063b9
- test(storage): prove scoped integrity under faults
  S2thend
  committed
  ad84152
- feat(lib): publish stable session integrity contracts
  S2thend
  committed
  28202dc
- fix(io): fail closed across archive and database reads
  S2thend
  committed
  1dbbcde
- feat(cli): expose scoped addressing and safe diagnostics
  S2thend
  committed
  aa33cf7
- test(cli): lock the corrective structured-output contract
  S2thend
  committed
  a3411a2
- test(compatibility): normalize v0.16 SQLite fixture headers
  S2thend
  committed
  33abf42
- build(release): validate the exact packed candidate
  S2thend
  committed
  e3c5aa4
- docs(spec): record completed integrity implementation
  S2thend
  committed
  cf68af9
- fix(storage): add bounded Composer SQLite readers
  S2thend
  committed
  37c2e6a
- fix(store): reconcile physical occurrences deterministically
  S2thend
  committed
  661f16c
- fix(scope): canonicalize public paths and ambiguity metadata
  S2thend
  committed
  8c4843b
- fix(storage): enforce scoped metadata-first session hydration
  S2thend
  committed
  8b4e51b
- test(storage): lock catalog privacy and occurrence integrity
  S2thend
  committed
  4ca8bb8
- fix(migration): bind targets through bounded scoped reads
  S2thend
  committed
  1b4b990
- fix(cli): round-trip scoped ambiguity through bound catalogs
  S2thend
  committed
  01f4cc2
- fix(backup): bound snapshot session counting reads
  S2thend
  committed
  edc8428
- fix(api): sanitize scoped metadata and timestamp provenance
  S2thend
  committed
  42f740a
- chore(release): complete private source-limit preflight
  S2thend
  committed
  49c75a6
- fix(compat): reproduce exact v0.16 tool projections
  S2thend
  committed
  b59c098
- fix(lib): preserve v0.16 workspace and message shape
  S2thend
  committed
  499fa49
- fix(storage): ignore pre-existing null Composer payloads
  S2thend
  committed
  1b25807
- fix(storage): preserve the complete v0.16 Composer sequence
  S2thend
  committed
  18635e4
- test(compat): lock nullable v0.16 bubble identity
  S2thend
  committed
  20fe98a
- docs(release): require exhaustive v0.16 corpus certification
  S2thend
  committed
  0a761d1
- test(compat): bound the v0.16 corrective exceptions
  S2thend
  committed
  365ac53
- chore(release): freeze implementation evidence for T114
  S2thend
  committed
  19bdc5d
- chore(release): record the frozen T114 validation
  S2thend
  committed
  b47626c
- fix(cli): execute through installed package bin links
  S2thend
  committed
  0ac2b58
Commits on Aug 13, 2026
- fix(merge): preserve Composer identity through exact alignment
  S2thend
  committed
  5a0ae5b
- fix(storage): bind scoped hydration to selected sources
  S2thend
  committed
  2e7198f
- fix(lib): correct persisted search and export projections
  S2thend
  committed
  7ccc122
- fix(parser): enforce effective source-read boundaries
  S2thend
  committed
  42b2656
- fix(backup): bind published permissions to archive inode
  S2thend
  committed
  ae776f1
- fix(restore): publish only integrity-verified archive entries
  S2thend
  committed
  7d45388
- fix(release): verify one candidate across supported runtimes
  S2thend
  committed
  0119f2b
- fix(migrate): bind every selector to the scoped logical catalog
  S2thend
  committed
  40a877b
- test(matrix): execute real Store and merged carriers
  S2thend
  committed
  fddb52d
- fix(scope): enforce Store representation boundaries
  S2thend
  committed
  6cedd1b
- fix(restore): confine integrity-validated archive publication
  S2thend
  committed
  7f90889
- fix(backup): make archive publication and restore recovery honest
  S2thend
  committed
  1ef40e4
- fix(backup): bind post-commit recovery to published inodes
  S2thend
  committed
  4895b40
- test(compat): move proprietary consumer checks outside CI
  S2thend
  committed
  0592096
- docs(compat): reconcile release contracts after integrity audit
  S2thend
  committed
  bfd5179
- chore(spec): reopen and map final integrity gates
  S2thend
  committed
  660e358
- fix(temp): isolate stale recovery by PID namespace
  S2thend
  committed
  ce942f8
- fix(api): restore packed declaration documentation gate
  S2thend
  committed
  9c55458
- fix(temp): version namespace-aware recovery markers
  S2thend
  committed
  0f74c9a
- fix(restore): fail closed after publication
  S2thend
  committed
  db38ce1
- test(compat): formalize legacy fallback ID materialization
  S2thend
  committed
  6a6231b
- fix(scope): reject mismatched transcript workspace hints
  S2thend
  committed
  f4d6881
- test(compat): compare full v0.16 public shapes
  S2thend
  committed
  15bd903
- fix(migrate): enforce destination force preflight
  S2thend
  committed
  3c40630
- fix(identity): preserve logical session and merge compatibility
  S2thend
  committed
  10b26e6
- fix(migrate): bind scoped targets to physical carriers
  S2thend
  committed
  f236bd4
- fix(backup): enforce workspace-scoped archive isolation
  S2thend
  committed
  11499f6
- docs(spec): lock 0.18 session integrity contracts
  S2thend
  committed
  1375727
- docs(release): accept bounded derived harness ancestry
  S2thend
  committed
  55adbad
- docs(spec): bound the approved historical exception
  S2thend
  committed
  f675ae6
- fix(release): verify exact artifact compatibility gates
  S2thend
  committed
  0b42e4c
- docs(release): document protected trusted publishing
  S2thend
  committed
  e82b5e2
- fix(release): bind approval to the publishing job
  S2thend
  committed
  2dfc2de
- docs(release): align trusted publisher configuration
  S2thend
  committed
  997e6b9
- test(release): update aggregate publish fault oracle
  S2thend
  committed
  af18ece
- fix(deps): synchronize pnpm runtime resolutions
  S2thend
  committed
  3ca9050
- fix(docs): verify every localized API example
  S2thend
  committed
  b81193f
- docs(release): make private candidate gates reproducible
  S2thend
  committed
  7403197
- fix(package): ship every linked release document
  S2thend
  committed
  582a01a
- fix(release): make candidate handoff fail fast
  S2thend
  committed
  d2dc87d
- docs(verification): split T113 compatibility lanes
  S2thend
  committed
  64d25ad
- test(release): lock the two-lane T113 contract
  S2thend
  committed
  01fe4cc
Commits on Aug 14, 2026
- test(release): bound T113 to private sampled certification
  S2thend
  committed
  2ba091f
- test(integrity): close post-audit release-gate gaps
  S2thend
  committed
  8df2968
- docs(release): remove feature-local workspace paths
  S2thend
  committed
  0ed93b6
- fix(release): seal source-limit preflight boundaries
  S2thend
  committed
  a059173
- fix(release): close preflight policy escape paths
  S2thend
  committed
  74fb557
- fix(identity): restore v0.16 case-sensitive session IDs
  S2thend
  committed
  2f35400
- docs(compatibility): codify byte-exact session identity
  S2thend
  committed
  46febb9
- docs(release): define raw replica coverage state
  S2thend
  committed
  88ddeb2
- fix(release): require formatting before packaging
  S2thend
  committed
  67e4e21
- test(compatibility): detect optional-shape and status drift
  S2thend
  committed
  72e25f6
- test(release): isolate feature gates from inherited fixtures
  S2thend
  committed
  61ad96c
Commits on Aug 16, 2026

Commits

Commits on Aug 5, 2026

Commits on Aug 12, 2026

Commits on Aug 13, 2026

Commits on Aug 14, 2026

Commits on Aug 16, 2026