Add: dynamic schema RFC for user-defined keys (#39)

.github/workflows/trust.yml

@@ -53,16 +53,51 @@ jobs:
           MIRROR="${RUNNER_TEMP}/specsync-${VERSION}-mirror"
           mkdir -p "$MIRROR"
           BASE="https://github.com/CorvidLabs/spec-sync/releases/download/v${VERSION}"
+          curl_retry() {
+            curl --retry 5 --retry-all-errors --retry-delay 2 -fsSL "$@"
+          }
           for asset in \
             specsync-macos-aarch64.tar.gz \
             specsync-macos-x86_64.tar.gz
           do
-            curl -fsSL "${BASE}/${asset}" -o "${MIRROR}/${asset}"
-            curl -fsSL "${BASE}/${asset}.sha256" -o "${MIRROR}/${asset}.sha256"
+            curl_retry "${BASE}/${asset}" -o "${MIRROR}/${asset}"
+            curl_retry "${BASE}/${asset}.sha256" -o "${MIRROR}/${asset}.sha256"
             (cd "$MIRROR" && shasum -a 256 -c "${asset}.sha256")
           done
           echo "path=${MIRROR}" >> "$GITHUB_OUTPUT"
 
+      # Trust v1.0.1 downloads Fledge into ${RUNNER_TEMP}/corvid-trust-fledge and
+      # skips when the binary already exists. Preseed with retries so a flaky
+      # GitHub Releases transfer cannot fail the whole gate (curl exit 18).
+      - name: Preseed Fledge 1.7.0 for Trust
+        run: |
+          set -euo pipefail
+          INSTALL_ROOT="${RUNNER_TEMP}/corvid-trust-fledge"
+          case "$(uname -m)" in
+            arm64) asset="fledge-macos-aarch64"
+                   sha="21d0916d52ef14e6d33e3967417773369e047a0311e66bbb1eecc8f69332a040" ;;
+            x86_64) asset="fledge-macos-x86_64"
+                    sha="9b93babd60f87dc67c1df1902b35ab71c06912a267821c05688e6cd842c71072" ;;
+            *) echo "::error::unsupported arch $(uname -m)"; exit 1 ;;
+          esac
+          mkdir -p "$INSTALL_ROOT/bin"
+          if [ -x "$INSTALL_ROOT/bin/fledge" ]; then
+            actual="$(shasum -a 256 "$INSTALL_ROOT/bin/fledge" | awk '{print $1}')"
+            if [ "$actual" = "$sha" ]; then
+              echo "Fledge already present at $INSTALL_ROOT/bin/fledge"
+              exit 0
+            fi
+          fi
+          curl --retry 5 --retry-all-errors --retry-delay 2 -fsSL \
+            "https://github.com/CorvidLabs/fledge/releases/download/v1.7.0/$asset" \
+            -o "$INSTALL_ROOT/bin/fledge"
+          actual="$(shasum -a 256 "$INSTALL_ROOT/bin/fledge" | awk '{print $1}')"
+          if [ "$actual" != "$sha" ]; then
+            echo "::error::Fledge 1.7.0 checksum mismatch (expected $sha, got $actual)"
+            exit 1
+          fi
+          chmod +x "$INSTALL_ROOT/bin/fledge"
+
       - name: CorvidLabs Trust gate
         id: trust
         uses: CorvidLabs/trust@c8f969a12209575877b5eca1ec557431621381e0 # v1.0.1

.specsync/change-sequence.json

@@ -1,6 +1,6 @@
 {
   "schema_version": 1,
-  "sequence": 25,
-  "id": "CHG-0025-aps-schema-self-describing-contract-endpoint-issue-32",
+  "sequence": 27,
+  "id": "CHG-0027-preseed-fledge-with-curl-retries-in-trust-workflow-for-issue-39-ci-flake",
   "acknowledged_collisions": []
 }

.specsync/changes/CHG-0003-archive-merged-v1-specsync-change-and-publish-aps-v1-1-goal/approvals.json

@@ -104,6 +104,13 @@
       "timestamp": 1784419762,
       "digest": "fadc9465f3191172f40ce73fe7364ffa27f4f3e618e2e0a0a2a876726f4072a4",
       "note": null
+    },
+    {
+      "gate": "acceptance",
+      "actor": "agent:cursor",
+      "timestamp": 1784476705,
+      "digest": "d5ce0d1f66abcc4795288b0e7c58ce496e2f939e28275852c6ca9230e9f166af",
+      "note": "Re-accept after #39 SpecSync stale sweep."
     }
   ],
   "reopenings": [
@@ -1534,6 +1541,125 @@
       },
       "stale_acceptance_input_digest": "0b33390f2dd715ddc7a4cd6746582b38cbd6a934bd5cb1a536681eacc342cb07",
       "current_acceptance_input_digest": "9431c62c0f2aebc5b04026bce0b883448ce3ec9907ac5a75bbe2094e65844b6a"
+    },
+    {
+      "schema_version": 1,
+      "change_id": "CHG-0003-archive-merged-v1-specsync-change-and-publish-aps-v1-1-goal",
+      "actor": "agent:cursor",
+      "reason": "Rebind stale exact-only evidence after dynamic-schema RFC (#39) sweep.",
+      "timestamp": 1784475761,
+      "from_state": "accepted",
+      "to_state": "verifying",
+      "superseded_approval": {
+        "gate": "acceptance",
+        "actor": "0xLeif",
+        "timestamp": 1784419762,
+        "digest": "fadc9465f3191172f40ce73fe7364ffa27f4f3e618e2e0a0a2a876726f4072a4",
+        "note": null
+      },
+      "prior_verification": {
+        "timestamp": 1784419755,
+        "commit": "be4abfb477552bc0a07f10d51d33308608587b3d",
+        "contract_digest": "641111b8f92bdfff2ba1f3bcda40f5299d9dc8a65449cd2a4a49333fac21100f",
+        "workspace_digest": "513d04709c5bd3d1346e15db2473f03c23de3257b855f568fc3ff21c4b95ed52",
+        "acceptance_input_digest": "9431c62c0f2aebc5b04026bce0b883448ce3ec9907ac5a75bbe2094e65844b6a",
+        "acceptance_manifest": {
+          "schema_version": 1,
+          "entries": [
+            {
+              "path": ".specsync/.gitignore",
+              "kind": "file",
+              "mode": 33188,
+              "payload_digest": "a3129d6f93250ade8dbacfc73bc7eeae0cc47c2f7032142ca47cb4f1ffb2483e",
+              "entry_digest": "9badbf40b83d05f58bafda0fc2cafccfe726e4da7e6e67ef513e822989e13f04",
+              "owners": [
+                "@exact:delivery"
+              ]
+            },
+            {
+              "path": ".specsync/change-sequence.json",
+              "kind": "file",
+              "mode": 33188,
+              "payload_digest": "ddf1f4cbb0fd983c8356a34b9b4f4ef77ca22764ac2ec36b223431402c043328",
+              "entry_digest": "7fd95f31d540d3d3e7128fbd03cb3207a3da428c98a81515a76b7dfc9b34d582",
+              "owners": [
+                "@exact:delivery"
+              ]
+            },
+            {
+              "path": ".specsync/config.toml",
+              "kind": "file",
+              "mode": 33188,
+              "payload_digest": "54a83f6a4a252649bac390d2e936aa0815711fba86b6bfc8ea8fff2fffdfd29b",
+              "entry_digest": "e60f979233a7db75ce63f4ef42d6f1f7676ad1655a438b9baf78558aba60ec3e",
+              "owners": [
+                "@exact:delivery"
+              ]
+            },
+            {
+              "path": ".specsync/registry.toml",
+              "kind": "file",
+              "mode": 33188,
+              "payload_digest": "c423be1a5cf87318f85dc252fe0acd1c1486c5224ddc2d8e19bea1ac9c69c820",
+              "entry_digest": "7e1f068900ced849b8d1028ca40165fbdc5280ae7f53452f0e57e2710d895848",
+              "owners": [
+                "@exact:delivery"
+              ]
+            },
+            {
+              "path": ".specsync/sdd.json",
+              "kind": "file",
+              "mode": 33188,
+              "payload_digest": "2d5fb3058b1ee4ce584c3cda9410c193c4893e272ed459205e58bfde06afc7b0",
+              "entry_digest": "8c6b11fc5787eb04e7ee651eb15fbf98fc3ea22db37e65423e3d75f99c09df19",
+              "owners": [
+                "@exact:delivery"
+              ]
+            },
+            {
+              "path": ".specsync/version",
+              "kind": "file",
+              "mode": 33188,
+              "payload_digest": "f9893302cd3158f3b5aea394dcd2a91574869e9e6ff69e9235b10a3bf8c983fb",
+              "entry_digest": "f980ba79f6c953bed30303c6b87d8e868ad6a7f4114bf0e745c9099255e665b0",
+              "owners": [
+                "@exact:delivery"
+              ]
+            },
+            {
+              "path": "GOAL.md",
+              "kind": "file",
+              "mode": 33188,
+              "payload_digest": "20146bfa50165791ec6059f6245716170c43b23106e5123ec590a306a590a966",
+              "entry_digest": "68fbffe2a6cce1f402c5dcebbd733d2b1f3d5e3d259a0ee91dfc23bbc034fc56",
+              "owners": [
+                "@exact:delivery"
+              ]
+            },
+            {
+              "path": "README.md",
+              "kind": "file",
+              "mode": 33188,
+              "payload_digest": "f1308885314eb98dee9ded8d43319dc507054e9651636f325b35ccd33954da86",
+              "entry_digest": "ad89330589c0539409ff3a743f533d24af1eba418319f70d35041626b61ce709",
+              "owners": [
+                "@exact:delivery"
+              ]
+            }
+          ]
+        },
+        "passed": true,
+        "commands": [
+          {
+            "command": "fledge lanes run verify",
+            "success": true,
+            "exit_code": 0
+          }
+        ],
+        "requirement_ids": []
+      },
+      "stale_acceptance_input_digest": "9431c62c0f2aebc5b04026bce0b883448ce3ec9907ac5a75bbe2094e65844b6a",
+      "current_acceptance_input_digest": "32828900f0e77cb92b03afe7fd86f69e6da6cecc0ee24d1c862d751a7ffaa3e1"
     }
   ]
 }

.specsync/changes/CHG-0003-archive-merged-v1-specsync-change-and-publish-aps-v1-1-goal/state.json

@@ -9,7 +9,7 @@
   "canonical_applied": true,
   "base_commit": "c02a551afc126ca5394c62baa557ceaf30fd5bc5",
   "created_at": 1784398063,
-  "updated_at": 1784419762,
+  "updated_at": 1784476705,
   "affected_specs": [],
   "affected_paths": [
     ".specsync/",

.specsync/changes/CHG-0003-archive-merged-v1-specsync-change-and-publish-aps-v1-1-goal/verification-attempts.json

@@ -195,6 +195,21 @@
         }
       ],
       "requirement_ids": []
+    },
+    {
+      "timestamp": 1784476682,
+      "commit": "6806a8478895404e8a68a02ff15b3fbc3a984da8",
+      "contract_digest": "641111b8f92bdfff2ba1f3bcda40f5299d9dc8a65449cd2a4a49333fac21100f",
+      "workspace_digest": "10ac822b7187d18bdcdd0cb6af19143423a745baa7f4b993073f757d9d7d66ab",
+      "passed": true,
+      "commands": [
+        {
+          "command": "fledge lanes run verify",
+          "success": true,
+          "exit_code": 0
+        }
+      ],
+      "requirement_ids": []
     }
   ]
 }

.specsync/changes/CHG-0003-archive-merged-v1-specsync-change-and-publish-aps-v1-1-goal/verification.json

@@ -1,9 +1,9 @@
 {
-  "timestamp": 1784419755,
-  "commit": "be4abfb477552bc0a07f10d51d33308608587b3d",
+  "timestamp": 1784476682,
+  "commit": "6806a8478895404e8a68a02ff15b3fbc3a984da8",
   "contract_digest": "641111b8f92bdfff2ba1f3bcda40f5299d9dc8a65449cd2a4a49333fac21100f",
-  "workspace_digest": "513d04709c5bd3d1346e15db2473f03c23de3257b855f568fc3ff21c4b95ed52",
-  "acceptance_input_digest": "9431c62c0f2aebc5b04026bce0b883448ce3ec9907ac5a75bbe2094e65844b6a",
+  "workspace_digest": "10ac822b7187d18bdcdd0cb6af19143423a745baa7f4b993073f757d9d7d66ab",
+  "acceptance_input_digest": "32828900f0e77cb92b03afe7fd86f69e6da6cecc0ee24d1c862d751a7ffaa3e1",
   "acceptance_manifest": {
     "schema_version": 1,
     "entries": [
@@ -71,8 +71,8 @@
         "path": "GOAL.md",
         "kind": "file",
         "mode": 33188,
-        "payload_digest": "20146bfa50165791ec6059f6245716170c43b23106e5123ec590a306a590a966",
-        "entry_digest": "68fbffe2a6cce1f402c5dcebbd733d2b1f3d5e3d259a0ee91dfc23bbc034fc56",
+        "payload_digest": "1f202b1275871514d91e71bf71089add50fd54b7b6a01e4c2758f37ea7d7de13",
+        "entry_digest": "063f926655d07fb9d5f645ac5f092920c81ab092aaee19106d431da7b0a96820",
         "owners": [
           "@exact:delivery"
         ]
@@ -81,8 +81,8 @@
         "path": "README.md",
         "kind": "file",
         "mode": 33188,
-        "payload_digest": "f1308885314eb98dee9ded8d43319dc507054e9651636f325b35ccd33954da86",
-        "entry_digest": "ad89330589c0539409ff3a743f533d24af1eba418319f70d35041626b61ce709",
+        "payload_digest": "5c205853cb5bf80d2432646cb0962fe62e1b151b0d83f0a9f899b9bc849d24a1",
+        "entry_digest": "0742a72050e218d3a66201f0d069003a0e43f40f564136fc45ae4828141745fb",
         "owners": [
           "@exact:delivery"
         ]