feat(spec): flip #53/#54 verifierStatus stub->live (oracle verifiers shipped) - #228
Open
LamaSu wants to merge 1 commit into
Open
feat(spec): flip #53/#54 verifierStatus stub->live (oracle verifiers shipped)#228LamaSu wants to merge 1 commit into
LamaSu wants to merge 1 commit into
Conversation
…shipped) telemetry.envelope_conformance (#53) + telemetry.coverage_gate (#54) now have shipped oracle PrimitiveVerifiers (pcc-oracle feat/oracle-primitive-verifiers, PR #12): detectDrifts + checkSensorGaps over the hash-verified bundle, envelope/ thresholds from the policyHash-pinned policy, fail-closed throughout. Flip their verifierStatus stub->live so the eligibility lint stops capping them. #52 machine.execution_log stays stub (BLOCKED-on-#47: no registered kernel key source) and #55 process.batch_record stays stub (PARTIAL, composes #52). verifierStatus is excluded from VOCAB_MANIFEST_HASH (contractProjection), so the golden-hash test is unaffected. 41/41 evidence-primitives tests pass. SEQUENCING: merge ONLY AFTER pcc-oracle PR #12 merges + the oracle deploys, else the eligibility lint reports these eligible before the deployed oracle can clear them (fail-closed, but an eligible-but-cannot-settle gap). Lane: oracle-binding-lane.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Flip
verifierStatusstub→live for #53 + #54 (the oracle-bound pair)The oracle-side PrimitiveVerifiers for the two no-auth-dependency industrial primitives shipped in pcc-oracle PR #12 (
feat/oracle-primitive-verifiers), so their@pcc/specverifierStatusmoves stub→live:telemetry.envelope_conformance→src/verifiers/envelope-conformance.ts(detectDriftsover the hash-verifiedbundle.events; envelope built from policyHash-pinned params, never the bundle).telemetry.coverage_gate→src/verifiers/coverage-gate.ts(checkSensorGapsnegative gate over the hash-verified bundle).Both are mirror-by-value of the extracted
@pcc/specpredicates, parity-pinned, fail-closed throughout (proven: authenticated evidence clears; missing bundle / out-of-envelope / gapped fails closed).Staying
stub(correctly):machine.execution_log— BLOCKED-on-chore: impl-alfa-2 post-cascade lockfile + release-please health audit #47: no registered kernel-key source exists (the kernel signing address is never persisted to the gateway;KernelDTO.publicKeyiscrypto.randomBytes). Its verifier is built but fails closed until chore: impl-alfa-2 post-cascade lockfile + release-please health audit #47 ships + the gateway exposes the signing address +oracle.tswires a trustworthy signer into the primitive context.process.batch_record— PARTIAL (composes feat: PLR adapter Phase 1 — @pcc/adapter-pylabrobot + Python sidecar + OT-2 profile (impl-uniform) #52).⚠ Merge ordering (do not merge first)
Merge this only after pcc-oracle PR #12 merges + the oracle deploys. The oracle mirrors
@pcc/specby value (it does not import verifierStatus), so this flip only affects the gateway eligibility lint. If it lands before the oracle deploys, the lint (in enforcing mode) would report #53/#54-bearing CSDs tier-eligible while the deployed oracle still has no registered verifier for them → the settlement fails closed (safe — no wrongful release), but you get an "eligible-but-can't-settle" gap. Report-only lint (the default today) is unaffected either way.Safety
verifierStatusis excluded fromVOCAB_MANIFEST_HASH(contractProjectionomits it), so the golden-hash test is unchanged — this is not a vocabulary-contract change.evidence-primitivestests pass. The enforcing-lint test still caps below tier 2 (now on feat: PLR adapter Phase 1 — @pcc/adapter-pylabrobot + Python sidecar + OT-2 profile (impl-uniform) #52 /artifact.hash/ident.registered_key, which stay stub).Stacks on #224 (
feat/evidence-vocab-industrial). Base against master once #224 is merged; otherwise review after #224.🤖 Generated with Claude Code