feat: add normalized workflow evidence - #13
Conversation
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: ae7cd6265c
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| const rebuilt = buildEvidenceReceipt(found, { generatedAt: receipt.generatedAt }); | ||
| if (JSON.stringify(rebuilt.integrity) !== JSON.stringify(receipt.integrity)) { | ||
| issue(issues, "receipt-integrity-inventory-mismatch", "Receipt integrity inventory does not match current canonical evidence."); |
There was a problem hiding this comment.
When any non-integrity field in evidence-receipt.json is altered—such as completeness, task status, or usage—this check still passes because only the rebuilt integrity inventory is compared and the receipt itself is excluded from that inventory. All canonical file hashes therefore remain valid while cewp run verify reports success for a falsified portable receipt; compare the complete rebuilt receipt using the stored generatedAt, not only its integrity property.
AGENTS.md reference: AGENTS.md:L5-L5
Useful? React with 👍 / 👎.
| checkpointId: binding.workflow.checkpointId, | ||
| owner: binding.execution.owner, | ||
| backend: binding.execution.backend, | ||
| status: "active", |
There was a problem hiding this comment.
For a binding with references.worktree, this record is created as permanently active, but checkpoint completion, workflow finalization, and binding replacement never transition or remove integration/ownership.json. Because loadOwnershipRecords treats every non-released record as live, a completed native or audit workflow can indefinitely block a later checkpoint or run from claiming the same host-owned worktree; release the claim on terminal checkpoint transitions or provide an explicit handoff path.
AGENTS.md reference: AGENTS.md:L6-L6
Useful? React with 👍 / 👎.
Summary
Validation
This is part 3 of the ordered Phase 11-14 publication series.