[WRONG BRANCH] chore: temporary CL-10 rebase replay - #1586

Closed

Wibias wants to merge 147 commits into

tmp/cl10-rebase-20260813-0719from

feat/cl-10-public-evidence-contract

Commits on Aug 12, 2026

docs(lab): define CL-10 public evidence contract
Wibias
committed
6760e07
docs: add CL-10 public evidence design
Wibias
committed
d1933ba
docs(lab): plan CL-10 implementation
Wibias
committed
bbb17bf
chore: apply CL-10 review amendments
Wibias
committed
e7b287a
fix: rerun CL-10 contract amendments
Wibias
committed
2e1c06e
docs(lab): address CL-10 contract review
Wibias
committed
523391c
test(lab): define CL-10 public evidence boundary
Wibias
committed
f60dd2e
feat(lab): add CL-10 public id domains
Wibias
committed
e28a7bf
feat(lab): define closed CL-10 public DTOs
Wibias
committed
a9e6703
feat(lab): add public route registry hash domain
Wibias
committed
51d3d7c
feat(lab): add reviewed public route registry authority
Wibias
committed
0ff05c3
fix(lab): keep record shape aligned with frozen CL-10 schema
Wibias
committed
dcc1f8b
feat(lab): add strict CL-10 public validators
Wibias
committed
5658a35
feat(lab): add allowlist-only CL-10 public projector
Wibias
committed
0850b9f
feat(lab): expose CL-10 public evidence boundary
Wibias
committed
fe661c8
feat(lab): export CL-10 public evidence APIs
Wibias
committed
e1d54ea
test(lab): define CL-10 public bundle signature boundary
Wibias
committed
0448187
feat(lab): separate public bundle digest domain
Wibias
committed
80ec386
feat(lab): build bounded deterministic public bundles
Wibias
committed
5ee43c6
feat(lab): sign public bundles with local Ed25519 identity
Wibias
committed
2aa9fd8
feat(lab): add bounded local public bundle storage
Wibias
committed
4c6141e
feat(lab): expose CL-10 public bundle APIs
Wibias
committed
c48fd14
fix(lab): derive public publisher key from PEM
Wibias
committed
e61e63c
test(lab): cover CL-10 community quarantine and revocation
Wibias
committed
71dd401
test(lab): cover CL-10 publisher continuity
Wibias
committed
1aa2d3b
feat(lab): add CL-10 community and revocation types
Wibias
committed
9792248
feat(lab): add public evidence community paths
Wibias
committed
264b61a
feat(lab): validate community evidence authority
Wibias
committed
0f6495b
feat(lab): add signed public evidence revocation
Wibias
committed
68ff657
feat(lab): add quarantined community evidence cache
Wibias
committed
91a0440
refactor(lab): reserve public projection aggregate API
Wibias
committed
affa7d0
feat(lab): add local public evidence operator surfaces
Wibias
committed
b73c0c6
feat(lab): purge local public evidence copies
Wibias
committed
ae92e94
feat(lab): integrate CL-10 export purge semantics
Wibias
committed
3ea397f
fix(lab): align public operator with current CL-10 types
Wibias
committed
f449db9
feat(lab): export CL-10 community modules
Wibias
committed
63161a0
fix(lab): align community tests with canonical storage API
Wibias
committed
5de2aef
feat(lab): add CL-10 local public evidence CLI
Wibias
committed
7e6c586
fix(lab): align public verification summary with CLI
Wibias
committed
3463ffc
test(lab): cover CL-10 local surfaces and community UI
Wibias
committed
c81066c
feat(lab): add CL-10 management and community matrix surfaces
Wibias
committed
bfa84c8
fix(lab): align community authority with current registry and Fabric
Wibias
committed
e0494d2
test(lab): fail closed on unauthorised public artifacts
Wibias
committed
45d293f
fix(lab): require public_export authority before signing artifacts
Wibias
committed
030500a
fix(lab): reject unauthorised artifact bytes in local export store
Wibias
committed
c1f2a90
fix(lab): derive purge publisher public key from PEM
Wibias
committed
7abd61c
test(lab): freeze CL-10 public wire contract
Wibias
committed
4a3adfa
fix(lab): reject ambiguous community JSON
Wibias
committed
e1841d5
docs(lab): freeze CL-10 canonical wire contract
Wibias
committed
c70d2ec
docs(lab): specify CL-10 canonical signing bytes
Wibias
committed
9016645
test(lab): cover duplicate keys at public API boundary
Wibias
committed
1d1175f
feat(lab): add strict public JSON parser
Wibias
committed
4cdd7ed
fix(lab): preserve strict JSON at management boundary
Wibias
committed
d8b7f18
chore(lab): export strict public JSON parser
Wibias
committed
920809c
chore(lab): keep management route diff minimal
Wibias
committed
3dae175
refactor(lab): share strict public JSON parser
Wibias
committed
3756420
refactor(lab): preserve strict JSON error contracts
Wibias
committed
733202d
fix(lab): verify public files with strict JSON
Wibias
committed
4872259
fix(lab): read local public exports with strict JSON
Wibias
committed
c72eb06
test(lab): reject non-canonical publisher keys
Wibias
committed
83e8240
fix(lab): require canonical publisher key Base64
Wibias
committed
a0b46aa
test(settings): expose startup-health seam regression
Wibias
committed
a166432
fix(settings): add startup-health dependency seam
Wibias
committed
451a667
fix(settings): inject startup-health reads
Wibias
committed
d83e00d
test(settings): isolate startup-health probes
Wibias
committed
7584983
fix(settings): restore sidecar reasoning projection
Wibias
committed
51a4c03
test(settings): type startup-health seam fixture
Wibias
committed
2511a7e
fix(lab): clarify public evidence storage paths
Wibias
committed
b4279ec
fix(lab): enforce public record authority before signing
Wibias
committed
ca63d77
fix(lab): add fail-closed public evidence privacy scan
Wibias
committed
a590fbc
fix(lab): export public privacy validator
Wibias
committed
e8d43a1
fix(lab): harden publisher key and pre-sign gates
Wibias
committed
584b13b
fix(lab): reuse hardened publisher signing for revocations
Wibias
committed
9d39ba3
fix(lab): bound strict public JSON recursion
Wibias
committed
8de5ccd
fix(lab): bind public export checks to file descriptors
Wibias
committed
2b40d06
fix(lab): paginate public selection and minimize time metadata
Wibias
committed
fafed85
fix(lab): bound community parsing and avoid repeated verification
Wibias
committed
0c582d8
fix(lab): make public evidence purge deletion-first
Wibias
committed
de7bad9
fix(lab): continue sensitive purge after export cleanup errors
Wibias
committed
e370a3e
fix(cli): fail public verify on invalid evidence
Wibias
committed
8992153
fix(lab): classify public management API failures safely
Wibias
committed
7baa0de
fix(gui): keep community evidence page-global
Wibias
committed
5fd15ff
fix(gui): render community evidence as global context
Wibias
committed
0e38cbc
test(gui): pin community evidence quarantine contracts
Wibias
committed
a7e4f1c
test(lab): harden public wire parser regressions
Wibias
committed
c6fd987
test(lab): pin public authority privacy and time boundaries
Wibias
committed
1d75f83
test(lab): align public evidence fixture with manifest authority
Wibias
committed
deb1467
test(lab): refresh public wire vector for reviewed assertion
Wibias
committed
dd8d9ee
test(lab): use reviewed assertion in publisher continuity fixture
Wibias
committed
84a2416
test(lab): keep community fixtures inside reviewed authority
Wibias
committed
69181b0
test(lab): use explicit shared export directory
Wibias
committed
52bebd9

Commits on Aug 13, 2026

test(codex): allow degraded catalog retry budget
Wibias
committed
9f9d26c
revert test-only formatting churn
Wibias
committed
21e5250
ci: give degraded catalog sync test retry headroom
Wibias
committed
f66db15
docs: plan CL-10 deep review hardening
Wibias
committed
2b6b186
test: cover CL-10 deep review regressions
Wibias
committed
0c43db9
fix(lab): reject invalid Unicode in JCS
Wibias
committed
5d25097
fix(lab): freeze canonical public bundle order
Wibias
committed
97c8f8e
feat(lab): add crash-safe private file publisher
Wibias
committed
0f72d68
fix(lab): validate before key mutation and verify canonical order
Wibias
committed
2f3e1e8
fix(lab): validate revocations before publisher key access
Wibias
committed
20c44de
fix(lab): require exact public assertion authority
Wibias
committed
eacc30d
fix(lab): reject unbracketed IPv6 in public evidence
Wibias
committed
509f8ec
fix(lab): bound duplicate-key diagnostics
Wibias
committed
27f64d8
fix(lab): harden community evidence quarantine
Wibias
committed
0f824e0
fix(lab): publish public exports atomically
Wibias
committed
8650c53
feat(lab): add public origin provenance path
Wibias
committed
b764c45
refactor(lab): use immutable public origin markers
Wibias
committed
874f6a7
feat(lab): persist immutable public export provenance
Wibias
committed
d4186b9
fix(lab): remove local paths and event ids from public DTOs
Wibias
committed
45251f5
feat(lab): export public provenance and file helpers
Wibias
committed
efa5acc
fix(lab): purge by durable public origin provenance
Wibias
committed
7cf94ff
fix(lab): reclaim stale private-file staging safely
Wibias
committed
da79a79
fix(lab): keep public storage locator opaque
Wibias
committed
1a494c1
fix(ci): keep per-test timeout policy out of shard batches
Wibias
committed
6107167
fix(lab): recover stale private stages before reads
Wibias
committed
3e105e8
fix(lab): recover stale publisher stages before reads
Wibias
committed
7eef2f3
fix(lab): recover stale export stages before reads
Wibias
committed
45600d8
fix(lab): exclude private staging files from cache views
Wibias
committed
27cdde5
test(lab): align CL-10 fixtures with reviewed assertions
Wibias
committed
d94b802
fix(lab): ignore private staging files in origin quota
Wibias
committed
4c8f6fe
fix(lab): recover community staging files safely
Wibias
committed
7bc6db8
test(lab): refresh CL-10 frozen wire vector
Wibias
committed
d13e8e5
test(lab): pin opaque CL-10 public surface DTOs
Wibias
committed
61ae0c4
test(lab): align public evidence fixtures with scenario authority
Wibias
committed
faab673
test(lab): align publisher continuity fixture authority
Wibias
committed
f34d60e
test(lab): align community fixtures with reviewed assertions
Wibias
committed
f56f8bf
test(lab): cover CL-10 lifecycle hardening
Wibias
committed
c95b2cd
test(lab): accept fail-closed public identifier rejection
Wibias
committed
a3a3eb5
fix(lab): scan decoded public artifact bytes
Wibias
committed
5678171
fix(lab): enforce authority and privacy in direct projector
Wibias
committed
b8b5fe5
fix(lab): enforce strict JSON width and string bounds pre-parse
Wibias
committed
9293f87
fix(lab): harden projector and public file boundary
Wibias
committed
635710b
test(lab): compare concrete revocation summaries
Wibias
committed
e9bfd18
Merge dev into feat/cl-10-public-evidence-contract
Wibias
committed
1994d9a
test(lab): freeze reviewed public route authority
Wibias
committed
903c383
fix(lab): narrow reviewed public route authority
Wibias
committed
b61b923
test(lab): require durable private-file publication
Wibias
committed
9227212
perf(lab): cache immutable public authority data
Wibias
committed
43c1c50
fix(lab): keep route authority source pin rebase-stable
Wibias
committed
adad56d
test(management): add typed startup-health fixture
Wibias
committed
bd6ff36
test(management): keep startup-health seam typed
Wibias
committed
60f5629
fix(lab): make private publication directory-durable on POSIX
Wibias
committed
eefb8bc
test(lab): pin reachable public route authority snapshot
Wibias
committed
03b3327
docs(lab): align hardening plan with durable publication
Wibias
committed
5ecdf63
test(codex): give degraded catalog sync its own timeout
Wibias
committed
bba85bb
test(management): type startup-health stream fixture
Wibias
committed
49924f3