Skip to content

P0-A: SCL verified live IED identity integrated with exact engine pin - #624

Draft
masarray wants to merge 12 commits into
fix/m217m-ssot-datamodel-focused-admission-20261017from
fix/p0-a-identity-scl-verified-consumer-20261019
Draft

masarray wants to merge 12 commits into
fix/m217m-ssot-datamodel-focused-admission-20261017from
fix/p0-a-identity-scl-verified-consumer-20261019

Conversation

@masarray

@masarray masarray commented Oct 19, 2026 •

Copy link
Copy Markdown
Owner

P0-A — Consumer identity authority, trial only

Stacked on ARSAS draft PR #621 baseline 3276b0e5068ce97a5d65adbf47c05291630cfeaf.

  • Pass selected SCL AccessPoint through SHA-256-verifying TrustedSclIdentityAuthority to the engine's strict topology, endpoint and raw-domain matcher.
  • Synthetic 5-LD SIEBCU identity regression verifies full name and original MMS domain reference projection; wrong AP must fail closed.
  • Exact engine pin ccf31f60095ea65f9095514f0fa0102060962049, engine PR docs: publish ARSAS 1.6.30 release notes #177. Retain original 51c2eefd61d6bcbe1116fda6b781b74bb9cf06da as previousIdentityTrialPin; retain all historical physical fields unmodified. p0AIdentityTrial explicitly forbidden from physical/mainline promotion.
  • PowerShell ancestry gate validates original M2.17-K full lineage then exactly selected P0-A SHA, CI run, source PR, no-write, and field qualification flags. Added negative tests for wrong SHA/parent/CI/PR/field promotion.

Tests

Engine Windows CI #39228439974 SUCCESS, 1152/1152. ARSAS early CI 39227730318 found four failures due to old exact pin guards (2365/2369 PASS); corrected by new historically checked code-only ancestry gate; new exact consumer SHA 11a2e81229d73ef6502d81c51a6176122b724501 Windows Build #39229020571 and installer #39229020603 underway. Other completed gates: SCL R7, mainline readiness for stacked PR, reference guard successful.

No write during identity discovery. Never promote without physical IED acceptance; leave PR draft.

@masarray masarray changed the title P0-A: verified SCL identity across engine and ARSAS consumer (stacked on #621) P0-A: SCL verified live IED identity integrated with exact engine pin Oct 19, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant