feat(observation): define immutable PostgreSQL schema snapshot contract - #6
feat(observation): define immutable PostgreSQL schema snapshot contract#6seonghobae wants to merge 259 commits into
Conversation
|
Important Draft PR not reviewedDraft PRs are not automatically reviewed by default.
To automatically review draft PRs, update your CodeRabbit configuration: reviews:
auto_review:
drafts: trueThanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
seonghobae
left a comment
There was a problem hiding this comment.
Source Observation successor coordination: #46 is now exact d3c58b0c0722731c7c7ab185446586f0124514a0, with new backing-index key-shape RED ffe75eddf530ad3963c087afdfe1109da15bad14 after finding 5186585545. #6 source remains unchanged. Preserve sequence #46 causal repair + unchanged-head GREEN -> #45 complete ordinary/non-force adoption + fresh GREEN -> #6 adoption; do not duplicate the child fix or transfer predecessor evidence.
seonghobae
left a comment
There was a problem hiding this comment.
Final successor coordinate for this run: #46 3e45a345afa0c7f41cb54de55b64c2daf657d7dd, source repair e258b39474454b4c84f51f23dcfb6b00285f4db3. Preserve Source Observation stack order: unchanged-head #46 GREEN -> #45 complete ordinary/non-force adoption + fresh GREEN -> #6 adoption. #6 source remains unchanged; no predecessor execution evidence transfers.
seonghobae
left a comment
There was a problem hiding this comment.
Coordination checkpoint: keep #6 source unchanged. The current representation child is #45 6b2a8f555725dc79f60432afbc492d6005290a4a, whose active repair successor is #46 exact 4b025a671c0002ad9d79424f81a2933f4f9edd1b. #46 is behavioral RED active under review 5186802339: explicitly observed pg_index.indisready=false, indisvalid=false, or indislive=false is still accepted by the shared PK/UNIQUE backing-index coherence seam. RED commits are 681e280fa608b90495a035c04272bc89c546eaca (positive conperiod path) and ed4882e7138f8b055b2913a7b25b8089ddc1b95c (timing path), with doctoring 30b8a264... and code-current baseline 4b025a671.... Do not duplicate the child fix here. Causal order remains: #46 shared lifecycle repair -> unchanged-head Rust/Product/security/dependency/review GREEN -> complete ordinary/non-force adoption into #45 + fresh parent GREEN -> complete adoption into #6. No predecessor execution evidence transfers.
|
Fresh stack coordination: #46 Source Observation child is exact |
|
Concurrent coordination currentization: active Source Observation child #46 is now exact |
|
Final current coordination for this sweep: #46 is exact |
seonghobae
left a comment
There was a problem hiding this comment.
Source Observation coordination update: child #46 is now fe2b2b7c92e5fb2f7130e1d4737dd905e3c593d1 (Draft/mergeable), with lifecycle production repair ff842b358106c0adeda97fd2405952ff7be029b1. The shared backing-index predicate now rejects explicitly observed indisready=false, indisvalid=false, or indislive=false for both key timing and positive conperiod, while preserving None as unobserved. Do not duplicate this fix in #6 or partially cherry-pick the child. Required succession remains #46 unchanged-head Rust/Product/security/dependency/review GREEN -> complete ordinary/non-force adoption into #45 + fresh parent GREEN -> complete adoption here. #6 source remains unchanged until those gates exist.
seonghobae
left a comment
There was a problem hiding this comment.
Fresh coordination after docs currentization: child #46 exact is now 674696936dbf4189ae9e5a74f78d04ba8b39db32; production repair remains ff842b358106c0adeda97fd2405952ff7be029b1 (+3/-0 in the shared backing-index predicate). #46 remains Draft/source-repaired with exact-head acceptance pending. Keep #6 source unchanged until #46 unchanged-head GREEN, then #45 complete ordinary/non-force adoption + fresh GREEN, then complete adoption here.
seonghobae
left a comment
There was a problem hiding this comment.
Stack coordination only; #6 source remains unchanged. Current child authority is #46 30b47865ba333a7ded48fdd841fd81348e9c34f3, with lifecycle-completeness P1 active (5187402940 -> RED 9d9e8d9e35f008edf0e3359188723dd94db512c8). #45 remains 6b2a8f555725dc79f60432afbc492d6005290a4a. Do not implement the child fix independently in #6. Required succession remains #46 minimal shared-predicate repair + unchanged-head GREEN -> #45 complete ordinary/non-force adoption + fresh GREEN -> #6 adoption.
seonghobae
left a comment
There was a problem hiding this comment.
Fresh stacked coordination only; #6 source remains unchanged. Current child chain is #45 6b2a8f555725dc79f60432afbc492d6005290a4a -> #46 cdb50a49d6abb3101abb9498a88adf7fe0d890e0. #46 adopted ordinary-forward lifecycle-completeness production repair 384d1305f86c34c17cd40d7594f69e0a102bc26b and currentized its baseline, but exact-head acceptance is still absent: no PR-triggered workflow run, CodeRabbit-only status, and no local Rust toolchain. Keep #46 GREEN -> complete non-force #45 adoption + fresh parent GREEN -> #6 adoption; do not duplicate child source, attach transport, publish, or transfer predecessor/central evidence.
seonghobae
left a comment
There was a problem hiding this comment.
Fresh Source Observation coordination: keep #6 source unchanged. Current representation parent #45 remains exact 6b2a8f555725dc79f60432afbc492d6005290a4a; current child #46 is exact fcb75659c4c7ffc046c4c7187789ef3b5d53715d. #46 retained all production repairs and ordinary-forward repaired a newly verified P1 in stale retained fixtures (5187787381): the series through d704bf92... changes only nine contract-test files, adding current key-semantics/lifecycle evidence so tests reach their intended temporal/type/index assertions. Exact-head Rust/hosted acceptance is still absent, so no adoption is authorized. Required order remains #46 unchanged-head GREEN -> complete ordinary/non-force adoption into #45 + fresh parent GREEN -> #6 adoption. Do not duplicate or cherry-pick the child slice here.
seonghobae
left a comment
There was a problem hiding this comment.
Source Observation child coordination only; keep #6 source unchanged. Active representation child #46 is exact 1430947606da7392a9d167a618b07c26c5e84dae and now carries a verified column-collation semantic-identity/FK-consistency RED (5187855669 -> 8006b24f... -> 313f27c... -> 14309476...). Production repair is still missing, so no child execution evidence or adoption is authorized. Preserve stack order: #46 repair + one unchanged-head Rust/Product/security/dependency/review GREEN -> #45 complete ordinary/non-force adoption + fresh GREEN -> #6 adoption. No duplicate implementation in this parent.
seonghobae
left a comment
There was a problem hiding this comment.
Coordination-only review; Source Observation parent source remains unchanged. Representation child chain is #45 6b2a8f555725dc79f60432afbc492d6005290a4a -> #46 exact 122dfa983ef1c2a9a1f6a68882eb12461243155d. #46 now contains the column-collation production repair and hardened contracts but is SOURCE_REPAIRED / ACCEPTANCE_PENDING, not execution GREEN. Preserve stack order and do not reimplement this delta on #6. Only after #46 unchanged-head terminal GREEN may #45 adopt the complete child ordinary/non-force, earn fresh parent GREEN, and then propagate to #6.
seonghobae
left a comment
There was a problem hiding this comment.
Fresh stacked coordination: keep #6 source unchanged. Active child authority is now #46 exact 89f53ff08c9a1510b04b0207c2f6b10c1af0ed6e, Draft/mergeable but COLUMN_IDENTITY_RED_ACTIVE. The new PostgreSQL attidentity contract is test-first at 85f2eb0c..., with doctoring 9bcc5e66...; production family/digest integration is not present yet. Preserve the existing parent stack and do not copy/partially cherry-pick child deltas. Causal order remains #46 repair + unchanged-head GREEN -> #45 complete ordinary/non-force adoption + fresh GREEN -> #6 adoption. PostgreSQL transport stays after representation acceptance.
seonghobae
left a comment
There was a problem hiding this comment.
Fresh stacked coordination: keep #6 source unchanged. Active child #46 is exact da9e20ace19426a3a43d7f9400e034d1361204f7 and has repaired the attidentity representation gap, but exact-head native/Product acceptance has not run. Preserve the stack; no child delta copying here. Causal order remains unchanged-head #46 Rust 1.98 + hosted GREEN -> complete ordinary/non-force #45 adoption + fresh parent GREEN -> #6 adoption. PostgreSQL transport remains after representation acceptance.
seonghobae
left a comment
There was a problem hiding this comment.
Fresh Source Observation stack coordinate: #45 remains exact 6b2a8f555725dc79f60432afbc492d6005290a4a; its active child #46 is now exact 7386ffb46ac72fb5257ac2ffd50ef8baab672f5e, OPEN/Draft/mergeable. #46 ordinary-forward repaired a same-snapshot PostgreSQL identity/nullability contradiction after review 5188419794 (bd6da911... behavioral regression -> 00b166bf... production -> 0bba879d... doctoring -> 7386ffb4... Gap baseline).
No parent source adoption yet. #46 still has zero PR-triggered workflow runs on the exact head and only CodeRabbit status; repository-pinned Rust 1.98/native plus hosted acceptance are absent. Preserve the sequence: #46 unchanged-head GREEN -> complete ordinary/non-force adoption into #45 -> fresh #45 GREEN -> complete #45 adoption here. Do not partially cherry-pick, reimplement, flatten, or transfer predecessor execution evidence.
seonghobae
left a comment
There was a problem hiding this comment.
Fresh Source Observation stack coordination: #45 remains exact 6b2a8f555725dc79f60432afbc492d6005290a4a; its child #46 is now exact 2e2e5abb229c23bf6b7105b20f1fe2bc5ccdf4b9 with an active pg_attribute.attgenerated behavioral RED (5188836578 -> be3adfd0... -> 4708708c... -> 2e2e5abb...). The child is not source-repaired or GREEN.
Keep #6 source unchanged and preserve the stack. Propagation sequence remains #46 repair + unchanged-head acceptance -> complete ordinary/non-force adoption into #45 + fresh #45 acceptance -> complete adoption here. Do not duplicate the generation family or partially cherry-pick the RED/docs into this parent.
seonghobae
left a comment
There was a problem hiding this comment.
Final stack coordinate for this run: #45 stays exact 6b2a8f555725dc79f60432afbc492d6005290a4a; child #46 is now exact 292e996fb45275f120f097c819431b8aaf3ca3c0, with refined PostgreSQL 18 attgenerated RED and production repair still pending. Keep #6 unchanged. Required order remains #46 repair + unchanged-head Rust 1.98/hosted GREEN -> complete ordinary/non-force adoption into #45 + fresh #45 GREEN -> complete propagation here.
seonghobae
left a comment
There was a problem hiding this comment.
Stack authority refresh: #46 is now exact 1a8ff08e4751b0cf83831fc6159d878a4945e7c6, still Source Observation RED on missing PostgreSQL 18 attgenerated production family; #45 remains unchanged at 6b2a8f555725dc79f60432afbc492d6005290a4a. Preserve order: #46 causal repair + unchanged-head GREEN → complete ordinary/non-force adoption into #45 + fresh #45 GREEN → only then #6 adoption. Central Noema owner RED on .github#2079@6ca329896a846110ade7182ed6fa0fa7b0fbba7d remains independent Product-CI work and does not transfer acceptance here.
seonghobae
left a comment
There was a problem hiding this comment.
Fresh successor coordination: #45 remains exact 6b2a8f555725dc79f60432afbc492d6005290a4a; its active child #46 is now exact fb6b0226fb6c4364f9e241bf01b684e110433386. #46 has ordinary-forward production repair for PostgreSQL 18 attgenerated but is only SOURCE_REPAIRED / ACCEPTANCE_PENDING. Do not duplicate or partially adopt the child delta here. Required sequence remains #46 unchanged-head Rust 1.98/native + hosted Product/security/dependency/review terminal GREEN → complete ordinary/non-force adoption into #45 → fresh #45 GREEN → complete adoption into this #6 lane. PostgreSQL transport and publication stay after representation acceptance.
seonghobae
left a comment
There was a problem hiding this comment.
Fresh stacked authority update: #45 remains exact 6b2a8f555725dc79f60432afbc492d6005290a4a; its child #46 advanced to ac590894bfd93297aed1b83859d4745bb5235d40 with PostgreSQL 18 column-expression identity finding 5189444945, compile/source RED afc9509f021681e6f6a2d0e6d0c386cce46fad12, doctoring 3a76c46bc4d12fac2b8c3407a1d6a09005ddd7ea, and code-current baseline ac590894.... #46 is COLUMN_EXPRESSION_RED_ACTIVE: production expression-family integration does not exist yet. Keep #6 source unchanged. Propagation remains #46 causal repair + unchanged-head GREEN → complete ordinary/non-force #45 adoption + fresh GREEN → complete #6 adoption.
seonghobae
left a comment
There was a problem hiding this comment.
Fresh successor coordination update: representation parent #45 remains exact 6b2a8f555725dc79f60432afbc492d6005290a4a; its child #46 is now exact bd63564fd721072269a50bf5c8dbecc09a30807f. The child has staged the isolated ColumnExpressionObservation production module for the active pg_attrdef RED, but root aggregate integration is still missing, so #46 remains RED and no child acceptance transfers here.
Keep #6 source unchanged. The sequence remains #46 complete aggregate repair + unchanged-head GREEN → full ordinary/non-force adoption into #45 + fresh #45 GREEN → complete propagation into #6. No partial cherry-pick of the staged module and no PostgreSQL transport before representation acceptance.
seonghobae
left a comment
There was a problem hiding this comment.
Source Observation child chain currentization: #45 remains exact 6b2a8f555725dc79f60432afbc492d6005290a4a; active child #46 advanced ordinary-forward to exact a41ea7efca0fc19f9fd80e2a9dbf00630d0a1cc1. The column-expression RED now has aggregate source repair (8da6fa31...) plus generation-required/reverse-order edge regressions (3b2b6fda...), but exact-head acceptance is still pending because no PR-triggered workflow runs exist and repository-pinned Rust 1.98 native gates have not executed on this head. Preserve #6 unchanged. Required sequence remains #46 unchanged-head GREEN -> complete ordinary/non-force adoption into #45 -> fresh #45 GREEN -> complete propagation here. No partial cherry-pick or predecessor evidence transfer.
seonghobae
left a comment
There was a problem hiding this comment.
Representation child authority advanced without changing this Source Observation parent. #45 remains exact 6b2a8f555725dc79f60432afbc492d6005290a4a; its active child #46 is now 675a923d7f8f572fabbd06080f074e902ba3aaaf with PostgreSQL 18 first-class NOT NULL constraint MODULE_STAGED / AGGREGATE_RED_ACTIVE. Do not duplicate or partially cherry-pick that slice into #6. Required sequence remains #46 complete repair + unchanged-head native/hosted GREEN → complete ordinary/non-force #45 adoption + fresh GREEN → complete propagation here.
seonghobae
left a comment
There was a problem hiding this comment.
Source Observation stack coordination: #6 source remains unchanged. Current representation parent is #45 6b2a8f555725dc79f60432afbc492d6005290a4a; current complete child authority is #46 e36fe671875e24516e8c1666300e735f5607025b, still NOT_NULL_CONSTRAINT_MODULE_STAGED / AGGREGATE_RED_ACTIVE. Preserve the entire child lineage, including the new non-partitioned conparentid rejection. No partial cherry-pick or parent-local duplicate repair. Propagate only after #46 aggregate admission + unchanged-head native/hosted GREEN, then complete ordinary/non-force #45 adoption + fresh #45 GREEN.
|
Source Observation stack checkpoint: keep #6 exact |
seonghobae
left a comment
There was a problem hiding this comment.
Stack authority update only; keep #6 source unchanged. Representation parent #45 remains exact 6b2a8f555725dc79f60432afbc492d6005290a4a; active Source Observation child #46 is now exact cc6c4af9342384e60004430649725a3d220461a4, including the PostgreSQL 18 NOT NULL coninhcount signed-int2 source-domain repair. No partial cherry-pick or duplicate implementation into #6. Sequence remains #46 exact-head GREEN -> complete ordinary/non-force #45 adoption + fresh GREEN -> complete #6 propagation.
seonghobae
left a comment
There was a problem hiding this comment.
Representation child authority is now #46 exact 868464850d0b0f967d06eac71fc3328eb461441f, still SOURCE_REPAIRED / ACCEPTANCE_PENDING. Latest repair corrects the PostgreSQL 18 PK-backed attnotnull case without synthesizing explicit contype='n' rows. Preserve #6 source unchanged: #46 unchanged-head GREEN -> complete ordinary/non-force adoption into #45 -> fresh #45 GREEN -> complete propagation here. No partial cherry-pick or duplicate implementation.
seonghobae
left a comment
There was a problem hiding this comment.
Correction to prior coordination review 5190464054: the claim that PostgreSQL 18 permits a PRIMARY KEY-backed attnotnull without a separate first-class NOT NULL row was based on superseded April 2024 development state. Current child #46 exact db2d1c8f90a4d6626d1b0e2ce3d83a6dc22f4666 restores complete bounded NOT NULL-row coverage via corrected RED d4df54d9... and production repair 0cdd4fd3...; doctoring 6c37275c... records the chronology. Preserve #6 source unchanged: #46 unchanged-head GREEN -> complete ordinary/non-force #45 adoption -> fresh #45 GREEN -> complete propagation here.
seonghobae
left a comment
There was a problem hiding this comment.
Fresh coordination authority: keep #6 source unchanged at 287165d399c5f54d6c4b4aa3c15497b47de8244b. Representation parent #45 remains 6b2a8f555725dc79f60432afbc492d6005290a4a; complete child #46 remains db2d1c8f90a4d6626d1b0e2ce3d83a6dc22f4666, NOT_NULL_CONSTRAINT_SOURCE_REPAIRED / ACCEPTANCE_PENDING. Central Noema owner has advanced ordinary-forward to .github#2079@9dccfaa0776950498e557390a2fa8d6c34e0baf4: its finding↔confirmed-probe schema/prompt/validator RED is source-repaired, while fresh exact-head hosted acceptance is still pending. Do not partially adopt #46, duplicate the central contract, or transfer predecessor evidence. Required order stays #46 unchanged-head GREEN → complete ordinary/non-force #45 adoption + fresh #45 GREEN → #6 propagation.
Fresh Source Observation authority — 2026-09-11
287165d399c5f54d6c4b4aa3c15497b47de8244b, OPEN Draft/mergeable on Client feat(client): add offline semantic release admission contract #56873ec0c0a701b2c59f3e0785d48d8739f019d5b.6c1157ef...is historical; subsequent forward commits retained the Source Observation source tree while repairing the shared product-gap baseline. Current287165d...restores the detached-artifact Client boundary in that baseline and does not constitute fresh Source Observation runtime acceptance.6b2a8f555725dc79f60432afbc492d6005290a4a, stacked directly on this exact feat(observation): define immutable PostgreSQL schema snapshot contract #6 head and intentionally restored to Draft. Review5174185818records two current repair findings: (1) first-class index evidence/coordinate/digest semantics required by this P0 are absent, and (2)DomainObservation.base_typeis not resolution-validated even though column type bindings are. feat(observation): add domain-separated v3 successor schema representation #45's body has been corrected so it no longer claims completion of the full P0.The detailed 2026-09-10 checkpoint below is retained as historical evidence and requirements context. Where its “current head” wording conflicts with the fresh block above, the fresh block is authoritative.
Historical Source Observation checkpoint — 2026-09-10
Exact head
6c1157efad5d2e4258330d6485ff2ea980ae331b; OPEN Draft on current Client #56873ec0c0a701b2c59f3e0785d48d8739f019d5b. Source Observation was non-force reconciled atb614fddc3331365da84733f660a429ed71b83182, preserving pre-restack source331f8edcd7cebb1719e5cea3187f3848ce7b9e71and current Client. Successors through77c143d...,b9b55d0...,18d8820..., and current6c1157e...change onlydocs/product-technical-gap-baseline.md; production/test/contract/dependency source is unchanged.Protected central
.github/mainiscb0872c9a20d5584703dffacca65c096fc034c6c. Fresh authority comparison keeps.github#2040@6706c231ab06a3c91c43fdb5b989cfcd79fff593on historical base7fd571dbcdbae6acf29d8f4ee704d7ba6297e4db, diverged 144 commits ahead / 32 behind current protected truth; #2051558693e...is likewise 18 ahead / 32 behind. Stacked #205669ae472...is OPEN Draft/mergeable on #2051. Their valid producer/handler, exact identity and atomic-wake deltas must be preserved through ordinary non-force reconciliation; old-base execution/review evidence does not become current-base acceptance.Exact-current execution/review evidence resets on this documentation successor. Pre-restack
331f8ed...locally executed Rust 1.98: 132 tests across 42 suites including two doctests, fmt, strict all-target/all-feature Clippy, warnings-denied rustdoc, release, Product CI contract/schema/fixture checks, normalized owned coverage 228/228 functions, 2,026/2,026 regions and 194/194 branches. These are historical lineage results, not6c1157e...acceptance.Retained bounded-context contract
Source Observation owns bounded request admission, exact source/schema/resource authorization, immutable observed relational facts, source-content digest identity, evidence locations and receipts. It does not own credentials, source-system business truth, semantic inference, provider runtime objects, publication authority, or foreign product truth.
AuthorizedObservationRequestis single-use at the execution seam; retry requires fresh authorization. Source key plus opaque connection-policy binding identifies the authorized mapping without carrying connection material. Stale binding fails before source access. One non-resetting operation budget begins before registry/policy authorization and continues through adapter execution/cancellation. Complete-or-fail snapshot construction is required.Current v2 evidence preserves exact table/column/constraint metadata including owner-computed digest, exact UTC provenance, qualified table identifiers, column comments, PK/UNIQUE/FK/CHECK evidence, UNIQUE null-comparison state, FK reference behavior plus targeted SET NULL/SET DEFAULT columns, and observed validation/enforcement state. Historical receipt versions are never rewritten.
P0 PostgreSQL 18 representation before transport
Current source cannot losslessly represent relation kind, relation/table comments, first-class index evidence, or schema-scoped domains/enums. Its public
ObservationLocationrequires a table coordinate and exposes only Table/Column/Constraint kinds;canonical_location()always traverses/schemas/{schema}/tables/{table}. The current digest family is explicitlyconceptweave.postgres_schema_snapshot.v2and hashes table/column/constraint evidence only.Review
5160201671requires a backward-compatible versioned/tagged successor coordinate/receipt seam for genuine schema-scoped objects. Do not make currenttable_name() -> &strnullable or invent a sentinel table. Historical v2 table/column/constraint coordinates keep identical meaning. Type-only schemas must be directly checked against the exactAuthorizedObservationRequestschema allowlist before immutable snapshot/receipt side effects.Review
5160252371adds a separate semantic-identity prerequisite.ColumnObservationcurrently stores onlydata_type: String. The successor must keep display text separate from identity, bind each column to exact built-in/qualified source-type evidence, distinguish same-name types across schemas, and never infer type identity fromsearch_path.The representation must preserve relation kind; comments; indexes including key versus INCLUDE attributes, expression positions, partial predicates, NULL uniqueness and readiness/validity/liveness; domain qualified base type, applicable typmod/array dimensions, collation, NOT NULL/default state and domain CHECK constraints; and enum label membership/order.
pg_get_constraintdef,pg_get_indexdefandpg_get_exprtext is server-reconstructed evidence, not original DDL. Catalog OIDs may join one captured catalog transaction but are not governed semantic identity.RED before representation source
Executable RED precedes production representation code:
The active baseline, Issue #2 and reviews
5160201671/5160252371carry this acceptance contract.Concrete PostgreSQL adapter boundary
Only after the representation/version/authorization/type-binding slice is exact-head GREEN may transport be admitted. Use a maintained patched Rust PostgreSQL driver pinned by immutable lock coordinate and passing cargo-deny/SBOM review. Resolve least-privilege credentials only for exact authorized key+binding; reject stale binding before credential/source I/O. Use one explicit
REPEATABLE READ READ ONLYcatalog transaction and preserve exact-schemapg_catalogevidence. Connect, transaction setup, catalog queries and cancellation cleanup consume the same remaining operation budget. Enforce row/byte/concurrency ceilings and complete-or-fail capture. Freeze an anonymized GRC-shaped conformance fixture without copyinggovernance-risk-compliancesource or querying its application tables through hidden coupling.Upstream hosted gate
Product bootstrap #35 is exact
9bb82f041483cb4e0cf1aa1f5450b413309f9a05, OPEN/non-Draft/mergeable against protected ConceptWeavemain. Its unchanged exact head remains the central CodeQL rollout/settlement consumer canary; leaf churn is not corrective evidence. Protected central.github/mainiscb0872c9a20d5584703dffacca65c096fc034c6c..github#2040@6706c231...and.github#2051@558693e...retain useful CodeQL producer/handler/identity repairs but are both rooted in historicalmain@7fd571db...and diverged from current protected truth by 32 commits. #2051's live authority identifies a deterministic rollout/bootstrap mismatch becauserepository_dispatchexecutes the protected default-branch handler while the PR-head client expects the newer{base_ref, base_sha}identity. A versioned backward-compatible protected handler must land first; then #2051 is reconciled non-force onto current protected truth and its client switched only after the compatible handler exists. #205669ae472...remains OPEN Draft/mergeable stacked on #2051 and must adopt that repaired exact successor, not independently restack to protected main.After the protected handler bootstrap and current-main reconciliation, obtain exact central terminal evidence and qualifying independent review, integrate normally, then obtain fresh unchanged-head #35 CodeQL/review acceptance. Only after #35 and Foundation prerequisites land should this unchanged Source Observation lane regenerate its own hosted acceptance. No manual/no-op rerun or ConceptWeave leaf churn can repair the central owner contract.
Merge gate
Keep Draft. Require the representation slice itself to follow RED -> minimal causal repair -> fresh exact-head Rust 1.98 workspace/fmt/strict Clippy/rustdoc/release/owned-production 100% coverage. Then require applicable hosted Product/security/dependency checks, qualifying independent review and zero valid unresolved findings after protected prerequisites. Do not transfer predecessor GREEN or add the concrete adapter first.
No self-approval, review dismissal, force push, destructive rebase, admin bypass, gate weakening, provider bypass, synthetic status, mutable supplier dependency, Zotero mutation, premature semantic publication, or predecessor-evidence transfer.