Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
123 commits
Select commit Hold shift + click to select a range
1aacba8
docs: bound project checker model runtime and recovery
Oct 23, 2026
7ab394e
fix: enforce exact project metadata paths and fields
Oct 23, 2026
07a0c20
wip: compose budgeted project checker model runtime
Oct 23, 2026
3a1d2b5
Merge remote-tracking branch 'origin/main' into codex/checker-model-r…
Oct 23, 2026
63614e1
[PILOT-05] harden model-call custody and recovery
Oct 23, 2026
57b3619
Merge commit 'd77974b74ffe55eabdd1b40feae95e932d3d8953' into codex/ch…
Oct 23, 2026
54e6523
docs: record checker model runtime QA review
Oct 23, 2026
e574254
Merge current main into shared model runtime
Oct 23, 2026
c17d347
test(checkers): await model relay frame rejection
Oct 23, 2026
4a754d0
docs: expand model runtime to shared usage
Oct 23, 2026
a470b2b
feat(model-usage): share budget custody across setup and checkers
Oct 23, 2026
eb3151f
refactor(checkers): share private proxy framing
Oct 23, 2026
01c9803
feat(model-usage): support bounded shared sessions
Oct 23, 2026
68722bf
Merge remote-tracking branch 'origin/main' into codex/checker-model-r…
Oct 23, 2026
03180a3
feat(checkers): relay bounded model sessions
Oct 23, 2026
30ef4df
chore(mcp): refresh model usage catalogue snapshots
Oct 23, 2026
ed09020
Merge remote-tracking branch 'origin/main' into codex/checker-model-r…
Oct 23, 2026
a7e86bf
fix(migrations): retain audit restore upgrade step
Oct 23, 2026
e8c0317
Admit setup model profile runtime selectors
Oct 23, 2026
062a672
Fail closed on partial setup profile selectors
Oct 23, 2026
937b2ca
Add setup model output artifact custody
Oct 23, 2026
dc2d4d2
Permit setup model artifact bindings
Oct 23, 2026
b725ef0
feat(model-usage): meter setup agent dispatches
Oct 23, 2026
fbe2b37
Test setup model artifact custody end to end
Oct 23, 2026
3e922bc
fix(model-usage): count full setup request context
Oct 23, 2026
b67858c
fix(model-usage): recover retained setup responses
Oct 23, 2026
fabeaa1
Prove setup response recovery from artifact custody
Oct 23, 2026
7a9f81c
feat(model-usage): inspect exact paid effects
Oct 23, 2026
cfb76d5
fix(model-usage): enforce setup profile tool costs
Oct 23, 2026
9f5781e
fix(setup): normalize database UUID projection
Oct 23, 2026
32cf50f
test(model-usage): conceal foreign setup effects
Oct 23, 2026
e87c070
test(model-usage): enforce setup tool caps at session open
Oct 23, 2026
78bebb4
feat(model-usage): isolate hosted provider credentials
Oct 23, 2026
01c1117
test(model-usage): refresh inspection schema fingerprint
Oct 23, 2026
f7be614
fix(checkers): bind model-dependent execution profiles
Oct 23, 2026
5149c91
fix(model-usage): decouple proxy from setup runtime
Oct 23, 2026
60504dc
test(setup): expose pre-settlement failures
Oct 23, 2026
5bbf1e0
fix(checkers): validate model proxy dependencies in CLI
Oct 23, 2026
60bb501
test: expose setup model journey failure stage
Oct 23, 2026
655194b
fix(checkers): keep model-assisted checks in POST
Oct 23, 2026
68d0aed
fix(setup): validate native Omni reasoning shape
Oct 23, 2026
273a800
docs(model-usage): record shared setup and POST runtime
Oct 23, 2026
5fc3c6e
fix(auth): admit setup model usage decisions
Oct 23, 2026
1f65182
test(setup): cover native Omni request settings
Oct 23, 2026
8549f54
test(mcp): use current permission catalogue in adapter fixtures
Oct 23, 2026
48e30bc
test(setup): align output scratch capacity
Oct 23, 2026
b017715
docs(model-usage): document proxy custody operations
Oct 23, 2026
fa0d2f3
test(model-usage): scope fixtures without shadowing suite conftest
Oct 23, 2026
0275625
test(setup): expose evidence predicate mismatch
Oct 23, 2026
275bc4a
ci(model-usage): reconcile owner inventory after shared ledger extrac…
Oct 23, 2026
dce753c
test(setup): expose output verification result
Oct 23, 2026
cfc2645
test(setup): capture output verification state
Oct 23, 2026
04bbac1
test(setup): provision binding authority actor
Oct 23, 2026
9a57c88
fix(hosted): connect checker model relay and validate socket runtime
Oct 23, 2026
c0dbf4f
test(setup): compare diagnostic effect as uuid
Oct 23, 2026
b3b9e35
test(projects): serialize retained schema upgrades
Oct 23, 2026
734bc22
test(projects): keep scripted proposals provider-free
Oct 23, 2026
528e225
fix(test): scope proposal runtime fixtures
Oct 23, 2026
e8cf304
fix(cli): accept current model permission catalogue
Oct 23, 2026
07f0a41
test(model-usage): reconcile active contracts and schema lane ownership
Oct 23, 2026
62e950f
test(checkers): accept registry foreign-key truncate denial
Oct 23, 2026
b232fe7
ci: preserve existing cleanup fixture lane after diagnosis
Oct 23, 2026
c6b7e76
fix(tests): preserve historical and inference fixtures
Oct 23, 2026
34dc509
fix(test): provide setup model capability to SDK parser proof
Oct 23, 2026
60dc387
refactor(tests): isolate scripted model profile fixture
Oct 23, 2026
404aa9e
fix(model-usage): bind settlement and recovery custody
Oct 23, 2026
7a7d526
refactor(tests): share explicit administrative role expectations
Oct 23, 2026
0e4c9c1
test(artifacts): use JSON model evidence in shared lifecycle fixtures
Oct 23, 2026
6f881aa
fix(tests): align guide runtime fixture capabilities
Oct 23, 2026
a65b698
docs(model): reconcile shared setup and checker custody contracts
Oct 23, 2026
5fd5b9a
fix(test): bind scripted profile publication key
Oct 24, 2026
75a3594
fix(model-usage): bind terminal and retry recovery custody
Oct 24, 2026
e650cf6
fix(test): configure model proxy artifact custody
Oct 24, 2026
586c2b8
test(model): keep fixture repairs within structural boundaries
Oct 24, 2026
2c9874b
test(schema): pin repaired model usage head
Oct 24, 2026
be44e83
test(model-usage): force known-response callback race
Oct 24, 2026
a31953b
Merge remote-tracking branch 'origin/main' into codex/checker-model-r…
Oct 24, 2026
e8c21d1
test(guide): use complete API identity and rate-control fixtures
Oct 24, 2026
6ee0a29
fix(model-usage): bind every paid transition authority
Oct 24, 2026
9c30f5b
fix(model-usage): retain exact transition authority facts
Oct 24, 2026
9b4779d
fix(model-usage): match private AUTH audit projection
Oct 24, 2026
3ab426c
test(model-usage): hold response before concurrent recovery
Oct 24, 2026
5b03bbf
fix(model-usage): parse projected recovery authority
Oct 24, 2026
1103b2d
test(model-usage): reject crossed setup transition receipts
Oct 24, 2026
13eacce
test(model-usage): settle after renewed invocation grant
Oct 24, 2026
0820f34
test(schema): pin exact model usage head
Oct 24, 2026
1902327
test(model-usage): call observation boundary exactly
Oct 24, 2026
91655c8
test(model-usage): factor grant custody journeys
Oct 24, 2026
818ce72
test(ci): bind current behavior ownership partition
Oct 24, 2026
a72fcec
test(model-usage): inspect renewed terminal effect
Oct 24, 2026
43952ad
fix(projects): lock model profile on manual guide dispatch
Oct 24, 2026
4818fc1
test(projects): share retained runtime configuration read
Oct 24, 2026
0b2cff4
test(projects): separate operator from revoked guide manager
Oct 24, 2026
6c7fb7f
fix(model-usage): normalize stored UUID projections
Oct 24, 2026
bd89470
test(projects): prove correction profile replay
Oct 24, 2026
19ffc93
test(model-usage): prove concurrent setup custody
Oct 24, 2026
9e80d04
test(artifacts): retain output identity before rollback
Oct 24, 2026
594b126
test(projects): accept concurrent persisted recovery state
Oct 24, 2026
4d65e26
test(artifacts): restore receipt guards after historical fixture setup
Oct 24, 2026
f4f713a
fix(model-usage): normalize recovery dispatch authority
Oct 24, 2026
daf9f7e
fix(artifacts): quiesce timed-out S3 writers
Oct 24, 2026
28d25ab
Merge remote-tracking branch 'origin/main' into codex/checker-model-r…
Oct 24, 2026
516c08e
docs(model-usage): refresh candidate evidence
Oct 24, 2026
daad6c0
Merge remote-tracking branch 'origin/main' into codex/checker-model-r…
Oct 24, 2026
bc5c68c
docs(model-usage): record Smol capability boundary
Oct 24, 2026
2cb516f
test(model-usage): import profile reader from its owner
Oct 24, 2026
78ee206
test(cli): publish correction runtime model profile
Oct 24, 2026
345b901
test(model): repair shared lifecycle fixtures
Oct 24, 2026
e667b3f
test(model): align shared fixtures with model custody
Oct 24, 2026
c9d3a23
test(projects): preserve metered correction semantics
Oct 24, 2026
cf41b96
test(artifacts): assert current model output lineage
Oct 24, 2026
68b14fb
test(projects): configure metered correction fixtures
Oct 24, 2026
2d1d696
test(projects): configure correction profile publication
Oct 24, 2026
bfea480
test(projects): preserve typed profile selector
Oct 24, 2026
bb77a2e
test(cli): bind correction profile to API runtime
Oct 24, 2026
f0027e6
style(cli): format correction runtime fixture
Oct 24, 2026
2f8f554
test(api): provision scripted setup model profile
Abiorh001 Oct 24, 2026
7d87f70
test(api): admit typed setup model session
Abiorh001 Oct 24, 2026
eafd9d4
test(api): grant setup profile operator authority
Abiorh001 Oct 24, 2026
36c0a3e
test(api): assert published profile subject
Abiorh001 Oct 24, 2026
b9ca550
test(api): configure provider-free artifact custody
Abiorh001 Oct 24, 2026
126a3a6
test(api): scope model session to setup drill
Abiorh001 Oct 24, 2026
c015891
Classify scripted model drill identifiers
Abiorh001 Oct 24, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
96 changes: 36 additions & 60 deletions .ci/auth-boundaries/TEST_STRUCTURE_DEBT.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,11 @@
"entries": [
{
"capability": "oversized_authorization_structure",
"content_sha256": "52925f333aa6dec0a6355e76c8352fbf7f7fff4d6de898a98834b4d13f15c393",
"end_line": 1270,
"content_sha256": "b4f2fe63f88cacf12830a5cc556f8dc627e74deac80c1b6183d13a8a1a4f52ce",
"end_line": 1265,
"hard_limit": 1200,
"kind": "production_file",
"observed_lines": 1270,
"observed_lines": 1265,
"path": "backend/app/modules/authorization/kernel.py",
"qualified_symbol": null,
"removal_chunk": "WS-AUTH-003-CLOSE",
Expand All @@ -26,27 +26,15 @@
},
{
"capability": "oversized_authorization_structure",
"content_sha256": "75bcb2639cd1f099597c8b07efa9b6d78d334ea3f092a1bf89ef638417b5856f",
"end_line": 494,
"hard_limit": 100,
"kind": "production_function",
"observed_lines": 101,
"path": "backend/app/modules/authorization/kernel.py",
"qualified_symbol": "AuthorizationService._prepare_prelocked",
"removal_chunk": "WS-AUTH-003-CLOSE",
"start_line": 394
},
{
"capability": "oversized_authorization_structure",
"content_sha256": "a2bcc3b6fbfb59e65e5c606b777378451733f5fd11c9aeccf9f2e05773b2361f",
"content_sha256": "bae6d1bf2568947ee4125b3389d861fb7c077a346da1efcef3167b68ce7cafd5",
"end_line": 818,
"hard_limit": 100,
"kind": "production_function",
"observed_lines": 106,
"observed_lines": 105,
"path": "backend/app/modules/authorization/kernel.py",
"qualified_symbol": "AuthorizationService._require_prelocked",
"removal_chunk": "WS-AUTH-003-CLOSE",
"start_line": 713
"start_line": 714
},
{
"capability": "oversized_authorization_structure",
Expand Down Expand Up @@ -86,11 +74,11 @@
},
{
"capability": "oversized_authorization_structure",
"content_sha256": "c20ff97f3860c899f5395fb3341123e7ec5302468ea7cef63e5f87672791e419",
"end_line": 2467,
"content_sha256": "508b934117c60535e2bf3aa1e6db8d516e90d98312e427340f2f63206a7601f5",
"end_line": 2453,
"hard_limit": 1200,
"kind": "test_file",
"observed_lines": 2467,
"observed_lines": 2453,
"path": "backend/tests/test_artifact_admission.py",
"qualified_symbol": null,
"removal_chunk": "WS-AUTH-003-CLOSE",
Expand All @@ -110,11 +98,11 @@
},
{
"capability": "oversized_authorization_structure",
"content_sha256": "b89babd7cd41d37a0f2024f9064bbf45af102b9df70981a27e8f208a5e7b7716",
"end_line": 10788,
"content_sha256": "9b3626c6c8932572b1c7a98f05cc8d90be34f757a4ddbef93f6f8569ca200416",
"end_line": 10756,
"hard_limit": 1200,
"kind": "test_file",
"observed_lines": 10788,
"observed_lines": 10756,
"path": "backend/tests/test_authorization.py",
"qualified_symbol": null,
"removal_chunk": "WS-AUTH-003-CLOSE",
Expand Down Expand Up @@ -168,18 +156,6 @@
"removal_chunk": "WS-AUTH-003-CLOSE",
"start_line": 653
},
{
"capability": "oversized_authorization_structure",
"content_sha256": "6a1c0791d31f717e7c7cea14c4d106bc2c76ce05a9b456f7f0fd831718f145e8",
"end_line": 1034,
"hard_limit": 120,
"kind": "test_function",
"observed_lines": 140,
"path": "backend/tests/test_artifact_internal_authorization.py",
"qualified_symbol": "test_verification_claim_and_terminal_failures_roll_back_both_sides",
"removal_chunk": "WS-AUTH-003-CLOSE",
"start_line": 895
},
{
"capability": "oversized_authorization_structure",
"content_sha256": "34f9c463ba512e3aecb3dd772bcb52f209a37f16e1b102700d94eb02aa9990db",
Expand Down Expand Up @@ -255,134 +231,134 @@
{
"capability": "oversized_authorization_structure",
"content_sha256": "10003810b90ad8ea86434aaae1a38e650c5df4bebd09bb0577ac3ebb7a522351",
"end_line": 2689,
"end_line": 2657,
"hard_limit": 120,
"kind": "test_function",
"observed_lines": 121,
"path": "backend/tests/test_authorization.py",
"qualified_symbol": "test_identity_link_lifecycle_route_preserves_outcome_transaction_contract",
"removal_chunk": "WS-AUTH-003-CLOSE",
"start_line": 2569
"start_line": 2537
},
{
"capability": "oversized_authorization_structure",
"content_sha256": "b4d58c998c9b8b2efedcdd67d1beb2e804c7f6dfca61b4818d6e95d8268c6f08",
"end_line": 6920,
"end_line": 6888,
"hard_limit": 120,
"kind": "test_function",
"observed_lines": 122,
"path": "backend/tests/test_authorization.py",
"qualified_symbol": "test_identity_link_lifecycle_service_applies_success_and_guards_conflicts",
"removal_chunk": "WS-AUTH-003-CLOSE",
"start_line": 6799
"start_line": 6767
},
{
"capability": "oversized_authorization_structure",
"content_sha256": "0858a7b107e68244cd719c9521856944411f88442818ae491ebb58a45ef4f417",
"end_line": 5799,
"end_line": 5767,
"hard_limit": 120,
"kind": "test_function",
"observed_lines": 126,
"path": "backend/tests/test_authorization.py",
"qualified_symbol": "test_prepared_actor_authority_crossed_mutations_complete_in_both_orders",
"removal_chunk": "WS-AUTH-003-CLOSE",
"start_line": 5674
"start_line": 5642
},
{
"capability": "oversized_authorization_structure",
"content_sha256": "56e6f85cc1b712b6410bee986d54e59e4dbad4c3f73c0599f12fe284587577a7",
"end_line": 6116,
"end_line": 6084,
"hard_limit": 120,
"kind": "test_function",
"observed_lines": 312,
"path": "backend/tests/test_authorization.py",
"qualified_symbol": "test_prepared_crosses_real_lifecycle_service_transactions",
"removal_chunk": "WS-AUTH-003-CLOSE",
"start_line": 5805
"start_line": 5773
},
{
"capability": "oversized_authorization_structure",
"content_sha256": "5cbc72df2c822f2f57db164c0ea4aa2f2d76d591313f69d6496fc26b127b581e",
"end_line": 3787,
"end_line": 3755,
"hard_limit": 120,
"kind": "test_function",
"observed_lines": 149,
"path": "backend/tests/test_authorization.py",
"qualified_symbol": "test_project_11c2_reads_require_exact_admin_context_and_role_allowlist",
"removal_chunk": "WS-AUTH-003-CLOSE",
"start_line": 3639
"start_line": 3607
},
{
"capability": "oversized_authorization_structure",
"content_sha256": "478d47861e68cfa6571199b0f69785c8f3f5a3483774cee0929b6a13dba6a648",
"end_line": 2132,
"end_line": 2134,
"hard_limit": 120,
"kind": "test_function",
"observed_lines": 302,
"path": "backend/tests/test_authorization.py",
"qualified_symbol": "test_project_mutation_resources_and_prepared_scopes_are_closed",
"removal_chunk": "WS-AUTH-003-CLOSE",
"start_line": 1831
"start_line": 1833
},
{
"capability": "oversized_authorization_structure",
"content_sha256": "3d2a9843510cdb61b34500aa79a8ed3572df72723ab401f0245300e10c70044e",
"end_line": 9065,
"end_line": 9033,
"hard_limit": 120,
"kind": "test_function",
"observed_lines": 174,
"path": "backend/tests/test_authorization.py",
"qualified_symbol": "test_project_read_permissions_have_postgresql_role_scope_matrix",
"removal_chunk": "WS-AUTH-003-CLOSE",
"start_line": 8892
"start_line": 8860
},
{
"capability": "oversized_authorization_structure",
"content_sha256": "0da4e29b29ebd44bd9049145ee4148531320bce53859ad5341e5f57261e5a884",
"end_line": 10501,
"end_line": 10469,
"hard_limit": 120,
"kind": "test_function",
"observed_lines": 227,
"path": "backend/tests/test_authorization.py",
"qualified_symbol": "test_project_role_and_all_operation_mappings_commit_one_linked_pair",
"removal_chunk": "WS-AUTH-003-CLOSE",
"start_line": 10275
"start_line": 10243
},
{
"capability": "oversized_authorization_structure",
"content_sha256": "8deb42b92c936b62417f3bfe307b4a886612b8e217af8e5abc14a5ae3222452a",
"end_line": 1542,
"end_line": 1544,
"hard_limit": 120,
"kind": "test_function",
"observed_lines": 195,
"path": "backend/tests/test_authorization.py",
"qualified_symbol": "test_project_role_mutation_routes_conceal_denials_and_preserve_self_guards_atomically",
"removal_chunk": "WS-AUTH-003-CLOSE",
"start_line": 1348
"start_line": 1350
},
{
"capability": "oversized_authorization_structure",
"content_sha256": "19e0d2a736a60fcd30e5c8e18f0641c6b66ed3a669e2d18dd5784195990d1752",
"end_line": 1778,
"end_line": 1780,
"hard_limit": 120,
"kind": "test_function",
"observed_lines": 218,
"path": "backend/tests/test_authorization.py",
"qualified_symbol": "test_project_role_mutation_routes_enforce_project_lifecycle_without_disclosure",
"removal_chunk": "WS-AUTH-003-CLOSE",
"start_line": 1561
"start_line": 1563
},
{
"capability": "oversized_authorization_structure",
"content_sha256": "217ea21f4a2cbd31a4428ba1f01a9fcd90e73ee95fedb2587100a847e8921926",
"end_line": 10030,
"end_line": 9998,
"hard_limit": 120,
"kind": "test_function",
"observed_lines": 154,
"path": "backend/tests/test_authorization.py",
"qualified_symbol": "test_service_actor_replay_fails_closed_on_committed_state_drift",
"removal_chunk": "WS-AUTH-003-CLOSE",
"start_line": 9877
"start_line": 9845
},
{
"capability": "oversized_authorization_structure",
Expand Down Expand Up @@ -423,14 +399,14 @@
{
"capability": "oversized_authorization_structure",
"content_sha256": "32083a125798736fa17533aaa767c0236ae3042de4f7d8debdce5f15e0a801fe",
"end_line": 9347,
"end_line": 9315,
"hard_limit": 100,
"kind": "test_helper",
"observed_lines": 130,
"path": "backend/tests/test_authorization.py",
"qualified_symbol": "_operation_success",
"removal_chunk": "WS-AUTH-003-CLOSE",
"start_line": 9218
"start_line": 9186
}
],
"exceptions": [],
Expand Down
Loading
Loading