fix(project): stage saves before atomic publication - #970

Draft

seonghobae wants to merge 683 commits into

fix/project-save-atomic-publication-962

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 6, 2026

test(separation): reject unsafe torch load override
seonghobae
committed
3ae3646
fix(separation): fail closed on unsafe torch load override
seonghobae
committed
0d9fb9f
docs(traceability): record torch environment downgrade guard
seonghobae
committed
28c73a3
docs(changelog): record torch environment downgrade guard
seonghobae
committed
dc59326
test(separation): reject torch backend autoload
seonghobae
committed
4d0b16b
fix(separation): fail closed on torch backend autoload
seonghobae
committed
000fdb5
docs(traceability): bind pytorch runtime environment
seonghobae
committed
3fc5a87
docs(changelog): record torch backend autoload guard
seonghobae
committed
4676650
docs(security): structure cross-platform plan notes
seonghobae
committed
f5db38a
docs(security): structure harness plan notes
seonghobae
committed
707d680
docs(security): structure supply-chain plan notes
seonghobae
committed
87d6cd7
docs(security): record analysis dispatch threats
seonghobae
committed
87690cd
docs(traceability): align v2 preference security notes
seonghobae
committed
eee919d
docs(traceability): align v3 source security contract
seonghobae
committed
21fb89b
docs(traceability): align project IPC security notes
seonghobae
committed
9388e8c
docs(architecture): align local audio authority flow
seonghobae
committed
349d67d
test(project): bind dispatch opener closure
seonghobae
committed
8feb0c3
test(project): accept generic restart adapter signature
seonghobae
committed
dbc3dd7
fix(desktop): remove stale rehearsal parser import
seonghobae
committed
8a94753
test(security): format Security Notes policy regressions
seonghobae
committed
67b1ebc
test(ci): fix security notes import order
seonghobae
committed
f9553f0
test(ci): make Security Notes imports Ruff-canonical
seonghobae
committed
542791a
test(ci): match Ruff import-block spacing
seonghobae
committed
bab276e
style(ci): terminate temporal analyzer source canonically
seonghobae
committed
2d2e5a9
style(ci): terminate transcription source canonically
seonghobae
committed
50837f1
style(ci): apply Ruff layout to Security Notes test
seonghobae
committed
46478c4

Commits on Sep 14, 2026

test(project): red for durable local-audio publication
seonghobae
committed
f408b5a
fix(project): add durable no-replace source publication
seonghobae
committed
b758deb
fix(project): route local audio through durable publication
seonghobae
committed
834b45f
test(project): bind local audio to durable publication owner
seonghobae
committed
920bacf
docs(project): record durable local-audio publication boundary
seonghobae
committed
66bb6fb
test(project): preserve source stage on publication rejection
seonghobae
committed
740e052
fix(project): preserve rejected audio publication stage
seonghobae
committed
64ebca3
style(project): restore source newline
seonghobae
committed
85dfbed
test(cache): bind final results to admitted audio identity
seonghobae
committed
af3bf76
test(cache): scope RED to admitted identity
seonghobae
committed
676b8d9
feat(cache): add admitted final-result cache boundary
seonghobae
committed
5802980
feat(cache): verify scoped admitted identity
seonghobae
committed
72e7c7a
fix(cache): bind final results to admitted source identity
seonghobae
committed
49d2c70
test(cache): cover final-result admission edge cases
seonghobae
committed
c45ffdd
docs(cache): document final-result invariants
seonghobae
committed
b80e383
test(cache): reject incomplete persisted rehearsal roles
seonghobae
committed
21b2f3e
fix(cache): validate complete persisted rehearsal roles
seonghobae
committed
32e355f
test(cache): cover complete role admission edges
seonghobae
committed
dc30ae1
test(cache): expose shared-contract admission gaps
seonghobae
committed
93757a1
fix(cache): enforce shared rehearsal contract on reuse
seonghobae
committed
9638481
test(cache): require durable final-result publication
seonghobae
committed
6c39f6a
fix(cache): durably publish final rehearsal results
seonghobae
committed
57c305a
fix(cache): route final-result writes through durable publisher
seonghobae
committed
14db687
test(cache): bind durability failure to production caller
seonghobae
committed
2cfc06b
test(cache): cover platform durability branches
seonghobae
committed
abc4cf1
fix(cache): make durability adapter strict-check clean
seonghobae
committed
901a50a
test(cache): cover unavailable Windows durability binding
seonghobae
committed
8d9c432
docs(cache): trace final-result durability decision
seonghobae
committed
290e320
test(cache): reject unknown persisted rehearsal fields
seonghobae
committed
0d7c35f
fix(cache): enforce shared contract key strictness
seonghobae
committed
4376924
test(cache): cover nested unknown-key boundaries
seonghobae
committed
0b0ab2a
test(cache): require feature-cache integrity and durable ordering
seonghobae
committed
1b43360
fix(cache): bind and durably publish reusable stem arrays
seonghobae
committed
4530cd5
docs(traceability): record feature-cache integrity boundary
seonghobae
committed
cfcc237
test(cache): bound feature-cache admission
seonghobae
committed
e8b2b59
fix(cache): bound reusable feature admission
seonghobae
committed
9f7cb56
test(cache): reject oversized declared stem arrays
seonghobae
committed
f44e0d9
fix(cache): preflight NPZ array declarations
seonghobae
committed
eebc093
docs(cache): trace bounded feature admission
seonghobae
committed
1fa9dd3
test(cache): require MIR generation identity
seonghobae
committed
efcffad
feat(mir): expose canonical separation generation identity
seonghobae
committed
33ebea0
fix(cache): bind reuse to MIR generation
seonghobae
committed
3b1c237
test(mir): cover separation generation identity
seonghobae
committed
f17051f
docs(mir): bind cache reuse to scientific generation
seonghobae
committed
a035d32
test(cache): assert MIR generation binding
seonghobae
committed
8cee952
style(mir): format nested generation test helper
seonghobae
committed
316cf44

Commits on Sep 16, 2026

docs(security): complete final-result cache threat notes
seonghobae
committed
83d7dc3
docs(security): complete feature-cache threat notes
seonghobae
committed
315cb55
test(cache): clarify Windows MoveFileExW mocks
seonghobae
committed
efec25d
test(cache): remove unused pytest import
seonghobae
committed
55e4046
fix(cache): use one ctypes import style
seonghobae
committed
31136a1
test(security): reject fenced Security Notes headings
seonghobae
committed
50372d3
fix(security): ignore fenced headings in notes policy
seonghobae
committed
9c1cb6c
test(security): reject indented code headings
seonghobae
committed
efd4ec0
fix(security): honor Markdown heading indentation
seonghobae
committed
4cbd76d
test(security): preserve CommonMark closing hashes
seonghobae
committed
78b4757
fix(security): parse ATX closing hashes exactly
seonghobae
committed
452a786
test(security): reject Security Notes hidden in HTML comments
seonghobae
committed
764b889
fix(security): ignore raw HTML comment headings in policy parser
seonghobae
committed
905d5eb
test(security): reject Security Notes hidden in raw HTML blocks
seonghobae
committed
d2e3e72
fix(security): exclude CommonMark raw HTML blocks from heading policy
seonghobae
committed
d0be236
chore(security): keep raw HTML parser lint-clean
seonghobae
committed
31e257c
test(security): reject example-only Security Notes evidence
seonghobae
committed
0987542
fix(security): admit only rendered Security Notes evidence
seonghobae
committed
b388722
repair(project): release generic Security Notes ownership
seonghobae
committed
f106b07
repair(project): remove duplicate governance regression owner
seonghobae
committed
83a0e59
repair(project): remove transferred governance RED
seonghobae
committed
79e7588

Commits on Sep 17, 2026

repair(project): format persistence Ruff regressions
seonghobae
committed
347653a
repair(project): sort cache publication imports
seonghobae
committed
7a2a801

Commits on Sep 18, 2026

fix(project): apply Ruff canonical cache import ordering
seonghobae
committed
0f9e01c
style(project): preserve canonical EOF formatting
seonghobae
committed
fc8271b
test(project): require deterministic migration receipts
seonghobae
committed
ef4e0a4
feat(project): emit deterministic migration receipts
seonghobae
committed
e833187
feat(project): export migration receipt contract
seonghobae
committed
abf6611
test(project): prove migration receipt idempotency
seonghobae
committed
74d5bcc
docs(project): trace migration receipt contract
seonghobae
committed
f00ea01
docs(project): make migration and source lifecycle code-current
seonghobae
committed
852236e
test(project): require validated migration copy preparation
seonghobae
committed
2c46d0c
feat(project): prepare validated migration copy
seonghobae
committed
a137fd9
feat(project): export validated migration preparation
seonghobae
committed
04ab3cc
docs(project): trace validated migration copy preparation
seonghobae
committed
01dccee
docs(project): align format lifecycle with prepared migrations
seonghobae
committed
eaba6e3
test(project): require sealed migration plan accessors
seonghobae
committed
5ff8027
fix(project): seal validated migration candidate
seonghobae
committed
fd2e4f2
docs(project): record sealed migration plan invariant
seonghobae
committed
0369f04
test(project): require read-bound predecessor identity
seonghobae
committed
f1f374a
fix(project): bind bounded reads to opened file identity
seonghobae
committed
cc0755b
docs(project): trace read-bound migration predecessor identity
seonghobae
committed
4324e61
test(project): require exact migration predecessor digest binding
seonghobae
committed
eeb2b71
fix(project): verify migration predecessor bytes through receipt
seonghobae
committed
53ab331
test(project): require exact migration output digest binding
seonghobae
committed
26cf9e6
fix(project): bind migration candidate bytes to receipt output
seonghobae
committed
7b4c6e5
test(project): require digest-bound migration publication CAS
seonghobae
committed
847c31d
fix(project): enforce digest-bound migration publication CAS
seonghobae
committed
a46be0d
docs(project): trace digest-bound migration publication
seonghobae
committed
6104b95
test(project): require migrate-on-load publication
seonghobae
committed
c406080
fix(project): orchestrate receipt-bound migrate-on-load
seonghobae
committed
d50b9e3
test(project): exercise migrate-on-load owner
seonghobae
committed
ee906cf
fix(project): route load through migration service
seonghobae
committed
e610db4
style(project): format migrate-on-load service
seonghobae
committed
28daa66
test(project): track migrate-on-load route
seonghobae
committed
9a4554e
test(project): preserve migration data permissions
seonghobae
committed
bd318f9
docs(project): trace migrate-on-load publication
seonghobae
committed
e79aa8a
test(project): require native persistence CI coverage
seonghobae
committed
4008dab
ci(project): track persistence application owners
seonghobae
committed
cc80424
ci(project): add macOS persistence evidence lane
seonghobae
committed
e0566c3
docs(project): trace native persistence CI gate
seonghobae
committed
ddfad47
test(project): bind native CI traceability refresh
seonghobae
committed
1726e9b
ci(project): refresh Windows lane on traceability changes
seonghobae
committed
488b89d
ci(project): refresh macOS lane on traceability changes
seonghobae
committed
ad9087a
docs(project): bind exact-head native CI evidence
seonghobae
committed
60e0623
test(project): require Windows workflow successor identity
seonghobae
committed
488b2de
ci(project): register Windows persistence successor
seonghobae
committed
c6045d8
ci(project): retire stale Windows workflow identity
seonghobae
committed
61f7d56
docs(project): record Windows native workflow successor
seonghobae
committed
05ed6c1
test(project): flush staged source with Windows write authority
seonghobae
committed
62ac8f8
docs(project): trace Windows durability fixture RED and repair
seonghobae
committed
fddd996
test(project): require content-bound published recovery
seonghobae
committed
927c4aa
fix(project): bind recovery journal to migration receipt
seonghobae
committed
4452580
test(project): exercise versioned recovery journal
seonghobae
committed
bc892e3
docs(project): trace receipt-bound crash recovery
seonghobae
committed
aedf857
test(project): mirror native published recovery layout
seonghobae
committed
b1edaf3
test(project): adapt rollback fixture to journal v2
seonghobae
committed
d8edb4a
docs(project): trace recovery-journal hosted repair
seonghobae
committed
0f8f335
refactor(project): remove obsolete v1 serializer ownership
seonghobae
committed
5c1a26e
fix(project): keep legacy v1 parser warning-clean
seonghobae
committed
6156d35
docs(project): trace compatibility warning root fix
seonghobae
committed
7f55bfc
test(persistence): compile native owner once
seonghobae
committed
69d54d4
ci(persistence): track single-compile case inputs
seonghobae
committed
582ec08
test(persistence): repair shared harness import
seonghobae
committed
92136ba
test(persistence): exercise production source publisher
seonghobae
committed
2b0d5d9
docs(persistence): trace single-compile native harness
seonghobae
committed
1622a3a
test(persistence): scope unix-only imports
seonghobae
committed
1ec378f
test(persistence): scope unix permission owner
seonghobae
committed
966cb6e
test(persistence): scope macOS-only alias case
seonghobae
committed
522ef90
fix(persistence): scope platform and test-only readers
seonghobae
committed
b947e55
docs(persistence): trace final warning owners
seonghobae
committed
c38b7e6
test(persistence): require native warning gate
seonghobae
committed
29e52d8
fix(persistence): add core warning gate feature
seonghobae
committed
a2d8c74
fix(persistence): deny core warnings in native gate
seonghobae
committed
e0ead7d
fix(persistence): wire native warning gate feature
seonghobae
committed
61aca5c
fix(persistence): deny warnings in native harness
seonghobae
committed
a3861a0
test(persistence): scope warning gate to owner harness
seonghobae
committed
9b2b854
test(persistence): track warning gate owner root
seonghobae
committed
14e54bc
ci(persistence): enforce owned warnings on Windows
seonghobae
committed
2f1d4c7
ci(persistence): enforce owned warnings on macOS
seonghobae
committed
bb832ae
docs(persistence): trace compile-time warning gate
seonghobae
committed
15d0305

Commits on Sep 19, 2026

fix(persistence): restore source readmission exports
seonghobae
committed
269db5b
docs(persistence): trace warning-gate export regression
seonghobae
committed
5de22a6
test(project): require durable Windows replacement rollback
seonghobae
committed
eebe2ee
fix(project): flush Windows replacement metadata before success
seonghobae
committed
5455fc8
test(project): assert Windows rollback artifacts are retired
seonghobae
committed
336836a
docs(project): trace Windows replacement durability boundary
seonghobae
committed
40847ed
fix(project): preserve raced target during Windows rollback
seonghobae
committed
b4214ad
docs(project): trace raced-target rollback authority
seonghobae
committed
a00654a
test(project): reject recovery journal parent traversal
seonghobae
committed
4b617a5
test(project): activate hostile recovery-name regression
seonghobae
committed
49bc47c
fix(project): confine recovery journal names to one component
seonghobae
committed
e364474
docs(project): trace recovery journal path boundary
seonghobae
committed
2f8454c
docs(project): anchor journal confinement to CWE-22
seonghobae
committed
898b3c2
test(project): expose successful-cleanup boundary for race regression
seonghobae
committed
4cda80b
test(project): RED preserve raced displaced path on successful cleanup
seonghobae
committed
d3daecf
fix(project): bind successful cleanup to durable journal identities
seonghobae
committed
83a40b2
test(project): cover target swap before successful cleanup
seonghobae
committed
1d53792
docs(traceability): record successful-cleanup authority repair
seonghobae
committed
48fbd91
test(project): prove private modes under permissive umask
seonghobae
committed
18b381b
fix(project): keep Unix persistence artifacts owner-private
seonghobae
committed
cac722e
docs(project): trace private persistence artifacts
seonghobae
committed
3cde95f
test(project): preserve deliberate Unix sharing mode
seonghobae
committed
23fdaec
test(project): reject stale hard-link stage after sync failure
seonghobae
committed
85c0879
fix(project): retire first-save hard-link alias before durability check
seonghobae
committed
c0ec7d2
test(project): prove first-save alias cleanup ordering
seonghobae
committed
06ff23a
test(project): reject linked project-root ancestors
seonghobae
committed
bbb11de
fix(project): bind existing roots to safe ancestor chain
seonghobae
committed
f9e9fe0
docs(project): record root-chain authority boundary
seonghobae
committed
0a4d7bf
test(project): preserve real project-root authority
seonghobae
committed
bdd3cee
test(project): reject parent-swap false success
seonghobae
committed
9e998d8
test(project): register parent-swap authority regression
seonghobae
committed
88c68a3
test(project): keep parent-swap regression warning-clean on Windows
seonghobae
committed
ac5e5c5
fix(project): bind first-save publication to staged identity
seonghobae
committed
f99eee8
fix(project): keep persistence engine path stable under integration include
seonghobae
committed
8a7d3e9
test(project): drive recovery cases through public owner state machine
seonghobae
committed
66515cd
test(project): build hostile journal fixtures through durable public format
seonghobae
committed
c6aa06b
test(project): exercise rollback identity through recovery entrypoint
seonghobae
committed
951ef26
test(project): preserve foreign stage on first-save parent swap
seonghobae
committed
c8eaa89
fix(project): keep first-save test seams out of production
seonghobae
committed
7e87a41
test(project): prove private journal through production replacement
seonghobae
committed
e3b5040
ci(project): track persistence engine owner on macOS
seonghobae
committed
c16f69a
ci(project): track persistence engine owner on Windows
seonghobae
committed
1bd9637
test(project): gate native CI on persistence engine changes
seonghobae
committed
cbb62d3
fix(project): isolate superseded first-save writer to tests
seonghobae
committed
e112ba4
fix(project): use one first-save publication seam
seonghobae
committed
42d4664
ci(project): deny owned Tauri warnings in persistence gate
seonghobae
committed
51310c8
fix(project): restore complete Tauri entrypoint
seonghobae
committed
2b2326c
ci(project): test exact persistence source head
seonghobae
committed
90aa59b
test(project): preserve ambiguous rollback evidence
seonghobae
committed
fab6d10
fix(project): fail closed on ambiguous rollback recovery
seonghobae
committed
33aa68d
revert: keep proven rollback cleanup semantics
seonghobae
committed
c573b2b
revert: avoid unsupported rollback guard
seonghobae
committed
bd88318
test(project): add out-of-process first-save interruption
seonghobae
committed
8ba3d99
test(project): include process-kill recovery case
seonghobae
committed
ca7e682
test(project): reject linked roots during provisioning
seonghobae
committed
834e561
ci(project): cover project-root authority regression
seonghobae
committed
6e235a4
ci(project): cover project-root authority regression on Windows
seonghobae
committed
93da927
fix(project): provision roots without following links
seonghobae
committed
f566951
fix(project): bind new roots to safe provisioning
seonghobae
committed
066a274
test(project): cover ordinary safe root provisioning
seonghobae
committed
79eee50
docs(project): trace project-root provisioning authority
seonghobae
committed
7949820
docs(project): add provisioning Security Notes
seonghobae
committed
e1f06cd
test(project): consolidate root authority into warning-gated harness
seonghobae
committed
f8ba050
test(project): reproduce linked cache temp scores authority
seonghobae
committed
f45df9e
fix(project): bind cache temp scores to owned directory authority
seonghobae
committed
acd29ba
fix(project): apply owned authority to cache temp scores
seonghobae
committed
4b17802
fix(project): restore queued progress contract
seonghobae
committed
c6d8c5e
docs(project): extend workspace authority traceability
seonghobae
committed
d913537
test(project): require private app-owned directory modes
seonghobae
committed
fcfb00a
fix(project): create Unix app-owned directories privately
seonghobae
committed
73b2fbb
docs(project): trace private app-owned directory creation
seonghobae
committed
5691785
test(audio): require private local source staging
seonghobae
committed
9639876
test(audio): bind materializer to private stage owner
seonghobae
committed
35548ea
fix(audio): create local source stages owner-private
seonghobae
committed
d2ede94
fix(audio): use private source staging boundary
seonghobae
committed
a984dd5
docs(audio): trace private local source staging
seonghobae
committed
cf73bb2
fix(audio): keep private stage helper warning-clean
seonghobae
committed
d75c3c8