Repository navigation
perf(apps): reduce authority decoding and compose opening overhead - #414
Merged
Merged
Conversation
Select only the current prior/target version IDs and manifests while keeping all scoped joins, fresh authority checks, issuance locks, and complete source-evidence digests unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Keep the root product, Hermes compatibility, and source-built release identity consistent while leaving immutable Kit42 unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Batch scoped live reads and reuse only immutable content validation under exact org/version/content and current revision evidence. Preserve fresh provider, commit and disclosure guards. Include the accepted decision and focused security regressions. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…rity Use fresh static deployment credentials only for entry admission on explicit read and local-draft callbacks. Keep the complete current authority graph and final exact registration/epoch authentication before every allowed result. Send, preparation, lifecycle, status, inspection and v2 action callbacks retain full entry authentication. Validation: 23 focused registry, loader, callback, selector and gateway tests passed; both loader tests passed again after adding mid-operation alias revocation. Performance acceptance is still pending: the latest staging cohort remains above target. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Operational data and token-bearing sync readers combine current pending continuation absence, scoped human membership, and typed discovery facts only after their locked admission and current registry proof. Default standalone, issuance, setup and capture paths retain their existing checks. All current revocation, epoch, owner, consent and final human guards remain. Reuse the already validated manifest within one locked admission, and memoize only exact immutable binding content proofs scoped to org/version/epochs. The retained final helper replaces its adjacent duplicate human-kind query. Validation: 11 binding/handoff tests, 5 owner fact boundary tests, existing owner-registry and manifest-propagation tests passed. Root binding content proof tests passed. Staging latency acceptance is still pending. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Read current registry aliases, proof cardinality and typed continuity facts in one scoped statement, then read the complete nominated action-pin set. Preserve fresh validation, owner and organization fences, full row digests, and issuance locks. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Read only successor binding and registration fields consumed by continuity admission. Keep complete source rows for signed digests and preserve native Date checks. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Remove the duplicate standalone manifest lookup while retaining the fresh current graph, caller-scoped consent reads, exact policy and invocation pins, final revision and full transport authentication. Record the reviewed content-fingerprint cache design. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
When a context resolution requests no identity metadata, omit the no-op metadata phase and its adjacent preparation capture. The final fresh current authority capture, current store-consent reads, and terminal saved-session, form and expiry fences remain. Any real metadata I/O retains both captures and the exact identity comparison. No operation proof or permission cache. Validation: 14 focused context, current-authority and saved-read tests passed. Updated the real DB integration counter to one capture; that integration test was not run locally and remains required in CI. Original line endings kept. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The authority diagnostic assertion now expects one capture instead of two. Re-pin only the existing external test-support loader context after reviewing that exact assertion change; its path and runtimeRoot guard remain unchanged. No new exceptions or gate rules. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Replace wide warm registry reads with scoped content probes, preserve complete proof-bound rows, and recheck all current guards on every admission. Narrow unbound current facts and reuse pure semantic decoding only under actual fresh database content fingerprints. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Maneek21
changed the title
Maneek21
marked this pull request as ready for review
October 22, 2026 09:37
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Authority calls repeatedly rebuilt the same continuity facts and decoded wide package-bearing rows. This adds scoped content reconstruction caches behind fresh database fingerprints, narrows consumed projections, and batches current reads. Cache misses discard the probe and reload a complete independently keyed snapshot; current membership, epochs, revocation, expiry, action pins, scoped sets and deployment roots still validate on every admission.
New compose used a legacy sequence of locator, metadata, default and recovery requests that timed out on the demo. Generic forms now reuse the existing compound snapshot opening, retain each source request's Host/Runtime guards, and recheck the exact destination and successful default source before disclosure. Authoritative denial, account/pin drift or expiry fails closed. Existing saved rows skip defaults; later recovery still reads fresh authority and the exact row. Send review is unchanged.
The boundary repair refreshes only an existing reviewed test-loader context fingerprint after its diagnostic count changed. It adds no exception or gate relaxation.
Validation: 120 focused API/cache/continuity/fence tests, 36 related form/browser tests, 18 boundary fixtures, API/Web typechecks, and the full boundary gate pass locally. All 31 CodeQL source pins remain exact; fresh remote CI gates remain required. Cache invalidation tests cover content drift under unchanged advertised digests, scope/version separation, alias/proof insertion/removal/duplicates, expiry, action/root changes, clone mutation and probe/full snapshot races.
Final isolated staging: 20 warm samples/path, browser p50/p95 242/557 ms and delegated 236/527 ms, 33/37 statements; all 42 callbacks allowed, zero writes/network. The shared VM was 98.36% busy. The 150 ms target remains unmet and no minimum floor is proven. Live compose, sync, 30-minute checkpoint observation and trusted no-diff upgrade acceptance are pending the authorized coordinated rollout.
Prepares Host138 with unchanged Kit alpha.42. Coordinates with Email #28 and supersedes unmerged contingency #413. No permission expansion.
🤖 Generated with Claude Code