# Changelog All notable changes to this project will be documented in this file. # \[Unreleased\] ## Bug Fixes - Conform the simulator packages' gateway pin to the 0.4.0 wheel ## Miscellaneous - Refresh uv.lock for 0.4.0 \## \[0.4.0\] - 2026-10-07 ## Bug Fixes - Invoke compound-action failures report dispatched state - Promote jsonschema to runtime dependency - Exercise boolean continuous conditions - Recheck sample freshness at predicate evaluation - Require at least one tag on every memory proposal - Poll-sliced stable verification and uncertainty-preserving body truth - Final WP05 fix wave - read/write stg refs, interrupted outcome, product units, freshness honesty - Resolver identity recheck, pin-conflict guard, review minors (amends Task 5 brief) - Structural loader containment, record overwrite refusal, atomic writes, review minors (amends Task 7 brief) - Admission hardening -- verify-if-exists cache, persisted high-water, source-level payload cap (WP06 final-fix wave 1) - Loader exec-time integrity -- re-hash entry before import (WP06 final-fix wave 2) - Builder determinism wave -- ZIP_STORED payloads, stale-dir pruning, origin-scoped sha_of, mypy coverage, full-breadth determinism pin (WP06 final-fix wave 3) - Live format validation (rfc3987 + rfc3339-validator) and the mutable-revision honesty line (WP06 final-fix wave 4) - Bind served status to its release -- status_release_mismatch (unsigned-fix wave 1) - Dev identity fence on OriginConfig -- dev-unsigned reserved for dev- origins (unsigned-fix wave 2) - Surface-audit wave 1 A -- single-source §4 path check, archive_invalid, sys.modules rollback, prune dead map check, schema path pointer - Surface-audit wave 1 B -- loader executes verified bytes, unreadable .sig maps to bad_signature, falsifiable cache asserts, dev-path status-swap pin - Surface-audit wave 1 C -- model dev signatures honestly as bytes \| None - Raw WRITE trip reports DISPATCHED -- compound-action honesty (surface-audit wave 2, item 11) - Input-validation polish -- eager deadline parse, scoped release swallow, typed condition-kind fence (surface-audit wave 2, item 13) - §11 id-sharing exemption is ownership-direction-only; provided-id maps split per kind (surface-audit wave 2, item 14) - WP07 task 3 follow-up -- contract-legal artifact/evidence id shapes (no colons) - WP07 task 4 -- permission tiers are a hierarchy (observe ⊆ control ⊆ admin) + cursor numeric guard - WP07 task 5 -- canonical generation fence + worker-thread store for build_run + join fast path - WP07 task 8 -- adapter limit/length clamping + first live run-through-app test - WP07 task 8 -- clamp floor at 1 (negative/zero limit/length) - WP07 final fix wave -- event_gap/§7, cancel scoping/§6, seam offset floor, MCP write gate, MCP isError + D8-D13 register - WP07 final -- event_gap carries retained watermarks per §7/§10 - Stream_id bench.{id} contract-pattern conformance - Scope dangling-request sweep to run keys, spare change keys - D11 artifact offset aligned to the §8 letter -- beyond-size fails invalid_request, at-size keeps the zero-byte eof chunk (seam construction site, envelope parity pinned) - D13 MCP body ceiling -- max_json_bytes over tool-call arguments, payload_too_large envelope parity with REST (D6 residual closed) - D13 internal_error one construction site -- correlation_id minted (uuid4 hex16), message text parity across transports, detail rides details - D13 retry honesty -- change_apply unknown-outcome advertises retry never (re-entry is conflict), pinned end to end - Internal diagnostics off the wire, keyed by correlation_id -- details def is closed (D14/D15 registered) - Client guards for non-JSON and non-object 2xx bodies, read-phase timeout - Reject scheme-less gateway URLs at the client boundary (T9 carry) - Restore manifest gate + traceback-free at-rest boundaries - Operator-close path for the live demo view - Refuse empty and placeholder production secrets; observability + doc folds - Audit fix wave -- complete denylist, report hold, restore extras gate, setup boundary - Verify carve-out for the registry work tree - Assert the CLI contract (-version) instead of the retired bare-call print - Mint correlation_id on every failure envelope (D14 cheap half) - Serve the interface-v1.1.1 tools corpus (align with seam validation) - Check_documents ignores fenced code blocks when scanning links - Review minors -- command count, hostname scrub at retention, parse guard, dotfile skip, junit family pin, index precondition - Synthetic hostname in scrub test fixture (close-review F-M1; wave completed by controller after agent stall) - Scaffold a location-independent preview conformance test - Keep smoke contract sets aligned with the SDK build hook - Register the preview fixture schema with its docs source - Run config-driven mypy and type the SDK preview tests - Enforce preview-server trust boundaries - Ignore compiled vite config siblings - Harden generated-project creation - Polish preview runtime surfaces - Point the renderer freshness gate into the submodule - Refuse normative paths colliding in the bundle - Guard sync target against uncommitted submodule pointers - Neutralise newlines in matrix cells - Tolerate trailing telemetry in the commanded reply window (live-device defect) - Frame-atomic drain window -- WP11 W1 straddle hardening + W2 same-field pin - Ruff-format dps150 session - repair dps150-independent lane (broken by \#14) - Repoint preview wire-schema test at standards/ corpus path - Re-lock dps150 contracts at the standards tree - Review fix wave for the id/version tree (PR \#21 M-1/M-2) - Smoke script + adapter API constant follow the 0.1.0 baseline - Audit straggler sweep -- URN ids, catalog version, prose assertions - Review fix wave 2 -- runtime interface version, example teachings, doc truth - Declare MIT license in pyproject metadata (was Proprietary) - Key the Pages concurrency group by ref - Wrap phone-width header onto two rows - Anchor public-site-assembly ignores to the repo root - B2 -- Failure construction-site guard refuses empty correlation_id - D14-details -- the closed six-key error envelope on every failure - D4 -- every event kind emits the closed document-ref evidence - Review-fix wave -- poison-emit guard, fallback log, hygiene - Pin the symmetric stray/stamp gates across all three check lanes (#9) - Portable store hold; the gateway now runs on Windows checkouts - Reject delimiter injection at issue time; fail fast on absent fixtures - Validate each scope element at issue time, not just the joined field - The hold marker lives beside the data dir, so restore can swap it on Windows - Resolve the data dir before deriving the hold marker; tolerate the legacy in-dir name in verify (PR \#35 review fold) - Otdp 0.1.1 -- byte-errata of 0.1.0 (#45) (#47) - Make the adapter-call AST pin total over the \_adapter name - Pin Adapter protocol data members, not only methods - Require envelope key sets in enforcement position, not mere presence - Derive identity standard-version keys against the standards manifest - Reject duplicate standard ids at manifest load - Fail styled, not raw, from the versions command - Refuse string-mediated adapter access and state the pin's true boundary - Pin the envelope comparison shape, not just the literal's presence - Make the identity block closed-world - Declare the range_v/offset_v configure envelope in input_constraints - Make fetch honest -- acquisition state, byte budget, corpus axes - Bound sample_count in both the descriptor envelope and dispatch - Snapshot the configuration at arm; validate trigger shape at dispatch - Name the true cause when the pretrigger buffer is empty - Carry the probe_ratio enum in the parameter descriptions; re-pin the digest chain - Forge-wave honesty -- dispatched state refusals, single-use acquisition ids, small fixes - Accent arbitration, threshold carrier, a11y disclosure, token fallback (C1-C4) - Hidden traces release the accent claim (W1) + cross-product wording (W2) - Carrier participates in axis extent; legend swatches follow resolution (FC1/FC2) - Muted-x-absent cross-product cell, ruled fallback pin, renderer version (FC3-FC5) - Declare plugin-ui 0.1.1 in the ui resources - Total and exact float64 element boundary (B1/B2) - ASCII digit gate, marker bounds, duplicate-id refusal, containment (RB1-RB5) - Move to OTDP 0.1.2 with the active corpus (CI merge result) - Wave-3 audit findings (forge-B) - Review items R-F5-R-F7 - C's multi-channel specimen cites the active measurement URN - The measurement contract pin hashes the active corpus (F9) - Report DISPATCHED on post-dispatch device-state refusals - Rebuild sim fixture lattice for the dispatch-posture change - Split argument typing from device evaluation (R1/R2, \#66 absorbed) - Issued-map fields must be declared action inputs (F1, \#63) - Fold R1-R4 -- record corrections, lock pin test, census obligation (#63) - Typing precedes the trip latch in \_write (RF1); absence pin + poc walk flake kill (#63) - \#85 fold -- malformed bench/binding refuse startup typed, recovery containment pinned - Fold refute F1 + NIT-1 -- convention-vs-mechanism disclosure, reorder tamper mode - Sweep miss -- gateway lock emitter and test pins for 0.1.1 - Collector reads file paths; chronological admission; dedup; real shallow guard (#97 review fold) - Refute fold -- zero-gap double bumps, first-add anchor, shallow refusal (#97 G6) - Derive the devices mutation fixtures; GOVERNANCE claim scoped (D2 review fold) - Audit-annotate train_window's git subprocess under the S-band; merge main - Resolve OUT once so the pinned check compares resolved-to-resolved (#119) - Precision folds from the first review wave (#102 D1, review F3/F5/F6/LOW-1/NIT-2) - EngineeringPlot re-resolves theme tokens on data-theme flips (FC6) - Disclosure names observed targets, not bindings - Preview workbench passes no fabricated threshold (R1b) - Render-quality batch -- stable joins, safe keys, unit guards, wire labels (R2) - Sweep the presentation-admission seam onto the active plugin-ui version - Render repository-relative paths with forward slashes on every platform (#138) - Read the \_GENERATED.txt stamps as UTF-8 (#139) - Keep the 0600 promise on Windows by restricting benchweave.env's access list (#137) - Say what 0600 means on Windows in the remaining messages and tests (#137) - Forensic once-guard keys durability and lifecycle, not identity - The stamp discriminator requires identity and dispatch binding - Gate-region lock contention classifies RESOURCE_LIMIT - The writer's stamp frame covers the COMMIT sites; sweep return documented - Finalise enforces the session key on the publishing path - The ended-at-quota-boundary teardown marker (F1, review wave) - The landing-origin stamp -- the poll path's C3 discriminator (F2, review wave) - The event validator enforces the corpus's unconditional keys and refuses unserializable content honestly (G1+G3, Forge wave) - Mirror lane refuses a moved submodule by name; no str()-laundered lock values (issue \#158 review wave F1+F3) - Matrix CLI fails styled on OSError too (issue \#158 review wave F2) - Uninitialized-submodule refusal names initialization, not the superproject HEAD (issue \#158 measurer fold) - Contain success-path completion emit, bound RunWorker.join (issue \#156) - Run-state-aware startup sweep leg -- queued ghosts and stale projections unwedge at restart (issue \#156 fix wave) - Close every commissioned bridge on every exit path (F1, issue \#167 review wave) - Teardown-window violations escalate into the terminal record (F2, issue \#167 review wave) - Gate the sim fallback on the commissioning simulation mark (F3, issue \#167 review wave) - Closure resolution pins the served raw manifest digest (F4, issue \#167 review wave) - Devices suite follows the manifest into pre-provider trees - Fold review wave -- provider rules gain teeth, claims gain honesty - Fold adversary LOW -- provider boundary claim scoped to security_scope - Stamp the in-tree descriptors to 0.2.1, lattice in lockstep -- the disclosed window closes - 0.2.2 errata batch -- the two-component feature-version tighten - The sdk_compatibility mirror follows the landing -- notes and sdk aligned with the 0.2.2 lock - Dev-stage bytes never stage or ship -- lexical skip in both halves (review row 1) - The documents gate never sees a dev head -- \$id shadowing closed (review row 2) - Calendar-valid opened + real head containment (review rows 4 and 5) - The -corpus lane resolves the head through the canonical loader (review row 6) - The three red lanes after the coordinated landing -- direct-to-main broken-CI fix - Sweep the dps150 corpus lock + descriptors to OTDP 0.2.2 (main ci red after \#171) - Finish the dps150 0.2.2 sweep -- the plugin suite's corpus path follows the lock - Close the provider-pin size window + name the duplicate-key cell - Refuse \$ref-bearing grammar subschemas; guard holds the ValueError discipline - Spool the pinned provider contract + thread settings/now_wall - The write-gate exempts branch-new files its message promises - Advance SDK pointer -- notes preservation (#170) + paired prose corrections - Sdk_compatibility mirror = 0.2.0 with the certified pointer (#187) - Refuse non-canonical manifest bytes at resolution (issue \#176 row G, design F4) - Fsync the whole new-directory chain when creating the archive target - Durability errors refuse typed -- never laundered into a committed trail - Verify reads each row's recorded archive_destination - Streaming stager -- one payload at a time, hashes in 1MiB blocks - Archive rows without artifacts refuse typed -- never archive-to-nothing - Archive binding reconciled inside the transaction - Refuse empty and dot archive targets -- no silent CWD archive - Symlinked destination objects refuse; late-appearing entries verified - -verify-archive honors -out (json and markdown) - Deterministic stager placement order -- seed-proof the R2 latecomer pin - Absent contract pins are the soft unresolved arm (#146 slice 2, taxonomy fold) - F1 -- invoke gate local renamed, test constant annotated (mypy red) - F2 -- the probe walks \$dynamicRef and roots where the runtime roots - F4 -- degenerate measurement required-set refuses at load - Item 8 -- the descriptor's input_constraints join the load-time probe (R22) - Wave 2 \#1 -- the publish's evidence row joins the finalise transaction (no leak) - Wave 2 \#2 -- M02 narrowed to the corpus's scalar product one - Wave 2 \#3 -- the classified invoke's payload reclaim rides the epilogue floor - Item 5 rider 2 completion -- the growth site classes pay: rows dataset too (#146) - Issue \#172 classifier fidelity -- exactly-5 FIRE, per-class evaluation, label honesty - Issue \#172 drain robustness, range gate, X4 3-way split, retry cap - The F-fix gateway legs + the folded LOW/NIT rows - Late Forge folds, gateway side -- active re-point twins + the reproducible wheel identity - Maintainer-review folds gateway side -- the corpus-pin gate lands now (the fork), claim/mechanism agreement, and the held rows - Version-ordered selection at both order-sensitive sites (#216 fold F1) - The dependency lane surfaces deprecation warnings (#216 fold F2) - The derived map is an allowlist, not directory coverage (#216 fold F3) - The revision scissors -- the map digests the bytes AT the revision (#216 fold F4) - The \#146 e2e dataset fixture claims the live service clock (#146) - Authoring crashes are styled refusals (#216 fold wave 2 R1) - List validates the policy join before rendering (#216 fold wave 2 R2) - Cross-constraint requirement intervals validate at load (#216 fold wave 2 R3) - The interval grammar admits canonical numerals only (#216 fold wave 2 R5) - Malformed corpus-manifest rows refuse typed (#216 fold wave 2 R6) - Drift messages name non-canonical serialization (#216 fold wave 2 R11) - Bounded note, single descriptor read, row batching; digest-scope comment (#216 fold wave 2 R15 + R12) - Structural infrastructure marker replaces message-based retry matcher (#159) - Block-ness from the monitor's latch; dispatched envelopes never retry (#159) - Classify priming signal-starvation as retryable infrastructure (#241 slice 1) - Nest python-version under with: in the timing job's setup-uv step - Classify the priming block-refusal as retryable infrastructure - Guard the priming classification against the divergent wall - Close what a failed rig construction built - Correct the trial-line key dropped in the sites fold - One shared probe-wall predicate at all three classification sites - Corpus-keyed adapter cache, acked-aware warning, bounded classify cache (#217 review fold R3/R4/R5) - The devices read path degrades, never 500s (#217 review fold R10) - Fold refute F1 dead-log pointers + F2 zero-evidence PASS (#247) - Refute fold -- six fork-independent MEDIUMs A/B/C/F2/F3/F6 (#218) - Classify against fresh policy state -- VR-19 both halves (#219 slice 5) - -no-renames on the shared Add census -- rename-blind Adds (#219 fold FIX A) - The matrix committed-read fallback, gated and env-immune (#219 fold FIX B + F4) - SM-5 pairs on the version lattice, not committer clocks (#219 fold FIX C) - LOW folds -- the token's absence semantics and the guard pin (#219 refute wave) - Fold the \#257 review battery -- 12 rows, one batch - Fold wave -- recovery era-skip, carried pin record, typed seam refusal, splice, boundary arms (#220 refute) - Fold the \#258 review battery -- proof instrument + re-searched palette - Fold the \#243 S1 review battery -- 12 rows (comparator, premise, pins) - Fold the \#243 S2 review battery -- 9 rows (real-render arms) - Fold the \#243 S2 addendum -- lane-2 part 2 (4 rows) - Fold wave -- 12 fixed rows, 2 disclosures, \#221 refute battery - \#260 fold wave -- the seam decides, the comparator is total, recovery is policy-relative - Row 4 corrected to the three-way echo disposition - Fold wave -- marker truth, region dedupe, regenerable residual, adc vacuity guard - Fold wave 1 -- governor + grammar-lane rows (8 rows, one batch) - Fold wave 2 -- the honest interim + the pin fork closed (T1/T2) - S2 fold wave 1 -- the bus hatch, Δt axis mode, property pins, default_collapsed (5 rows) - S2 fold waves 2+addendum+3 -- interim truth, pins with teeth, decoder closed-set (12 rows) - S3 adversary fold -- one hidden predicate, verbatim settings, no overprint, window clipping (4 rows) - S3 resident-review fold -- guide truth, per-lane awaiting, hook pins, story (6 rows) - Fold the why-slice adversary wave -- 3 LOW + 3 NIT, one commit - Close dependency audit findings (brace-expansion, fast-uri) - M1+M2 -- promotion sweep admits by rule, not token; history-derived no-record trigger - Fold LOW 4/5/6/7 -- the review batch, one commit, per-row RED - Sweep digest-lane overhaul -- binding multisets, not positional pairs - History-gate hardening -- shallow refusal, typed malformed parents, all merge parents - Claim-accuracy -- empty vs reversed bounds, the read-once scope, the one-to-many residual, the measured history cost - Final fold -- the partial-clone masquerade refuses typed; three disclosure clauses - The promotion fixtures carry their own committer identity (CI has none) - Fold F1 -- the pin layer pins identity, not just structure (issue \#297) - Fold F3-F6 - unreadable Schema red, TS literal semantics, separator arity (issue \#297) - The two-lane refute fold -- repair the stale authority at the source - Consolidated Tier-3 fold -- per-trace acquisition, enum arms, lanes semantics (issue \#298) - M4 owner ruling -- the legend stays on the \>2-unit refusal (issue \#298) - Belt-swap pin pace ladder indexes by PACED order, not construction order - Lock-block D4' completion -- UNKNOWN cut-proof, in-run-relative ceiling - Drain-poll TIMEOUT-flavor poison joins the carrying sites - Refute fold -- 4 code rows + record erratum - F3 -- the fast lane never runs the browser marker (issue \#300 fold) - Lane A fold -- A1 ST-3 laundering equality, A2 ledger clearing, A3 toggle discrimination, 3 NITs (issue \#300) - Lane B fold -- F1 themed renders, F2 layered target-size, F4 negative disagreement, F6 axe scope (issue \#300) - Correct the browser job's actions/cache pin to the API-resolved v4.3.0 SHA (issue \#300) - \#207 the wedge exhaustion instant renders by pure datetime arithmetic - Thread the licence expression through the re-derivation - Resolve the dangling gitlink; pin the licence threading (folds F3+F4, gateway issue \#223) - Anchor cliff.toml tag_pattern (#302 first release) - Refute lane A fold -- env indirection for the release tag (template-injection MEDIUM), github.sha ref pinning (retag/re-run LOW), attestations disclosed - Refute lane B fold -- accurate id-token claim (F1), casefold collision assert in both census copies (F2), operator-step + notes-command dependency truths (F3) - Refuse separator-spoofed normative rows at load (issue \#238) - Fold lane B HIGH -- refuse non-canonical (./) normative rows too (issue \#238) - Fold lane A MEDIUM -- refuse case-camouflaged normative prefixes (issue \#238) - The G2b fold rows -- H1-H4, F2/F3, the GW-22 addendum (#368; follow-up \#369) (#372) - The G2a fold rows -- G1/G3/G4/G6/G7 + the G5 addendum (#368) (#371) - Fold refute lane 1 on the reading-tile join (#369) -- F2 budget bounds, F3 per-row tolerance, F1 disclosed - Issue \#316 fold -- typed datetime comparisons + real-worker pins - FOLD-5 -- the poll cadence joins the sub-second floor (MEDIUM) - FOLD-9 -- dead code + the retired max-lease fallback (NIT) - FOLD-7 -- judge the controls' authority through the tier lattice (LOW) - FOLD-6 -- enforce the published max_lease_ms on the UI POST path (LOW) - FOLD-4 -- release keys the view by server truth; the fragment tolerates a failed refetch (MEDIUM) - FOLD-3 -- a conflict renewal no longer clears the held view (MEDIUM) - FOLD-2 -- control outcomes render in place, refusals included (HIGH) - FOLD-8 -- the duration inputs survive the poll swap (LOW) - FOLD-1 -- the CSRF token is actually delivered (CRITICAL, two-lane) - The expired-session refusal fragments for htmx too (fold-refute F1) - Reconcile **version** with the single source (fold-refute F2) - The mid-stream bridge observable -- observe before the abort (#384) - Pin the docs-site listing command literal (adv2 fold F1) - Session consult-water -- an origin rollback cannot resurrect a run - Advisory escalation lands a second durable record - Advisory-delivery I/O never refuses the run (PR \#391 R1) - FOLD-1 -- a staged stored non-binding digest reads as the unreadable chain, not a KeyError 500 (issue \#304) - FOLD-2 -- the §2.4 invalid-staged-input state renders (issue \#304) - FOLD-3 -- the §9 replay surfaces honestly (issue \#304) - FOLD-4 -- arm I pins the marker, not an OR the sim's speed decides (issue \#304) - FOLD-5 -- the armed text composes EVERY enable, and degenerate shapes render honest text (issue \#304) - The staging panel offers the preflight control (browser-lane catch) - The confirm names the channel the enable targets (fold-refute F1) - Reconcile the gateway's v0.7.0-coupled surfaces - Sdk_smoke installs the SDK wheel with the \[scaffold\] extra - The 146 E2E step budgets absorb starved-runner stalls - The installed-SDK smoke's scaffold leg rides \[scaffold\] (gateway \#308, PR \#400) - A terminal change record is never rewritten (issue \#305, FOLD-1) - Pin re-apply-on-failed keeping its audit reasons (issue \#305, FOLD-2) - A submit §9 replay preserves the session's change view (issue \#305, FOLD-3) - The submit no-response reconcile carries its own replay form (issue \#305, FOLD-4) - Acknowledging a non-terminal change refuses (issue \#305, FOLD-5) - Guard the None-valued admin-region slots (issue \#305, FOLD-6) - Remove the dead applied-generation block from change.j2 (issue \#305, FOLD-7) - The no-response fragment roots its own reconcile (browser defects 1+2) - Terminality and bump-once become compare-and-swaps (issue \#305, FOLD-A) - The approval-first view survives a §9 replay (issue \#305, FOLD-B) - GapDetector.feed records into the detector + the A3 harness (issue \#393) - The census pins move with the \#393 tree change (ratchet discipline) - The fold wave -- stream TX discipline, scan reconfigure, honest negotiation states (issue \#393) - The A3 harness's reopen moves the host baud (the fold-tip regression) + the ordering pin (issue \#393) - Prime the interpreter and the pinned pytest before the adc job's offline run (issue \#393) - Script the with-ui scaffold's drain probe (issue \#407 wave 4) - -bucket mode verifies its own docs tree, not the parent's website - Versioned-assembly fold -- review lanes A/B, 2 HIGH + 4 MEDIUM - PR \#415 owner-row fold -- bare versions: key, inverse scope, reserved ids, absolute great-docs ## Documentation - Correct compatibility record with UF_HIDDEN root cause - Pin memory vault routing to benchweave, ledger fallback until /mcp approval - Pin memory vault routing to benchweave, ledger fallback until /mcp approval - WP05 procedures plan and project ISA (close-of-WP05 state) - Code-reviewer gates on documentation coverage per change (rule 3b) - Rule 3b extends to API (OpenAPI lockstep) and MCP (mcp-tools.json) surfaces - Rule 3b names CLI surface explicitly and reserves the UI clause - Rule 3b adds fixture/CI/vendoring/security-posture surfaces; reserves deploy and hardware-evidence - Honesty labels -- dev-unsigned auth wording, enforced-not-authenticated sequence (unsigned-fix wave 3) - Developer guide gains the registry dev loop -- unsigned packaging, dev origins, signed production path, status refresh - Add AI device development guide with firmware path - Link AI device and firmware development workflows - Clarify external plugins and Docker gateway lifecycle - Link SDK workflow and clarify external adapter support - Align device quickstart with plugin layout - Show optional plugin feature directory layout - Disclose report's migration-on-open window; settle missing-evidence render - Operator guide + clean-install gate (PRD-01 flow) - D14 correlation_id half CLOSED by WP09 Task 1 (3ebfcb5) - D14 mint-sites phrasing + HEAD-guard durability note; ledger re-ledgers - 100-run seeded volume leg -- PRD §3 retained evidence - Second-install reuse runbook -- the PRD §3 step-7 operator flow - Timed operator legs -- author-run, wall-clock recorded - Timed-leg record precision -- abort duration, verdict scoping, runbook ordering note - PRD §6 reference timing + stress tier -- both targets pass - D13 decision landed; G2 deviation registrations - Fault-matrix harvest + deterministic digest index - Regenerated tree post-scrub - G2 gate record - Close-review honesty -- PRD-11 registry-loss row structural, acceptance verdict qualified, index root-refusal disposition - Define style guide and workbench architecture - Define contextual alert message classes - Support declarative custom device compositions - Publish executable style guide - Add portable mock-up and design tokens - Design deterministic UI preview workflow - Complete local UI preview developer loop - Align preview documentation with what shipped - Review findings persist to memory at every severity - Bind RedTeam and external review outputs to the memory rule - G2 owner acceptance -- ACCEPTED 2026-09-14 - Standards synchronisation design and plan - Two-repo discipline for the SDK submodule - SDK guide moves to the SDK repository - SDK repo self-sufficiency design and plan - WP10 compatibility record + esp32 selection - WP10 close reconciliation -- plugin status honest, PID boundary, completion companion - Record links stay in-docs -- out-of-tree capture references as code paths (architecture gate) - WBR fix -- README lifecycle honest (adapter performs the handshake); scratch-name cosmetic - Point SDK consumers at PyPI; simplify dead concurrency expression - Close-out - PyPI/brew publishing design + implementation plan (landed) - Record honesty -- WP11 W3 ramp wording + W4 adapter-shape note - Fix errata README's own post-move pointers (review M-1) - Add Contributor Covenant 3.0 code of conduct - Add SECURITY, CONTRIBUTING, SUPPORT and issue/PR templates - Public-site styleguide and mockup for the SDK website - Public-site styleguide v0.2 -- AI instructions, sub-brands, icon set, nav mapping - Add Built with AI panel crediting models and tooling - Report via private advisory, not personal email - Add permanent Discord invite to README, SUPPORT and site (#33) - D4 + D14-details CLOSED by the interface-errata slice (#16) - Review rubric, hard invariants and drift obligations (#41) - Record the adapter-api identity and agreement invariants; correct stale baseline lines - Correct the remaining device-guide baseline claims (OTDP 0.1.1 / adapter API 1.1) - Commit the \#44 design record - Complete the adapter-protocol obligation touch-set and hook triggers - Correct four remaining baseline lines to the machine versions - Sweep remaining stale version claims to the machine truth (#54) - Issue \#6 row A settings-as-presets design record - Named settings as presets -- the sim_scope reference instance - Correct the token-replay claim -- mismatch-only, and the design's range text - State the input_constraints lane split in the presets section - Fetch semantics in the README; design-record residual corrections - Review-wave prose corrections -- parameter count, copy wording, simulator inventory scope - Issue \#6 row C per-channel display hints design record - Record the forge-tail evidence in the 0.1.1 report - Scope the W1/C4 amendment claims; pin first-visible mark line (review-C) - Issue \#6 row B -- declarative derived variables design record - Sweep remaining version claims to the otdp 0.1.2 corpus - Complete the 0.1.2 link sweep (reviewer, quickstart, architecture, development) - M15 states the int-exactness rule and the M02 suspension - Apply the issue-#6 retrospective workflow rules (#69) - Governor-pass fixes on the \#69 rules - Commit the issue-#64 design record on the branch - Commit the issue-#62 design record on the branch - State the orphan-sweep size residual in the 0.2.0 README - Issue \#63 descriptor dialect reconciliation design - Issue \#63 design update -- dps150 absorbed (slice 5), 28-cell census, registry-decoupling correction - Record the dps150 lock otdp_version stale-field correction in item 22 - Amend deferral rule 3 -- table rows are first-class merge citations (#98) - Issue \#85 bootstrap routes descriptors through the admission gate (absorbing \#78) - \#85 -- startup admission refusal on the operator, device-author and invariant surfaces - \#85 -- fold refute F1-F3 (DEFENDED verdict) - Leg-(a) comment classifies by failure kind, not evaluation order (refute NIT) - Issue \#79 machine-written, CI-pinned OTDP validation report - Issue \#71 skill-role slice 1 -- pre-committed acceptance rules - Align live baseline prose to 0.1.1; amend the sweep grep class - Record deferral citations per amended rule 3 + G4 sweep-gap note - Adopt retrospective row 4 -- run-close junk sweep as step 8 - Single issue stream -- all issues file on the gateway tracker - Re-anchor the edit grant on the freshness gate (review R1+R2) - Row 14 -- agent tool-grant surface (review F3, folded) - Recall the memory vault before proposing or diagnosing - Design record for issue \#97 bind-the-train - Design record for \#102 D2 -- manifest-driven version discovery - Refute fold -- name the platform condition; scope the residue case (#102 D2 G6) - Design record for \#97 description-guard extension - Review fold -- reconciliation precise; root-only scope stated (#97) - Design record for \#125 pinned-escape coverage - Refute folds -- revival-set precision, honest Windows posture (#125) - Issue \#102 D1+D3 validation-report family design record - CON-11 family amendment, drift row 13, GOVERNANCE generalization, validation doc (#102 D1) - CON-11 structural reason + residual; wave-2 folds recorded (#102 D1, review R-F3 + A-F4) - Increment loop amendments from the \#129 retrospective - Issue \#43 capture & streaming design of record - Record owner calls on all four forks (agreed 2026-09-21) - Explicit §6 disposition -- multi-device concurrency and time correlation - Issue \#133 retrospective skill design of record - Review folds -- archive+git evidence lanes, moment pinning, dead tag (#133) - Amendment 1 -- integrate 12-analyst RedTeam findings into \#43 record - \#43 Amendment 2 -- standalone capture mode (Decision 9), slice-1 scope - \#43 Amendment 2 -- pin the standalone capture directory layout - \#43 Amendment 2 -- standalone formats (plain text first-class) + declaration chain - \#43 Amendment 3 -- integrate external review (platima) - Issue \#67 manifest-driven plot rendering design of record - Declared-plot preview behavior + obligation 12's doc home - Review-wave amendment -- guard wording, matrix sequencing, claim scoping, scaffold fix - One edit-routing card -- which write path applies - Docstrings for the four worst-documented public vocabularies - Align development.md with what CI actually runs - Describe the CI gate this branch's workflow actually runs - Bridge docstring -- version fix, real async-host boundary, capture-budget disclosure - The busy-timeout disclosure prices the full failed-dispatch path - Narrow the develop-your-device loader sentence; pin it gateway-side - The streaming documentation surface -- delivery ceiling, guide section, loader sentence - REG-4's gap enumeration follows the machine source; the on_event escape residual named (G2 + row-9 note, Forge wave) - Issue \#158 -- matrix render must be a pure function of committed state - CON-12 invariant, GOVERNANCE identity sentence, obligation-6 extension (issue \#158) - CON-12/GOVERNANCE name the pin as the mirror's authority (issue \#158 review wave F4+NIT-1) - Issue \#156 run-worker emit-containment design record - Issue \#167 run-engine activation design record - Run-owned streaming + the adapter-run quota seam (issue \#167 slice 3) - Review-battery disclosures -- teardown aggregate bound, corrected M-B attribution, row-B measuring condition, F4-residual deferral row - Otdp 0.2.1 transport-provider prose -- the mechanism behind the sentence - Obligation 15 -- the transport-provider lane's increment-2/3 pairing constraint - Obligation 15 follows the actual heal path -- same-version re-vendor is refused - The mutable -dev standards stage -- design record (gateway \#97 successor) - F6 superseded -- single reviewer, coordinator carve-out, 2027-03-23 re-review (owner ruling) - F3 promoted to increment 1 by owner ruling -- trigger fired - The lineage paragraph gains the ruling's closing purpose clause - The dps150 version triangle -- why the stamp cascade wins - Record amendment -- the resolution landed on main in two steps; this branch lands the guard - Issue \#159 Option-B row-1 activation review record - Refresh \#159 sequencing state after the coordinated landing - Issue \#147 increment 3 -- gateway admission and grant slice design - CON-1/CON-10 provider amendments + drift rows 16/17 + operator guide - Fold waves D+E -- admission proof is the triple row; \#167 gate-expiry scope note - Record the execution-train design (issue \#176) - Fold the refute slate's record amendments (#176) - Amendment 3 -- promote-at-end model, dev-corpus resolution seam (#176, \#186) - Capture-in-a-procedure authoring section (issue \#176 inc 2 obligation) - Refute-fold prose and claim corrections (issue \#176 inc 2, commit 1/3) - Deferral row 15 -- the error_code vocabulary split (issue \#176 inc 2 fold wave) - Demo-lattice streaming surface + canonical manifest emission (issue \#176 rows D+G, obligation 3) - Council fold wave -- row D+G prose disclosures (dF1-dF3, gF1/gF1b/gF4/gF5, critic-D5/D6) - Governor fold -- released-posture prose after the execution 0.2.0 promotion (#176) - Final fold -- baseline lines, README prose/counts, A-R2 sweep scope (#176) - One worktree per lane + shared-stash rule (retro R1) - Standing gate line in builder briefs (R2) + step-8 entry-shape fields (R4) -- retro 2026-09-25 - Issue \#199 archival-tier design record (BUILD-minimal verdict, AR1-AR9 pre-committed) - Archival tier shipped -- every 'unbuilt' sentence moves; STO-5 amendment + new STO-6 - Manifest no-consumer status, zero-object manifests, verified_at-vs-mtime (R4+R6) - §11 review fold -- the fix wave's disposition record - Add contributor publishing path requirements PRD (#209) - Record \#209 coordinator rulings (Q1-Q21) in the publishing PRD - Add \#203 standards dependency management requirements PRD - Add \#203 standards dependency management design record - Add \#209 contributor publishing design record and planning index rows - F6 -- capability-ungated hard arm named; the C3 binding rule in the guide - Commit the \#146 invoke/dataset record with Amendment 2 (#146) - Record Amendment 3 -- the slice-3 review fold (#146) - Issue \#231 park design -- per-row dispositions for the \#146 follow-ons (#232) - Define reopen trigger and deferral table row -- the deferral-row contract (#99) (#235) - Issue \#172 cross-instance continuity instrument -- BUILD verdict record - A1 baseline measurement -- 23/26 x3 reproduced at merge base - Issue \#216 slice-2 resolver design -- BUILD verdict record - The slice-2 invariant, governance and obligations text (#216) - G-4 numbered; the duplicate obligations 19 renumbered (#216 fold wave 2 R16) - Deferral rows D7/D8 for the retry-policy residuals (#159) - Issue \#241 slice 1 design -- timing lane + priming-starvation classification - The timing lane in the CI map and the prose surfaces (#241 slice 1) - The review-fold amendment and the intra-lane ordering disclosure - Correct the observed-run attribution and the two CI-comment overclaims (#241 slice 1, fold wave 2) - Wording drift fixes and the wave-3 amendment (#241 slice 1, fold wave 3) - CON-1/CON-10 slice-3 landing notes; census and cross-constraint rows (#217) - Per-pin admission across the developer and operator guides (#217 review fold) - D12 -- the API-view wire field deferral gets its §6 row (#217 review fold) - Classify_descriptor_pin's totality is over pin values, not governance bytes (#217 review fold R8) - \#247 gate-efficiency design -- batched-fold doctrine, xdist, gate wrapper - Parallel-lane worktrees under .wt/ keep gortex overlays (owner directive) + design-record pointer corrections (#247) - Split gate doctrine into per-commit fast lane + per-push battery (#247) - Issue \#241 slice 2 record -- re-band decisions (D1 drain-cap classification, row-17 marker, HOLD arms) - Wave-2 fold -- record errata for the unbuildable patch shape and the headroom arithmetic - Slice 5's surfaces -- CON-12 landing, operator ack guide, D11 closed (#219) - Issue \#242 UI renderer-neutral contract design of record - Split the style guide into a normative contract plus guidance - Issue \#254 rubric tier-rules design of record - Step 1 ui/ tier rule, design-time keyword check, interplay note - Fold the \#254 review battery -- 19 rows, one batch - Slice-6 design record -- contract_version is the pin carrier - CON-1 amendment -- the execution per-document pin (#220, \#203 slice 6) - Issue \#243 UI follow-on design of record - Fold the \#243 S1 wave-2 reviewer rows (R1-R4) - Issue \#221 zero-literal end-state design record - Issue \#260 record-lane design record - Add counter-boundaries design record - Obligation 20 assembly/scripts/membership clauses; obligation 22 region pin - Issue \#244 digital_lanes design of record - 18(n) carries the widened-staleness framing (wave-2 T2 add) - 18(n) carries the widened-staleness framing (wave-2 T2 add) - \#233 register pass -- six dormant rows, D5 why-query slice design - Standalone web UI PRD (#282) - Run close stops dispatched agent lanes too - \#283 I1 skeleton design record - \#283 review dispositions -- LOW accepted-risk, NIT deferred to hardening pass - Add PRD 12 gateway web UI (HTMX) and React retirement - Issue \#288 spec-09 review fold design record - The promotion flow names its record steps (LOW 3) - Issue \#288 G6 -- dev-head pinning how-to, stale-version guidance, invariants/obligations amendments, CLI table - Register constraint_bounds_reversed and the marker_mirror_drift posture (F1+F2) - Revise PRD 11 for the PRD 12 rulings (issue \#312) - Sweep remaining ECharts references to uPlot (issue \#312) - Issue \#317 website status update design record - Bring the "Where it stands" section current (issue \#317) - Fold refute findings F1+F2 from the issue \#317 review - Complete the Q12 sweep -- remaining ECharts refs to uPlot - Issue \#241 slice 3 -- load-honest retry pins and the one-shot cell belt - The timing-lane conventions line names the cell belt - G1a contract-gate design record (issue \#297) - Fold note for refute F1/F2 (issue \#297) - G1c computed-proofs port + lane decimator design record (issue \#299) - G1c erratum - reviewer command, G1e arm-(b) row, Sharma F4 (issue \#299 G1c refute folds 1+2) - Issue \#302 design record -- ui-html release pipeline and versioning machinery - The release-and-pin process page (#302) - Fold F1/F2/F3 review rows into the release-and-pin page (#302) - The website deferrals fold record -- \#319 + \#321 + \#291 + the \#320 ruling - \#319 claim-reconciliation sweep -- 4 stale sites + 1 tense disclosure - \#321 obligation row 23 -- verb/command-set prose drifts with its mechanism - G1b partials + canonical artifacts design record (issue \#298) - Design record -- residual flake families - Conventions sentences -- named residuals, TestClock standing policy, no-local-only ruling - Design record -- re-sync the post-dispatch fold, re-apply the D-rowB pointer amendment - G1d pattern library + ten behaviour compositions -- design record (issue \#300) - \#207 Windows deterministic platform expectations record - \#207 testing-conventions sentence -- capability probes over platform strings - Commit the issue \#301 React-cutover design of record verbatim - The R-5/R-6/R-7 rewrites -- freeze record, obligation rows, styleguide - The intro CI-filter line matches the real gates invocation - The review rubric's tier-scope and G2 lane follow the cutover - Issue \#224 slice 2 catalogue+search design record - \#224 slice-2 amendments -- CON-13, REG-5, taxonomy, obligation 18(o), styleguide shapes - Issue \#224 slice-2 pivot -- registry-hosted catalogue, all lane findings folded - \#224 s2 pivot amendments to the built truth (CON-13, REG-5, taxonomy, obligations 18/20) - Windows CI evidence lane design record - \#224 follow-on records table + drill-down + signed rows + downloads -- amended record folding the owner mockup - Authored adoption of the records-table and record-page components (#224 follow-on) - Registry mark FIRED on the live domain (owner 2026-10-03) + the missing records-table/record-page CSS declarations (authored-side gap the vendor convergence exposed) - \#225 slice 3 design record -- management surfaces and identity - REG-5a amendment -- \#225 slice 3 namespace/lifecycle clauses (corrected) - Clarify canonical SDK vs packages/sdk mount (refs \#347) (#351) - Document-writer agent + the ASD-STE100 documentation register (#352) - Register follow-up -- developer-facing guides, gortex grant, dictionary-check wording (#352 rows L1/L3/L4) - \#302 first-release design record -- publish workflow, census, runbook (critic-folded) - First-release runbook, walk, operator steps; CI map rows (#302 first release) - Split the jammed windows/systemd CI-map rows (#346 follow-up) - Rewrite README to ASD-STE100 - Rewrite development.md to ASD-STE100 - Rewrite publishing-guide.md to ASD-STE100 - Rewrite smart-test-gateway-decisions.md to ASD-STE100 - Rewrite ai-device-reviewer.md prose to ASD-STE100 - Rewrite architecture-validation.md and architecture-closure.md to ASD-STE100 - Rewrite pointer pages to ASD-STE100 - Rewrite device docs to ASD-STE100 - Rewrite smart-test-gateway-architecture-v1.5.md to ASD-STE100 - Rewrite compatibility.md prose to ASD-STE100 - Rewrite develop-your-device.md prose to ASD-STE100 - Rewrite device-developer-guide.md to ASD-STE100 - Rewrite operator-guide.md prose to ASD-STE100 - Revert a fence-interior placeholder edit in publishing-guide - Convert the two remaining operator-guide section headings - Resolve registry check-count and registry-version statements against machine sources (#359) - Residual register fixes for the \#353 four - SA-PREVIEW design record, PRD 11 v0.3 amendments, obligation-12 pin row, SDK pointer (#364) - Issue \#238 load-boundary refusal for separator-spoofed normative rows - Issue \#191 capture_limits class-bound question -- DEFER record - Issue \#369 reading tiles -- evidence join vs sample-bearing read weighed; shape (1) specified, owner fork named - \#369 fold addendum -- F1 ruling (no stored subscription-\>device resolution; carrier named), F2/F3 dispositions (dated; the design record stays frozen) - \#369 fold-2 -- claim-accuracy corrections the addendum owes (LOW-2, LOW-5) - Issue \#367 D1 normative-seam sweep design record - \#367 dated addendum -- owner calls on forks 1-3 - \#367 fold wave -- five record-accuracy rows from the refute lanes - Issue \#316 endurance-authz design record - Fold wave -- the full seam-skip family, grant scope, boundary - Issue \#231 park reconcile -- 2026-09-26 dispositions re-verified at main c183db4 - Issue \#294 token-freshness gate -- premise-corrected pin-discipline design - Obligation 12 names its freshness detector; CI map gains the SDK lane row (issue \#294 slice 1, design §2.3) - Obligation-12 red condition matches the mechanism -- pin-ahead reddens too (refute LOW-1 fold) - Issue \#304 G3 control -- leases, staging, energy confirmation, expiry guards - The G3a operator rows -- lease controls, the 6-hour default, the poll knob (#304) - Issue \#380 family release process design record - Issue \#380 family release process + gateway cut authority - Issue \#380 fold adv1 F1+F2 -- honest enforcement modality + the gateway notes command - Discovery wording defers to the schema and the landed code (#386) - \#226 slice 4 -- response reach: cached status consult design record - REG-5b amendment, \#167 Decision-1 amendment, obligation 27, Response reach - STE pass on the Response reach bullet -- two sentence splits - PR \#391 row calls -- denominator truth, temporal fix, record errata - The G3b operator rows -- staging, preflight, confirm, replay, cancel (#304) - Close obligation 7 and re-home the developer guide's preview sentence (gateway \#308) - G4 administration -- change submit, review, apply (issue \#305) - The G4 operator rows + the CON-5 fold (issue \#305) - Land the issue \#401 domain-links design of record - Repoint published-site links onto the project domains - The issue \#393 design record (ADC high-rate, protocol v2 + SW-60/61) - Complete the firmware-drop sweep (re-review fold M1+L2, issue \#393) - The \#407 negotiated-transport design record (as committed authority) - The \#407 refute-wave addendum (dated, frozen record intact) - Wave-2 addendum -- the drift-lane fact, the coupling matrix, two claim corrections - Wave-3 addendum -- the closed-session law and four corrections - Issue \#408 release-pipeline hardening -- the design record - The declared-pin amendments (obligation 7, CI map, family, order rule) - Addendum 2 -- m1's runtime failure modes (F7) and the open-world class's silent-pass correction (F4) - Issue \#381 versioned-docs port design record - Versioned-docs landing -- readiness condition 1, cut procedure, taxonomy - Issue \#394 mock byte-stream transport -- design of record - Issue \#394 addendum 1 -- the fold's corrections - The v0.4.0 pre-tag registration (versions list + dev entry) ## Features - Validate exact-byte JSON documents - Vendor admitted architecture contracts with verified manifest - MCP client spike with local identity issuer - Durable run lease request and event state - Publish scoped host ABI as typed OTDP envelopes - Sim_psu plugin with OVP OCP trip latch over the host ABI - Sim_controller plugin with numeric uptime telemetry - Fault matrix protocol fixtures and timeout-after-dispatch rule - Sim_psu dc_psu class actions over the host ABI - Strict admission of execution documents with executable fixtures - Semantic admission with lexical scope and budget bounds - Role binding resource closure and bench lease - Safety policy allow rules and continuous conditions - Eight-kind execution engine with occurrence ledger and body deadline - Lexical references issued ids and three-valued trustworthy predicates - Protection engine coordinator and truthful terminal records - Project muninndb MCP as muninndb-benchweave, distinct from global connection - Strict vendored-schema loaders; types-jsonschema carry-in - Deterministic fixture catalogue with signed releases and fault statuses - Ed25519 authenticity with expiry and sequence rollback rejection - §10 semantic admission -- closure, paths, spdx, conflicts - Configured-origin resolver with strict routing and authenticated closure - Admission -- lifecycle gates, verified extraction, explicit package lock - Idle-boundary activation record and cache plugin loader - WP06 close -- vacuous-constraint warning, store single-writer doc, full gates - Origin-level signature policy -- dev-unsigned skips authenticity only - Publish_dev -- unsigned dev packaging and keyless developer loop - Add mock-qualified FNIRSI DPS-150 protocol and adapter - WP07 task 1 -- fastapi/fastmcp deps + schema-fidelity spike (gateway_info deep-equality proven) - WP07 task 2 -- v2 migration (generations, benches, devices, run_states, changes) + LeaseNotActive - WP07 task 3 -- content-addressed documents/artifacts/evidence + quota-bound retain_evidence - WP07 task 4 -- 14-code error model, observe seam, startup bench admission - WP07 task 5 -- control seam, §9 scoped dedup, run queue/worker, monitor evidence hook - WP07 task 6 -- bench event streams, seven kinds, principal-bound cursors, honest retention - WP07 task 7 -- two-phase admin changes with independently authenticated approvals - WP07 task 8 -- FastAPI app + FastMCP mount, 17 vendored-exact tools, token auth - WP07 task 9 -- 20 REST routers, exact statuses, 14-code error translation - WP07 task 12 -- licence display verdict, FastMCP qualification record, docs currency - Add SDK-aligned presentation contracts and presets - D8 seam validation against the vendored corpus - D9 §5 accept-time busy/binding pre-checks - D12 commissioned takeover slice + authority_changed emitters - D13 lease expiry, events index, crash-window reconciliation, hygiene - D13 lease_renew §6 semantics -- duplicate returns same renewal (§9 keys, sweep resolves in leases), late renewal cannot revive an expired row - D13 §6 lease contention -- lease_create rejects live run/live lease (closes the D12 consume→reserve window), fixtures restructured for one-live-lease-per-bench - D2 interface-v1.1.1 errata (change_apply approver_token), 1.1.0 untouched - Wire fixture resolver session at bootstrap (unblocks admin change kinds) - Click command tree + machine output paths - At-rest setup/verify + WAL-aware backup/restore with daemon-hold - Live status/demo with ephemeral fresh-install mode - Textual renderers with plain-text fallback - Truthful report model + markdown/JSON emitters - Systemd template + permissions review + CI verify; serve production posture - Seeded journey volume generator - PRD target measurement + non-gating stress tier - Fault-matrix harvest + digest index -- evidence group complete - Establish React and Storybook foundation - Add Layered Precision themes and surfaces - Add staged engineering controls - Add semantic readings and alert bubbles - Add engineering plots and data tables - Add operator and admin workbench mock-ups - Define deterministic preview fixture contract - Validate preview fixtures and baseline states - Serve deterministic preview API on loopback - Add local preview-ui command - Render SDK preview scenarios through host components - Pin the preview wire document - Canonical standards manifest with hash validation - Deterministic bundle export - Non-mutating sync check and make targets - Generated compatibility matrix - Adopt the SDK repo's sdk-tagged memory ledger (submodule 2b426a1) - Evidence-backed session layer -- handshake frames + telemetry drain - Session establishment + telemetry drain/route per WP10 design - Live demo script under the plugin -- ramp, telemetry, session-survival flourish - Git-cliff config, seeded CHANGELOG.md, merge-driven regeneration - Standards GOVERNANCE.md rulebook + resident standards-governor agent - Public site -- static front door + Great Docs tree on Pages - Add "Where it came from" -- the origin of the project - "What surprised us" and a validated "Where it stands" - Align the main site to public-site styleguide v0.2 - Star-on-GitHub header CTA with live count - The build loop -- agents, skills, drift guard, design records, constitution (#42) - Benchweave.standards repin -- the mechanical pin writer (#46) (#52) - Derive-check identity.adapter_api against the descriptor schema const - Sim_scope settings-presets simulator + host-ABI dispatch suite - Sim_scope ui resources, both SDK lanes, eight RED controls - Plugin-ui 0.1.1 channel_hints + two-pass renderer - Pure module + admission + executor wiring (issue \#6 row B) - OTDP 0.1.2 -- derived variables in the measurement model - OTDP 0.2.0 -- configure-carried averaging + class sample_count bound - Plugin-ui 0.2.0 -- lane-1 descriptor envelopes + unreferenced-preset refusal - Descriptor admission validates and projects full-form OTDP (#63) - The tree converts to full-form OTDP -- one dialect (#63) - The slim descriptor dialect dies (#63) - Re-version to OTDP 0.2.0 -- check-clean, absorbed (#83 into \#63) - \#85 -- route startup through the admission gate before any store write - Machine-written, byte-pinned OTDP validation report - Registry 0.1.1 -- admit the skill payload-file role (issue \#71 slice 1) - The prescriptive bump window, enforced (#97) - Manifest-driven OTDP version discovery in the validator + pin (#102 D2) - Shared validation-report writer; check_devices delegates (#102 D1) - Registry validation report joins the writer family (#102 D1) - Execution validation report joins the writer family (#102 D1) - Interface validation report joins the writer family (#102 D1) - Closure validation report joins the writer family (#102 D1) - Otdp coverage prose derives its counts (#102 D3) - Retrospective -- standardized end-of-period report with sub-agent review (#133) - Plugin-ui-preview 0.1.0 -\> 0.1.1 -- plot_views on the wire - Manifest-declared plots render in the preview (0.1.2) - Gortex-write-gate -- deny native edits in tracked primaries - V5 capture-staging migration + refuse-newer guard + hygiene pins - Staged-append capture writer (open/append/finalise/abort/sweep/ledger) - Composing capture-services bundle + controller + permission read - Bridge dispatch(capture) -- gates, manifest conversion, classification, epilogue - Kind-scoped evidence quota accounting -- the (context_key, kind) dimension - The stream controller -- registry, event landing, event_sink admission - Bridge stream dispatch -- subscribe/unsubscribe verbs, gates, registry wiring - Bridge next_event mediation -- validation, refusal taxonomy, gap honesty (R4) - The stream poll engine -- poll-slice multiplexing with monitor ticks between polls - Matrix render reads committed state only (issue \#158) - Run_check enforces the sdk_compatibility mirror (issue \#158) - Bump-window floor revisited 48h -\> 24h (owner ruling) - Construct commissioned OTDP bridges in build_run (issue \#167 slice 1) - Run-owned streaming composition -- arm, drive, contain, tear down (issue \#167 slice 2) - OTDP 0.2.1 baseline -- copy-never-move from 0.2.0, no semantic change - Otdp 0.2.1 -- transport.custom gains the pinned provider declaration - Reference-rawlink -- the custom-transport-without-provider example - OTDP 0.2.2 -- the fold re-rolled as a PATCH; 0.2.1 frozen at SDK-release bytes - The -dev stage -- one optional dev head per manifest entry - The dev-proof lane -- -corpus points a family census at the declared dev head (F3) - The RC candidate marker -- optional boolean candidate on the dev block (owner ruling) - The lineage amendment -- promotion keeps the predecessor edge (governor re-check ruling) - Transport-settings.json -- the identity-only commissioned surface - The provider admission seam -- census mirror, pin mirror, gateway-only row - ProviderTransport grammar guard + the build_capture_services gate - Dev-corpus resolution seam -- declared_dev_family + CorpusResolution threading (#176 inc 2) - Capture runtime surfaces at admission -- projection, semantics mirror, policy kind (#176 inc 2) - Capture executor branch, resolver arm, host-minted ids (#176 inc 2) - Refute-fold production wave -- policy guard, event/record shape, floor, ceiling (issue \#176 inc 2, commit 3/3) - Demo lattice streams -- sim_psu bridge adapter + event_sink descriptor (issue \#176 row D, design Decision 3) - Migration v7 -- four additive archive-tier columns on dispositions - Disposition writer -- outcome 'archived', two-shape envelopes, two-tier invocation - Dispose -archive-target -- Phase-A stager, reclassification, typed refusals - Dispose -verify-archive -- the read-only verify arm (AR7) - Pinned-contract resolution at load (#146 slice 2, §2.1) - Bridge invoke dispatch -- gates, conversion, clamp, lane-honest refusals (#146 slice 2, §2.3) - Wire the invoke lane through the real activation path + pin narrowing + guide (#146 slice 2) - The payload lane -- writer open_payload, bundle members, registry, R10 (#146 slice 3 S3a, §2.2) - Dataset_publish + dataset_lookup -- the validation surface (#146 slice 3 S3b, §2.2) - Artifact_read -- the reader surface with the refused offset floor (#146 slice 3 S3c, R13) - The permission-gated builder + app.py composition (#146 slice 3 S3d, §2.2's table) - Riders, the N=30 E2E through the real activation path, guide dataset half (#146 slice 3 S3e) - Item 5 rider 1 -- artifact_read serves published variables' payloads (#146) - Item 5 riders 2-4 -- dataset row labels, the v5 payload addendum, the guide's M14/M15 status (#146) - Issue \#172 classifier + ledger -- frozen \#159 §6 made executable - Issue \#172 two-instance continuity rig -- axes X1-X4, controls, checks - Multi-version serving -- policy block, multi-entry export, two-sided gate - Intervals, caret expansion, classification, CLI siblings (#216) - Fail-closed loader + the root-scoped exemption (#216) - The resolver and the lock v2 writer; DPS-150 relocked (#216) - The version-normalized comparator (#216) - Pin -locked and check's plugin dependency lane (#216) - Record each failed attempt's retry site - Per-pin descriptor admission -- the Q6 classification table (#217) - Pairwise cross-constraint admission check (#217) - Run-evidence and API-view surfaces for the pin facts (#217) - Gate wrapper with honest machine-readable evidence (#247) - Content-addressed dev pins -- opt-in, sha lock rows, wheel refusal (#218) - Dev-pin admission -- dev and released side by side on one bench (#218) - Promotion records and their three gates -- digest, sweep, pending-successor (#218) - The founding promotion record -- execution 0.2.0 recovered from history (#218) - The matrix's per-version rows, from committed state (#219 slice 5) - The SM-5 migration-note gate and its walk (#219 slice 5) - Operator acknowledgement persistence -- D11 lands (#219 slice 5) - Safety behaviours in the reference renderer (#242 slice 2) - The execution per-document pin -- the bench's contract_version routes the lattice (#220, \#203 slice 6) - The run guard -- execution_version_not_runnable (#220, \#203 slice 6) - Plot-series tokens, set-derived assignment, sequences (#242 slice 3) - Limiting state, setpoint triad, staleness (#243 slice 1) - Plot axes, reference lines, decimation, provenance (#243 slice 2) - Active_version_from_corpus loader + corpus_root/active_contract_family helpers - The zero-literal end state -- nine derivations, register, zero-mode - The record lane -- runs are an implemented-dialect fact - Constant-folding assembly detection in the zero-literal counter - The scripts/ scope -- three derivations, twenty registrations - Flat-plugin scope, marker-based environments, twin region pin - Digital_lanes grammar + validator -- plugin-ui 0.3.0 + plugin-ui-preview 0.2.0 (#244 S1) - DigitalLanesPlot renderer + contract rows + the decimation proof (S2) - Decoder-lane rendering -- annotation spans, disclosure, waiting (S3) - The why query -- VR-40's constraint -\> locked-version explanation - Contract grammar, corrected 28-table manifest, registry, roles, tokens (issue \#297) - The pytest contract harness - collection is the parse (issue \#297) - Host-side lane decimator + the §E.4.4 property proofs (issue \#299 G1c) - \#291 the standards-CLI page, generated from -help at build - G1b slice 1 -- item parser, assertion layer, button artifact, harness wiring (issue \#298) - G1b slice 2 -- structural families, labels, refusals, icons, sequences, tokens, CSS pins (issue \#298) - G1b slice 3 -- plot lane: UR-07 emit model, slots, hints, axes, ref lines, acquisition, provenance (issue \#298) - G1b slice 4 -- lanes lane: §E.4 composition over reduce_lane, end state 158/168 (issue \#298) - G1d slice 1 -- staleness predicate + the composition state machine (issue \#300) - G1d slice 2 -- the ten behaviour checkers; the registry at 168/168 (issue \#300) - G1d slice 3 -- the PATTERNS registry + the static export (issue \#300) - G1d slice 4 -- the browser lane, CI partition, and the docs export (issue \#300) - Vendor the style assets with an inventory + verify (G1e UR-10) - The React cutover -- delete ui/, wire the contract gate into the default run (the atomic swap) \[**BREAKING**\] - Plugin catalogue -- mirror, pin, generated panel block (issue \#224 slice 2) - Catalogue search -- pure predicate + DOM wiring (issue \#224 slice 2) - Plugins panel becomes a static teaser to the registry-served catalogue (#224 s2 pivot) - Teaser links the catalogue's canonical domain -- registry.benchweave.dev (owner cutover 2026-10-02); byte-pin regenerated AST-verified - Gate packages/sdk staleness -- sdk-drift lane (#347 WS1) (#360) - G2a -- the browser session, /ui shell and routing pins (#303) (#363) - G2b -- the read views, refusal matrix and route-mapping gate (#303) (#368) - G2c -- the live-events SSE bridge (#303) (#370) - Populate device-page reading tiles from retained observations (#369) - \#367 D1 -- corpus-rooted load twin, one runtime normative-row resolver - Issue \#316 -- the unattended-grant run gate (two-layer) - Session-side held-lease views and granted session duration (G3a) - G3a lease controls -- take/renew/release, GW-95 session bound, GW-44 warnings, polled fragment (issue \#304) - 6-hour manual lease default (#307) -- app-entry, demo, and the poll-knob env (G3a §2.6) - The cached status consult -- response reach for commissioned closures - Session-side staging records and pending-cancel markers (G3b) - The trip predicate and the energy classification (G3b §2.5/GW-52) - The staging panel and the five G3b routes (issue \#304, §2.4) - The run-starts fire path with fire-time guards (issue \#304, §2.4) - The ungated cancel route and the run-page marker (issue \#304, §2.4) - G4 change index -- the session's change side table (issue \#305) - G4 submit + review page + the submit no-response variant (issue \#305) - G4 approval load + apply + the GW-71 guards (issue \#305) - G4 inhibited state + the per-session acknowledgement (issue \#305) - The adc_6ch_12bit wire-family v2 reference implementation (issue \#393) - The adc v2 firmware, wire spec, and CI lane (issue \#393) - Drop the in-tree reference firmware -- the plugin repository owns it (issue \#393) - The declared-pin lane for the packages/sdk mount - Versioned-docs port -- two-regime assembly + registration checks (issue \#381) - Selector scaffold + gotoVersion; selector family in stamp_website ## Hardware Evidence - First real-hardware contact -- identity, session behaviour, live telemetry - HW-04 leg 1 -- baseline read-back via the shipped session layer (read-only) - HW-04 leg 2 -- voltage setpoint write accepted, no readback path (dispatch-only confirmed) - HW-04 legs 3/3b/4/6 -- setpoint+protection readback proven, both dialects live - HW-04 leg 5a+5b -- output toggle proven; setpoints APPLY (1.00V commanded, 1.0V at terminals incl. ramp sample); restores verified; mid-run crash emergency-restored + re-run clean (codec 260B feed bound honored) - HW-04 panel observations -- principal's screen mirrored remote writes and output state throughout (no divergence) - Panel observation-3 -- V-set display tracks local knob, not remote writes; local control live during PC session - HW-05 legs 1+2 -- session SURVIVES port-close and host process death (answered with no re-handshake both times) - HW-05 leg 3 -- session SURVIVES USB unplug/replug (cold query answered); /dev node name stable across re-enumeration; wake is power-cycle-bound - Task 6 interim -- identify verified end-to-end via adapter stack; read verb unverified (harness request-shape, next session) - Task 6 complete -- identify+reads wire-verified; ADAPTER DEFECT found: trailing telemetry poisons the session (live-only, mock-blind); fix direction recorded - Fix verified on device -- 165/165 clean reads over 60s through the correlated-wire adapter ## Miscellaneous - Ignore gortex cross-harness shims, checkpoint state, rendered ISA - Keep ISA local under docs/superpowers (muninndb convention) - WP08 slice-1 closure chores (flake evidence, stash reconciliation, SDK validation report, lock_path register note) - WP08 register close-out + vendored-tree guard - Advance submodule for standards sync - Sync submodule with SDK repo README and docs commits - Submodule pointer - superpowers docs stay local - Submodule pointer - ignore docs/superpowers - Submodule pointer - standards sync check exit, vocabulary and deprecation reporting - Submodule pointer - self-contained standards check and SDK CI pipelines - Submodule pointer - matrix gate note points main-side - Ignore the export staging directory - SDK reviewer agent, conventions and MCP wiring (submodule 032e8d8) - Submodule pointer - reviewer doc census completion - Submodule pointer - absolute doc links (submodule 49d0bb9) - Advance sdk pointer to v0.0.2 (0f105a3) - Advance sdk pointer to bb3159e (tap-bump job) - Ignore gortex git-hook artifacts (wiki, mermaid exports, docs bundle) - Remove the retired firmware/esp32_reference placeholder - Post-consolidation cleanup -- retire firmware placeholder, re-lock dps150 contracts (#20) - Advance SDK pointer -- adapter API constant at 0.1.0 - Principal row calls -- redate releases to the reset, align acceptance record - Re-lock dps150 at the 0.1.0 baseline - Re-lock dps150 at the 0.1.0 baseline (#22) - Ignore device plugins' local vendored contracts - Ignore device plugins' local vendored contracts (#23) - Advance SDK pointer -- gortex-artifact ignore guard (main \#17 parity) - Advance benchweave-sdk pointer (CoC + governance docs) - Advance SDK pointer -- docs site + public site merged (PR \#4); repoint plugin-sdk stub - Advance SDK pointer -- close-out docs - Advance SDK pointer -- SDK-focused static site - Advance SDK pointer -- docs concurrency fix - Advance SDK pointer -- styleguide v0.2 brand - Bump packages/sdk to 17d6ecb (star CTA + header wrap) - Bump packages/sdk to 5da15c7 (gateway links to project website) - Enable the security lint the tree's suppressions were written for - Advance packages/sdk to the pushed plugin-ui 0.1.1 SDK branch - Advance packages/sdk to the C1-C4 renderer refresh - Advance packages/sdk to the W1 renderer refresh - Advance packages/sdk to the FC1/FC2 renderer refresh - Advance packages/sdk to the otdp 0.1.2 vendoring - Advance packages/sdk to the reconciled dual-standard tip - Grant code-reviewer + increment-builder gortex read/query tools - Grant the four review-lane agents gortex read/query tools - Frontmatter + gortex read/query grant for standards-governor - Muninndb-benchweave read/query grants for designer, adversary, critic - Advance packages/sdk to the OTDP 0.2.0 vendoring - Advance packages/sdk to the plugin-ui 0.2.0 vendoring - Drop Finder-style duplicate artifacts swept in by add -A - Advance packages/sdk to the registry 0.1.1 vendoring - Regenerate the lattice single-cause after the \#87 rebase - Advance packages/sdk to the /src anchor + .hgignore widen - Advance packages/sdk to the agent-native scaffold (0.0.3, fold wave 1) - Migrate gortex grants to official server-pattern + disallowedTools shape - Deny muninndb write tools on the muninn-carrying agents - Grant mcp\_\_gortex\_\_edit to increment-builder, reconcile-gated - Advance packages/sdk to 1c700bf (issue \#67 SDK arc) - Advance packages/sdk to 168cefb (disclosure wording) - Advance packages/sdk to 4263cc3 (scaffold numeric-target fix) - Advance packages/sdk to 57a3441 (generated-test syntax fix) - Advance packages/sdk to v0.1.0; reversed-range becomes both-refuse - Capture-store module stub -- RED collection scaffold - Capture-services module stub -- RED collection scaffold - Drop the dead EvidenceQuotaExceeded re-export; operator guide names refuse_newer_schema - Pointer advances to the 0.2.2 vendor (SDK PR \#47, merge 6121c96) - Remove the two committed sync-interference strays (governor amendment) - Lint and type residue -- Unresolvable catch, import order - Encode the 2026-09-24 discipline rows R1-R4 (#181) - Fold the refute slate's hygiene items (#176) - Advance packages/sdk to the execution 0.2.0 sync (#176) - Sdk_compatibility mirror + pointer = certified 0.3.0 (SDK 0.3.0 pairing) - Advance packages/sdk to e948fd5 (PR \#56) and amend the capture record - Advance packages/sdk to 3b14d0e (DatasetServices protocol, \#146 slice 1) - Advance the SDK pointer to the fix-wave tip - Advance the SDK pointer to the late-folds tip - Advance packages/sdk to the safety-behaviours renderer (#242 slice 2) - Advance packages/sdk to the review-fold renderer (#242 slice 2) - Advance packages/sdk to the series-tokens renderer (#242 slice 3) - Advance packages/sdk to the folded-instrument renderer (#242 slice 3) - Advance packages/sdk to the slice-1 renderer (#243 slice 1) - Advance packages/sdk to the S1-fold renderer (#243 slice 1) - Advance packages/sdk to the slice-2 renderer (#243 slice 2) - Advance packages/sdk to the S2-fold renderer (#243 slice 2) - Advance packages/sdk to the addendum renderer (#243 slice 2) - Re-trigger workflow events (no runs attached to fd92efc; drop suspected) - Advance packages/sdk to the zero-literal derivations - Advance packages/sdk to the SDK branch head (G3a test) - Advance packages/sdk to the fold commit - Advance packages/sdk to the twin-fixture fix - Regenerate the compatibility matrix for the digital_lanes train (#244 S1) - Advance packages/sdk to the PR \#73 merge -- SDK half of \#288 - Advance packages/sdk to the registry 0.1.2 sync (issue \#223 slice 1) - CodeQL + dependabot baseline (issue \#223 slice 1, CR-59) - The sign_release register row follows the retired status literal - Advance packages/sdk to the fold tip (issue \#223 signing-surface folds) - Advance packages/sdk to the SDK CI-fix tip (7936296) - Advance packages/sdk to the lockfile-regen tip - Advance packages/sdk to the base-derivation tip (1c62bba) - Advance packages/sdk to the identity-fallback tip (7d9a8ba) - Bump actions/download-artifact from 7.0.0 to 8.0.1 (#335) - Bump orhun/git-cliff-action from 4.9.0 to 4.9.1 (#336) - Bump actions/cache from 4.3.0 to 6.1.0 (#337) - Bump astral-sh/setup-uv from 9.0.0 to 10.2.0 (#338) - Bump actions/setup-python from 6.3.0 to 7.0.0 (#340) - Bump fastmcp from 4.0.3 to 4.0.10 - Regenerate uv.lock for the fastmcp 4.0.10 bump - Delete the gateway-side search/panel/authority proof fleet (#224 s2 pivot) - Delete the mirror machinery; restore the literal gate to its pre-slice shape (#224 s2 pivot) - Bump actions/configure-pages from 5.0.0 to 6.0.0 (#349) - Advance packages/sdk to v0.6.0 (#309) (#365) - Advance packages/sdk to v0.7.0 - Advance packages/sdk to v0.7.0 -- lock + mirror + pointer - Render the compatibility matrix for the 0.7.0 pairing - Retire the scaffold.py register row -- the v0.7.0 SDK deleted the file - Advance packages/sdk to v0.7.1 - Render the compatibility matrix for the 0.7.1 pairing - Follow the v0.7.1 tag re-point to its self-registration commit - Advance the SDK pointer to v0.7.1 -- gitlink, CON-12 mirror, twin register, census (gateway \#308) - Point packages/sdk at the \#393 serial-backend branch tip - Refresh the docs literal baseline for the adc pointer stub (issue \#393) - Follow the \#393 SDK fold (S1-S5) at 145f3a6 - Follow the v0.8.0 release tag (issue \#393) - The v0.8.0 pairing -- sdk_compatibility mirror follows the tag (issue \#393) - Regenerate the compatibility matrix for the v0.8.0 pairing (issue \#393) - The pin advances with its mount -- v0.7.1 -\> v0.8.0 - Bump version to 0.4.0 ## Performance - Copy the docs tree once per session in the architecture tests ## Refactoring - Keyless builders extracted to registry_common -- dev loop loads no cryptography (surface-audit wave 2, item 15) - Colocate device and simulator projects - Align CLI with Click Rich and Textual - Single-source preview constants - One standards tree -- corpus, prose and locks under standards/ - One standards tree (corpus, prose, locks under standards/) (#19) - Id/version tree -- standards/// with retention - Reset every standard to 0.1.0 -- the governance starting point - Id/version tree, full 0.1.0 reset, and governance layer (#21) - Single-source the family marker; refusal-family honesty (#102 D1, review R-F5 + A-F3) - One canonical-bytes helper behind the agreement pin (#176) - Authorisation reads the classification's status; the pin record threads through (#217 review fold R6/R7/R11c) - M4 -- one canonical derive_move_to, labeled degenerate states - M4 twin reconciliation -- the downgrade label rides the refusal side ## Security - Origin/main into feat/issue308-pointer -- the pairing duplicates drop (gateway \#308, PR \#400) ## Style - Extract the execute-call fixture constant to clear E501 - Ruff/mypy cleanups in the registry-contract instrument - Ruff-format the dps150 SCHEMAS expression - Ruff autofix (import order, unused import) after the A3 slice ## Testing - WP06 acceptance -- reuse, tamper, revocation, rollback, collision - Pin cache-loaded module identity in run legs (Task 8 review) - Cover high_water_invalid on malformed persisted state (final-wave review) - Six-pin test-posture batch closes the WP05 coverage gaps (surface-audit wave 2, item 12) - WP07 task 2 backfill -- device method coverage + has_more/None paths (+ v2 newline) - WP07 task 3 backfill -- sha-mismatch rejection pinned - WP07 task 10 -- REST↔︎MCP parity suite + tier fix + deviation pins - WP07 task 10 backfill -- wrong-audience + expired token probes + register disclosure - WP07 task 11 -- event-recovery suite, worker poison guard, §144 disconnect+evidence failure - WP07 task 11 backfill -- evidence-gap record survives with refs pinned - Satisfy strict CI typing for presentation tests - Pin extra-property wire truth + D8 residual, anchor test corpus path - \_masked_error helper + wrong-typed approver_token 400 pin - T10 whole-branch minors -- served events_get letter, second-boot refusal, autocheckpoint pin - T11 teardown pin + T12 real events_observed assertion - PRD journey scaffold -- discover/admit/select live - Run journey REST+MCP+report, admin + stale-generation legs - Fault legs + second-install reuse -- journey complete - Packaging asserts lock-wheel equality; smoke reads the SDK lock - Self-contained standards check without a bundle - Unchanged, clarification and breaking scenarios - F5-quiet exercises the idempotency path it names - WP11 carried minors -- T1-1/T1-3/T2-6/T2-8/T5-9/T5-10 - Fresh clones pass-or-skip; fork PRs stop failing on absent secrets - Outcome failures dump terminal reasons + error events (#48) (#50) - \#48 review rows 1-2 -- structural reasons render + mode=ro claim truth (#51) - Pin the adapter protocol three-way -- expected literals, SDK, gateway, corpus - Pin the submodule HEAD to the recorded gitlink - Pin the submodule HEAD against the committed gitlink, not the index - Pin test_sdk resolution to the pinned submodule tree (#53) - RED for plugin-ui 0.1.1 channel_hints - RED for row C mechanism-critique fix wave (C1-C4) - Jsdom-robust accessibility assertions for hidden legend rows - RED for hidden-claimant accent release (W1) + honest table naming (W2) - RED for real-render carrier visibility (FC1) + legend swatches (FC2) - RED suite + normative census for issue \#6 row B - Sync-stamp literal follows the otdp 0.1.2 lock - RED controls for OTDP 0.2.0 averaging admission + sample_count bound - Sync-stamp literal follows the otdp 0.2.0 lock - Complete the 0.2.0 literal sweep in two missed docstring paths - Pin the averaging envelope endpoints 1 and 64 (refute R1) - RED controls for plugin-ui 0.2.0 lane-1 envelopes + orphan refusal - Pin the descriptor schema's otdp const to the manifest version (F2, \#63) - \#78 -- replace the dead ADMITTED_DIRS hand-list with a derived closed-world dir guard - \#85 RED -- poisoned-lattice startup refusals, watched failing pre-fix - \#85 fold -- pin the S01 layering in the descriptor-equivalence census - Pin executor dispatch-state composition (#73) - Pin the OTDP validation report to a live devices-suite render - RED for the skill payload-file role (issue \#71 slice 1) - Pin the sdist to the declared surface -- PKG-2's detector - RED for the agent-native seeded tree (issue \#71 slice 2) - Prove the issue-107 fix -- symlinked-destination scaffold, typed symlink refusal, errno guard - RED -- bump-window arms against the absent train_window module - RED -- OUT/title must follow the manifest's active otdp version (#102 D2) - Extend the \#47 annotation guard to description (#97) - Pin the pinned check's path-escape arm (#125) - RED family pin for the machine-written validation reports (#102 D1) - Share one real-tree execution per suite between pin and guard (#102 D1) - Adapt \#125 path-escape test to the family report-path signature (rebase resolution) - Report-family census -- registered writers, classified artifacts (#102 D1, review F2) - Harden the family pin -- duplicate names, byte compare, POSIX absoluteness (#102 D1, review F4/F7/F8) - Tamper fixture asserts its vacuous-green precondition (#102 D1, review A-F2) - Pin the projection and the relaxation (metrics A/E/F) - Scaffold plot selection -- numeric-first, non-numeric-first, none - Unmocked disclosure arms, divergent-id join pin, trace-level colour (R3+R4) - Generated conformance test compiles and runs both variants - Add coverage measurement (report-only) - Honest slow-marker wording; bounded fault-test waits - Cover the vendoring resolution seam and presentation admission - Keep docs/ and standards/ siblings in the regression-detection cases - The unmutated copy must run clean before a regression case mutates it - Pin the served MCP tool descriptions to the vendored corpus - The harness closes the Store it opened (#136) - Close the store only once the server thread has stopped (#136) - Pin packaged-first precedence when both trees exist - The slice-1 sequential-model measurement (issue \#43) - The contention arm asserts eventual reclaim, not overshoot timing - A6's INTERNAL_ERROR gate arm gets its home (review R1) - Drop the dead Migration import pair in \_apply_subset - Complete the dead-pair removal -- drop the del Migration line - The slice-2 review wave -- real delivery budget, timebase pin, rotation pin, record erratum - Spec10 throwaway SDK roots declare the mirrored version - Measurement harness machinery -- spans, capture lane, fresh bindings (issue \#167 slice 4) - M-A measurement seams -- tick timestamps, saturated polls (F5, issue \#167 review wave) - RED -- 0.2.1 provider rules and synthetic examples ahead of the mechanism - Equivalence extension -- SDK checker over the 0.2.1 examples, the shared provider lattice, the EN-3 disposition - The slice-1 corpus cite follows the active version (merge-result fix) - The cite class follows the active 0.2.2; provider-claims derives it (F2) - The mirror fixtures own their notes axis -- recovery of the abbb144 cascade - The -dev stage RED arms -- load rules, validate coverage, repin mutability - The suite tolerates an open dev head (devstage replay finding) - The dev-proof lane RED arms -- -corpus override (F3, promoted) - The RC candidate marker RED arms -- boolean candidate on the dev block - The documents-gate dev-head arm plants both roots (row 2 fixup) - A -dev source segment is a historical terminal in the dir guard (review row 3) - The descriptor dialect triangle -- red on the reverted stamp - Fold-wave boundary pins and the sF1 discriminator (issue \#176 inc 2, commit 2/3) - Scope the SDK-stillness arm to head commits (#187 rider) - The demo lattice streams end to end (issue \#176 row D, design Decision 3) - Strip PYTHONPATH/PYTHONHOME from the wheel child env (issue \#176 T11 vet finding) - GF2 canonical-form agreement pin + deferral-table rows (#176) - Reconcile the dev-head controls to the promotion's live truth (#176) - Derive the healthy-pairing version from the copied pin - AR4 ledger+GC over archive captures; archive scale smoke; no-op figure honesty - AR5 -- the archive tier's three crash windows on the kill harness - Freeze rule for the 23-field archive envelope - Close the Windows census (#143) (#208) - F3 -- the catalog-half soft arm pinned, mutation-checked - F5 -- slice-added version literals derive from corpus bytes - The \#207 Windows separator and CRLF batch, plus the retention_policy SyntaxWarning (#237) - B3/B4 RED battery + the resolver module skeleton (#216) - The side-table battery lands RED with its file (#216) - B1/B2 writer battery + cross-constraint resolve arms, RED (#216) - B6 raw-digest control battery, RED (#216) - B5 agreement-lane battery, RED (#216) - F1 version-ordered selection, RED (#216 fold) - F2 retained-yanked-pin warning surface, RED (#216 fold) - F3 stray-file allowlist arms, RED (#216 fold) - F4 revision-scissors chain, RED (#216 fold) - R1 authoring crash classes, RED (#216 fold wave 2) - R2 list desync refusal, RED (#216 fold wave 2) - R3 malformed requires refuse at load, RED (#216 fold wave 2) - R5 leading-zero interval components refuse, RED (#216 fold wave 2) - R6 malformed corpus rows, RED (#216 fold wave 2) - R11 drift messages name the reflow cause, RED (#216 fold wave 2) - R15a unbounded cross-constraints note, RED (#216 fold wave 2) - R7 prior-yanked retention + the R8 refusal corners (#216 fold wave 2) - R4 masking XOR arms, R9 caret precedent, R10 table rows (#216 fold wave 2) - Pin retry discrimination -- legacy wording must not retry (#159) - RED -- pin that block-ness, not cause-adjacency, gates the retry (#159) - Pin priming starvation as retryable infrastructure (#241 slice 1) - Census extends across the served set (#217) - The dialect triangle goes within-range -- VR-45 (#217) - Pin the carriage, the full VR-37 field set, and the classification edges (#217 review fold R1/R2/R9/R11a-b) - \#172 continuity instrument tolerates CI-runner contention (#217 unblock) - Classify the drain cap as retryable infrastructure (site="drain-cap") - Row-17 clamp test joins the timing lane (marker only, no band change) - Wave-1 fold -- exhaustion renders the retry composition (7 findings, one commit) - V8 accompaniment -- the retention hole fixture counts eight rows (#219 slice 5) - L1 fixture pins and L3 contract-CSS value equality - L2 generated renderer pins for the 8 contract components - Fold review rows 1-7 on the contract pins (#242 slice 1) - Assert the G3a registered-disposition facts - Re-shape the arbiter arm for the digest-verified resolution - Pin the unstored-descriptor pre-check skip (Risk 2's other half) - The verify_tree fixture tracks the derived runtime-schema path - Remove the dead 'cells' binding (the vet's lint catch) - Make the not_ready lease pin self-sufficient (order-independent) - Make the not_ready lease pin self-sufficient (order-independent) - The one-shot cell belt absorbs host-stall band breaches - De-clock the retry pins; assert properties, not attempts - Fold the refute - gen-1 X1-floor audit, site membership, claim fixes - D4' folded by trigger - sequential ceilings relativize in-run - Meta-acceptance suite - the pre-committed RED proof (issue \#297) - The computed colour proofs port - instrument, ledger, verbatim arms (issue \#299 G1c) - Tighten I5/I6/I8 pin tolerance to toBeCloseTo(1,5) exactly (issue \#299 G1c refute fold 3) - The refute fold's cheap closes -- bidirectional pin + hardened capture - G1b template-packaging guard (O4) -- pinned contents + full-environment load - G1d -- the UR-11 boundary probe covers compositions and the export (issue \#300) - G1d -- move the two pins the browser partition touches (issue \#300) - \#207 fw5 guards the Unix-only tzset stressor, keeps the property everywhere - \#207 dispose fsync expectations become capability-probed, with the every-platform typed-refusal arm - \#207 row-B ceiling relativized to the recorded clamp (the \#241 D-rowB payload) - \#207 the refute fold -- 7 code rows + the record erratum - Post-sync sweep -- the 0.1.2 active row's motion through the pins - Re-seed the drain-cap starvation pins under the no-trip policy - Refute fold -- the poison path is DISPATCH-path, not poll-path - Catalogue search fixture + hand-derived truth table (C1 discipline) - RED arms for normative_path_escape refusal (issue \#238) - The G3a browser lane -- arm L (#304) - Issue \#380 pin the docs-site tag-namespace refusal - M6 RED baseline -- published revocation does not reach run-build - Signature-verification discriminating arms - PR \#391 pin arms -- cached gates, digest half, boundaries, root - Repair the vacuous-spy arms (kill rule: an assertion that cannot fail polices nothing) - The G3b browser arms (#304) - The SDK test motions for the 0.7.0 pin and the pins it enables (gateway \#308, pre-pointer) - The remaining gateway dependents of the changed SDK surfaces at the 0.7.1 pin (gateway \#308) - Review folds F4, F-A1, F-A2 on PR \#400 (gateway \#308) - The G4 browser arms (#305) - The \#407 REG-4 agreement row + the negotiation's real lane - Tests/sdk presentation-cli cell catches up to 931fcff - N4's bounded arm enforces through the mechanism (wave-2 F2, arm 1) ## Build - Bundle versioned UI preview renderer - Mount benchweave-sdk as a submodule at packages/sdk - Pull \_validation_report into strict mypy scope; honest NoReturn (#102 D1, review R-F4) - Dev-stage bytes never ship -- hook-owned contracts mapping (F1) - Advance packages/sdk to the \#407 link-reconfigure branch tip - Advance packages/sdk to the \#407 fold tip (22f9a1e) - Pin the declared submodule sha alongside the pointer advance - Advance the pointer and the declared pin to the wave-3 fold tip - Advance the pointer and the declared pin to the v0.9.0 release tag ## Ci - Fixture signing keys move to repo secrets; public halves stay; add gates workflow - Gate the UI toolchain and vendored-renderer freshness - Gate PRs and releases on standards sync - Gate-only package lane; SDK distribution moves to PyPI - Push CHANGELOG.md via changelog app token - Add manual trigger - Consistent action pinning, locked syncs, honest workflow behaviour - Clean-venv ADC conformance control + the slice measurement postscript - Dedicated timing lane for the real-paced set (#241 slice 1) - Run the suite in parallel with pytest-xdist (#247) - Device-plugins zero-gate lane + obligations enforcement pointers - Prove the member wheel standalone in the package job (#302) - Timeout-minutes 15 on the timing job - Catalogue authority pin + browser wiring proof (issue \#224 slice 2) - Windows evidence lane over the gates selection (#207, \#329 D2) - Wheel resource census in the package lane (#302 first release) - Publish workflow -- build, smoke, trusted publish, PyPI digest verify (#302 first release) ## Ci+docs - Census runs on the OS matrix; coverage claims state it ## Dispose - The audited delete-tier disposition executor + A1-A9 controls (#194) ## Faults - SIGKILL mid-disposition leaves neither audit nor deletion (#194) ## Fold - The two-lane refute wave -- 11 findings, all dispositioned (verdict DEFENDED) - Teaser byte-pins (G2) + parent-design supersession (G1) - Adversary lane 2 on the declared-pin lane -- observed-refs boundary, HEAD-blob pin, self-referential arm ## Merge - Integrate main (#243 UI lane + pointer) -- all 21 main-changed paths carried, gitlink resolved to SDK main - Integrate main (#221 zero-literal lane) -- gitlink resolved to SDK main d698b44 (contains both \#63 and \#65 lines) - Main (#275's S1 landing) into feat/issue244-s2-renderer - Main (#277's renderer landing) into feat/issue244-s3-decoders - Fold origin/main (the \#223 publishing train) into the G1e cutover branch - Origin/main into feat/issue352-ste-remediation -- union of \#351's which-checkout pointer and the STE rewrite - Origin/main into feat/issue407-negotiated-lane (issue \#407) ## Refine - Timestamping optional-but-recommended -- the advisory (issue \#223) ## Review - WP11 whole-branch fix wave -- both verdicts clean, findings landed ## Rework - The states-and-advertises posture in the guide; pointer to the rework SDK tip (issue \#223) - Validate-and-record + the publisher-signature model (issue \#223) ## Standards - OPEN the 0.2.0-dev head (issue \#176 increment 1) - Author the capture family into the 0.2.0-dev head (#176) - The compatibility.sdk ground-truth anchor -- \#187 class closure (#195) - Promote 0.2.0-dev to released execution 0.2.0 (#176) ## Wip - 0.2.2 stamp cascade -- INCOMPLETE, train-window-blocked