Skip to content

Attestation: drop the atlas assets until #85 merges - #104

Merged
Deicyde merged 1 commit into
mainfrom
claude/attestation-without-atlas
Oct 19, 2026
Merged

Deicyde merged 1 commit into
mainfrom
claude/attestation-without-atlas

Conversation

@Deicyde

@Deicyde Deicyde commented Oct 19, 2026

Copy link
Copy Markdown
Owner

Release-affecting (wiki/public-asset-source-attestation.json). Release B must be built at or after this merge. It already has to be built at 646816d4 or later.

Problem

#82 attested assets/atlas.css and assets/atlas.js for release B. Those files come from #85, which is held for a demo, and main's wiki/scripts/build-public.ts doesn't produce them. freeze requires the built public tree to match this inventory exactly (_require_attested_source), so a baseline freeze at main fails with "missing assets/atlas.css, assets/atlas.js", or passes only with a tree built outside main.

Change

Drop those two entries. The file is now byte-identical to the attestation in #82's first commit (9726965, blob acd4b2dc, 2,699 entries). That version was rendered with site/ops/brain_public_baseline.py attest, and #82's body says a trial freeze passed for it. In effect this reverts #82's second commit, "Attest the atlas assets for Brain release B".

Checks

  • Re-rendered with the module's own _canonical_json_bytes. That function reproduces the current file byte for byte, and the output passes _load_manifest_bytes and _validate_file_inventory.
  • The four assets build-public.ts copies from source still match main exactly: assets/script.js, editor.js, style.css and review.css, against site/assets/* and wiki/assets/editor.js.
  • No test reads the committed attestation's contents; freeze checks it at release time.

When #85 merges

It should add the two atlas entries back in the same PR, for example by re-applying 0a09e9e0's change, so the attestation always matches what main builds.

#82 attested assets/atlas.css and assets/atlas.js for release B, but they
come from #85, which is not merged, and main's build-public does not
produce them. A baseline freeze at main therefore fails ("missing
assets/atlas.css, assets/atlas.js") or needs a tree built outside main.

This drops those two entries, which restores the attestation #82's first
commit (9726965) rendered with `brain_public_baseline.py attest` and
trial-froze: the file is byte-identical to it (blob acd4b2d, 2,699
entries). The other attested sources still match main: assets/script.js,
editor.js, style.css and review.css equal site/assets and wiki/assets.

When #85 merges, it should re-attest the two atlas assets in the same PR.
@Deicyde
Deicyde merged commit 2cf36c7 into main Oct 19, 2026
4 checks passed
@Deicyde
Deicyde deleted the claude/attestation-without-atlas branch October 19, 2026 02:51
Deicyde added a commit that referenced this pull request Oct 19, 2026
PR #104 dropped assets/atlas.css and assets/atlas.js from main's attestation
until this PR merges, so release B could be built at 2cf36c7 without the
atlas. This PR ships both files, so it restores both entries (atlas.css
044fbca9, atlas.js 29d8a77b): the files and their attestation land in one
merge, and a release built from any later main freezes cleanly. Every other
entry is main's, unchanged.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant