P06: protect identity and telemetry evidence - #31
Merged
Conversation
Close exact Git, workspace, run, child, dispatch-attempt, and provider-run identities as additive v3 schemas. GitIdentityV1 is the immutable repository/base SHA shared by every assignment and hashed under the P03 workspace-anchor label; WorkspaceIdentityV1 binds one managed worktree/branch/lock or a Cloud pin of that same base, never direct mode. Digests and request idempotency go through the P03 closed label registry so P03 hex and P05 sha256 capability/lane outputs bind as recorded facts. Outputs are detached and deeply frozen; hostile descriptor, Proxy, accessor, symbol, exotic, sparse, alias, cycle, depth, and size inputs fail closed.
Compose ProtectedIdentityV1 records into DispatchProvenanceV1 and a content-free DispatchTelemetryV1 projection. Known provenance and status facts cannot be dropped or rewritten: only exact null-to-value fills are allowed, counters and revisions are monotone, equal revisions demand byte identity, and settled outcomes are absorbing. Telemetry never serializes raw identifiers, models, paths, prompts, results, credentials, provider references, or idempotency keys.
Document the closed run/child/provider-run/workspace/git identity schemas, P03/P05 digest compatibility, and monotonic content-free telemetry continuity rules.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Publishes the accepted P06 protected identity and telemetry slice after accepted P05.
0c4a6fc805bbec3f013a47a0359a938d34703081557a9334e4bbdaeebc85dbcfb918dc6d9defb4c7ACCEPTED_CLEAN_LINEAGE0ca78777c33c38362b7f4c938c65620ddeb4ea64,588695defe9493e44614188617fee6094f14d59b,0c4a6fc805bbec3f013a47a0359a938d34703081c7193849c9224b77cbf7aa524b1e082bb91f75b2ffe15ee0d37e032e9f93ac65863fac735ba7a2d6c945e142ab69e9d573d3ba1c292062006f80c0d6ba4883dfReview and CI authority applies only to the exact final head/tree above. No rejected intermediate is in this clean lineage; unrelated rejected PR #28 head
9a37eba62dd35a6b54d96e11105ea9deadec0a10is absent.