feat(r1): publish verified Gate A accepted 3.3.0 candidate - #35

Merged

ajhcs merged 185 commits into

mainfrom

codex/r1-gatea-final-publication-4e8f7f77-20260827

Aug 27, 2026

Commits on Aug 22, 2026

feat(provider): add the closed P17 driver envelope and capability contract
ajhcs
committed
bca0a80
test(provider): add the provider-agnostic driver conformance harness
ajhcs
committed
79e0fa9
docs(changelog): record the P17 driver contract
ajhcs
committed
bafa8d7
feat(v3): add the strict relative artifact path policy
cole
committed
a28b3ed
feat(v3): bind the closed ArtifactRefV1 contract and digest authority
cole
committed
773b44f
docs(changelog): record the P07 artifact reference and path policy
cole
committed
bb452c6
feat(run): add durable local run store with exclusive idempotent submission
ajhcs
committed
de743a1
test(run): cover hostile replay, restart, and path-safety
ajhcs
committed
da69ebe
docs(changelog): record the P24 durable run store
ajhcs
committed
3cf06ab
feat(v3): add the atomic raw/sanitized artifact store
cole
committed
778cc01
test(v3): pin the atomic artifact store against hostile callers
cole
committed
88c3bb7
docs(changelog): record the P08 atomic artifact store
cole
committed
0cbd6b8
fix(v3): reject reserved parents and verify stored snapshots
ajhcs
committed
ef0d7dc
feat(v3): add digest-checked sanitized range primitive and reader contract
ajhcs
committed
210545c
feat(v3): tell clipping from unknown upstream truncation
ajhcs
committed
832016f
feat(redaction): stream sanitized artifact content
ajhcs
committed
b161519
test(v3): pin the bounded sanitized reader against hostile callers
ajhcs
committed
498aeac
feat(redaction): protect chunk-boundary secrets and Unicode
ajhcs
committed
aca00c1
test(redaction): add split-token and oversized-stream cases
ajhcs
committed
d80a8fd
feat(run): add pure deterministic run journal reducer
Ox Alpha
committed
fc4f4f7
feat(run): add durable append-only run journal with cursor paging
Ox Alpha
committed
cdc7ca6
test(run): cover hostile journal replay, crash, cursor, and lattice behavior
Ox Alpha
committed
6ad47ce
docs(changelog): record the P25 run journal
Ox Alpha
committed
99b6a41
feat(grok): add the Grok ACP ProviderDriverV1 adapter
ajhcs
committed
04c904c
test(grok): cover injected Grok ACP transport sequences
ajhcs
committed
08d533c
docs(changelog): record the P18 Grok ACP driver slice
ajhcs
committed
6ac19db
fix(grok): close replay and terminal lifecycle boundaries
ajhcs
committed
f2dda07
fix(redaction): deny own overrides on intrinsic byte views
ajhcs
committed
738cb4e
merge: compose accepted P10 reader with accepted P09 sanitizer
ajhcs
committed
e143944
merge: compose accepted P17 driver contract for P11
ajhcs
committed
3c4a145
feat(provider): add the DSH ACPX provider driver for Muse Spark and Ox Alpha

ox-alpha
authored and
ajhcs
committed
760d62d
test(provider): add DSH ACPX driver conformance and hostile coverage

ox-alpha
authored and
ajhcs
committed
4884814
docs(changelog): record the P20 DSH ACPX driver slice

ox-alpha
authored and
ajhcs
committed
a089b28
fix(provider): make DSH terminal evidence absorbing
ajhcs
committed
c977085
merge: compose accepted P20 with accepted P18
ajhcs
committed
0450a2e

Commits on Aug 23, 2026

feat(provider): route local ACP results to artifacts
ajhcs
committed
86fc0c4
feat(provider): retain bounded sanitized inline tails
ajhcs
committed
f64a463
test(provider): cover Grok Cursor and DSH result limits
ajhcs
committed
48c1a1c
fix(provider): bind P11 sink identity and fail closed
ajhcs
committed
8a9596f
feat(identity): ratify aggregate pre-dispatch run-anchor labels
ajhcs
committed
67d84e2
feat(run): add marked aggregate root with durable claims
ajhcs
committed
ae60298
feat(run): publish absorbing selection records before state
ajhcs
committed
f7e99fe
test(run): harden aggregate anchor crash recovery and hostiles
ajhcs
committed
c21a267
merge: compose accepted provider adapters with P11 result sink
ajhcs
committed
ca34c38
feat(run): bind aggregate resolution to journal stamp v2
ajhcs
committed
17d6ff6
feat(run): add aggregate-only open/append/read verification entrypoints
ajhcs
committed
3f274f7
test(run): prove legacy bytes and hostile aggregate bridge behavior
ajhcs
committed
e6155a0
fix(run): close R25B aggregate binding and restore P25 stamp cap
ajhcs
committed
cf22691
feat(run): persist one selection question batch
ajhcs
committed
c6a3870
feat(run): accept one exactly-once structured reply
ajhcs
committed
be10d7b
test(run): cover stale duplicate and partial replies
ajhcs
committed
c9204b2
feat(provider): add minimal driver template
ajhcs
committed
02b4696
test(provider): publish reusable conformance fixtures
ajhcs
committed
a594cd8
docs(provider): document capability and evidence requirements
ajhcs
committed
54fba3b
refactor(cloud): implement SDK driver
ajhcs
committed
fc40f97
feat(cloud): reconcile pushed base agent run and branch identity
ajhcs
committed
1bd23d9
test(cloud): cover cancel, terminal latches, and archive evidence
ajhcs
committed
6c3ef97
test(cloud): enforce no-PR and hostile receipt boundaries
ajhcs
committed
65bcb9b
feat(evidence): define provider claim and verified fact types
ajhcs
committed
3ae392e
feat(evidence): define discrepancy and artifact references
ajhcs
committed
d8dca96
merge(provider): compose accepted Cursor Cloud driver
ajhcs
committed
b06b62f
test(evidence): reject unproven accepted states
ajhcs
committed
4310661
fix(evidence): require proof artifacts for model attestation
ajhcs
committed
13dfccb
chore(integration): compose evidence and provider result clusters
ajhcs
committed
f0bccd6
feat(authority): define protected refs and branch namespaces
ajhcs
committed
0ec4386
feat(authority): prohibit merge push and create-pr operations
ajhcs
committed
a8cebdf
test(authority): reject merge histories and default-branch targets
ajhcs
committed
a1b33f9
feat(verify): add trusted VerificationPolicyV1 schema and owner loader
ajhcs
committed
3857ba6
test(verify): cover focused and adversarial trusted-policy surfaces
ajhcs
committed
5bc7095
docs(changelog): record the P16A trusted verification policy
ajhcs
committed
60c2666
feat(cloud): store provider report and Git evidence separately
ajhcs
committed
9e417ea
feat(cloud): mark upstream source truncation
ajhcs
committed
c664e07
test(cloud): reject run branch and request identity mismatch
ajhcs
committed
8e66bff
fix(cloud): close hostile P12 result-source boundaries
ajhcs
committed
5e6ca02
fix(authority): require trusted receipts for evidence projection
ajhcs
committed
8c620cb
fix(verify): close missing-catalog deny, exotic options, and env accessors
ajhcs
committed
a624914
feat(verify): validate repository base branch and head
ajhcs
committed
18beb83
feat(verify): validate ancestry and merge base
ajhcs
committed
66a14e3
test(verify): add forged stale and rewritten history fixtures
ajhcs
committed
ded99cb
fix(verify): close hostile Git provenance boundaries
ajhcs
committed
43732b4
merge: compose accepted P14 verifier
ajhcs
committed
e2004b4
feat(verify): add approved verification-command resolver
ajhcs
committed
f54a2d2
test(verify): cover focused and adversarial approved-command surfaces
ajhcs
committed
8cda832
docs(changelog): record the P16B approved-command resolver
ajhcs
committed
fbbf622
merge: compose accepted P16B resolver
ajhcs
committed
dec2280
feat(verify): add the scope, read-only, and merge-commit verifier
ajhcs
committed
f3a7cf9
test(verify): cover ownership, merge, unicode, and observation races
ajhcs
committed
95049bc
docs(changelog): record the P15 scope verifier
ajhcs
committed
42c2d09
feat(verify): add constrained verification runner
ajhcs
committed
5915212
test(verify): cover focused and adversarial runner surfaces
ajhcs
committed
3064e38
docs(changelog): record the P16C constrained verification runner
ajhcs
committed
f3ca446
fix(verify): close ignored, index, merge-head, copy, lstat, and fsmonitor holes
ajhcs
committed
2c886cf
merge: compose accepted P15 scope verifier
ajhcs
committed
eaf50bd
fix(verify): close P16C isolation and cleanup blockers
ajhcs
committed
caf1bd4
merge: compose accepted P16C runner
ajhcs
committed
7c57e7b
feat(provider): add the cursor-local driver lifecycle
ox-alpha
committed
c6a231b
test(provider): prove the cursor-local driver against hostile callers
ox-alpha
committed
01160e4
docs(provider): specify the cursor-local driver reconstruction
ox-alpha
committed
997fba8
fix(provider): close the option quarantine and session-correlation seam

ox-alpha
authored and
cole
committed
03b6d3b

Commits on Aug 24, 2026

Merge commit '03b6d3b1856e725d915dbfc19e8c8fdace0b5a98'; commit '54fba3b94ca75d305a898c18895200b1f3eef679' into codex/lead-r1-w20-p23-provider-registry-composition-20260824
ajhcs
committed
04de7cb
feat(provider): add the closed provider registry composition authority
ox-alpha
committed
1d071be
test(provider): compose every accepted driver behind the P23 registry
ox-alpha
committed
22d8c01
docs(provider): record the P23 registry cutover boundary
ox-alpha
committed
f6467f1

Commits on Aug 25, 2026

Merge accepted P28 Git authority into P23 baseline
ajhcs
committed
8635f4c
Merge accepted P24 durable run store into P23 baseline
ajhcs
committed
69201ad
feat(run): validate exact repository and base SHA
ajhcs
committed
c7c36db
feat(run): enforce eight-child and independent-fanout limits
ajhcs
committed
b359a5c
feat(run): detect overlapping writer scopes and capacity
ajhcs
committed
fba6e6e
test(run): prove no workspace exists after failed preflight
ajhcs
committed
f0508fb
feat(boundary): strip Git SSH and hosting credentials
ajhcs
committed
b4f2fd9
feat(boundary): load provider auth without process-argument secrets
ajhcs
committed
2947e01
feat(boundary): disable worker push URLs
ajhcs
committed
74a8016
test(boundary): inspect and close credential isolation
ajhcs
committed
8f7eea9
merge: compose accepted P26 and P29
ajhcs
committed
0fd091e
feat(boundary): audit live protected and default refs
ajhcs
committed
0049b5a
test(boundary): cover packed symbolic worktree and race refs
ajhcs
committed
f4600b4
docs(boundary): record the P30 protected-ref audit
ajhcs
committed
14e7a8b
feat(run): bind preflight to closed environment projection
ajhcs
committed
d920a37
test(run): prove fail-closed orchestration and isolation
ajhcs
committed
e1123ab
docs(run): specify the P31 dispatch orchestration boundary
ajhcs
committed
d0d180a
fix(run): bind unique lifecycle identity and truthful registered cleanup
ajhcs
committed
8fbb0fb
test(run): cover collision, forged receipts, and cleanup failures
ajhcs
committed
bda8bbf
merge(boundary): compose P30 and repaired P31
ajhcs
committed
ad68816
feat(run): add side-effect-free RunApiBoundaryV1 adapter
ajhcs
committed
a46f12a
test(run): cover paired projection, negative evidence, and hostiles
ajhcs
committed
9cd757f
docs(run): specify the P32 run API boundary
ajhcs
committed
3b68a49
fix(run): fail closed on P30 comparison drift and contradictory P31 prepare receipts
ajhcs
committed
d42ca18
Integrate accepted P27 run-state foundation
ajhcs
committed
33961e9
Integrate accepted P12 cloud result source
ajhcs
committed
f880523
feat(attention): persist owner-only AttentionBatchV1 records
ajhcs
committed
4581d6c
test(attention): cover latch, reply, unresolved, and hostiles
ajhcs
committed
83d3503
docs(attention): specify the P34 attention-batch boundary
ajhcs
committed
257bf04
feat(supervisor): classify terminal receipts before publicState mapping
ajhcs
committed
4291c5b
test(supervisor): prove terminal errors cannot project as succeeded
ajhcs
committed
e2b61e3
docs(supervisor): specify result truthfulness at the projection seam
ajhcs
committed
47ddeb9
fix(server): classify tasks list and wait-any before publicState mapping
ajhcs
committed
005c121
fix(task-store): classify public state before list filter and pagination
ajhcs
committed
85f86be
Integrate accepted P34 attention batch
ajhcs
committed
fc9e01c
Integrate accepted R-TRUTH closure
ajhcs
committed
9e4d3cb
feat(run-scheduler): add one-submission 1-8 assignment fanout
ajhcs
committed
9ab7bd5
docs(run-scheduler): specify the injected scheduler contract
ajhcs
committed
d6f5327
feat(boundary): add tri-state exact systemd/cgroup finality
ajhcs
committed
c4613b5
feat(supervisor): settle local lifecycle before R-TRUTH projection
ajhcs
committed
ce3247e
test(lifecycle): reproduce both incidents and Ox T1-T7
ajhcs
committed
7c6423f
fix(worker): bound ACP close, WTB handoff, and worker exit
ajhcs
committed
ea02611
test(worker): reproduce live-cgroup incidents and close timeouts
ajhcs
committed
f2afa00
docs(worker): specify the terminal worker-exit contract
ajhcs
committed
e18884c
feat(run): add identity-bound assignment artifact bridge
ajhcs
committed
e891d0f
test(run): prove capture, projection, cleanup, and hostiles
ajhcs
committed
7f61760
docs(run): specify the run artifact bridge
ajhcs
committed
7feba61
feat(run-runtime): compose injected submit, resume, cancel, and inspect
ajhcs
committed
2b9990c
test(run-runtime): prove identity, restart, attention, cancel, and cleanup
ajhcs
committed
774dd39
docs(run-runtime): specify the injected runtime contract
ajhcs
committed
4ec7db3
test(worker): isolate adversarial CLI close from ambient WTB
ajhcs
committed
9b6af66
fix(run): bind capture readback and never upgrade truncation
ajhcs
committed
7797adc
fix(run-runtime): recover stored identity and never invent a digest
ajhcs
committed
1135c63
merge: compose accepted lifecycle worker-exit slice
ajhcs
committed
a2b0600
merge: compose accepted lifecycle boundary-truth slice
ajhcs
committed
70e5f88
merge: compose accepted P33 runtime slice
ajhcs
committed
c4a743f
merge: compose accepted P33 scheduler slice
ajhcs
committed
6fa2815
merge: compose accepted P33 artifact-bridge slice
ajhcs
committed
c8f838f

Commits on Aug 26, 2026

Commits on Aug 27, 2026