Skip to content

fix(optiflow): validate saved read-only receipts - #84

Merged
szmyty merged 1 commit into
mainfrom
fix/81-receipt-contract-parity
Oct 21, 2026
Merged

szmyty merged 1 commit into
mainfrom
fix/81-receipt-contract-parity

Conversation

@szmyty

@szmyty szmyty commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

A saved complete Optiflow receipt could reopen successfully with empty artifact lists and a null plan digest. The loader now shares a bounded contract gate with persistence and requires explicit plan proof, required nullable keys, closed paths, exact capabilities, valid digests and coherent states. Reopening correlates the hash-verified native run/report/plan and artifact-set bytes with the recorded IDs, source root and member paths.

The shared corpus has 84 cases: 12 accepted controls, 41 schema-invalid cases and 31 further runtime-invalid cases. Replaying it against base c673654fb7ad86569d3bb32f1412f5eb2fbf2bf3 reproduces 45 incorrect acceptances, including all five audit counterexamples and all nine omitted required nullable keys. The existing 25-contract manifest stays unchanged; the repository-validator job explicitly runs the independent Draft 2020-12 receipt check.

Validation on Linux x86-64 / Rust 1.85.0:

  • Focused library, shared-corpus and adapter tests pass. The pinned Optiflow v0.1.1 executable was explicitly installed; two tests invoked it on disposable synthetic text, and the third exercised provider refusal.
  • Focused strict Clippy, workspace formatting and two documentation tests pass.
  • Independent Python parity, existing contract validation (25 contracts / 35 positive / 22 negative) and architecture specifications pass.
  • Independent source review covered implementation, fixtures, CI and evidence; the identity-correlation finding was fixed before the final checks.

Handoff · Commands, file/log hashes, provider identity and limitations

These are focused local results. The previously observed full-wrapper timeout and moving-stable Clippy failures in unchanged code remain under #34. No hosted CI was dispatched or polled for this checkpoint, no full-suite/macOS/Windows qualification is claimed, and no timeout or lint policy was weakened. Local records remain editable evidence without signature or mutation authority. Broader continuation-documentation reconciliation remains #82.

Closes #81.

Require complete contract shape and correlated native artifact evidence before accepting saved receipts. Add shared Rust/schema regressions and focused validation evidence for #81.
@szmyty
szmyty merged commit aadf053 into main Oct 21, 2026
4 of 5 checks passed
@devactivity-app

Copy link
Copy Markdown

Pull Request Summary by devActivity

Metrics

Cycle Time: 1m Coding Time: < 1 min

Achievements

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Validate reopened optiflow receipts against the complete evidence contract

1 participant