From 988f46fc6152bf4893b609e6c4e5e0be422b6301 Mon Sep 17 00:00:00 2001 From: Eric Moore Date: Mon, 7 Sep 2026 21:32:41 -0500 Subject: [PATCH] =?UTF-8?q?0.3.66:=20adopt=20ciris-server=200.5.203=20?= =?UTF-8?q?=E2=80=94=20a=20split=20node=20signs=20its=20consent=20as=20its?= =?UTF-8?q?elf?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The pin moves v0.5.202 -> v0.5.203; the substrate is unchanged, so the lock moves exactly the server and lens-core entries. 0.5.203 fixes CIRISServer#563 (agent-hosted split-key nodes: the consent guard, the held node pen, the served key record). This node is standalone — its configured key IS the node — so none of that path runs here; the pin moves so the two nodes on the canonical host run one server build. clippy -D warnings clean, 114 tests pass, `cargo metadata --locked` proves the lock (version bumped before the refresh), one copy of each crate. Co-Authored-By: Claude Fable 5.1 --- Cargo.lock | 8 ++++---- Cargo.toml | 16 ++++++++++++++-- 2 files changed, 18 insertions(+), 6 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index d509281..7913c6e 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -997,7 +997,7 @@ dependencies = [ [[package]] name = "ciris-lens-core" version = "1.4.4" -source = "git+https://github.com/CIRISAI/CIRISServer?tag=v0.5.202#e55175899f8acac148809ec92309e7f767d5f202" +source = "git+https://github.com/CIRISAI/CIRISServer?tag=v0.5.203#80334ba4a22c5452666050ec0602e6c22a7ad35d" dependencies = [ "axum", "base64 0.22.1", @@ -1067,8 +1067,8 @@ dependencies = [ [[package]] name = "ciris-server" -version = "0.5.202" -source = "git+https://github.com/CIRISAI/CIRISServer?tag=v0.5.202#e55175899f8acac148809ec92309e7f767d5f202" +version = "0.5.203" +source = "git+https://github.com/CIRISAI/CIRISServer?tag=v0.5.203#80334ba4a22c5452666050ec0602e6c22a7ad35d" dependencies = [ "anyhow", "async-trait", @@ -1111,7 +1111,7 @@ dependencies = [ [[package]] name = "ciris-status" -version = "0.3.65" +version = "0.3.66" dependencies = [ "anyhow", "async-trait", diff --git a/Cargo.toml b/Cargo.toml index f29afcc..772779f 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "ciris-status" -version = "0.3.65" +version = "0.3.66" edition = "2021" description = "The ciris.ai public health/status surface — now a ciris-server fabric node + a StatusAdapter (mirrors CIRISAgent's adapter model). Serves /health, /v1/status, /api/v1/status, /api/v1/status/history + the public scoring roster (Flow A, own corpus) + live SSE/WS, by live outbound probes + a SQLite uptime history. The federation node (engine, edge, consent:replication, read API, ownership, safety, NAT-traversal) is ciris-server's serve; the status page is the adapter." license = "AGPL-3.0-or-later" @@ -221,7 +221,19 @@ libc = "0.2" # published: its Windows wheel failed on a one-line type break; v0.5.202 is # the same release plus that cast and a CRLF fix in one gate — pin the tag # that shipped.) -ciris-server = { git = "https://github.com/CIRISAI/CIRISServer", tag = "v0.5.202" } +# +# 0.5.203 — A SPLIT NODE SIGNS ITS CONSENT AS ITSELF (2026-09-08, +# CIRISServer#563). On an agent-hosted node the engine signs as the ACTOR and +# boot mints the node its own key; the consent guard compared that signer's +# keystore alias to the node's derived id and refused every re-author, so a +# split node whose actor peered at setup died on its next boot. Now the guard +# reads both signer conventions, the process holds the node's pen and its key +# record, and every consent surface authors and serves as the node. THIS node +# is standalone (its configured key IS the node, `SubstrateOnly`), so none of +# that path runs here — the pin moves so the two nodes on the canonical host +# run one server build. Substrate unchanged: persist v42.0.0 / edge v21.0.0 / +# verify v15.0.0 / leviculum v0.25.0+ciris.1. +ciris-server = { git = "https://github.com/CIRISAI/CIRISServer", tag = "v0.5.203" } # NO ciris-persist PIN. persist arrives through ciris-server's `pub use # ciris_persist` re-export, so this crate cannot resolve a different persist