Skip to content

Carry interactive Gemini identity and trust state - #4

Closed
mark-ik wants to merge 5 commits into
mainfrom
agent/gemini-client-identity
Closed

Carry interactive Gemini identity and trust state#4
mark-ik wants to merge 5 commits into
mainfrom
agent/gemini-client-identity

Conversation

@mark-ik

@mark-ik mark-ik commented Aug 18, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • carry Gemini input, client-certificate requests, and changed-server-certificate responses through the fetch actor as typed state
  • keep certificate material scoped to one capsule origin across redirects
  • keep sensitive query input out of logs
  • expose the host-owned TOFU store seam for durable first-contact and replacement decisions

Depends on merely-made/genet#2.

Verification

  • mere-fetch: 7 tests passed against Errand 0.3.3 and gemini-protocol 0.1.5

…ld not

A1 landed, so there is finally something real to render: unmet_holds crosses
the wire, honored_holds names the satisfied pins, and the frozen realization
already lists violations in its tabular alternate and announces them in its
AccessKit tree.

Cambium cannot render any of it. It has no sceno dependency, so it cannot see a
Scene, and nothing in mere consumes cambium either. Both directions checked
against the tree rather than assumed.

This is Track C arriving at the correction Track B already took. A host renders
into cambium's surfaces; the code that knows what a hold is lives mere-side. So
C1 needs a mere-side host built on cambium, and none exists, which is the same
absence that blocks a driven probe scenario.

mer3ly could take it now without a new host, since it already reports a honored
count on its export control and the snapshot now carries the violations
alongside. That is C1's substance in a web page rather than native chrome, and
it costs a rev bump, a wasm rebuild, and a public deploy, so it is a decision
rather than a quiet extension of this target.

What is deliberately not built: a cambium surface with no consumer. That is the
work five gated targets are being held back from, and adjacency to something
that just landed is not an exemption.
The plan recorded the first attempt's apparent event-loop hang as a
genet-side defect. It was not one: the run was waiting on a macOS
permission prompt on the machine's own screen, invisible to the driver.
Accepting it and re-running the identical command passed, with 3 frames,
0 blank, 3 distinct digests.

Kept as a lane property rather than an anecdote, since it will recur: a
headed run on macOS can block on a prompt the driver cannot see, so a
first run there wants someone at the screen and a hang is a prompt until
ruled out.
…shell

The 2026-07-23 repo consolidation archived graphshell, and that repo's whole
design_docs tree is deleted at HEAD, so its 633 donor docs survive only in git
history. Eight of them were federation, distributed-index, and storage-economy
research that no mere doc carried: the 2026-05-27 full harvest summarizes VGCP
in a single table row, and the other seven were never indexed at all.

Five landed in the previous commit's sweep. This finishes the set.

New here:

- 2026-02-27_freenet_takeaways_for_verse (04d6836): split shared-state logic
  from private-identity logic, keep capability surfaces narrow per provider.
- 2026-03-28_libp2p_nostr_synergy_for_verse (f36fc49): names the control
  plane / data plane split, where Nostr carries small signed events that
  reference CIDs and libp2p delivers the bytes behind them. Carries the
  donor's repo-wide MPL-2.0 notice verbatim, which is worth a look against
  this repo's MIT/Apache posture.
- 2026-02-04_donor_docs_search_findings_summary (04d6836, donor filename
  SEARCH_FINDINGS_SUMMARY.md): a ten-topic survey of 27 donor docs, kept for
  its decision record rather than its mostly dead links. Dated from its own
  date line.

Repaired: 2026-02-23_storage_economy_and_indices was committed as an empty
file; it now has its content.

DOC_README gains a Recovered donor research block covering all eight, and its
inheritance section now records that a local archived clone sits at
Code/archive/graphshell with the rest still reachable through history, fullest
tree at 401e2fc.

Every recovered file carries a provenance header naming its donor path and
source commit, and saying plainly that none of it was ever implemented. It is
filed as research, not as direction, and it speaks the retired Verse
vocabulary.

Deliberately left out of this commit: two technical_architecture docs carrying
another agent's in-flight subgraph-to-nested-graph terminology edits.
@mark-ik mark-ik changed the title Carry interactive Gemini fetch state Carry interactive Gemini identity and trust state Aug 18, 2026
@mark-ik

mark-ik commented Aug 18, 2026

Copy link
Copy Markdown
Collaborator Author

Published the intended Gemini commits directly to main as 113085f and 931ea86; closing this redundant branch PR.

@mark-ik mark-ik closed this Aug 18, 2026
@mark-ik
mark-ik deleted the agent/gemini-client-identity branch August 18, 2026 07:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant