ADR-046 Wave 5: complete production plane and delivery gates by vicondoa · Pull Request #381 · vicondoa/d2b

vicondoa · 2026-08-04T21:09:21Z

Change

Complete the ADR-046 Wave 5 production-plane implementation and contract convergence across resource storage/watch, controllers, providers, CLI, Nix configuration, telemetry/audit, and shell lifecycle surfaces.
Replace open-ended panel rediscovery with a selected-roster Discover-Fix-Verify lifecycle that preserves one stable ledger, carried responses, finalized continuation handoffs, and process-metadata boundaries without treating panel review as a security boundary.
Correct release and build orchestration where operationally required: trusted manual release validation, exact resumable tag/release asset adoption, pinned Rust selectors, closed workspace classification, expected-base merge refusal, and enforcing mutation coverage.
Align ADR-046, ADR-052, ADR-055, contributor guidance, changelog fragments, generated graphs, prompt bindings, and policy gates with the implemented contracts.

Validation evidence

make check - pass at d4a85d82: 12 enforcing Layer-1 jobs; test-performance-budgets is advisory and excluded from evidence.
Panel lifecycle, staging, records, dispatch-binding, prompt-corpus, and strict CLI regression suites - pass.
Spec 003 plan validator self-test and full plan validation - pass.
Release workflow mutation suite, policy_workspace, make test-policy, and make heavy-gate-build - pass.
All enforcing GitHub checks on the pushed candidate - pass, including fixture contracts, Rust supply chain, Nix/flake evaluation, policy, drift, runtime ledger, and CodeQL.

Independent review

The selected thirteen-seat lifecycle reviewed the full candidate once and every subsequent fix through scoped verification. The final candidate is unanimous 13/13: all 77 ledger issues are verified, no recommendations or late findings remain, and record generation succeeds for the actual follow-on verification packet.

Landing

This PR targets v3 and remains draft because T219 still requires its external retained-request disposition. Merge is intentionally not automated.

…mory-fix

… H57 H58 H59 H60 H61 H62 H65 )

… H59 H65 )

…1 H59 H65 )

Require strict up-to-date status enforcement or an integration-tree-bound merge-group check before the protected Wave 5 merge.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…6 H67 )

State that record assembly validates declared process metadata against policy and does not prove the reasoning effort actually used.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

… H68 H69 )

…cess ) Align the binding guard and operative guidance with ledger, responses, and last-published handoff completeness evidence.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…H3 H31 H66 H69 )

…ess ) Refresh governed prompt fingerprints after the two-phase continuation handoff documentation update.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…H3 H31 H65 H66 H69 H70 )

…cess ) Refresh governed fingerprints for the finalized-handoff enforcement and updated integrator/autopilot guidance.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Report carried and reset issue IDs and direct operators to fill only null continuation responses.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…4 H76 H77 ) Describe carried and reset response entries consistently across panel, integrator, and autopilot instructions, with a binding regression guard.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Use partial-template terminology and reject blank response wording across line breaks.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Remove the final stale wording and make the binding guard whitespace-tolerant with an exact regression case.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Carry already validated canonical response objects without normalization and assert exact equality in lifecycle coverage.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Validate raw carried responses through the shared semantic validator while retaining their original accepted object shape.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…ocess ) Include the finalized continuation marker in schema-4 verification packet records and cover malformed input preflight.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…process ) Allow discovery-first verification packets without a handoff and follow-on packets with the finalized handoff, with exact artifact-set coverage.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

vicondoa commented Aug 4, 2026

View reviewed changes

Comment thread docs/reference/schemas/v3/Credential.schema.json Outdated

vicondoa commented Aug 4, 2026

View reviewed changes

vicondoa changed the title ~~resource: deliver ADR 046 Wave 5~~ ADR-046 Wave 5: complete typed shell cutover and KVM acceptance Aug 5, 2026

vicondoa added 27 commits August 5, 2026 02:37

nix: reap isolated eval shard processes ( adr046w5 )

798cbfe

nix: isolate every Nix-unit file job ( adr046w5 )

bc8137e

nix: run serial eval shards in foreground ( adr046w5 )

95c8efa

nix: partition external VM eval cases ( adr046w5 )

ea1c5a5

nix: settle evaluator descendants between shards ( adr046w5 )

ec8b479

nix: partition assertion eval corpus ( adr046w5 )

a6ccde1

nix: reap evaluator process groups ( adr046w5 )

ef161a5

nix: partition gateway guest eval cases ( adr046w5 )

bdf5336

nix: split gateway host scenario buckets ( adr046w5 )

912a7e6

flake: run serial local shards in foreground ( adr046w5 )

b8b5a3a

test: enforce Nix eval RSS ceilings ( adr046w5 )

8a6f96e

test: reap shard groups and measure resident memory ( adr046w5 )

1a92aaa

nix: narrow guest-control vsock rejection evals ( adr046w5 )

2422fa8

test: recalibrate repaired Nix RSS ceiling ( adr046w5 )

05d6309

Merge remote-tracking branch 'origin/adr046-w5' into adr046-w5-nix-me…

43f2004

…mory-fix

test: refresh post-merge RSS ceilings ( adr046w5 )

dda9ff7

test: terminate RSS process groups actively ( adr046w5 )

0540fcd

test: compare RSS ceilings with v3 baselines ( adr046w5 )

4ef3475

tests: bound Nix evaluation memory ( adr046w5 )

585decf

tests: use live retry counter ( adr046w5 )

3511c3a

tests: align Nix shard policy ( adr046w5 )

3b1c824

tests: cover Nix shard topology ( adr046w5 )

b73822c

tests: accept isolated Nix stderr ( adr046w5 )

e0f736e

tests: partition selected Nix shards ( adr046w5 )

001c875

tests: address selected Nix attrs safely ( adr046w5 )

fcd2450

tests: match selected shard quoting ( adr046w5 )

55ab34e

tests: expose topical Nix job shards ( adr046w5 )

018e38a

vicondoa added 27 commits August 9, 2026 06:02

build: make release publication resumable ( adr046w5dfvplan2fu4 H64 )

e1f605b

panel: close continuation compatibility ( adr046w5dfvplan2fu4 H51 H54…

8ce9aad

… H57 H58 H59 H60 H61 H62 H65 )

panel: close marker and metadata validation ( adr046w5dfvplan2fu5 H31…

c397525

… H59 H65 )

build: close release identity retry ( adr046w5dfvplan2fu5 H50 H64 )

44c1641

panel: finish marker and metadata validation ( adr046w5dfvplan2fu5 H3…

51ac0a1

…1 H59 H65 )

spec: require strict expected-base merge ( adr046w5dfvplan2fu5 H55 )

7484ca3

Require strict up-to-date status enforcement or an integration-tree-bound merge-group check before the protected Wave 5 merge.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

test: enforce expected-base merge contract ( adr046w5dfvplan2fu6 H55 )

00e3788

panel: close deleted-marker and effort prose ( adr046w5dfvplan2fu6 H6…

b67b836

…6 H67 )

test: enforce expected-base merge contract ( adr046w5dfvplan2fu6 H55 )

f69e9da

panel: close deleted-marker and effort prose ( adr046w5dfvplan2fu6 H6…

d8ad86d

…6 H67 )

docs: clarify panel effort declarations ( adr046w5dfvplan2fu6 H67 )

41b110e

State that record assembly validates declared process metadata against policy and does not prove the reasoning effort actually used.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

panel: bound deleted-marker remnants ( adr046w5dfvplan2fu7 H66 H68 H69 )

8bd291c

test: complete expected-base mutation matrix ( adr046w5dfvplan2fu7 H55 )

3c7da6d

panel: bind continuation handoff marker ( adr046w5dfvplan2fu8 H31 H66…

1e20d94

… H68 H69 )

docs: bind three-file continuation handoff ( adr046w5dfvplan2fu8 Hpro…

a5da3cf

…cess ) Align the binding guard and operative guidance with ledger, responses, and last-published handoff completeness evidence.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

panel: finalize completed continuation handoff ( adr046w5dfvplan2fu9 …

3ff454f

…H3 H31 H66 H69 )

policy: refresh finalized handoff prompts ( adr046w5dfvplan2fu9 Hproc…

347f17a

…ess ) Refresh governed prompt fingerprints after the two-phase continuation handoff documentation update.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

panel: require finalized continuation handoff ( adr046w5dfvplan2fu10 …

39c048e

…H3 H31 H65 H66 H69 H70 )

policy: refresh mandatory handoff prompts ( adr046w5dfvplan2fu10 Hpro…

492bb11

…cess ) Refresh governed fingerprints for the finalized-handoff enforcement and updated integrator/autopilot guidance.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

docs: preserve carried panel responses ( adr046w5dfvplan2fu10 H74 )

a46296c

Report carried and reset issue IDs and direct operators to fill only null continuation responses.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

docs: remove final blank-template wording ( adr046w5dfvplan2fu12 H77 )

844e470

Use partial-template terminology and reject blank response wording across line breaks.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

docs: catch cross-line blank template drift ( adr046w5dfvplan2fu13 H77 )

e17b257

Remove the final stale wording and make the binding guard whitespace-tolerant with an exact regression case.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

panel: preserve carried response objects ( adr046w5dfvplan2fu14 H74 )

7e437e0

Carry already validated canonical response objects without normalization and assert exact equality in lifecycle coverage.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

panel: preserve accepted response aliases ( adr046w5dfvplan2fu15 H74 )

d21fbd1

Validate raw carried responses through the shared semantic validator while retaining their original accepted object shape.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

panel: accept handoff-bound record packets ( adr046w5dfvplan2fu16 Hpr…

e083586

…ocess ) Include the finalized continuation marker in schema-4 verification packet records and cover malformed input preflight.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

vicondoa changed the title ~~ADR-046 Wave 5: complete typed shell cutover and KVM acceptance~~ ADR-046 Wave 5: complete production plane and delivery gates Aug 10, 2026

vicondoa marked this pull request as ready for review August 10, 2026 02:46

vicondoa merged commit 177235e into v3 Aug 10, 2026
64 checks passed

Navigation Menu

ADR-046 Wave 5: complete production plane and delivery gates - #381

ADR-046 Wave 5: complete production plane and delivery gates#381
vicondoa merged 783 commits into
v3from
adr046-w5

vicondoa commented Aug 4, 2026 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

vicondoa commented Aug 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Change

Validation evidence

Independent review

Landing

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

vicondoa commented Aug 4, 2026 •

edited

Loading