HTTP: require typed requester contract on current master #63

Closed

nsaspy wants to merge 4 commits from issue-138-http-request-contract into master

nsaspy commented

2026-09-04 20:36:55 +00:00

Owner

Issue

Advances #138; does not close it.

Recovery

Rebuilds the typed requester contract on current master because draft PR #159 diverged after later visual-evidence merges.

RED-first evidence

Test-only head 560792e496be3ed607709f51299daed0e94be861 registered the requester contract before implementation. GitHub Actions reached the core job but failed during Quicklisp installation before ASDF tests ran, so that workflow is infrastructure-failed rather than counted as semantic RED proof. The test-only commit remains in history.

Research gate

As of 2026-08-31, curl_cffi is actively maintained; PyPI 0.16.2 was released 2026-08-25. This slice deliberately defines a backend-neutral Common Lisp contract first; executable backend/process integration remains follow-up work in #138.

Implemented contract

operation/run scoped typed request
explicit bounded timeout
explicit redirect policy
selected coherent client profile + capture mode
backend/profile/capture provenance
request secret values excluded from execution provenance
invalid redirect policy/non-positive timeout fail closed

No database/KB/StarIntel mutation is added.

Completion boundary

This PR must not close #138. Remaining work includes maintained impersonating backend integration, capability detection/fallback, proxy/IPX execution, normalized result typing, deadline/redirect execution behavior, and deterministic local fixture proof.

## Issue Advances #138; does not close it. ## Recovery Rebuilds the typed requester contract on current `master` because draft PR #159 diverged after later visual-evidence merges. ## RED-first evidence Test-only head `560792e496be3ed607709f51299daed0e94be861` registered the requester contract before implementation. GitHub Actions reached the core job but failed during Quicklisp installation before ASDF tests ran, so that workflow is infrastructure-failed rather than counted as semantic RED proof. The test-only commit remains in history. ## Research gate As of 2026-08-31, `curl_cffi` is actively maintained; PyPI 0.16.2 was released 2026-08-25. This slice deliberately defines a backend-neutral Common Lisp contract first; executable backend/process integration remains follow-up work in #138. ## Implemented contract - operation/run scoped typed request - explicit bounded timeout - explicit redirect policy - selected coherent client profile + capture mode - backend/profile/capture provenance - request secret values excluded from execution provenance - invalid redirect policy/non-positive timeout fail closed No database/KB/StarIntel mutation is added. ## Completion boundary This PR must not close #138. Remaining work includes maintained impersonating backend integration, capability detection/fallback, proxy/IPX execution, normalized result typing, deadline/redirect execution behavior, and deterministic local fixture proof.

nsaspy added 4 commits

2026-09-04 20:36:55 +00:00