nsaspy/zara-plugins

Fork 0

fix(zara-coding): bind completion criteria to verifier evidence #220

Open

nsaspy wants to merge 39 commits from fix/zara-coding-criteria-provenance-v2 into main

nsaspy commented

2026-09-08 02:18:48 +00:00

Owner

Supersedes #511, which became stale/non-mergeable after current-main zara-coding lifecycle changes.

tests first: direct SWI-Prolog regressions for caller-authored pass rejection, missing completion criteria, unrelated evidence, and later-failure revocation
preserve current main zara-coding startup/plugin construction
carry explicit bounded evidence provenance (caller vs verifier) through Python and Prolog
reject caller/model-authored passing evidence at the Prolog boundary
treat each declared completion criterion as a verifier key; every criterion requires its own latest verifier-owned passed observation
later failed evidence for a criterion revokes its prior pass
public coding.task.record-evidence remains caller-authored failed observations only
no Core internals or cross-plugin composition workaround; Core #400 remains the composition handoff

Worker mailbox: #507

Required exact-head gates: zara-coding tests, registry/plugin tests, package/Nix checks.

Supersedes #511, which became stale/non-mergeable after current-main zara-coding lifecycle changes. - tests first: direct SWI-Prolog regressions for caller-authored pass rejection, missing completion criteria, unrelated evidence, and later-failure revocation - preserve current main zara-coding startup/plugin construction - carry explicit bounded evidence provenance (`caller` vs `verifier`) through Python and Prolog - reject caller/model-authored passing evidence at the Prolog boundary - treat each declared completion criterion as a verifier key; every criterion requires its own latest verifier-owned `passed` observation - later failed evidence for a criterion revokes its prior pass - public `coding.task.record-evidence` remains caller-authored failed observations only - no Core internals or cross-plugin composition workaround; Core #400 remains the composition handoff Worker mailbox: #507 Required exact-head gates: zara-coding tests, registry/plugin tests, package/Nix checks.

nsaspy added 39 commits

2026-09-08 02:18:48 +00:00

test(zara-coding): specify verifier-owned criterion evidence 254a88b14c

fix(zara-coding): require current verifier evidence per criterion 459630c497

fix(zara-coding): carry bounded evidence provenance in protocol 4535b51b13

fix(zara-coding): keep caller evidence untrusted 7ea71b0148

test(zara-coding): use verifier keys for task criteria 4fd07035ee

test(zara-coding): assert caller evidence provenance 6321ba0878

test(zara-coding): align verifier keys with criteria 6d2614038f

test(zara-coding): lock verifier provenance protocol f868fe1052

test(zara-coding): reject stale repository completion 0d26d2ea78

fix(zara-coding): revalidate repository before completion 16b6712c83

test(zara-coding): make stale snapshot regression deterministic 6acd3ded79

test(zara-coding): expose completion CAS race 380e3fad72

fix(zara-coding): serialize repository CAS with completion f6c53b2da3

fix(zara-coding): revalidate snapshot inside completion boundary efe6c305a0

test(zara-coding): assert serialized snapshot recheck 4a5d57bf14

test(zara-coding): reproduce external writer completion race ba292c4a6b

test(zara-coding): require stale completion invalidation in Prolog 41dbce6a09

fix(zara-coding): revalidate repository after completion transition a48a71a651

fix(zara-coding): invalidate stale completed transitions 2e0bf23c07

test(zara-coding): reject forged verifier evidence bce713388b

test(zara-coding): require verifier capability in live protocol aaf05ddbd7

fix(zara-coding): capability-gate verifier evidence 460d60f602

fix(zara-coding): keep public evidence caller-owned 5b5a928ffc

test(zara-coding): pin verifier authority boundary d1a8a2f159

test(zara-coding): fail closed without trusted verifier seam 2761c52f11

fix(zara-coding): separate verifier authority from generic protocol 294add3bb0

fix(zara-coding): derive evidence provenance from operation authority 2d42a5e5c4

test(zara-coding): assert verifier token is not stored 21401d2b2e

test(zara-coding): expect authority-derived evidence operations fdbfeeb113

test(zara-coding): derive provenance from evidence operation d909e9305b

test(zara-coding): require separate verifier writer boundary 8ec2c905c3

fix(zara-coding): separate verifier writer from generic session b09278538c

test(zara-coding): migrate verifier result integration to trusted writer 37de14bc94

test(zara-coding): route trusted Prolog evidence through verifier writer 247ef1e90f

test(zara-coding): migrate session tests to separate verifier interface 3b97516bc2

test(zara-coding): reject recoverable verifier protocol owner af40364242

fix(zara-coding): isolate verifier authority endpoints 5c0a5a6034

test(zara-coding): reject module-visible verifier registry dec9b21f99

fix(zara-coding): isolate verifier authority behind broker channel

CI / test (pull_request) Failing after 17s

Details

CI / zara-avatar idle CPU budget (pull_request) Failing after 7m57s

Details

5261e87f7d

nsaspy referenced this pull request

2026-09-08 02:19:35 +00:00

compat: strip live provider credentials in fake dependency runs #371

CI / test (pull_request) Failing after 17s

Details

CI / zara-avatar idle CPU budget (pull_request) Failing after 7m57s

Details

This pull request can be merged automatically.

This branch is out-of-date with the base branch

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin fix/zara-coding-criteria-provenance-v2:fix/zara-coding-criteria-provenance-v2

git switch fix/zara-coding-criteria-provenance-v2

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff fix/zara-coding-criteria-provenance-v2

git switch fix/zara-coding-criteria-provenance-v2

git rebase main

git switch main

git merge --ff-only fix/zara-coding-criteria-provenance-v2

git switch fix/zara-coding-criteria-provenance-v2

git rebase main

git switch main

git merge --no-ff fix/zara-coding-criteria-provenance-v2

git switch main

git merge --squash fix/zara-coding-criteria-provenance-v2