Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
28 commits
Select commit Hold shift + click to select a range
9287467
feat: add cockpit C1 authority boundary baseline
LogicDuke Aug 15, 2026
7575192
fix: harden cockpit operation resolution
LogicDuke Aug 15, 2026
a3576f0
Merge pull request #16 from LogicDuke/repair/c1-a01-map-intrinsic
LogicDuke Aug 15, 2026
96f2f0f
fix: clarify cockpit merge authority guarantees
LogicDuke Aug 15, 2026
ffad93c
fix: clarify merge target freshness boundary
LogicDuke Aug 16, 2026
146734b
Merge pull request #17 from LogicDuke/repair/c1-a02-merge-authority-c…
LogicDuke Aug 16, 2026
14b4fb3
fix: reject inherited repair list elements
LogicDuke Aug 16, 2026
cc14f2b
Merge pull request #19 from LogicDuke/repair/c1-a03-own-list-elements
LogicDuke Aug 16, 2026
52f1a79
fix: reject Git-equivalent repair refs
LogicDuke Aug 16, 2026
c743b65
docs: clarify symbolic ref resolution boundary
LogicDuke Aug 19, 2026
fc49e9a
docs: complete execution boundary ref contract
LogicDuke Aug 19, 2026
afba343
docs: make protected parent role-aware
LogicDuke Aug 20, 2026
c8fde78
Merge pull request #37 from LogicDuke/repair/c1-a04-change-request-ta…
LogicDuke Aug 20, 2026
bf78cf6
docs: bind change requests at provider boundary
LogicDuke Aug 20, 2026
7810d6e
docs: allow identity-preserving provider resolution
LogicDuke Aug 20, 2026
0bef03c
Merge pull request #39 from LogicDuke/repair/c1-provider-resolution-i…
LogicDuke Aug 20, 2026
838d8ed
Merge pull request #38 from LogicDuke/repair/c1-change-request-provid…
LogicDuke Aug 20, 2026
077933d
C1: bind repair.push source to authorized ref
LogicDuke Aug 20, 2026
6812607
C1: distinguish repair.push source role
LogicDuke Aug 20, 2026
1fa4cf6
Merge pull request #41 from LogicDuke/repair/pr040-push-source-role-w…
LogicDuke Aug 20, 2026
6fa3e95
Merge pull request #40 from LogicDuke/repair/c1-push-source-binding
LogicDuke Aug 20, 2026
7444080
Merge pull request #36 from LogicDuke/repair/c1-a04-exec-boundary-con…
LogicDuke Aug 20, 2026
467ccc3
C1-A04 clarify effective repository ref identity
LogicDuke Aug 21, 2026
7a3e53b
Merge pull request #42 from LogicDuke/repair/c1-a04-repository-ref-id…
LogicDuke Aug 21, 2026
a466075
Merge pull request #35 from LogicDuke/repair/c1-a04-symref-claim
LogicDuke Aug 21, 2026
dd1bdd4
Merge pull request #21 from LogicDuke/repair/c1-a04-ref-alias
LogicDuke Aug 21, 2026
f8eb259
fix(c1): snapshot trusted state before hostile reads
LogicDuke Aug 21, 2026
aa0806a
Merge pull request #43 from LogicDuke/repair/c1-snapshot-trusted-befo…
LogicDuke Aug 21, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
834 changes: 834 additions & 0 deletions docs/architecture/C1-repair-job-authority.md

Large diffs are not rendered by default.

437 changes: 437 additions & 0 deletions src/domain/execution-permit.ts

Large diffs are not rendered by default.

57 changes: 57 additions & 0 deletions src/domain/index.ts
Original file line number Diff line number Diff line change
Expand Up @@ -138,6 +138,63 @@ export {
type RejectedClaim,
} from './agent-invocation-report.js';

export {
findInvalidRepairJobFields,
isVerificationCommandClass,
JOB_BOUNDS,
readCanonicalBranchRef,
readRepairJobAuthorization,
readRepositoryRelativePath,
REPAIR_JOB_FIELD_ORDER,
satisfiesIndependentValidator,
VERIFICATION_COMMAND_CLASS,
VERIFICATION_COMMAND_CLASSES,
type RepairJobAuthorization,
type RepairJobField,
type RepairJobReadResult,
type RepairJobSnapshot,
type ValidatorClaim,
type VerificationCommandClass,
} from './repair-job.js';

export {
FORBIDDEN_OPERATION,
FORBIDDEN_OPERATIONS,
isForbiddenJobOperation,
isRepairAuthorizableOperation,
JOB_OPERATION,
PERMIT_OPERAND_ORDER,
readJobOperation,
REPAIR_AUTHORIZABLE_OPERATIONS,
resolveJobOperation,
UNKNOWN_JOB_OPERATION,
type ForbiddenJobOperation,
type JobOperation,
type JobOperationRequest,
type NormalizedJobOperation,
type PermitOperands,
type RepairAuthorizableOperation,
type UnknownJobOperation,
} from './job-operation.js';

export {
operatorMergeAuthorizes,
type ExecutionPermit,
type MergeTarget,
type OperatorMergeAuthorization,
} from './execution-permit.js';

export {
authorizeJobOperation,
JOB_AUTHORIZATION,
JOB_AUTHORIZATION_OUTCOMES,
JOB_AUTHORIZATION_REASON,
permitAuthorizes,
type JobAuthorizationDecision,
type JobAuthorizationOutcome,
type JobAuthorizationReason,
} from './job-authorization.js';

export {
currentEvidenceOfKind,
evaluateEvidenceFreshness,
Expand Down
Loading
Loading