feat: Stage 0/1 soundness — compatibility, origin policy, emit authority - #65

Open

mikeyobrien wants to merge 20 commits into

mainfrom

feat/stage0-soundness-ultra

Commits on Jul 29, 2026

harness: emit authority validation at finishIteration (Slice C)
pi-agent
committed
260c3ea
kanban: enforce WebSocket origin policy on /ws/kanban-pty (Slice B)
pi-agent
committed
ec2236f
docs: add COMPATIBILITY.md, contract tests, CI gates (Slice A)
pi-agent
committed
d9ca14f
test: red registry compatibility contract + fixture regeneration proof
pi-agent
committed
1d674ef
feat(compat): deterministic contract fixture generator + registry contract
pi-agent
committed
1ebe4bf
docs: add Ultra workflow architecture diagram
pi-agent
committed
7d65ea9
docs: fix Ultra diagram source reference
pi-agent
committed
993d205
fix: close Ultra verification gaps
pi-agent
committed
1956861
docs: align compatibility policy with enforced gates
pi-agent
committed
02a8639
fix: make harness authoritative for agent emits
pi-agent
committed
8895a4c
fix: close residual emit and WebSocket origin holes
pi-agent
committed
0c603a4
fix: durable parent emit ledger and aligned origin policy
pi-agent
committed
7474e5a
fix: require explicit trustProxy for forwarded origin scheme
pi-agent
committed
8467a07
fix: keep emit authority ledger outside exported state dir
pi-agent
committed
916e285
fix: overwrite pre-seeded emit authority keys on new runs
pi-agent
committed
4072ead
fix: align HTTP trustProxy scheme with WebSocket TLS precedence
pi-agent
committed
52f108b
fix: make CI whitespace check work on PR checkouts
pi-agent
committed
e9a3749
fix: block forged system routing and pin Tier A surface
pi-agent
committed
e9f217e
fix: parent-stamp harness joins and invalid event telemetry
pi-agent
committed
c151755
fix: parent-stamp wave.join.finish for protected join resume
pi-agent
committed
286fc85

Navigation Menu

feat: Stage 0/1 soundness — compatibility, origin policy, emit authority - #65

feat: Stage 0/1 soundness — compatibility, origin policy, emit authority#65
mikeyobrien wants to merge 20 commits into
mainfrom
feat/stage0-soundness-ultra

Commits on Jul 29, 2026

harness: emit authority validation at finishIteration (Slice C)

kanban: enforce WebSocket origin policy on /ws/kanban-pty (Slice B)

docs: add COMPATIBILITY.md, contract tests, CI gates (Slice A)

test: red registry compatibility contract + fixture regeneration proof

feat(compat): deterministic contract fixture generator + registry contract

docs: add Ultra workflow architecture diagram

docs: fix Ultra diagram source reference

fix: close Ultra verification gaps

docs: align compatibility policy with enforced gates

fix: make harness authoritative for agent emits

fix: close residual emit and WebSocket origin holes

fix: durable parent emit ledger and aligned origin policy

fix: require explicit trustProxy for forwarded origin scheme

fix: keep emit authority ledger outside exported state dir

fix: overwrite pre-seeded emit authority keys on new runs

fix: align HTTP trustProxy scheme with WebSocket TLS precedence

fix: make CI whitespace check work on PR checkouts

fix: block forged system routing and pin Tier A surface

fix: parent-stamp harness joins and invalid event telemetry

fix: parent-stamp wave.join.finish for protected join resume