feat/carloku-signup-factory-binding-20261004
Adds an unmounted factory that captures explicit AWS namespace configuration once, owns an operation-less private adapter, and pairs copied namespace facts with explicit authority/lineage assertions in a private console helper. Existing store constructors, console/member/CLI callers and pricing export remain byte-identical. No schema, real credentials, public operations, raw-client getter, production consumer or billing activation.
The closed profile names 8 partitions/46 concrete regions, empty root prefix, explicit path/virtual addressing, owned SDK options and transport, all redirects refused, and endpoint/signing postconditions. A fixed refusing credential provider prevents the pinned SDK's anonymous fallback. Actual Opus accepted that minimal correction; the original intercepted unsigned-dispatch failure remains preserved. Local request tests are configuration evidence only.
Candidate b58b6610e160e72183871d25373cfcf280829fcb follows source checkpoint26a35228. Actual Opus v2 code review ACCEPT closes three test-evidence blockers from v1 without production-code changes. Focused normal10.245s, race23.008s and vet2.776s passed with exact source hashes. Independent evidence includes five original compiling semantic mutants plus all three reviewer-blocker mutants; AST tests ran against mutated runtime files. One permissive-redirect mutant timeout is preserved separately and excluded from clean assertion kills.
Exact-tip local validation and source/destination Amadan CI passed. Actual Opus composition ACCEPT; feature review211 advanced by fast-forward to b58b6610. Acceptance uses Paul's explicit host exception: same-commit canonical single-process CI plus independently audited complete local ext4/FULL partitions (2012 top entries,685 nested,5 fuzz seeds;8 exit0;585.532s), build/vet/gofmt/launchctx/nonconsole and three cross builds. Tested binary reproduced byte-identically. Original monolithic failures and cancelled incomplete26a gate stay preserved; no timeout/gate/durability change or crash/powerloss claim. Final evidence: /home/paulca/.local/share/carloku-paid-launch-20260930/notes/backend-integration-b58b6610-checkpoint-20261004.json.
Credential-source/principal/refresh binding, capability/freshness, immutable pin/enrolment and restore/lost-OFF contracts remain held before any operation or remote wiring, along with separately scoped provider approval. Commercial exhaustion/storage/USD-GBP decisions remain unanswered. LIVE OFF, e4ea experimental, sidecar rollout held. No main merge or deployment.
Discussions 1 open
Tasks
- No tasks yet.
Activity
- claude agent, operated by paul@keymail.dev pushed b58b6610e Strengthen namespace candidate signer and binding boundary tests
- paul@keymail.dev opened Unmounted AWS namespace factory and signup binding
- claude agent, operated by paul@keymail.dev pushed 26a35228f Add unmounted captured AWS namespace candidate and signup binding
- claude agent, operated by paul@keymail.dev pushed a7ce3b523 Add unmounted canonical signup scope codec
- claude agent, operated by paul@keymail.dev pushed 491428a2e Close registry handles owned by console test fixtures
- claude agent, operated by paul@keymail.dev pushed f71540f0d Test signup completion freshness and account helper callers
- claude agent, operated by paul@keymail.dev pushed 47d5e8c1e Preserve signup birth evidence and immutable consent receipts
- claude agent, operated by paul@keymail.dev pushed eb2291399 fix(console): apply durable SQLite settings on every connection
- claude agent, operated by paul@keymail.dev pushed ed256537a Join listener closure and carry deterministic gate fixtures
- claude agent, operated by paul@keymail.dev pushed 2e489fd1b Preserve lifecycle intent without enabling residency
- claude agent, operated by paul@keymail.dev pushed 0797d9beb Refuse incomplete instance record sets before steering
- claude agent, operated by paul@keymail.dev pushed bbeefbc51 Add snapshot-only admission attempt observation
- claude agent, operated by paul@keymail.dev pushed ed7aa593b Integrate reviewed storage ownership, retry and buffered read bounds
- claude agent, operated by paul@keymail.dev pushed c2cc02e21 Bound each buffered storage read without capping whole sweeps
- claude agent, operated by paul@keymail.dev pushed 8fe67311f Add inert resource budgets with consent-bound reservations and evidence holds
- claude agent, operated by paul@keymail.dev pushed fb0c6dfc2 Bound storage sweeps by midnight and verify conflicting publications
- claude agent, operated by paul@keymail.dev pushed 2a40fed0b Integrate metering and opt-in checkpoints with canonical launch terms
- claude agent, operated by paul@keymail.dev pushed fc99f7fb6 Hold mixed-version invoice months for review and bound legacy catalogs
- claude agent, operated by paul@keymail.dev pushed 78d95cc67 Bind preference state to versioned immutable receipt history
- claude agent, operated by paul@keymail.dev pushed a1177cde8 Make admission association deadline tests deterministic
- claude agent, operated by paul@keymail.dev pushed d504567a1 Pin historical partial invoice fixture to its original terms
- claude agent, operated by paul@keymail.dev pushed 44cdddb85 Persist inert overage preferences with ordered immutable receipts
- claude agent, operated by paul@keymail.dev pushed 7b14d6a5d Reuse reviewed CLI and socket fixture isolation for allowance gate
- claude agent, operated by paul@keymail.dev pushed 5b1d7c02f Version approved pooled awake allowances and preserve historical terms
- claude agent, operated by paul@keymail.dev pushed 1dea9cafa Retry final-hour storage collection and retain failed publications
- claude agent, operated by paul@keymail.dev pushed 988a052e3 Reuse reviewed CLI and socket test isolation for storage gate
- claude agent, operated by paul@keymail.dev pushed b634c4481 Isolate CLI test configuration and record admission recovery checkpoint
- claude agent, operated by paul@keymail.dev pushed 5d52edd19 Publish validated durability holds with fail-closed reader compatibility
- claude agent, operated by paul@keymail.dev pushed 819634465 Recover admission journals while retaining the producer fence
- claude agent, operated by paul@keymail.dev pushed 987f20c29 Associate durability attempts with their admitted requests