← Branches
moves-phase1-5f
Commits
-
0888aa4e2
host: the src_gen test's comment follows the re-ruling (whole-branch fixes, item 3)
claude agent, operated by paul@keymail.dev
-
75c31df61
host: src_gen only bridges a recovery with no manifest of its own; later admissions follow their lineage (whole-branch fixes, item 3 re-ruled; platform-1e P1)
claude agent, operated by paul@keymail.dev
-
a5347c29f
copy gate: claimstop_run.go is in the moves scan (whole-branch fixes, item 6)
claude agent, operated by paul@keymail.dev
-
54a7421fa
instancectl, host: the held-release route is registered only with both flags on (whole-branch fixes, item 6, Minor)
claude agent, operated by paul@keymail.dev
-
ebeaf9545
host: C8 reads the claim's data bucket through the identity-bound RequestStore (whole-branch fixes, item 5)
claude agent, operated by paul@keymail.dev
-
1f459538c
host: the recovery probe adapter accepts the claim's legacy source generation (whole-branch fixes, item 4)
claude agent, operated by paul@keymail.dev
-
6bc852edd
host: a recovery's files baseline is the recorded source restore, src_gen (whole-branch fixes, item 3)
claude agent, operated by paul@keymail.dev
-
0003187ad
host: the prepared manifest's installation stamp is validated apart from the admitted session's (whole-branch fixes, item 2)
claude agent, operated by paul@keymail.dev
-
aa46cb31f
host: the landing's probe and committed wakes establish through C8 before the start check (whole-branch fixes, item 1)
claude agent, operated by paul@keymail.dev
-
644cae214
Merge origin/main (650e6152) into moves-phase1-5f
claude agent, operated by paul@keymail.dev
-
186150267
docs: rehearsal runbook P-0 names the post-Plan 12 branch, Plan 13's home rollout order and the claim's #250 activation items
claude agent, operated by paul@keymail.dev
-
7196746a6
host: Establish proves and carries only the origins the live manifest references (Task 6b, Plan 15 review P2)
claude agent, operated by paul@keymail.dev
-
d88b05f27
host: the request-store cancellation regression waits on a signal, bounded (Task 8 round 2)
claude agent, operated by paul@keymail.dev
-
3e54e630d
host: pin the moves owners' refusal of a second C8 provider (Task 8 fix round 1, item 3)
claude agent, operated by paul@keymail.dev
-
0a4e72bd4
host: a moves source that does not open logs its cause once per agent start (Task 8 fix round 1, item 2)
claude agent, operated by paul@keymail.dev
-
e462f9311
host: the moves owners read the claim's bucket through hostbox.RequestStore (Task 8 fix round 1, item 1)
claude agent, operated by paul@keymail.dev
-
7afef7244
host: the integrated acceptance tests through the registered moves owners (Plan 5 Task 9b; Q12)
claude agent, operated by paul@keymail.dev
-
02cb71015
host: register the moves wake source right after the parks, which opens the gate (Plan 5 Task 9b; Q1, Q15)
claude agent, operated by paul@keymail.dev
-
6bb9d4171
host: movesOriginProof is the only route to origin proof, bound to the observation (Task 6 fix round 4)
claude agent, operated by paul@keymail.dev
-
1b35a7ab6
host: a prepared replay's env object is read and verified, corrupt-object case (Task 6 fix round 3, platform-1e's ruling B)
claude agent, operated by paul@keymail.dev
-
c707325e0
host: origins are proven against the claim's recorded admissions, never by the manifest (Task 6 fix round 3, platform-1e's ruling A)
claude agent, operated by paul@keymail.dev
-
404f81fab
host: a prepared replay must be exactly what this establishment writes, derived from the baseline (Task 6 fix round 3, finding 6)
claude agent, operated by paul@keymail.dev
-
31b591965
provision: B8 census digest for Prepared.Commit's seeded origin set (Task 6 fix round 2)
claude agent, operated by paul@keymail.dev
-
fb863ab1a
hostfiles, host: the admitted origin set travels in the manifest (Task 6 fix round 2, finding 3, platform-1e's ruling)
claude agent, operated by paul@keymail.dev
-
be12bb600
host: a prepared replay is accepted only as this box's establishment in full (Task 6 fix round 2, finding 6, platform-1e P2)
claude agent, operated by paul@keymail.dev
-
e74fa48f5
host: the probe's publisher is built from the bytes it checked and their token (Task 6 fix round 2, finding 2)
claude agent, operated by paul@keymail.dev
-
afdc32124
copy gate: movesfiles.go is in the moves scan (Task 6 fix round 1)
claude agent, operated by paul@keymail.dev
-
3ba411dcf
provision: B8 census rows for the fix round's stores (Task 6 fix round 1)
claude agent, operated by paul@keymail.dev
-
8ecd45150
host: Establish publishes outside the start's work, fenced per write and bounded (Task 6 fix round 1, finding 7, platform-1e P2)
claude agent, operated by paul@keymail.dev
-
342f84d74
host: a manifest's origins are held to the location, not the pruned admission chain (Task 6 fix round 1, finding 6, platform-1e P2)
claude agent, operated by paul@keymail.dev
-
fc79061a8
host: the prepared build checks a file's size before reading it and bounds every read (Task 6 fix round 1, finding 5)
claude agent, operated by paul@keymail.dev
-
752778249
host: the prepared build refuses missing inputs instead of an empty image (Task 6 fix round 1, finding 4)
claude agent, operated by paul@keymail.dev
-
b9ca273fb
host: local validates the journalled prepared-manifest binding before skipping the build (Task 6 fix round 1, finding 3)
claude agent, operated by paul@keymail.dev
-
ab629d83a
host: the prepared manifest's exact version is journalled and the probe's establishment takes exactly it (Task 6 fix round 1, finding 2)
claude agent, operated by paul@keymail.dev
-
c92dfb1f4
host: the prepared build re-checks the install's authority before every bucket write (Task 6 fix round 1, finding 1)
claude agent, operated by paul@keymail.dev
-
fc0786881
provision: B8 census rows for the prepared manifest's create-only writers (Task 6)
claude agent, operated by paul@keymail.dev
-
1e8e671e2
host: local builds the prepared files manifest; a journalled skip is replayed (Task 6, C8)
claude agent, operated by paul@keymail.dev
-
43f8b6e8b
host: register the C8 files manifest provider under the claim alone (Task 6, platform-1e ruling)
claude agent, operated by paul@keymail.dev
-
5f3eaaef6
host: the C8 files-manifest provider, BuildPrepared and Establish (Task 6)
claude agent, operated by paul@keymail.dev
-
f8504dcbc
hostfiles: the create-only prepared manifest, a copy-seeded publisher, and the shared never-published-files rule (Task 6, C8)
claude agent, operated by paul@keymail.dev
-
5d06e596b
host: root serves one held-release request per host and three in all (Task 7b fix round 2, P3-4)
claude agent, operated by paul@keymail.dev
-
09ac47ba2
host: root logs a held-release request's fields only after validation, quoted (Task 7b fix round 2, P3-2)
claude agent, operated by paul@keymail.dev
-
50e4d94be
host: root's publish receipt binds the action, kind and phase (Task 7b fix round 2, P3-1)
claude agent, operated by paul@keymail.dev
-
a8c99b22b
host: root refuses publication at a revert's probe and a clean return's probe (Task 7b fix round 2, P2-1)
claude agent, operated by paul@keymail.dev
-
21579854f
moves: pin the fail-closed clean-return and revert probes (Task 7b fix round 1, item 2)
claude agent, operated by paul@keymail.dev
-
1676eb691
host: root never answers published without a persisted receipt (Task 7b fix round 1, item 1)
claude agent, operated by paul@keymail.dev
-
0821fa93b
moves: the agent asks root to stage T7's release and to publish the held row's (Task 7b)
claude agent, operated by paul@keymail.dev
-
ed97cbc73
host: root's held release under the claim, over the root control socket (moves Task 7b, platform-1e reviews the publish path)
claude agent, operated by paul@keymail.dev
-
cf0b6de5e
instancectl: route POST /claim/held-release to the claim handler (moves Task 7b)
claude agent, operated by paul@keymail.dev
-
27b83074c
moves: JournalFile and DecodeJournal, so root can judge a journal it read through an anchored open (Task 7b)
claude agent, operated by paul@keymail.dev
-
f8997c3c0
moves: end-to-end loss admissions through the real writer (Task 4 loss-boundary rule, platform-1e item 4)
claude agent, operated by paul@keymail.dev
-
92079fae3
moves: each lost tuple's boundary is its own generation's maximum in the restore, 0 when the restore omits it (Task 4 loss-boundary rule, platform-1e item 3)
claude agent, operated by paul@keymail.dev
-
90a587331
genselect: GenerationMax reads the restore plan, not the bucket; the restore point and frozenMaximum switch to it (Task 4 loss-boundary rule, platform-1e items 1 and 2)
claude agent, operated by paul@keymail.dev
-
0bcfb5a66
spec: T7 under host claims stages without publishing; configured publishes (amendment, 2026-10-12)
claude agent, operated by paul@keymail.dev
-
11ed3bb5d
moves: held writes under the claim, and G16 lifts with the wake-source gate (Task 7, Q2)
claude agent, operated by paul@keymail.dev
-
5a4661126
release: VerifyHeldLive reads under the claim too (moves Task 7, Q2.1)
claude agent, operated by paul@keymail.dev
-
b3d423390
release: StageHeldVerified, T7's stage under the claim without the publication (moves Task 7, Q2.1)
claude agent, operated by paul@keymail.dev
-
0141cae0b
appconfig: RenderHeldUnderBefore, the held render under the claim with carry (c) (moves Task 7, Q2.2)
claude agent, operated by paul@keymail.dev
-
6f1f0d36b
moves: the console logs a fence step from the grant's own evidence (Task 5 fix round 1, item 2)
claude agent, operated by paul@keymail.dev
-
2be0b79ee
moves: the dirty fenced-target page rests on the grant's verified-dirty outcome (Task 5 fix round 1, item 1)
claude agent, operated by paul@keymail.dev
-
1a42b8708
moves: the console pass takes the target's fence one step a pass (Task 5, Q8)
claude agent, operated by paul@keymail.dev
-
f7f3d8e50
moves: the lost-box gate names this box's region through park.PlacementMatches (Task 4 fix round 1, item 4)
claude agent, operated by paul@keymail.dev
-
79e817dd7
moves: the lost-box gate covers the whole pass, an unreadable claim included (Task 4 fix round 1, item 3)
claude agent, operated by paul@keymail.dev
-
c339c8c78
genselect: GenerationMax honours the selection's authorized pin (Task 4 fix round 1, item 2)
claude agent, operated by paul@keymail.dev
-
961443200
moves: a loss admission that would declare a target generation this box cannot read is refused (Task 4 fix round 1, item 1, interim)
claude agent, operated by paul@keymail.dev
-
71b0bb5e9
moves: the lost-box gate: a box the host's claim lists in Lost runs no move step (Task 4: Q9, Plan 4 Task 10)
claude agent, operated by paul@keymail.dev
-
04b5aa7b4
moves: a declared or fenced return asks no coverage, and its loss admission is vouched for from the recorded maxima (Task 4: Q5, Q6, Q7's loss half)
claude agent, operated by paul@keymail.dev
-
bb93758aa
hostbox: a loss admission's restore point is the generation's maximum in the writer's own bucket (moves Task 4)
claude agent, operated by paul@keymail.dev
-
60c4700aa
genselect: GenerationMax, the one rule for a generation's maximum in a box's own bucket (moves Task 4)
claude agent, operated by paul@keymail.dev
-
e22f493ca
Merge remote-tracking branch 'origin/main' into moves-phase1-5f
claude agent, operated by paul@keymail.dev
-
c51bdc746
moves: the recovery's generation lineage rests on the claim's admission invariant (Task 3 fix 4)
claude agent, operated by paul@keymail.dev
-
e0f4d1f71
moves: the recovery's own writes are authoritative after its first start (Task 3 fix 3)
claude agent, operated by paul@keymail.dev
-
60278d6b8
moves: a legacy source's clean return restores its origin (Task 3 fix 2, legacy regression)
claude agent, operated by paul@keymail.dev
-
9c3e2bf19
moves: a clean return's source pin is journalled before the restore (Task 3 fix 2, item 4)
claude agent, operated by paul@keymail.dev
-
31d5b5c68
moves: the recovery relabel is vouched for by the journalled placement digest (Task 3 fix 2, item 3)
claude agent, operated by paul@keymail.dev
-
105d95cf6
moves: a clean return restarts from src_gen until its first root (Task 3 fix 1, ruling 4)
claude agent, operated by paul@keymail.dev
-
b23cd3c3a
moves: the recovery relabels .files-gen only on content evidence (Task 3 fix 1, ruling 3)
claude agent, operated by paul@keymail.dev
-
e68d4ba82
moves: the copy scan reads movesrecoveryowners.go
claude agent, operated by paul@keymail.dev
-
2c1f5e149
moves: the recovery wake owners, dispatched by kind (Plan 4 Task 9, Q7)
claude agent, operated by paul@keymail.dev
-
800205565
moves: M11, a revert's render, release and spawn bind its recorded inputs (Q11)
claude agent, operated by paul@keymail.dev
-
76eb992ba
Merge origin/main (claim Plan 13 a0806e4c, held-lock fix dde859f3) into moves-phase1-5f
claude agent, operated by paul@keymail.dev
-
229c35135
moves: the Task 5 retirement refusals, re-scoped (Q4)
claude agent, operated by paul@keymail.dev
-
797ed61ab
moves: the "claim Plan 12" text names the gate that still applies (Q18)
claude agent, operated by paul@keymail.dev
-
7bb82b6f5
moves tests: the park fakes use claim Plan 12's real RunHeld and lease set (M5, M6, Q10)
claude agent, operated by paul@keymail.dev
-
ca2732660
moves: park.Local always asks the claim's local authorizer (M9, Q10)
claude agent, operated by paul@keymail.dev
-
d98a3457b
moves: one gate, movesWakeSourceRegistered, replaces the claim Plan 12 guard (Q1)
claude agent, operated by paul@keymail.dev
amadan