carlos / platform Public

settings-1-pointer-digests

#253: digest-bound channel pointers (instance update settings spec §4.6, plan 1). Paul approved the merge; origin/main (zdd-1, zdd-4, zdd-2 at 218b7454) is merged in.

Pointers gain digest and historydigests inside the signed payload (additive; old binaries verify them). Every writer follows the provenance rule: computed at promotion from the shipped manifest, or copied verbatim; never computed for an inherited entry. A promote or approved rollback onto a history entry is bound to that entry's signed digest. Writers emit digests only while the root-signed marker releases/<acct>/pointer-digests exists (classified for the host-claim boundary). Rollback onto a digest-less entry of a digest channel is refused whether or not the marker is on. Root, the agent and the edge's static reader check the manifest digest before staging or extracting. With a digest, staging uses exactly the checked manifest, and zdd-4's pin-set rule still governs a mismatched staged copy: restaged if unreferenced, refused if referenced. Without a digest, staging is main's path unchanged. Sibling writes keep raw bytes. The static cache is keyed by digest. Per-box ratchets (flat marks under /opt/carlos/pointer-digests and /data/pointer-digests, fail closed) and CARLOSREQUIREPOINTERDIGEST. carlos channels resign (operator-confirmed; through a console it takes the channel's rollback authority) and carlos channels digests; the console lists stragglers and unreadable channels.

Copy approved by Paul on 2026-10-08, all 33 strings unchanged (docs/superpowers/plans/2026-10-07-instance-settings-1-copy.json), pinned by approvedcopydigests_test.go. Astra: REJECT at bb343ec3, one fix wave, ACCEPT WITH FIXES at d04e7634; merge with main ACCEPT at c385f2eb (docs/superpowers/plans/CODEX-FINDINGS-SETTINGS-IMPL-1*.md). One Minor test-coverage residual parked.

Inert until carlos channels digests on. Roll order is in README: writers before readers.

Commits 27
Discussions 0 0 open
Tasks 0/0 done

Discussions

  • No discussions on this branch yet.

Tasks

  • No tasks yet.

Activity