Exact CI passed at2214be15c9768dc3ba57dbcd33861c7e388a4909: vet, format, build, ordinary tests and race tests. Receipt /home/paulca/.cache/oficina-home-compatibility-audit/ci.json. Task46 is Done only for bounded complete design/evidence packaging. Candidate and independent review prompt are saved in that directory. No implementation, independent approval, merge or deployment is claimed. The next required review remains unavailable under Fable's known quota; no replacement reviewer is authorized by the pending question.
Complete Home non-serving compatibility checker design open
On branch design-home-compatibility-checker
Frozen proposal on design-home-compatibility-checker at2214be1, based on Home7e282e2. Includes source-bound audit (29 checked source hashes), complete configuration/DB/key acceptance contract, and reproducible test-only overlay showing current mode=rw connector with query_only changes main/WAL/SHM during a read/close. Probe source is stored as .go.txt so it is not a runtime/test package in implementation/.
The full checker remains unimplemented. New manifest canonicalization, typed operator key configuration, trusted expectations, exact schema profiles, readonly actual-descriptor connection and protected launch/output contracts require independent review. Current Runtime.Schema omits required operator schema sets, which need a separately reviewed additive deployment. No helper is represented as the complete checker; no live deployment or activation.
Task46 covers this bounded design work. Exact CI is being observed. Fable remains unavailable until the known quota reset; no review verdict is claimed. Copy review was waived by Paul for this round; code/design review was not waived.
Design review branch design-home-compatibility-checker exact2214be15c9768dc3ba57dbcd33861c7e388a4909: Fable REQUEST CHANGES, actual claude-fable-5-1, session5a362663-1e97-49c5-8199-753d93684ec6, exit0/endturn, success/non-error. Four blockers: clean WAL-mode DB without sidecars cannot open under proposed no-create/noimmutable rules; readonly SHM behavior needs explicit OS/refusal proof; directory DEK scan omits handoff sealedpath/sealed_token; post-close unchanged proof needs explicit hashing and size bound. Remaining key/manifest/schema/freshness semantics accepted subject to corrections; platform/readonly connector/operator configuration/enrollment/schema-deployment dependencies remain. Full final verdict and receipt /home/paulca/.cache/oficina-home-checker-fable-2214be1/{verdict.txt,receipt.json}. No source edits or authority inferred; root coordinates opener protocol before revision. This is design review only, not Home7e code or deployment approval.
Amended proposal frozen6d6d9e2ba3f203f9304e0c3b35b42d46f506da44 on separate design-checker-closed-handoff, preserving2214. Proposes verified closed checkpoint under retained Held and old writer/replica death; exact absent WAL/SHM/journal; checker-only requested mode=ro&immutable=1 exception; actual readonly main descriptor and bounded before/after SHA256; predecessor executor takeover refusal; missing handoff ciphertext purposes included. No runtime authority inferred. Full make test including race PASS. Fable subscription rereview running same handle1726; evidence /home/paulca/.cache/oficina-home-checker-r2. No runtime/merge/deploy changes.
R2 design6d6d9e2 Fable REQUEST CHANGES (actual5.1, session8d564824, exit0/end_turn) resolved all four earlier blockers; new blocker was replication-owned schema. R3 frozenf0eff21224625d6ca9a271de369d752639c68ce7 on design-checker-closed-handoff admits only exact pinned Litestream0.5.14 seq/lock DDL with bounded rows and includes readonly fd-delta/temp-memory/key-label/purpose-origin/integrity-order/provenance clarifications. Full gate running; subscription Fable rereview handle55272 active, /home/paulca/.cache/oficina-home-checker-r3. No runtime changes or authority inferred. R2 final preserved at /home/paulca/.cache/oficina-home-checker-r2/verdict.txt.
R4 checker design89e8d3ae64af7e43f594af4f8750d6b93bea4048 APPROVED by actual Claude Fable5.1, session951f66f1-39cf-4c47-8877-6a1262706bf4, exit0/end_turn/nonerror. All blockers resolved; approval design contract only. Full local make test/race PASS, exactCI running. Full final /home/paulca/.cache/oficina-home-checker-r4/verdict.txt and receipt.json. Nonblocking implementation obligations archived separately, including prep pin lifetime, TRUNCATE0/0/0, launch executable/fd baseline, protocol confirmation and authorized idempotence. Additional race probe now proves SECOND retainedHeld.Checkpoint+restore after immutable read,50rows/noRelease; post-checkpoint-receipt.json. Frozen source unchanged. Conditional Amadan design merge only after exactCIgreen; no runtime/deploy authority inferred.
Approved checker design89e8d3 exact branch CI PASS, merged via Amadan with expected SHA into main6bf094416deebb3f29cbe21f820e2eae10091ab3. Verified remote main; merge adds only9 implementation/compatibility-checker design/probe/evidence files, no runtime changes. MainCI running exact6bf0944. FinalFable scope remains design only; integration obligations preserved separately in /home/paulca/.cache/oficina-home-checker-r4/integration-obligations.json, and extra second-checkpoint/restore race proof is recorded. No deployment or activation.
Final integration verification: Home main 6bf094416deebb3f29cbe21f820e2eae10091ab3 CI passed all vet, fmt, build, tests and race stages. Exact terminal receipt: /home/paulca/.cache/oficina-home-checker-r4/main-ci.json. This completes the approved checker design merge from reviewed 89e8d3ae64af7e43f594af4f8750d6b93bea4048. Fable actual claude-fable-5-1 APPROVE remains design-only; no checker runtime implementation or deployment is claimed. Frozen source and all review/probe/gate receipts retained.
Implementation started on explicit isolated branch feat/checker-component from approved main6bf0944. Scope: real readonly connector and schema/encrypted-state inspection, unmounted. Launch and enrollment proofs remain required injected boundaries with no production provider; no command/runtime/deployment changes. Full gates and independent Fable code review required before merge.
Platform checker launch supplement776221e on carlos/platform branch design-checker-launch is under Fable review. It requires checked fd3/fd4/self-exe closure before Home baseline, exact private expected-state/input/environment binding, fresh closed-main length/hash and same retained worker lease/executor. Consumer confirmed role/origin can be bound through independently enrolled expected-state bytes and pinned config without duplicate platform fields. v1 mutable operator mode=rw remains unchanged; no production verifier or command mount supplied. Source: platform implementation/maintenance-checker-launch.md and .schema.json.
Platform checker context supplement776221e received explicit Fable5.1 APPROVE, no blockers; native gate passed and exact branch CI pending. Fixed v2 checker context includes private expected-state digest, closed-main facts and explicit fd3/fd4/self-exe checked closure before Home baseline. Same actual Held/executor proof remains required; no fabricated portable lease ID. Platform branch remains unmerged pending integration decision. Exact receipt /home/paulca/.cache/oficina-platform-review-20260909/checker-launch/final.txt.
Branch feat/checker-component candidate79ab4a9 review attempt had NO VERDICT: actual claude-fable-5-1 sessiond6107b6c-bf9b-4225-91de-9debe72eada4, exit1/iserror=true/stopsequence; session limit resets2026-09-09 09:50 Europe/Dublin. No retry before reset or substitute. Source/review receipts at /home/paulca/.cache/oficina-checker-component/review1. Focused native subprocess tests and three removal mutations pass; full race gate exposed an intermittent valid-case refusal, original failure preserved and independent diagnosis ongoing. No approval, merge or deployment.
Approved platform checker context776221e merged in main d492f6288a9286ea3f56caa557a722b6b5391f05; cumulative main CI passed. Context/schema now available for separately reviewed Home startup adapter integration. Exact receipt /home/paulca/.cache/oficina-platform-review-20260909/checker-launch/main-ci.json. No production verifier, readonly namespace or worker implementation is supplied by this design merge.
Bounded implementation branch feat/checker-component now has dedicated discussion46. Final533e3ce full local and exact remoteCI PASS; four removal mutations killed. Prepared Fable rereview packet /home/paulca/.cache/oficina-checker-component/review2; no verdict before session reset09:50 Dublin. Original unexplained79ab local readonly-valid refusal remains preserved/disclosed; no safety relaxation. No merge, command mount, enrollment/launch authority, empty-baseline support or deployment.
Bounded checker component533 now has two explicit actualFable5.1 APPROVE verdicts, source plus complete diff/evidence review; terminal exit0/non-error/end_turn recorded in implementation discussion46. ExactCI rechecked success. Approval is only for unmounted initialized-state component. Followups: Home task50 HARD GATE classify original79ab transient before mounting; task51 coverage and retained-data throughput findings. Hypothesized timeout is not classification. Merge currently held for ARM64fix main and frozen preview release archive; no checker activation/deployment.
Reviewed bounded checker component533 merged as main60faf058b00d695481124e54c5a005e90281a2a2 after explicit preview archive hold release. Cumulative mainCI and both ARM64 command builds PASS; existing OAuth and ARM64fix preserved. Full record discussion46. This completes only unmounted initialized-state component; original transient hardgate task50 and followup task51 remain open before mounting/deployment.