amadan
Record verified sealer merge and active Docs implementation
1 file changed,
+4
−0
implementation/overnight-2026-09-07.md+4 −0
No CI script — run details
CI log
amadan: no CI script — add an executable .amadan/ci or a `ci` target to the Makefile
diff --git a/implementation/overnight-2026-09-07.md b/implementation/overnight-2026-09-07.md| index f470f5e..9b1d042 100644 |
| --- a/implementation/overnight-2026-09-07.md |
| +++ b/implementation/overnight-2026-09-07.md |
| @@ -744,3 +744,7 @@ Full review is retained there and posted to suite discussion 5. |
| - Shared purpose-sealer branch feat/shared-purpose-seal16024be adds public handoff/seal with explicit namespace and a Home adapter preserving oficina/home, existing DEK and historical ciphertext. Published nested module967d29f resolves canonically without replace. Full unit/race/actual CI passed; namespace and delimiter mutations each fail fixed historical compatibility checks. Independent configured claude-fable-5 whole-code APPROVE, /tmp/oficina-shared-seal-review/review.ndjson. Home discussion/task22. |
| - Frozen16024be ARM64 artifact /tmp/oficina-shared-seal-release/home-arm64 SHA2560e82efcfb23d014e651f052908050a42caf1cd79f85ca7f9e2668020c15fa34f published to canary/overnight-home. Credential actual body/header verified new; directory still old body/new header after exact-host restart request. Deployment not yet fully verified; no merge or production promotion. Final browser/canary evidence pending. |
| - Shared consumer designc4fe2bc on feat/link-consumer-binding independently APPROVED by configured claude-fable-5, /tmp/oficina-link-consumer-review/design-review.ndjson. RequireFreshAuth stores policy inside authenticated return-path payload, leaving ordinary payload bytes unchanged; old readers refuse fresh prefix. Finish consumes before freshness refusal, compares future time to wall clock and age to persisted high-water fence. BindStart receives only public nonce after pending commit, before cookie/redirect; rejection cancels only own new row, allowing zero rows if concurrently evicted. No schema change. Preserve pre-consumption nonce/subject/path refusal distinction. Implementation delegated to /root/consumer_implementation in isolated overnight-link-consumer worktree; do not modify concurrently. Combine shared sealer into branch before final module publication. |
| + |
| +- Sealer preview16024be now VERIFIED on both canonical hosts, API body and header matching; eight live browser cases pass. Independent canary-evidence Fable APPROVE in /tmp/oficina-shared-seal-review/canary-review.ndjson. Merged Homecc61976, task22 Done. User notified with exact Home preview URL; no new screen and production unchanged. |
| +- Shared consumer implementedf65c989 with full unit/race and four meaningful mutations. Merged approved sealer main into consumer481d2d5, published canonical nested module v0.0.0-20260908102137-481d2d57f489, and pinned Home root at02f9ac06d9d2a103341bacf582d4ad785a64d88f. Combined full make test and exact-head actual CI passed. Immutable ARM64 build /tmp/oficina-link-consumer-release/home-arm64 SHA256c73ea1e922c1478e131d2387ebbfc9d0fd52e9bac03b6abb3b5ed2c7d871d2a6. Whole-code Fable review running under oficina-link-consumer-code-review-20260908.service; no deployment before verdict. Home23 tracks this stage. |
| +- Docs implementation delegated in isolated worktrees from reviewed R0.23 preview8a12672: /root/docs_link_store owns internal/docs/linkstore, additive migrations and sealed bounded proof lifecycle; /root/consumer_implementation now owns typed request identity and method-aware local freshness, replacing direct rauth.From access. Root owns subsequent config/HTTP/UI integration. Both follow approved Docs46 design; neither may deploy or merge independently. Home-only principal migration, roster and team chooser remain separate required work. |