fix(audio): establish canonical local-audio resource policy - #866

Draft

seonghobae wants to merge 348 commits into

fix/audio-resource-policy-781

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 2, 2026

test(audio): follow the owned decode-port preflight seam
seonghobae
committed
3a76907

Commits on Sep 3, 2026

fix(audio): document decode-port regressions
seonghobae
committed
c5cc94f
Merge protected develop into Resource Admission owner
seonghobae
committed
609de8d

Commits on Sep 5, 2026

test(audio): bind native intake diagnostics to resource owner
seonghobae
committed
9852265
merge: adopt protected develop in resource admission lane
seonghobae
committed
dbeee9c
test(audio): reject growth while materializing admitted source
seonghobae
committed
804a286
fix(audio): bound admitted source materialization
seonghobae
committed
0beee45
fix(audio): materialize selected source into project storage
seonghobae
committed
a2b1bd9
docs(audio): trace app-owned source materialization
seonghobae
committed
0ee15f0
fix(audio): export bounded source materialization port
seonghobae
committed
323a7fa
docs(audio): record native port export repair
seonghobae
committed
dcb3b25
test(audio): expose bounded-copy destination error
seonghobae
committed
131d6d7
fix(audio): distinguish bounded-copy destination failure
seonghobae
committed
ac4adfd
docs(audio): record bounded-copy diagnostics repair
seonghobae
committed
e2257d9
test(audio): require native content identity receipt
seonghobae
committed
dc41379
fix(audio): emit streaming content identity receipt
seonghobae
committed
566cd1f
docs(audio): trace native content identity receipt
seonghobae
committed
f955661
test(core): require reusable SHA-256 reader boundary
seonghobae
committed
373824c
fix(core): expose reusable SHA-256 reader boundary
seonghobae
committed
d1ba406
docs(core): record reusable SHA-256 consolidation port
seonghobae
committed
8a4f50c
test(audio): require publication-bound source identity
seonghobae
committed
fdfdd70
fix(audio): verify published source identity
seonghobae
committed
a1c85cb
fix(audio): expose publication receipt verifier
seonghobae
committed
20e7faa
docs(audio): trace publication receipt verification
seonghobae
committed
505d214
test(audio): bound publication verification to receipt size
seonghobae
committed
6a0692e
fix(audio): stop publication verification at expected bytes
seonghobae
committed
c65a9fd
docs(audio): bound publication verification read evidence
seonghobae
committed
92f436a
test(audio): reject invalid publication receipt lengths
seonghobae
committed
dedaab7

Commits on Sep 6, 2026

test(audio): require publication-bound materializer receipt
seonghobae
committed
ed9fe7e
fix(audio): bind published source to native receipt
seonghobae
committed
bdf8f87
docs(audio): align publication identity traceability
seonghobae
committed
539bd57
test(audio): align native oversize policy expectation
seonghobae
committed
51734ce
test(audio): keep zero-byte guard on decode port
seonghobae
committed
dd78dee
test(audio): patch canonical decode boundary
seonghobae
committed
6ef0096
test(audio): preserve unrelated separation test wording
seonghobae
committed
e5726df
docs(security): align local-audio publication authority
seonghobae
committed
46ca91a
test(audio): require no-clobber source publication
seonghobae
committed
45b1f72
fix(audio): publish local source without clobber race
seonghobae
committed
eb972e9
docs(audio): record no-clobber publication decision
seonghobae
committed
55b0da5
test(audio): require path-free publication identity handoff
seonghobae
committed
bad908c
fix(audio): expose path-free publication identity
seonghobae
committed
87bdeea
fix(audio): export publication identity handoff
seonghobae
committed
344a9a3
docs(audio): record path-free publication identity boundary
seonghobae
committed
681675d
test(audio): require native publication identity retention
seonghobae
committed
645457e
test(audio): keep Tauri retention as next production slice
seonghobae
committed
f89996b
test(audio): require native retention of publication identity
seonghobae
committed
cbfa967
test(audio): keep native-retention RED off canonical head
seonghobae
committed
d8c57ce
test(audio): require native retention of publication identity
seonghobae
committed
106ae75
fix(audio): retain verified publication identity natively
seonghobae
committed
e4e2ba7
docs(audio): record native publication identity retention
seonghobae
committed
9a13d2b
fix(ci): format audio decode regressions
seonghobae
committed
06092be
fix(ci): format audio metadata regression
seonghobae
committed
839f5a0
chore(test): normalize decode docstring wrap
seonghobae
committed
841e1c9

Commits on Sep 7, 2026

test(audio): require durable publication commit
seonghobae
committed
ebc5055
fix(audio): add platform publication durability barrier
seonghobae
committed
d794555
test(audio): compile publication durability tests
seonghobae
committed
4e2bccc
fix(audio): durably commit local source publication
seonghobae
committed
94086ed
docs(audio): record crash-durable source publication
seonghobae
committed
e3f6151
docs(audio): doctor publication durability boundary
seonghobae
committed
00f720c
test(audio): preserve existing publication on commit failure
seonghobae
committed
60816b1
fix(audio): preserve existing source on publication collision
seonghobae
committed
6011294
test(audio): bind decoded memory ceiling to canonical float32
seonghobae
committed
53747bd
fix(audio): cap canonical decoded buffer at float32 footprint
seonghobae
committed
379d4a1
docs(audio): doctor resource policy v2 memory contract
seonghobae
committed
6b16e3c
test(audio): require canonical float32 decoded PCM
seonghobae
committed
e96b6f0
fix(audio): enforce canonical float32 decoded PCM
seonghobae
committed
b24a6ff
docs(audio): record canonical PCM dtype policy
seonghobae
committed
3ee3f64
docs(audio): doctor canonical float32 admission
seonghobae
committed
623294d
style(audio): restore transcription EOF formatting
seonghobae
committed
6a329fe
style(audio): restore temporal EOF formatting
seonghobae
committed
44a9087
style(audio): restore separator EOF formatting
seonghobae
committed
31a7b79
test(audio): align resource policy version regression
seonghobae
committed
8adcec8
test(audio): bind metadata errors to policy version
seonghobae
committed
f294100
test(runtime): require native analysis cancellation
seonghobae
committed
370a3d5
fix(runtime): add typed analysis cancellation error
seonghobae
committed
0238c67
fix(runtime): expose cancelled job error contract
seonghobae
committed
7aa8055
fix(runtime): cancel active analysis children
seonghobae
committed
4b85582
docs(runtime): record native cancellation boundary
seonghobae
committed
c4e2f30
docs(runtime): record analysis cancellation behavior
seonghobae
committed
0a54d60
test(runtime): bind cancellation error wire value
seonghobae
committed
12cc6bd
fix(runtime): declare cancellation command permission
seonghobae
committed
36c5605
fix(runtime): grant analysis cancellation capability
seonghobae
committed
a90a7ea
fix(runtime): add generated cancellation permission contract
seonghobae
committed
b746f60
test(runtime): bind cancellation command capability
seonghobae
committed
9e5d1d5
docs(audio): bind cancellation to Tauri runtime authority
seonghobae
committed
2dac5b6
docs(security): bind analysis cancellation IPC authority
seonghobae
committed
2f254ac
docs(architecture): record Tauri command authority boundary
seonghobae
committed
1756759
test(tauri): require cancellation permission in generated schemas
seonghobae
committed
d3f6b53
fix(tauri): refresh generated cancellation capability snapshot
seonghobae
committed
a4c1d71
fix(tauri): regenerate cancellation permission schema
seonghobae
committed
ae4d4d3
fix(tauri): restore complete generated desktop schema
seonghobae
committed
3bfe659
test(tauri): fail on tracked generated schema drift
seonghobae
committed
a9a7e27
fix(tauri): avoid build-mutated schema worktree assertion
seonghobae
committed
ea97fc0
docs(architecture): align resource admission and cancellation truth
seonghobae
committed
5e0180e
docs(architecture): sync local-first resource boundary
seonghobae
committed
2d21b6e
docs(doctoring): trace process-tree containment constraints
seonghobae
committed
1161252
test(audio): enforce encoded size at decode boundary
seonghobae
committed
6b416c0
fix(audio): enforce encoded bytes in decode port
seonghobae
committed
6afb2d8
test(audio): reject non-mono decoder output before normalization
seonghobae
committed
959891e
fix(audio): fail closed on non-mono decoder shapes
seonghobae
committed
65c9b6a
style(audio): restore canonical Python file terminator
seonghobae
committed
ec6c41e
test(audio): require renderer cancellation bridge
seonghobae
committed
b34be05
fix(audio): expose cancellation through renderer bridge
seonghobae
committed
aa07f08
test(audio): cover cancellation bridge races
seonghobae
committed
4fed274
test(audio): expose terminal cancellation race
seonghobae
committed
d3a50f2
test(audio): pin cancellation acceptance lock
seonghobae
committed
7991631
fix(audio): serialize terminal cancellation
seonghobae
committed
2fba61c
docs(audio): record cancellation ordering invariant
seonghobae
committed
fced227
test(audio): expose queued cancellation cleanup race
seonghobae
committed
23445c1
fix(audio): serialize queued cancellation cleanup
seonghobae
committed
4956aac
fix(score): restore project score root call
seonghobae
committed
c8a4869
docs: establish product technical gap baseline
seonghobae
committed
f402f54
test(tauri): gate cancellation on runtime authority
seonghobae
committed
3dd62bb
test(tauri): match generic cancellation finalizer
seonghobae
committed
aa1c938
test(tauri): parse generated cancellation schemas
seonghobae
committed
db1a18f
test(tauri): validate cancellation schema structure
seonghobae
committed
a8bd64a
style(tauri): format schema contract helper
seonghobae
committed
8f0d89e
test(audio): reject post-admission decode growth
seonghobae
committed
b0384cb
fix(audio): bound decoder reads to admitted bytes
seonghobae
committed
c0b9c2f
test(audio): cover bounded readinto EOF semantics
seonghobae
committed
f995307
test(audio): cover bounded seek branches
seonghobae
committed
7152b92
docs(audio): doctor bounded decode authority
seonghobae
committed
7413f92
test(audio): reject invalid publication identity JSON
seonghobae
committed
a7282aa
fix(audio): validate publication identity deserialization
seonghobae
committed
43b889e
docs(product): refresh audio admission gap baseline
seonghobae
committed
1789da7
test(audio): expose pre-normalization decoder budget gap
seonghobae
committed
593d44e
fix(audio): reject over-budget decoder buffers before normalization
seonghobae
committed
f606236
docs(product): record decoder pre-normalization resource guard
seonghobae
committed
2299b21
docs(audio): distinguish decoder allocation from canonical artifact budget
seonghobae
committed
c040eed
docs(changelog): clarify decoder allocation admission
seonghobae
committed
24465db
test(audio): cap finiteness validation temporary memory
seonghobae
committed
dcfa90b
fix(audio): bound finiteness scan temporary memory
seonghobae
committed
a98165a
docs(audio): record bounded finiteness validation memory
seonghobae
committed
bfeefe8
docs(audio): trace bounded finiteness scan memory
seonghobae
committed
f7f5be0
docs(audio): record bounded finiteness scan fix
seonghobae
committed
6c559ca
test(audio): assert finiteness rejection provenance
seonghobae
committed
9b5d1e9
test(audio): freeze decoder dtype and resampler contract
seonghobae
committed
8a4d6f0
fix(audio): pin canonical decode dtype and resampler
seonghobae
committed
2d98bfb
test(audio): align decode-port contract with pinned resampler
seonghobae
committed
bcb533f
fix(audio): satisfy reproducibility regression lint
seonghobae
committed
3761c75
fix(audio): apply pinned Ruff formatter output
seonghobae
committed
e24d7ce
docs(audio): pin canonical decoder reproducibility evidence
seonghobae
committed
5e303e0
docs(changelog): record canonical decoder pin
seonghobae
committed
815841d
docs(audio): narrow decoder reproducibility claim
seonghobae
committed
c60fb7c
docs(changelog): narrow decoder reproducibility claim
seonghobae
committed
fb000fb
test(audio): reject decoder views retaining oversized backing memory
seonghobae
committed
da43fea
fix(audio): reject decoder views with hidden backing memory
seonghobae
committed
e2d39f9
docs(audio): record hidden decoder backing-memory admission gap
seonghobae
committed
f80b962
test(audio): require owned PCM for decoder views
seonghobae
committed
ab94470
fix(audio): detach decoder views into owned PCM
seonghobae
committed
1a35277
docs(audio): distinguish retained artifact memory from decoder peak RSS
seonghobae
committed
44fbdcf
docs(audio): record owned canonicalization of decoder views
seonghobae
committed
eab2c68
docs(audio): doctor decoder view ownership boundary
seonghobae
committed
8fc4da8
test(audio): reject malformed decoder dtypes
seonghobae
committed
574e86d
fix(audio): fail closed on malformed decoder dtypes
seonghobae
committed
8f7e1a5
docs(audio): record decoder dtype admission boundary
seonghobae
committed
45b1727
test(audio): prove dtype rejection precedes PCM allocation
seonghobae
committed
bc8aa65
test(audio): reject canonicalization budget expansion
seonghobae
committed
25ff54f
fix(audio): budget canonical PCM before allocation
seonghobae
committed
2216a1d
docs(audio): record canonicalization budget boundary
seonghobae
committed
43ce16f
test(audio): resolve duplicate resource-policy import
seonghobae
committed
0510b57
test(audio): pin allocation rejection provenance
seonghobae
committed
0467043
test(audio): reject canonical allocation exhaustion
seonghobae
committed
4861e78
fix(audio): normalize canonical allocation exhaustion
seonghobae
committed
c19f60b
docs(audio): record allocator-failure claim boundary
seonghobae
committed
664efd0
docs(audio): record canonical allocation exhaustion
seonghobae
committed
ba53156
test(audio): distinguish pre-canonical allocation failure
seonghobae
committed
fb94f21
fix(audio): scope allocator budget mapping to canonical copy
seonghobae
committed
cacc982
docs(audio): distinguish canonical allocation exhaustion
seonghobae
committed
69adec3
test(audio): pin allocator exception provenance
seonghobae
committed
95d9cc7
test(audio): reject empty YouTube artifact with correct reason
seonghobae
committed
cd3e0d5
fix(audio): preserve YouTube admission failure reason
seonghobae
committed
f925e23
fix(audio): lease YouTube artifact ownership per video
seonghobae
committed
eed3f8e
test(audio): create malformed YouTube output under active lease
seonghobae
committed
d04d1c1
test(audio): isolate same-ID YouTube cache ownership
seonghobae
committed
ef95475
fix(audio): bind YouTube cleanup to leased video identity
seonghobae
committed
ab7a4c1
test(audio): reject noncanonical YouTube completed filename
seonghobae
committed
8facfa0
fix(audio): require canonical YouTube completed artifact name
seonghobae
committed
c4c2c9e
docs(audio): bind YouTube completion to canonical filename
seonghobae
committed
ef5b223
test(audio): preserve nontransient same-ID cache files
seonghobae
committed
f23ba9f
test(audio): bound transient sibling sweep
seonghobae
committed
3dc1bb4
fix(audio): restrict YouTube abort cleanup authority
seonghobae
committed
b82bfdf
test(audio): preserve yt-dlp part-fragment cleanup
seonghobae
committed
d2b72b9
fix(audio): normalize yt-dlp part-fragment cleanup stems
seonghobae
committed
09bb020

Commits on Sep 8, 2026

test(audio): preserve YouTube IDs containing fragment tokens
seonghobae
committed
be97c73
fix(audio): preserve fragment tokens in YouTube video IDs
seonghobae
committed
98366b6
style(audio): restore youtube module terminator
seonghobae
committed
0e11700
docs(audio): record YouTube fragment identity boundary
seonghobae
committed
3c39fa7
docs(audio): record fragment identity cleanup fix
seonghobae
committed
7664e34
test(audio): constrain yt-dlp fragment cleanup to ASCII indices
seonghobae
committed
c09ec58
fix(audio): match yt-dlp ASCII fragment indices exactly
seonghobae
committed
668d726
docs(audio): narrow yt-dlp fragment cleanup authority
seonghobae
committed
ab569ca
docs(audio): trace yt-dlp fragment index grammar
seonghobae
committed
740c357
docs(audio): record ASCII fragment cleanup contract
seonghobae
committed
21458ae
test(audio): reject fragment lookalikes ending in part
seonghobae
committed
f551694
fix(audio): reject fragment suffix lookalikes before part cleanup
seonghobae
committed
7a0387f
test(audio): require Unix analysis process-group containment
seonghobae
committed
af94694
fix(audio): contain analysis descendants on Unix
seonghobae
committed
4e0aa5d
docs(audio): record Unix cancellation containment
seonghobae
committed
3ece757
docs(audio): trace Unix process-group cancellation
seonghobae
committed
e6f5d36
docs(audio): log Unix descendant cancellation
seonghobae
committed
55764a1
docs(architecture): record Unix analysis containment
seonghobae
committed
a07be5c
docs(security): narrow Unix cancellation claim
seonghobae
committed
143f04b
test(audio): expose YouTube descendant timeout leak
seonghobae
committed
65c94f7
fix(audio): contain YouTube import descendants on Unix
seonghobae
committed
81a4890
test(audio): verify YouTube containment in shell gate
seonghobae
committed
9c36cf0
docs(audio): record YouTube descendant containment gap repair
seonghobae
committed
e8b887c
docs(audio): record YouTube subprocess containment
seonghobae
committed
5f7692f
docs(architecture): include YouTube process containment
seonghobae
committed
066d891
docs(security): include YouTube descendant containment
seonghobae
committed
76ca2c0
docs(doctoring): trace YouTube process containment
seonghobae
committed
91b64cf
test(process): require shared containment owner
seonghobae
committed
04e4d5c
refactor(process): share containment primitives
seonghobae
committed
25dd7a5
docs(process): record shared containment owner
seonghobae
committed
e772af6
docs(gap): mark containment ownership consolidated
seonghobae
committed
e395dc4
docs(changelog): record containment consolidation
seonghobae
committed
650d93f
docs(architecture): point process containment to shared owner
seonghobae
committed
ce96055
docs(security): consolidate subprocess containment owner
seonghobae
committed
6619840
test(process): align containment platform guards
seonghobae
committed
5771e9b
fix(process): align containment platform guards
seonghobae
committed
bb14420
test(process): scope core containment regression
seonghobae
committed
3b2df5d
test(process): scope Tauri containment regression
seonghobae
committed
c1c2106
test(process): reject success-path descendant pipe hang
seonghobae
committed
9b6340a
fix(process): drain residual descendants after parent exit
seonghobae
committed
650ff2f
docs(product): cover terminal descendant containment
seonghobae
committed
04ebdf1
docs(changelog): record terminal descendant cleanup
seonghobae
committed
5e1903d
docs(security): doctor subprocess terminal containment
seonghobae
committed
6d3af83
docs(architecture): align subprocess containment truth
seonghobae
committed
1c2f9b9
docs(security): cover terminal descendant pipe cleanup
seonghobae
committed
26b16ae
test(process): reject unbounded import output capture
seonghobae
committed
fb04b95
fix(process): bound captured helper output
seonghobae
committed
90cbe99
refactor(process): expose bounded output owner
seonghobae
committed
6abb294
docs(process): bound helper output evidence
seonghobae
committed
2b99124
docs(gap): include bounded subprocess output admission
seonghobae
committed
0fbe2cf
docs(security): bound subprocess capture memory
seonghobae
committed
c7334e5
docs(changelog): record bounded helper output
seonghobae
committed
d766304
fix(process): compile Unix group termination
seonghobae
committed
a0d7f13
test(audio): reject slow helper after output overflow
seonghobae
committed
11acaf5
fix(audio): terminate helper on output admission failure
seonghobae
committed
ab9b8a1
docs(audio): record prompt output-admission termination
seonghobae
committed
0dc2faf
docs(product): align helper-output admission baseline
seonghobae
committed
8770768
docs(changelog): record helper overflow termination
seonghobae
committed
170a2e8
test(audio): bound helper timeout polling latency
seonghobae
committed
0e27839
fix(audio): clamp process polling to deadline
seonghobae
committed
da1652c
docs(audio): record deadline-bounded process polling
seonghobae
committed
3dac5d8
docs(audio): make process deadline contract code-current
seonghobae
committed
06618e0
docs(audio): record bounded helper deadline polling
seonghobae
committed
fe3c593
test(audio): require one process-output owner
seonghobae
committed
5f370f7
fix(audio): remove legacy process-output owner
seonghobae
committed
b887cae
merge: reconcile concurrent process deadline repair
seonghobae
committed
067a600