Skip to content

Reconcile provable legacy workflow revisions - #6963

Closed
loganj wants to merge 4 commits into
larry/workflow-revision-foundation-v4from
larry/workflow-legacy-revision-migration-v4
Closed

Reconcile provable legacy workflow revisions#6963
loganj wants to merge 4 commits into
larry/workflow-revision-foundation-v4from
larry/workflow-legacy-revision-migration-v4

Conversation

@loganj

@loganj loganj commented Aug 27, 2026

Copy link
Copy Markdown
Collaborator

Retired — do not merge

This PR is withdrawn from the workflow delivery plan. The proposed legacy revision backfill cannot safely establish provenance: historical write ordering means retained signed definitions and the current workflow snapshot do not prove which signed revision produced that state. Inferring a revision could attach a misleading provenance reference.

Unknown legacy revision references remain unset rather than inferred. This PR is not a prerequisite for the active workflow changes:

The backfill approach in this PR must not be merged.

loganj and others added 4 commits August 27, 2026 17:07
Signed-off-by: Logan Johnson <loganj@squareup.com>
Co-authored-by: Larry <8cf5a83f590ec0955b11647d1c88f796a98e088c30a492c58e0e46c3026ae7a4@buzz.block.builderlab.xyz>
Only bind a legacy workflow when its retained signed NIP-33 head reproduces the exact materialized definition and hash. Historical runs remain unbound because current state cannot prove which revision they executed.

Signed-off-by: Logan Johnson <loganj@squareup.com>
Co-authored-by: Larry <8cf5a83f590ec0955b11647d1c88f796a98e088c30a492c58e0e46c3026ae7a4@buzz.block.builderlab.xyz>
Search the historical NULL-channel event shape while retaining signed channel verification, and bind only when the validated workflow snapshot is unchanged.

Co-authored-by: Larry <8cf5a83f590ec0955b11647d1c88f796a98e088c30a492c58e0e46c3026ae7a4@buzz.block.builderlab.xyz>
Signed-off-by: Logan Johnson <loganj@squareup.com>
Signed-off-by: Logan Johnson <loganj@squareup.com>
Co-authored-by: Larry <8cf5a83f590ec0955b11647d1c88f796a98e088c30a492c58e0e46c3026ae7a4@buzz.block.builderlab.xyz>
@loganj

loganj commented Aug 28, 2026

Copy link
Copy Markdown
Collaborator Author

🤖 I’m Larry. This automatic-backfill approach is retired and must not merge.

Review at b064beb5c39a8ea52c1d43565ddcace10f780ed6 established two failures of its exact-source contract:

  • A pre-foundation writer can update the workflow after reconciliation binds E1 while preserving the newly added pointer. New runs then copy stale provenance.
  • The pre-foundation writer commits workflow materialization independently before committing its signed-event transaction. If an equal-content E2 materialization commits but its event transaction fails, the surviving E1 head can match current JSON/hash without proving it sourced the current row. Snapshot fencing and draining old pods cannot recover missing historical evidence.

Legacy workflows and historical runs must retain the NULL compatibility fallback. No adoption UX is being substituted here. Any future owner-signed save establishes provenance prospectively and needs its own explicit semantics.

The draft and branch are preserved as review evidence, not as a merge candidate. The related foundation rollout also needs protection against legacy writers preserving pointers across subsequent definition updates.

@loganj
loganj force-pushed the larry/workflow-revision-foundation-v4 branch 3 times, most recently from 8368014 to bb7de1e Compare August 28, 2026 21:30
@loganj loganj closed this Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant