Repository navigation

#11989: signature.dag decoded_or_empty fabricates declared size 0 for undecodable carriers - #12211

Closed

gunbai-bot[bot] wants to merge 160 commits into

mainfrom

step4-fix

Closed

#11989: signature.dag decoded_or_empty fabricates declared size 0 for undecodable carriers#12211
gunbai-bot[bot] wants to merge 160 commits into
mainfrom
step4-fix

Commits on Sep 21, 2026
- App Attest step 1: CBOR (RFC 8949), COSE_Key EC2 (RFC 9052) and WebAuthn authenticator-data decoders in .dag, claimed over a real Apple-issued attestation
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  4a45ee7
- App Attest step 2: DER (X.690), X.509 (RFC 5280), PEM (RFC 7468) readers in .dag and the pinned Apple App Attestation Root CA, claimed over the sample's real certificate chain
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  a5530e9
- wip: nist_p256 recut (temporary)
  gunbc-ci-auto-heal
  committed
  f957900
- rfc_9052: cose_label_matches discriminates through cose_integer_of rather than re-matching CborValue (review 69585)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  46e926c
- Merge branch 'session/nimble-eagle-216' into session/nimble-eagle-216-step2
  gunbc-ci-auto-heal
  committed
  b7670d5
- App Attest step 3 (crypto authoring): one NIST prime-curve fold with P-256 and P-384 as parameter rows, SHA-384, and the frontier retargeted to the decided shape
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  22be8ad
- wip: step 3b verifier folds (temporary)
  gunbc-ci-auto-heal
  committed
  7c56db7
- Review 69598: the COSE coordinate width consumes extdeps.crypto.signature's ByteSize authority; the two guard-shadowed zero defaults (CBOR argument octets, authenticator-data octets) now refuse as …
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  ff9a1e3
- Merge branch 'session/nimble-eagle-216' into session/nimble-eagle-216-step2
  gunbc-ci-auto-heal
  committed
  bbe2ca6
- Review 69597: PEM admits exactly one block and refuses text outside it or a second block; OID subidentifiers refuse a leading 0x80 (X.690 §8.19.2), and the witness now asserts that refusal instead …
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  7642a1f
- Merge branch 'session/nimble-eagle-216-step2' into session/nimble-eagle-216-step3
  gunbc-ci-auto-heal
  committed
  21d9045
- App Attest step 3b: the attestation and assertion verifier folds in .dag, Apple's real assertion signature verified by execution, and the signature-seam join
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  63f630a
- Review 69614: the family fold's limb width is the plain ceiling (256 -> 11, 384 -> 16), not ceiling + 1; annotations corrected. Re-measured: one P-256 verify 73-75 s / 48.5M eval steps, from 88 s /…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  20a5cd1
- Review 69616: a BIT STRING with no contents octet refuses before any read (X.690 §8.6.2.3); every positional TBS, outer, SPKI, AlgorithmIdentifier, Extension and ECDSA-Sig-Value read asserts its AS…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  789b20d
- Merge branch 'session/nimble-eagle-216-step2' into session/nimble-eagle-216-step3
  gunbc-ci-auto-heal
  committed
  8c67ca6
- Merge branch 'session/nimble-eagle-216-step3' into session/nimble-eagle-216-step3b
  gunbc-ci-auto-heal
  committed
  273a32d
- Review 69626: read_tbs returns an X509TbsFields carrier with no signature fields (the placeholder-filled certificate has no constructor); left_pad consumes std.bignat bignat_pad_front instead of re…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  4b271ee
- Merge branch 'session/nimble-eagle-216-step2' into session/nimble-eagle-216-step3
  gunbc-ci-auto-heal
  committed
  7985277
- Review 69625: the four orphaned BigNat parameter rows deleted (the family fold reads the octet rows), the witness's limb count corrected to 16, and the SHA-256/SHA-512 two-pipeline divergence state…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  ad59b70
- Merge branch 'session/nimble-eagle-216-step3' into session/nimble-eagle-216-step3b
  gunbc-ci-auto-heal
  committed
  1290072
- Review 69631: the attestation object, both certificates, the root and the authenticator data are decoded once (decode_attestation) and carried to the refusal fold and the success mint; the assertio…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  d9efd5c
- Review 69648: X509Certificate nests the X509TbsFields record instead of re-declaring its fields; extnValue and Time reads assert class and form through the typed reads; an explicitly encoded critic…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  18dd28b
- Merge branch 'session/nimble-eagle-216-step2' into session/nimble-eagle-216-step3
  gunbc-ci-auto-heal
  committed
  2f44b79
- Merge branch 'session/nimble-eagle-216-step3' into session/nimble-eagle-216-step3b
  gunbc-ci-auto-heal
  committed
  6304327
- P-384 witness reads the nested tbs record (after review 69648 on #11975)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  98101a1
- Merge branch 'session/nimble-eagle-216-step3' into session/nimble-eagle-216-step3b
  gunbc-ci-auto-heal
  committed
  e817735
- Review 69652: refusal paths build the refused arm directly (no stand-in counter, key or receipt reaches the seam), a non-unsigned validation category is Undecodable rather than category -1, chain_l…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  ea70f31
- App Attest step 4: the six device routes on the approval broker, every one a POST whose body carries its authentication; the wire's header rows deleted; vectors regenerated; Swift mirror
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  ba3dda3
- Review 69660: Time is carried as its CHOICE (UtcTime | GeneralizedTime), the pinned root's SHA-256 is a data row computed by a claim over the decoded PEM, and a Certificate, TBS tail or AlgorithmId…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  b82444f
- Merge branch 'session/nimble-eagle-216-step2' into session/nimble-eagle-216-step3
  gunbc-ci-auto-heal
  committed
  67810d4
- Merge branch 'session/nimble-eagle-216-step3' into session/nimble-eagle-216-step3b
  gunbc-ci-auto-heal
  committed
  1e4baeb
- Merge step 3 (Time as its CHOICE); the validity fold reads the arm
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  b60a030
- Review 69664: one point-admission predicate in the family fold (length, prefix, both coordinates below p, on the curve) consumed by the verifier and by p384_point_octets_on_curve; the SHA-512 const…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  9acf41b
- Merge branch 'session/nimble-eagle-216-step3' into session/nimble-eagle-216-step3b
  gunbc-ci-auto-heal
  committed
  0f280a8
- Review 69668: the two chain links are sequenced through a match so a refused first link never buys the second P-384 verification; the two enrolled link claims that re-made p384_dag_ecdsa_witness_te…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  311bd02
- Merge branch 'session/nimble-eagle-216-step3b' into session/nimble-eagle-216-step4
  gunbc-ci-auto-heal
  committed
  cfd2cdc
- std.decimal owns the decimal-digit predicate; rfc_5280's time conversion consumes it instead of a private copy (review 69672 counted the copies)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  d93129c
- Merge branch 'session/nimble-eagle-216-step3b' into session/nimble-eagle-216-step4
  gunbc-ci-auto-heal
  committed
  73519cd
- Review 69672: redemption_status is exhaustive over the closed outcome (a new arm is a compile refusal); cas_slot_keys consumes std.list distinct_by_key and std.decimal's digit predicate; the operat…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  9945e92
- Review 69674: the authenticator-data widths are ByteSize rows with derived offsets (no bare 32/33), the truncation refusal carries ByteSize, and cose_integer_at answers Int? rather than a fabricated 0
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  199f273
- Merge branch 'session/nimble-eagle-216' into session/nimble-eagle-216-step2
  gunbc-ci-auto-heal
  committed
  0ee6594
- Review 69676: the four tag rows no reader consumed are deleted; Validity and SubjectPublicKeyInfo refuse an appended child like every sibling reader; a RED duplicates the real leaf's keyUsage exten…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  c383de3
- Merge branch 'session/nimble-eagle-216-step3' into session/nimble-eagle-216-step3b
  gunbc-ci-auto-heal
  committed
  17a7d1d
- Merge branch 'session/nimble-eagle-216-step2' into session/nimble-eagle-216-step3
  gunbc-ci-auto-heal
  committed
  a7d31df
- Merge branch 'session/nimble-eagle-216-step3b' into session/nimble-eagle-216-step4
  gunbc-ci-auto-heal
  committed
  c9b3bc4
- Merge steps 1-3 review rounds; app_attest reads the prefix width as ByteSize
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  7e1a486
- Merge branch 'session/nimble-eagle-216-step3b' into session/nimble-eagle-216-step4
  gunbc-ci-auto-heal
  committed
  4d7cca4
- Review 69692: the WebAuthn flag bits are a closed sum matched exhaustively (no in-band Int a caller could name a seventh of); CborTruncated carries needed/available as ByteSize; the two sample rows…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  2fdea11
- Merge branch 'session/nimble-eagle-216' into session/nimble-eagle-216-step2
  gunbc-ci-auto-heal
  committed
  f4bc498
- Review 69699: DerChildCountUnexpected { at, expected, found } for a fixed-arity structure with the wrong child count; DerTrailingOctets keeps its one meaning (octet offsets)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  a8fe832
- Merge branch 'session/nimble-eagle-216-step2' into session/nimble-eagle-216-step3
  gunbc-ci-auto-heal
  committed
  dfea752
- Merge branch 'session/nimble-eagle-216-step3' into session/nimble-eagle-216-step3b
  gunbc-ci-auto-heal
  committed
  1b39ee4
- Review 69702: the four decimal-digit copies cut over to std.decimal (the annotation's single-authority claim is now true); the assertion's category/version readers map every refusal by name and kee…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  9f5f04f
- Merge branch 'session/nimble-eagle-216-step3b' into session/nimble-eagle-216-step4
  gunbc-ci-auto-heal
  committed
  d226ab3
- Review 69704: the entropy width is a ByteSize; cas_slot_keys routes the listing through filesystem_io's typed observation (subject refusal and host refusal kept distinct) and the module's own entry…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  9f25eb4
- Review 69721: a coordinate that is not a byte string refuses as CoseKeyCoordinateNotAByteString (no zero-length measurement); the two TrailingOctets arms carry ByteSize; cbor_unsigned_value names i…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  87539e5
- Merge branch 'session/nimble-eagle-216' into session/nimble-eagle-216-step2
  gunbc-ci-auto-heal
  committed
  dd18c3a
- Review 69723: the X509Time annotation names the later change that interprets the arm instead of a function this diff does not contain
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  5c478fc
- Merge branch 'session/nimble-eagle-216-step2' into session/nimble-eagle-216-step3
  gunbc-ci-auto-heal
  committed
  8f9d693
- Merge branch 'session/nimble-eagle-216-step3' into session/nimble-eagle-216-step3b
  gunbc-ci-auto-heal
  committed
  80fb05a
- Merge branch 'session/nimble-eagle-216-step3b' into session/nimble-eagle-216-step4
  gunbc-ci-auto-heal
  committed
  6b37dee
- Review 69725: x509_validity_at answers RFC 5280's inclusive interval (notBefore <= t <= notAfter); the sample's client data is a modeled row sample_client_data consumed by the verifier witness, not…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  6526cb2
- Merge branch 'session/nimble-eagle-216-step3b' into session/nimble-eagle-216-step4
  gunbc-ci-auto-heal
  committed
  47dd04e
- Review 69750: the issuer's named curve selects the PrimeCurve row and the SIG-VALUE width is read from that row's coordinate_octets (issuer_curve, ecdsa_verifies_on) -- no width literal beside the …
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  a2d1aec
- Merge branch 'session/nimble-eagle-216-step3b' into session/nimble-eagle-216-step4
  gunbc-ci-auto-heal
  committed
  8e88a95
- Review 69752: the writer-gate claim executes all three mutating routes (enrol and redeem driven with the envelope vectors' own bodies via envelope_vector_body); an enrol-gate mutation reds it
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  fbaab6c
- Review 69773: an undecodable stored key or signature encoding maps to AssertionUndecodable, not AssertionSignatureInvalid; the witness claims the producer's Absent on a corrupt key; duplicate UInt8…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  2c89993
- Merge branch 'session/nimble-eagle-216-step3b' into session/nimble-eagle-216-step4
  gunbc-ci-auto-heal
  committed
  964d9bb
- Merge remote-tracking branch 'origin/main' into session/nimble-eagle-216-step2
  gunbc-ci-auto-heal
  committed
  8c6f8c1
- Merge branch 'session/nimble-eagle-216-step2' into session/nimble-eagle-216-step3
  gunbc-ci-auto-heal
  committed
  8f04790
- Merge branch 'session/nimble-eagle-216-step3' into session/nimble-eagle-216-step3b
  gunbc-ci-auto-heal
  committed
  f42a63a
- Merge branch 'session/nimble-eagle-216-step3b' into session/nimble-eagle-216-step4
  gunbc-ci-auto-heal
  committed
  dae870f
- Review 69794: delete app_attest_decode_certificate, a wrapper with no call site beside app_attest_certificate which decode_attestation consumes
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  9789664
- Merge branch 'session/nimble-eagle-216-step3b' into session/nimble-eagle-216-step4
  gunbc-ci-auto-heal
  committed
  8ff4ba2
- Review 69793: the CAS store's read verb refuses a key that is not slot-addressable before any filesystem read (observe_cas_slot_state), the same admission the write verb performs -- a request-suppl…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  d594770
Commits on Sep 22, 2026
- Review 69803: the assertion expectation's credential key is read from the sample leaf's SubjectPublicKey through base64_of (the attestation-output -> assertion-input join), not transcribed; the pub…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  4f860d0
- Merge branch 'session/nimble-eagle-216-step3b' into session/nimble-eagle-216-step4
  gunbc-ci-auto-heal
  committed
  3c1dde0
- Merge remote-tracking branch 'origin/main' into session/nimble-eagle-216-step3
  gunbc-ci-auto-heal
  committed
  be01048
- Merge branch 'session/nimble-eagle-216-step3' into session/nimble-eagle-216-step3b
  gunbc-ci-auto-heal
  committed
  654ed2b
- Merge branch 'session/nimble-eagle-216-step3b' into session/nimble-eagle-216-step4
  gunbc-ci-auto-heal
  committed
  563a286
- Review 69827 + operator's Team ID: the push registration lives under its own root (approval_device_push_root) with the APNs push sender declared as its frontier beside the write; approval_app_attes…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  cdcd22c
- Merge remote-tracking branch 'origin/main' into session/nimble-eagle-216-step3
  gunbc-ci-auto-heal
  committed
  b8c65c5
- Merge-queue run 35678328407: declared 4b(3) eval-step drop app_attest_interpreted_crypto_new_witness_eval_step_cost for the eight interpreted P-384 point checks and SHA-384 FIPS vectors (they execu…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  6bcd8b3
- Merge branch 'session/nimble-eagle-216-step3' into session/nimble-eagle-216-step3b
  gunbc-ci-auto-heal
  committed
  1e56715
- Merge branch 'session/nimble-eagle-216-step3b' into session/nimble-eagle-216-step4
  gunbc-ci-auto-heal
  committed
  b2d7999
- Review 69909 + the merge-queue cost class: declared 4b(3) eval-step drop app_attest_verifier_new_witness_eval_step_cost for the six App Attest verifier claims (they execute; only the eval-step over…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  65d2750
- The enrolment margin is a second wall, and the cliff band is not declarable: eight interpreted-crypto identities admitted at floor_cost_debt_typed_admissions (they keep executing), the two single-b…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  448d65b
- Review 69953: the two P-256 assertion verifications actually leave the floor, and the dangling vf_root goes
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  4c96736
- Merge session/nimble-eagle-216-step3 into session/nimble-eagle-216-step3b
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  8796a3c
- The published SHA-384 vectors are one claim over one interface, so the empty message stays on the floor
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  75893fb
- Merge remote-tracking branch 'origin/session/nimble-eagle-216-step3' into step3b-work
  gunbc-ci-auto-heal
  committed
  bdd8c96
- Each extension reader declares what it can conclude, so the unreachable fallback and its name table delete
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  ad01c58
- Each published SHA-384 vector is its own claim, paired with the mutation that discriminates it
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  94af320
- Merge remote-tracking branch 'origin/session/nimble-eagle-216-step3' into step3b-sync
  gunbc-ci-auto-heal
  committed
  8a00239
- The drop declaration says nine and names the vectors it actually covers; the projection is regenerated
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  ffc91bd
- Each verifier drop row states its own billed work, because the sixth member does not do what the other five do
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  e6d4b2e
- Merge step3 into step3b; the generated projection is regenerated, not hand-resolved
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  d854ef4
- The published-vector claims encode the digest they already computed
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  9f7c13a
- Merge remote-tracking branch 'origin/session/nimble-eagle-216-step3' into step3b-sync3
  gunbc-ci-auto-heal
  committed
  15a9235
- sha384_hex is deleted: my own dedup removed its last consumer
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  0b0a2df
- Merge remote-tracking branch 'origin/session/nimble-eagle-216-step3' into step3b-sync4
  gunbc-ci-auto-heal
  committed
  888075e
- p256_is_infinity is deleted: the family consolidation left a bare alias behind
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  7c146f4
- Merge remote-tracking branch 'origin/session/nimble-eagle-216-step3' into step3b-sync5
  gunbc-ci-auto-heal
  committed
  51e2f07
- Name the instrument for the SHA-384 rows; split the P-256 base-point claim that could not reach a verdict
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  abe65d2
- decimal_digit_char is the ordering test, and its single-character precondition is declared
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  e77a026
- The frontier names the order-n fact, and the interrupted-witness incident joins the row that already owns its class
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  c3177bc
- decimal_digit_char keeps its totality; the frontier conflict is unioned, not picked
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  2a7c38c
- Merge remote-tracking branch 'origin/session/nimble-eagle-216-step3b' into repair-12000
  Brian Searls
  committed
  cef5b55
- octet_split carries its index; and the drop's "no nested scan" sentence becomes measured rather than asserted
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  1f24f24
- Merge origin/main into step3: union the sha2 imports (Word64 family plus qualified_octets)
  gunbc-ci-auto-heal
  committed
  473faeb
- Device routes: native-realization gate before any crypto, and the App Attest counter committed before a read or push update
  
  Brian Searls
  and
  claude
  committed
  2371bec
- Regenerate the rung-drops projection from the merged authorities
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  4607fb4
- #11989: App Attest's intermediate must be authorized to act as a CA (RFC 5280 §6.1.4 k/m/n) (#12075)
  
  authored
  f65b59a
Commits on Sep 23, 2026
- SHA-384 witness seals its digest through uint8_octets_of_ints before base16_encode_lower
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  3c5134a
- Merge remote-tracking branch 'origin/main' into step3
  gunbc-ci-auto-heal
  committed
  69b0fa7
- Merge remote-tracking branch 'origin/main' into step3
  gunbc-ci-auto-heal
  committed
  a5dc656
- Merge branch 'step3' into step3b
  gunbc-ci-auto-heal
  committed
  1056d0c
- Merge branch 'step3b' into step4
  gunbc-ci-auto-heal
  committed
  eba58ea
- chore: regenerate drifted generated artifacts (ci auto-heal)
  gunbai-bot[bot]
  authored
  256d190
- Merge remote-tracking branch 'origin/session/nimble-eagle-216-step3' into s3b
  gunbc-ci-auto-heal
  committed
  5b087f5
- Regenerate the rung-drops projection so step3b's App Attest verifier drop renders (main_wet_one)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  2e38f24
- Merge branch 's3b' into s4
  gunbc-ci-auto-heal
  committed
  fe35853
- Merge remote-tracking branch 'origin/main' into s3bm
  gunbc-ci-auto-heal
  committed
  cb5ac23
- Merge branch 's3bm' into s4m
  gunbc-ci-auto-heal
  committed
  afb4db7
- App Attest verifier witnesses discriminate at one interface; two folds and the signature join refuse before they hash
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  e673d52
- The attestation and assertion step folds stop at the first refusal
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  0923a73
- x509_ca_authority witness reads the sample's certificates through the verifier witness's one-parse helpers
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  66a2754
- each_expectation_reds_its_own_step becomes one claim per step, over supplied fold inputs
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  400ea99
- Typed cost-debt admissions for the two App Attest real-path inhabitance claims only
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  dbd0f9f
- App Attest structural steps are named checks over a declared order; each step claim calls only its step
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  4d089af
- Known-red admission: file_hold_plan harness census is red on this stack for a main-wide measured-compile defect, dissolving on gunbc#12132
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  b55acde
- Admit the nonce and key-id step residues; the verifier drop names the claims that exist
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  daf2bda
- Merge branch 's3bwork' into s4work
  gunbc-ci-auto-heal
  committed
  801c232
- mint_enrolment_code seals its entropy through base64_octets before base16_encode_lower
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  cf5991e
- Seal the three success mints; steps are reachable only through the declared order; admissions carry no readings
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  27668fd
- Step claims go through ordered_step_refusal (fix a doubled paren from the rewrite)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  8ea2413
- Merge branch 's3bwork' into s4work
  gunbc-ci-auto-heal
  committed
  030c67b
- Key-id step and assertion real path leave the floor for the native row (the #11981 dead-band disposition)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  3f360a8
- Merge branch 's3bwork' into s4work
  gunbc-ci-auto-heal
  committed
  35bcd8a
- The writer gate is the first question the three mutating device routes ask
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  9fced05
- Assertion counter: remove the 4096-generation availability cliff (CAS head by gallop+bisect) (#12080)
  
  authored
  9c49365
- Evidence fixtures and the three remaining step wrappers are caller-sealed; key-id is one paired claim
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  ca8a6ac
- Enrolment dead band: an exact-two, self-staling observed-only authority; the two App Attest claims execute
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  0c82751
- Seed-growth admission for the dead-band mirror, and a claim pinning the mirror's arms to the model
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  4c40c22
- Scope the enrolment mirror lens to the mirror's own impl
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  41f0ed7
- Merge remote-tracking branch 'origin/main' into s3bwork
  gunbc-ci-auto-heal
  committed
  18bc5d6
- Move the dead-band seed test above the roster test's doc block and give it its own
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  2ee28a0
- Merge remote-tracking branch 'origin/session/nimble-eagle-216-step4' into s4work
  gunbc-ci-auto-heal
  committed
  8eddfba
- Merge remote-tracking branch 'origin/session/nimble-eagle-216-step3b' into s4work
  gunbc-ci-auto-heal
  committed
  e469b28
- approval_device_wire states the counter's true standing (comments only)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  9e7cd40
- Move the dead-band arm's comment above enrolment_declared_measured_standing
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  a77c53a
- Merge branch 's3bwork' into s4work
  gunbc-ci-auto-heal
  committed
  7f9b795
- host_standup_assimilation_deduction witness: read ObservationVerdict's Absent in pattern position
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  18d7d46
- Merge branch 's3bwork' into s4work
  gunbc-ci-auto-heal
  committed
  dff52b3
Commits on Sep 24, 2026
- attempt_lifecycle: carry CasGenerationSpaceExhausted (added by #12080) through the attempt-store refusal
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  5fe58ed
- signature: an undecodable carrier refuses as VerifyingKeyUndecodable / SignatureUndecodable, not Malformed at a fabricated size 0
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  8d090d7
- Merge remote-tracking branch 'origin/main' into step3b-fix
  gunbc-ci-auto-heal
  committed
  8585392
- Merge commit '85853926f99f31e983ce4ff65a414f44b7ad7d86' into step4-fix
  gunbc-ci-auto-heal
  committed
  416af0c
- chore: regenerate drifted generated artifacts (ci auto-heal)
  gunbai-bot[bot]
  authored
  c6273ab
- Merge remote-tracking branch 'origin/session/nimble-eagle-216-step3b' into step4-fix
  gunbc-ci-auto-heal
  committed
  3c73aea

Commits

Commits on Sep 21, 2026

Commits on Sep 22, 2026

Commits on Sep 23, 2026