Repository navigation
Revert "Ban unwired models: floor-enrolled lens (subsumes inert_carrier) — §5 coverage-by-illusion wall" - #6085
Merged
Conversation
…er) — §5…" This reverts commit a9ed2f2.
gunbai-bot Bot
pushed a commit
that referenced
this pull request
Jul 1, 2026
Per operator directive: white-box/tautological witnesses do not belong in the codebase. These four re-computed the implementation and asserted it equals itself (testing nothing), and kept flip-flopping main red<->green as unrelated PRs shifted the live execution-corpus width: - witness_floor_spawn_width_zero_budget_falls_back — after #6073 moved the int_min(fallback, exec) clamp into gunbc_ci_floor_spawn_width_for_budget, this asserted fallback == int_min(fallback, exec) ≡ fallback <= exec, a fragile corpus-coupled property and the current MAIN-RED on this witness. - witness_floor_unreadable_budget_uses_conservative_envelope — envelope built from the same for_budget path: int_min(...) == int_min(...) tautology. - witness_plan_spawn_width_is_floor_width_at_runner_cap — plan_spawn_width is a thin wrapper over for_budget: for_budget(cap) == for_budget(cap) tautology. - witness_execution_corpus_spawn_width_at_runner_cap — white-box magic pin (execution_corpus_spawn_width() == 3); breaks on any corpus-size change. Genuine behavioral witnesses (tight-budget backoff inequality, memory-fit, headroom) are kept. Verified by execution: ci_floor_run_envelope_witnesses, ci_floor_spawn_width_live_budget_witnesses, ci_floor_honest_width_fold_witnesses all PASS. (The #6078 unwired-model lens, the other main-red, was reverted separately in #6085.) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
gunbai-bot Bot
pushed a commit
that referenced
this pull request
Jul 1, 2026
Remove unwired_model.dag/test (reverted in #6085), restore inert_carrier.dag/test and complexity_linearity_audit.rs to origin/main state. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This was referenced Jul 1, 2026
briansrls
added a commit
that referenced
this pull request
Jul 1, 2026
c1bd384 CI red was unwired_model_no_unrostered_or_stale (roster skew: floor_host_scaffold_precompute_would_skip + yaml_format unrostered, gitignore_format stale). Resolved on branch by merging main #6085 revert of the unwired_model lens (restores inert_carrier floor witness). Co-authored-by: Cursor <cursoragent@cursor.com>
gunbai-bot Bot
pushed a commit
that referenced
this pull request
Jul 1, 2026
Per operator directive: white-box/tautological witnesses do not belong in the codebase. These four re-computed the implementation and asserted it equals itself (testing nothing), and kept flip-flopping main red<->green as unrelated PRs shifted the live execution-corpus width: - witness_floor_spawn_width_zero_budget_falls_back — after #6073 moved the int_min(fallback, exec) clamp into gunbc_ci_floor_spawn_width_for_budget, this asserted fallback == int_min(fallback, exec) ≡ fallback <= exec, a fragile corpus-coupled property and the current MAIN-RED on this witness. - witness_floor_unreadable_budget_uses_conservative_envelope — envelope built from the same for_budget path: int_min(...) == int_min(...) tautology. - witness_plan_spawn_width_is_floor_width_at_runner_cap — plan_spawn_width is a thin wrapper over for_budget: for_budget(cap) == for_budget(cap) tautology. - witness_execution_corpus_spawn_width_at_runner_cap — white-box magic pin (execution_corpus_spawn_width() == 3); breaks on any corpus-size change. Genuine behavioral witnesses (tight-budget backoff inequality, memory-fit, headroom) are kept. Verified by execution: ci_floor_run_envelope_witnesses, ci_floor_spawn_width_live_budget_witnesses, ci_floor_honest_width_fold_witnesses all PASS. (The #6078 unwired-model lens, the other main-red, was reverted separately in #6085.) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
briansrls
added a commit
that referenced
this pull request
Jul 1, 2026
OUTSIDE_FILE pointed at deleted src/v2/lens/unwired_model.dag (#6085); retarget to inert_carrier.dag:10 outside the floor_skip fixture import closure. Co-authored-by: Cursor <cursoragent@cursor.com>
5 of 6 tasks
briansrls
added a commit
that referenced
this pull request
Jul 1, 2026
…ses, and Phase 2 credential design (#6066) * Model operator Tailscale ACL as cited extdeps authority with emit and faithfulness witnesses. Phase 1 lands extdeps/tailscale/acl.dag (security spine invariants, cutover-transient 100.65.94.55), JSON emit, hujson+json golden fixtures, and fail-closed witnesses; host_standup P0 now cites ACL authority while credential upsert remains Phase 2. Co-authored-by: Cursor <cursoragent@cursor.com> * Design Phase 2 Tailscale ACL credential as operator user-principal Secret Accessor. Models tailscale-acl-api-key in gunbai-secrets with roles/secretmanager.secretAccessor granted only to user:briansrls@gmail.com via local ADC (explicitly not repo-scoped WIF); acl_api upsert shape and diff-gate are DESIGN_ONLY pending operator sign-off before any wet write. Co-authored-by: Cursor <cursoragent@cursor.com> * Refine Phase 2 ACL credential as operator-dispensed 1hr ephemeral token. Secret Manager JIT reference (tailscale-acl-ephemeral-token) or runtime injection; fail-closed on absent/expired; upsert wet shape is diff-print-only pending operator sign-off. Co-authored-by: Cursor <cursoragent@cursor.com> * Mark tailscale_acl_emit as scaffolded medium-as-string with roster dissolution trigger. Addresses review: on-carrier Scaffold bind to to_json plus medium_structure_exception_roster entry and witness for explicit dissolve-on path before wet upsert lands. Co-authored-by: Cursor <cursoragent@cursor.com> * Replace tautological Phase 2 credential witnesses with structural binding checks. operator_bindings_admit_repo_scoped_wif/admit_bmc_assimilator_sa scan binding members (perturbation witness reddens on WIF/SA poison); drop literal false/AdcRefresh-match launders. Co-authored-by: Cursor <cursoragent@cursor.com> * Remove unused GCP credential flow imports from Phase 2 design module. Co-authored-by: Cursor <cursoragent@cursor.com> * WIP: Continuous deployment pipeline: on push-to-main (gated on floor green), * Integrate Phase 2 ACL credential through gunbc/auth patterns authority. Composes tailscale_acl_operator_ephemeral_credential from gcp_oauth_access_token(AdcRefresh) + optional_impersonation(3600s) + gcp_secret_credential; keeps ACL upsert-gate delta and IAM contrast witnesses; DESIGN_ONLY scaffold held. Co-authored-by: Cursor <cursoragent@cursor.com> * WIP: Continuous deployment pipeline: on push-to-main (gated on floor green), * Align host_standup P0 gap ledger with partial ACL modeling. P0 interim_realization and gap_ledger now agree on dag authorities plus remaining ctrl interim; spine witness accepts partial gaps citing extdeps/gunbc modules instead of requiring lib/ ctrl paths only. Co-authored-by: Cursor <cursoragent@cursor.com> * WIP: Continuous deployment pipeline: on push-to-main (gated on floor green), * Remove dead GcpBinding helper and fix shell.Env resolve. Drop unused operator_secret_accessor_binding (witnesses use SecretAccessBinding rows). Alias extdeps.shell in auth/patterns to avoid shell transport shadowing shell.Env during discovery resolve. Co-authored-by: Cursor <cursoragent@cursor.com> * WIP: Continuous deployment pipeline: on push-to-main (gated on floor green), * WIP: Continuous deployment pipeline: on push-to-main (gated on floor green), * Fix discovery resolve for github_oidc env reads. Add gunbc.auth.oidc_env.read_env_value (no uses net) so github_oidc does not call shell.Env inside a func with uses net, and avoid importing from extdeps.shell.credentials where module-path shell shadows the extdeps.shell service namespace on full-module resolve. Co-authored-by: Cursor <cursoragent@cursor.com> * Split optional_impersonation to fix phase2 discovery resolve. Extract gunbc.auth.optional_impersonation so Phase 2 credential design witnesses do not transitively resolve gunbc.auth.patterns (github_oidc shell.Env shadow under uses net). Update DeclarationRef module paths. Co-authored-by: Cursor <cursoragent@cursor.com> * Remove unused TAILNET_PLACEHOLDER from Phase 2 design module. Dead data with no consumers — tailnet binding lands with acl_api wet upsert scaffold, not a silent NonEmptyStr placeholder. Co-authored-by: Cursor <cursoragent@cursor.com> * fix(tailscale-acl): exhaustive AclUpsertGate match for non_fold residue * fix(ci-floor): zero-budget spawn width uses conservative fallback only. #6079 updated witness_floor_spawn_width_zero_budget_falls_back but left gunbc_ci_floor_spawn_width_for_budget on int_min(fallback, exec_corpus). With execution_corpus_spawn_width=3 and fallback=4, plan_spawn_width(0) returned 3 while the witness expected 4. Align implementation and the unreadable-budget envelope witness with the stable fallback invariant. Co-authored-by: Cursor <cursoragent@cursor.com> * Revert "fix(ci-floor): zero-budget spawn width uses conservative fallback only." This reverts commit 19f1da9. * fix(ci-floor): delete white-box/tautological spawn-width witnesses Per operator directive: white-box/tautological witnesses do not belong in the codebase. These four re-computed the implementation and asserted it equals itself (testing nothing), and kept flip-flopping main red<->green as unrelated PRs shifted the live execution-corpus width: - witness_floor_spawn_width_zero_budget_falls_back — after #6073 moved the int_min(fallback, exec) clamp into gunbc_ci_floor_spawn_width_for_budget, this asserted fallback == int_min(fallback, exec) ≡ fallback <= exec, a fragile corpus-coupled property and the current MAIN-RED on this witness. - witness_floor_unreadable_budget_uses_conservative_envelope — envelope built from the same for_budget path: int_min(...) == int_min(...) tautology. - witness_plan_spawn_width_is_floor_width_at_runner_cap — plan_spawn_width is a thin wrapper over for_budget: for_budget(cap) == for_budget(cap) tautology. - witness_execution_corpus_spawn_width_at_runner_cap — white-box magic pin (execution_corpus_spawn_width() == 3); breaks on any corpus-size change. Genuine behavioral witnesses (tight-budget backoff inequality, memory-fit, headroom) are kept. Verified by execution: ci_floor_run_envelope_witnesses, ci_floor_spawn_width_live_budget_witnesses, ci_floor_honest_width_fold_witnesses all PASS. (The #6078 unwired-model lens, the other main-red, was reverted separately in #6085.) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Brian Searls <briansearls1@gmail.com> Co-authored-by: Cursor <cursoragent@cursor.com> Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
briansrls
pushed a commit
that referenced
this pull request
Jul 1, 2026
…6087) Per operator directive: white-box/tautological witnesses do not belong in the codebase. These four re-computed the implementation and asserted it equals itself (testing nothing), and kept flip-flopping main red<->green as unrelated PRs shifted the live execution-corpus width: - witness_floor_spawn_width_zero_budget_falls_back — after #6073 moved the int_min(fallback, exec) clamp into gunbc_ci_floor_spawn_width_for_budget, this asserted fallback == int_min(fallback, exec) ≡ fallback <= exec, a fragile corpus-coupled property and the current MAIN-RED on this witness. - witness_floor_unreadable_budget_uses_conservative_envelope — envelope built from the same for_budget path: int_min(...) == int_min(...) tautology. - witness_plan_spawn_width_is_floor_width_at_runner_cap — plan_spawn_width is a thin wrapper over for_budget: for_budget(cap) == for_budget(cap) tautology. - witness_execution_corpus_spawn_width_at_runner_cap — white-box magic pin (execution_corpus_spawn_width() == 3); breaks on any corpus-size change. Genuine behavioral witnesses (tight-budget backoff inequality, memory-fit, headroom) are kept. Verified by execution: ci_floor_run_envelope_witnesses, ci_floor_spawn_width_live_budget_witnesses, ci_floor_honest_width_fold_witnesses all PASS. (The #6078 unwired-model lens, the other main-red, was reverted separately in #6085.) Co-authored-by: Brian Searls <briansearls1@gmail.com> Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
briansrls
added a commit
that referenced
this pull request
Jul 1, 2026
OUTSIDE_FILE pointed at deleted src/v2/lens/unwired_model.dag (#6085); retarget to inert_carrier.dag:10 outside the floor_skip fixture import closure. Co-authored-by: Cursor <cursoragent@cursor.com>
briansrls
added a commit
that referenced
this pull request
Jul 1, 2026
OUTSIDE_FILE pointed at deleted src/v2/lens/unwired_model.dag (#6085); retarget to inert_carrier.dag:10 outside the floor_skip fixture import closure. Co-authored-by: Cursor <cursoragent@cursor.com>
briansrls
added a commit
that referenced
this pull request
Jul 1, 2026
c1bd384 CI red was unwired_model_no_unrostered_or_stale (roster skew: floor_host_scaffold_precompute_would_skip + yaml_format unrostered, gitignore_format stale). Resolved on branch by merging main #6085 revert of the unwired_model lens (restores inert_carrier floor witness). Co-authored-by: Cursor <cursoragent@cursor.com>
briansrls
added a commit
that referenced
this pull request
Jul 1, 2026
c1bd384 CI red was unwired_model_no_unrostered_or_stale (roster skew: floor_host_scaffold_precompute_would_skip + yaml_format unrostered, gitignore_format stale). Resolved on branch by merging main #6085 revert of the unwired_model lens (restores inert_carrier floor witness). Co-authored-by: Cursor <cursoragent@cursor.com>
briansrls
added a commit
that referenced
this pull request
Jul 1, 2026
OUTSIDE_FILE pointed at deleted src/v2/lens/unwired_model.dag (#6085); retarget to inert_carrier.dag:10 outside the floor_skip fixture import closure. Co-authored-by: Cursor <cursoragent@cursor.com>
briansrls
added a commit
that referenced
this pull request
Jul 1, 2026
….dag owns verdict (#6043) * WIP: HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .da * HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .dag owns verdict Concern A (shape/transport/policy scan) moves to cli_run.rs as a structured-fact extractor: extdeps_shape_transport_policy_module_facts() returns argv/fusion/input/ embedded fact lists + gist booleans + nickname literal count. The DAG lens v2.lens.extdeps_shape_transport_policy now calls the compound builtin extdeps_shape_transport_policy_facts_for_qualified_name() and feeds the fact lists into its own pure verdict functions — the scalar count host builtins are gone. Concern B (external_authority anchor checking) splits off into the new external_authority_project.rs with its own dissolution trigger (separate migration to the external_authority host surface, not cli_run.rs). The 11 old Concern A scalar builtins are removed from 04_method.dag and v1_compiler_infer_method.rs; the single compound record builtin is registered with type_variable_node. All 12 Concern B v1_interpreter.rs call-sites updated to external_authority_project. bootstrap.rs and regen_stage0.rs swap the file name. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * WIP: HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .da * Restore foreign files to main state: remove stale WIP carry-overs Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * WIP: HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .da * WIP: HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .da * Fix bootstrap coherence: update emitter + regen_stage0 for external_authority_project swap - 05_emit_rust.dag + v1_compiler_emit_rust.rs: replace extdeps_shape_transport_policy_project with external_authority_project in hand_maintained_mods (regen would reintroduce deleted module) - regen_stage0.rs: add complexity_linearity_audit_project.rs and decl_facts_project.rs to HAND_MAINTAINED_STAGE0_FILES; add patch_complexity_linearity_audit_mod call + function body - Restore foreign files to main state (stale carry-overs from prior WIP commits) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * Add dissolution trigger header to external_authority_project.rs Receipts the Concern B split: this is residual from extdeps_shape_transport_policy_project.rs (not a new projector), with its own named dissolution lane — host-surface facts builtin for extdeps_external_authority.dag, gunbc#5364 successor. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * Add SCAFFOLD dissolution trigger to cli_run.rs host-fed fact block (§6) Mirrors the marker already on external_authority_project.rs: names the Node-tree argv projection as the dissolve-on condition, gunbc#5364 successor Concern A lane. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * Restore foreign files to main state (stale WIP carry-overs) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * HAND lens E: resolve merge conflict — cli_run.rs conflict + restore foreign files Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * HAND lens E: drop phantom doc_reachability_project from hand_maintained_mods doc_reachability_project.rs was retired in #6035 (merged before this PR); our merge-conflict resolution incorrectly reintroduced it. Remove from 05_emit_rust.dag and v1_compiler_emit_rust.rs hand_maintained_mods strings. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * HAND lens E: resolve merge conflict — module_path_index reorganization Main consolidated individual project files into module_path_index/: - Delete module_path_index/extdeps_shape_transport_policy_census.rs (our PR's retirement of this concern; Concern A → compound cli_run builtin, Concern B → external_authority_project.rs) - Remove extdeps_shape_transport_policy_census from module_path_index/mod.rs - Update hand_maintained_mods in 05_emit_rust.dag/v1_compiler_emit_rust.rs: use module_path_index (from main) + external_authority_project (ours) - Update lib.rs: pub mod module_path_index + pub mod external_authority_project - Update regen_stage0.rs and bootstrap.rs: module_path_index dir handles the moved files; external_authority_project.rs stays as flat hand-maintained - Resolve v1_interpreter.rs: take our compound builtin + external_authority_project:: call sites over main's individual scalar builtins + census module paths Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * WIP: HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .da * WIP: HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .da * WIP: HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .da * Fix merge: apply #6078 inert_carrier→unwired_model rename dropped in merge resolution 04_method.dag, v1_compiler_infer_method.rs, v1_interpreter.rs: rename inert_carrier_names_live/declared_count builtins to unwired_model_names_live/declared_count. cli_run.rs: replace inert_carrier census section with unwired_model census from #6078 (UnwiredModelData, unwired_decl_blocks, type/fn/data support, scaffold-exemption). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * WIP: HAND lens E: retire extdeps_shape_transport_policy_project.rs — lens .da * Revert unwired_model rename: main reverted #6078, keep inert_carrier names #6085 (revert of #6078) landed in main; revert the rename I applied in the previous commit to stay coherent with main. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * Restore foreign files to origin/main post-revert (#6085) Remove unwired_model.dag/test (reverted in #6085), restore inert_carrier.dag/test and complexity_linearity_audit.rs to origin/main state. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> --------- Co-authored-by: Brian Searls <briansearls1@gmail.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Reverts #6078