Repository navigation
Conversation
ancongui
marked this pull request as ready for review
October 31, 2026 00:25
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Credential rotation previously held archived source until a fresh workspace publication, even when that workspace had been removed. Add an explicit native owner-authorized scan of retained object chunks, with exact request/readback and append-only credential receipts. The scanner verifies complete file hashes and a bounded paged catalog, preserving snapshot/source/object identities and avoiding re-upload, workspace access or execution grants. Current identity, membership and credential guards cover reads and the native receipt transaction.
Checkpoint selection now validates the retained journal intent/receipt and typed expected_source_digest against the complete SourceCatalog digest. Matching Git trees alone cannot relabel different ignored public files; missing historical proof holds the checkpoint selector while independent recorded-snapshot reads remain available. Add strict API/SDK candidate, submission and readback contracts; GETs do not write.
Validation:127 cohesive host cases passed with one explicitly excluded retained Git-process case; all guarded real HTTP/socket/SQL/model/process counts were zero. Full mypy419 and global Ruff/format1254 passed;3 architecture documentation tests passed. One dedicated NOSUPERUSER PostgreSQL/actual ASGI case passed4.89s:developer refusal, native owner scan after workspace deletion, cold API receipt/content readback, revocation and zero execution requests. The owned fixture stopped and credentials were removed. The first native run's final last-owner fixture refusal is retained; production guards were unchanged.
Stacked on PR84; that branch remains unchanged. No Studio, prompt or historical-profile changes. Remaining gates are independent source review, composed App/documentation capture already pending on PR84, successor authority-closure and installed qualification, personal-token source-route support and live object providers. No Original, model, cloud or production effects were performed.