fix(project): stage saves before atomic publication - #970

Draft

seonghobae wants to merge 544 commits into

fix/project-save-atomic-publication-962

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 5, 2026

fix(core): expose reusable SHA-256 reader boundary
seonghobae
committed
d1ba406
docs(core): record reusable SHA-256 consolidation port
seonghobae
committed
8a4f50c
test(audio): require publication-bound source identity
seonghobae
committed
fdfdd70
fix(audio): verify published source identity
seonghobae
committed
a1c85cb
fix(audio): expose publication receipt verifier
seonghobae
committed
20e7faa
docs(audio): trace publication receipt verification
seonghobae
committed
505d214
test(audio): bound publication verification to receipt size
seonghobae
committed
6a0692e
fix(audio): stop publication verification at expected bytes
seonghobae
committed
c65a9fd
docs(audio): bound publication verification read evidence
seonghobae
committed
92f436a
test(audio): reject invalid publication receipt lengths
seonghobae
committed
dedaab7

Commits on Sep 6, 2026

test(audio): require publication-bound materializer receipt
seonghobae
committed
ed9fe7e
fix(audio): bind published source to native receipt
seonghobae
committed
bdf8f87
docs(audio): align publication identity traceability
seonghobae
committed
539bd57
test(audio): align native oversize policy expectation
seonghobae
committed
51734ce
test(audio): keep zero-byte guard on decode port
seonghobae
committed
dd78dee
test(audio): patch canonical decode boundary
seonghobae
committed
6ef0096
test(audio): preserve unrelated separation test wording
seonghobae
committed
e5726df
docs(security): align local-audio publication authority
seonghobae
committed
46ca91a
test(audio): require no-clobber source publication
seonghobae
committed
45b1f72
fix(audio): publish local source without clobber race
seonghobae
committed
eb972e9
docs(audio): record no-clobber publication decision
seonghobae
committed
55b0da5
test(audio): require path-free publication identity handoff
seonghobae
committed
bad908c
fix(audio): expose path-free publication identity
seonghobae
committed
87bdeea
fix(audio): export publication identity handoff
seonghobae
committed
344a9a3
docs(audio): record path-free publication identity boundary
seonghobae
committed
681675d
test(audio): require native publication identity retention
seonghobae
committed
645457e
test(audio): keep Tauri retention as next production slice
seonghobae
committed
f89996b
test(project): reject oversized source references
seonghobae
committed
03f14fc
test(project): bound renderer source identity bytes
seonghobae
committed
a74d05d
fix(project): bound durable source identity bytes
seonghobae
committed
c956044
fix(project): align renderer source identity ceiling
seonghobae
committed
83127b5
test(audio): require native retention of publication identity
seonghobae
committed
cbfa967
test(audio): keep native-retention RED off canonical head
seonghobae
committed
d8c57ce
test(audio): require native retention of publication identity
seonghobae
committed
106ae75
fix(audio): retain verified publication identity natively
seonghobae
committed
e4e2ba7
docs(audio): record native publication identity retention
seonghobae
committed
9a13d2b
fix(ci): format audio decode regressions
seonghobae
committed
06092be
fix(ci): format audio metadata regression
seonghobae
committed
839f5a0
chore(test): normalize decode docstring wrap
seonghobae
committed
841e1c9
test(project): reject renderer-authored source identity
seonghobae
committed
37ea9a5
fix(project): reject renderer-authored source identity
seonghobae
committed
01c09cf
test(project): block renderer source identity before IPC
seonghobae
committed
4ea8c2a
fix(project): block renderer source identity before IPC
seonghobae
committed
0268568
test(project): align bridge with native source authority
seonghobae
committed
a747cd6
fix(persistence): consolidate desktop core crate root
seonghobae
committed
7b2ade1
fix(persistence): integrate project format into canonical core root
seonghobae
committed
ce81744
refactor(persistence): remove duplicate desktop core wrapper
seonghobae
committed
548c46e
fix(persistence): reconcile Resource Admission stack
seonghobae
committed
2a27d30
fix(persistence): adopt Resource Admission ancestry
seonghobae
committed
8893a92
docs(core): explain canonical compatibility alias
seonghobae
committed
649e335
test(project): require typed resource-admission persistence handoff
seonghobae
committed
3a96be6
fix(project): add typed resource-admission persistence ACL
seonghobae
committed
c2d3541
fix(project): export resource-admission persistence ACL
seonghobae
committed
b0355a9
test(project): fail closed on browser save preview
seonghobae
committed
6eea76f
fix(project): fail closed on browser save preview
seonghobae
committed
cb7f4fd
docs(project): align IPC traceability with native source authority
seonghobae
committed
e29f0de
test(project): require native source-reference save adapter
seonghobae
committed
cd3c67d
fix(project): inject retained native source identity on save
seonghobae
committed
ffdac30
test(project): require explicit project-id save selector
seonghobae
committed
570894b
fix(project): forward explicit project-id save selector
seonghobae
committed
979ac4d
test(project): require mounted local save project identity
seonghobae
committed
28d94d0
fix(project): preserve analyzed local project save authority
seonghobae
committed
06afcbe
docs(project): record native source-reference save handoff
seonghobae
committed
4869ee8
docs(project): correct bridge RED provenance
seonghobae
committed
8f44188
test(project): require restart audio byte re-admission
seonghobae
committed
f1d307d
fix(project): re-admit persisted audio bytes on restart
seonghobae
committed
823cd4a
fix(project): export restart audio re-admission
seonghobae
committed
54390ce
refactor(project): keep restart identity verification minimal
seonghobae
committed
3389786
test(project): cover malformed restart source evidence
seonghobae
committed
20ded47
test(project): distinguish malformed restart identity cases
seonghobae
committed
cbfc23f
docs(project): trace restart source re-admission boundary
seonghobae
committed
8b84312
docs(project): complete restart Security Notes contract
seonghobae
committed
dbe4959
test(project): prove malformed restart evidence is not read
seonghobae
committed
e115811
test(project): require safe app-owned source reopen authority
seonghobae
committed
66ed5ec
fix(project): bind restart re-admission to native opener
seonghobae
committed
f36996f
feat(project): export native reopen ACL
seonghobae
committed
c7e112f
test(project): exercise restart ACL through native opener
seonghobae
committed
b80dea3
test(project): cover project-root restart binding
seonghobae
committed
b975843
style(project): format restart opener coverage
seonghobae
committed
909d54f
docs(project): trace native restart opener boundary
seonghobae
committed
6801d95
test(project): require non-provisioning restart root lookup
seonghobae
committed
ece508c
fix(project): add non-provisioning restart root resolver
seonghobae
committed
f7e8685
test(project): bind restart lookup to read-side resolver
seonghobae
committed
b2fb798
test(project): require production restart source re-admission
seonghobae
committed
9cd4681
fix(project): restore verified source authority on reopen
seonghobae
committed
0f20b07
style(project): rustfmt restart root resolver
seonghobae
committed
ddeff8b
docs(project): trace production restart re-admission
seonghobae
committed
3e21973
docs(project): document restart directory guards
seonghobae
committed
382f029
test(project): reject linked app-local reopen base
seonghobae
committed
1c8bc3d
fix(project): bind reopen to a real app-local base
seonghobae
committed
a839b5b
docs(project): trace app-local reopen authority
seonghobae
committed
9a924ba
test(project): cover Windows app-local reparse base
seonghobae
committed
232db73
test(project): require fresh source bytes at analysis dispatch
seonghobae
committed
90f60a7
fix(project): revalidate app-owned audio before dispatch
seonghobae
committed
ae1f568
fix(project): revalidate source before analysis dispatch
seonghobae
committed
b84ed0e
test(project): format dispatch revalidation contract
seonghobae
committed
f5730fd
docs(traceability): record analysis dispatch revalidation
seonghobae
committed
c6351fc
test(audio): require content-bound decode snapshot
seonghobae
committed
9dc5336
fix(audio): bind decoder to admitted content snapshot
seonghobae
committed
93d2c99
test(audio): require scoped native admission evidence
seonghobae
committed
65baf71
fix(audio): consume scoped native admission evidence
seonghobae
committed
e0bec86
test(audio): require per-process decode evidence handoff
seonghobae
committed
404586a
fix(audio): scope native evidence to analysis child
seonghobae
committed
a0809cd
test(audio): forbid duplicate CLI path decode
seonghobae
committed
cbaaf86
fix(audio): skip duplicate path probe for admitted source
seonghobae
committed
a1136c5
test(audio): pin scoped child evidence contract
seonghobae
committed
e1b5092
style(audio): wrap admitted snapshot construction
seonghobae
committed
88beb62
docs(audio): trace content-bound decoder handoff
seonghobae
committed
e11f73c
test(audio): bind cache workspace to source identity
seonghobae
committed
19c2112
fix(audio): scope analysis workspaces by source digest
seonghobae
committed
063164e
docs(audio): bind cache provenance to source digest
seonghobae
committed
e67f9b2
test(audio): reject uncached Demucs remote lookup
seonghobae
committed
716438d
fix(audio): fail closed before Demucs model download
seonghobae
committed
61b629b
test(audio): preserve mocked Demucs unit boundary
seonghobae
committed
8ccdf20
docs(audio): trace local-only Demucs model admission
seonghobae
committed
b91d120
test(audio): reject tampered cached Demucs checkpoint
seonghobae
committed
fb9571b
fix(audio): verify cached Demucs checkpoint checksum
seonghobae
committed
d043218
docs(audio): trace Demucs cache integrity admission
seonghobae
committed
e2b8721
docs(audio): block commercial Demucs weight packaging
seonghobae
committed
58f30d4
test(separation): require immutable local Demucs snapshot
seonghobae
committed
9fd9b56
fix(separation): bind Demucs load to verified local snapshot
seonghobae
committed
3662de1
test(separation): bound local Demucs snapshot size
seonghobae
committed
7ac4bc1
fix(separation): bound Demucs checkpoint snapshot
seonghobae
committed
c21c6c4
docs(traceability): record bounded Demucs snapshot
seonghobae
committed
cce5638
docs(changelog): record bounded local model load
seonghobae
committed
6cdea97
test(mir): reject Demucs checkpoint growth after preflight
seonghobae
committed
f4ef3dc
fix(mir): bind Demucs snapshot to admitted descriptor size
seonghobae
committed
0d0c6c3
docs(traceability): bind Demucs snapshot to descriptor size
seonghobae
committed
f9758eb
docs(changelog): record exact Demucs snapshot size binding
seonghobae
committed
c7d22c0
test(audio): use one separator import boundary
seonghobae
committed
bd18d28
test(separation): use one Demucs separator import boundary
seonghobae
committed
e8aa3db
test(project): preserve reopen source authority on resave
seonghobae
committed
9ceeb2f
fix(project): retain reopen persistence identity
seonghobae
committed
9a9151d
docs(project): trace reopen save authority
seonghobae
committed
d76d90b
docs(changelog): record reopen resave authority
seonghobae
committed
767b87e
test(mir): expose PyTorch weights-only model incompatibility
seonghobae
committed
5789562
fix(mir): bound PyTorch weights-only model load failure
seonghobae
committed
d395c60
docs(trace): record PyTorch weights-only model boundary
seonghobae
committed
4838ee8
docs(changelog): record bounded Demucs weights-only failure
seonghobae
committed
e4c606b
test(separation): reject unsafe torch load override
seonghobae
committed
3ae3646
fix(separation): fail closed on unsafe torch load override
seonghobae
committed
0d9fb9f
docs(traceability): record torch environment downgrade guard
seonghobae
committed
28c73a3
docs(changelog): record torch environment downgrade guard
seonghobae
committed
dc59326
test(separation): reject torch backend autoload
seonghobae
committed
4d0b16b
fix(separation): fail closed on torch backend autoload
seonghobae
committed
000fdb5
docs(traceability): bind pytorch runtime environment
seonghobae
committed
3fc5a87
docs(changelog): record torch backend autoload guard
seonghobae
committed
4676650
docs(security): structure cross-platform plan notes
seonghobae
committed
f5db38a
docs(security): structure harness plan notes
seonghobae
committed
707d680
docs(security): structure supply-chain plan notes
seonghobae
committed
87d6cd7
docs(security): record analysis dispatch threats
seonghobae
committed
87690cd
docs(traceability): align v2 preference security notes
seonghobae
committed
eee919d
docs(traceability): align v3 source security contract
seonghobae
committed
21fb89b
docs(traceability): align project IPC security notes
seonghobae
committed
9388e8c
docs(architecture): align local audio authority flow
seonghobae
committed
349d67d
test(project): bind dispatch opener closure
seonghobae
committed
8feb0c3
test(project): accept generic restart adapter signature
seonghobae
committed
dbc3dd7
fix(desktop): remove stale rehearsal parser import
seonghobae
committed
8a94753
test(security): format Security Notes policy regressions
seonghobae
committed
67b1ebc
test(ci): fix security notes import order
seonghobae
committed
f9553f0
test(ci): make Security Notes imports Ruff-canonical
seonghobae
committed
542791a
test(ci): match Ruff import-block spacing
seonghobae
committed
bab276e
style(ci): terminate temporal analyzer source canonically
seonghobae
committed
2d2e5a9
style(ci): terminate transcription source canonically
seonghobae
committed
50837f1
style(ci): apply Ruff layout to Security Notes test
seonghobae
committed
46478c4

Commits on Sep 14, 2026

test(project): red for durable local-audio publication
seonghobae
committed
f408b5a
fix(project): add durable no-replace source publication
seonghobae
committed
b758deb
fix(project): route local audio through durable publication
seonghobae
committed
834b45f
test(project): bind local audio to durable publication owner
seonghobae
committed
920bacf
docs(project): record durable local-audio publication boundary
seonghobae
committed
66bb6fb
test(project): preserve source stage on publication rejection
seonghobae
committed
740e052
fix(project): preserve rejected audio publication stage
seonghobae
committed
64ebca3
style(project): restore source newline
seonghobae
committed
85dfbed
test(cache): bind final results to admitted audio identity
seonghobae
committed
af3bf76
test(cache): scope RED to admitted identity
seonghobae
committed
676b8d9
feat(cache): add admitted final-result cache boundary
seonghobae
committed
5802980
feat(cache): verify scoped admitted identity
seonghobae
committed
72e7c7a
fix(cache): bind final results to admitted source identity
seonghobae
committed
49d2c70
test(cache): cover final-result admission edge cases
seonghobae
committed
c45ffdd
docs(cache): document final-result invariants
seonghobae
committed
b80e383
test(cache): reject incomplete persisted rehearsal roles
seonghobae
committed
21b2f3e
fix(cache): validate complete persisted rehearsal roles
seonghobae
committed
32e355f
test(cache): cover complete role admission edges
seonghobae
committed
dc30ae1
test(cache): expose shared-contract admission gaps
seonghobae
committed
93757a1
fix(cache): enforce shared rehearsal contract on reuse
seonghobae
committed
9638481
test(cache): require durable final-result publication
seonghobae
committed
6c39f6a
fix(cache): durably publish final rehearsal results
seonghobae
committed
57c305a
fix(cache): route final-result writes through durable publisher
seonghobae
committed
14db687
test(cache): bind durability failure to production caller
seonghobae
committed
2cfc06b
test(cache): cover platform durability branches
seonghobae
committed
abc4cf1
fix(cache): make durability adapter strict-check clean
seonghobae
committed
901a50a
test(cache): cover unavailable Windows durability binding
seonghobae
committed
8d9c432
docs(cache): trace final-result durability decision
seonghobae
committed
290e320
test(cache): reject unknown persisted rehearsal fields
seonghobae
committed
0d7c35f
fix(cache): enforce shared contract key strictness
seonghobae
committed
4376924
test(cache): cover nested unknown-key boundaries
seonghobae
committed
0b0ab2a
test(cache): require feature-cache integrity and durable ordering
seonghobae
committed
1b43360
fix(cache): bind and durably publish reusable stem arrays
seonghobae
committed
4530cd5
docs(traceability): record feature-cache integrity boundary
seonghobae
committed
cfcc237
test(cache): bound feature-cache admission
seonghobae
committed
e8b2b59
fix(cache): bound reusable feature admission
seonghobae
committed
9f7cb56
test(cache): reject oversized declared stem arrays
seonghobae
committed
f44e0d9
fix(cache): preflight NPZ array declarations
seonghobae
committed
eebc093
docs(cache): trace bounded feature admission
seonghobae
committed
1fa9dd3
test(cache): require MIR generation identity
seonghobae
committed
efcffad
feat(mir): expose canonical separation generation identity
seonghobae
committed
33ebea0
fix(cache): bind reuse to MIR generation
seonghobae
committed
3b1c237
test(mir): cover separation generation identity
seonghobae
committed
f17051f
docs(mir): bind cache reuse to scientific generation
seonghobae
committed
a035d32
test(cache): assert MIR generation binding
seonghobae
committed
8cee952
style(mir): format nested generation test helper
seonghobae
committed
316cf44

Commits on Sep 16, 2026

docs(security): complete final-result cache threat notes
seonghobae
committed
83d7dc3
docs(security): complete feature-cache threat notes
seonghobae
committed
315cb55
test(cache): clarify Windows MoveFileExW mocks
seonghobae
committed
efec25d
test(cache): remove unused pytest import
seonghobae
committed
55e4046
fix(cache): use one ctypes import style
seonghobae
committed
31136a1
test(security): reject fenced Security Notes headings
seonghobae
committed
50372d3
fix(security): ignore fenced headings in notes policy
seonghobae
committed
9c1cb6c
test(security): reject indented code headings
seonghobae
committed
efd4ec0
fix(security): honor Markdown heading indentation
seonghobae
committed
4cbd76d
test(security): preserve CommonMark closing hashes
seonghobae
committed
78b4757
fix(security): parse ATX closing hashes exactly
seonghobae
committed
452a786
test(security): reject Security Notes hidden in HTML comments
seonghobae
committed
764b889
fix(security): ignore raw HTML comment headings in policy parser
seonghobae
committed
905d5eb
test(security): reject Security Notes hidden in raw HTML blocks
seonghobae
committed
d2e3e72
fix(security): exclude CommonMark raw HTML blocks from heading policy
seonghobae
committed
d0be236
chore(security): keep raw HTML parser lint-clean
seonghobae
committed
31e257c
test(security): reject example-only Security Notes evidence
seonghobae
committed
0987542
fix(security): admit only rendered Security Notes evidence
seonghobae
committed
b388722
repair(project): release generic Security Notes ownership
seonghobae
committed
f106b07
repair(project): remove duplicate governance regression owner
seonghobae
committed
83a0e59
repair(project): remove transferred governance RED
seonghobae
committed
79e7588

Commits on Sep 17, 2026

repair(project): format persistence Ruff regressions
seonghobae
committed
347653a
repair(project): sort cache publication imports
seonghobae
committed
7a2a801

Commits on Sep 18, 2026

fix(project): apply Ruff canonical cache import ordering
seonghobae
committed
0f9e01c
style(project): preserve canonical EOF formatting
seonghobae
committed
fc8271b
test(project): require deterministic migration receipts
seonghobae
committed
ef4e0a4
feat(project): emit deterministic migration receipts
seonghobae
committed
e833187
feat(project): export migration receipt contract
seonghobae
committed
abf6611
test(project): prove migration receipt idempotency
seonghobae
committed
74d5bcc
docs(project): trace migration receipt contract
seonghobae
committed
f00ea01
docs(project): make migration and source lifecycle code-current
seonghobae
committed
852236e
test(project): require validated migration copy preparation
seonghobae
committed
2c46d0c
feat(project): prepare validated migration copy
seonghobae
committed
a137fd9
feat(project): export validated migration preparation
seonghobae
committed
04ab3cc
docs(project): trace validated migration copy preparation
seonghobae
committed
01dccee
docs(project): align format lifecycle with prepared migrations
seonghobae
committed
eaba6e3
test(project): require sealed migration plan accessors
seonghobae
committed
5ff8027
fix(project): seal validated migration candidate
seonghobae
committed
fd2e4f2
docs(project): record sealed migration plan invariant
seonghobae
committed
0369f04