3 Commits

Include renames

Author	SHA1	Message	Date
Nick	4eefc15837	fix(lifecycle+auth): canonical gitea auth path, terminalization helper, fault-injection gaps (T15 Parts A-E) ... - scripts/gitea_auth.py: single credential ladder (env -> 0600 token file -> git credential fill); 6 consumers migrated off direct os.environ reads - rune_operator: consolidate 5 duplicated failure blocks into _terminalize_execution_failure; fix 3 fault-injection gaps: (1) dual-module PreparedTool identity split crashed approval-path saves, (2) fallback-model failure escaped send_task (created/pending orphan), (3) running-transition save uncaught (running-with-no-owner) - envelope task.status now agrees with canonical ledger (awaiting_approval) - orphan task_ac35f4e287c8 terminalized failed with durable evidence - tests: gitea auth ladder (6), lifecycle fault matrix (9 boundaries + restart/reload + helper contract); 1280 green in ci-venv; ratchet 352/80	2026-09-11 20:15:57 +01:00
Nick	ca4f7593d7	feat(corrections): #314 defect fix, credential rotation, release guard, task lifecycle, route scoping, PL1 records + metrics ... CORRECTION 1: #314 reopened — recall_with_associations mode field defect CONFIRMED in current source and FIXED (mode: association_merged). CORRECTION 3: Gitea credential removed from remote URL (credential helper). TOKEN EXPOSED: yes (in diagnostic output). TOKEN ROTATED: not yet (requires Gitea web UI access). Remote URL now shows username only, no secret. CORRECTION 4: duplicate-release-commit defect ROOT CAUSE: convergence computed warranted bump from commits-since-tag without checking if master version already satisfies the bump. FIX: already-converged guard in version_convergence.py (master version > last tag → no commit). Repo-aware (args.repo passed to read_version/latest_tag). CORRECTION 6: lifecycle terminalization — execution exception now guarantees task terminalizes as failed with evidence (no immortal RUNNING). CORRECTION 7: route instruction task-scoped on RuneTask.route_instruction (NOT shared operator state). Read-only leading-verb override. Isolation tests prove no cross-contamination between interleaved tasks. PL1-01/02/03/05: pl1_records.py (route resolution, proof level, failure class, candidate status), metrics with honest NOT_YET_MEASURABLE semantics, route-instruction learning loop (PE-1789102658-0269 SEED). 1253 tests green; ratchet 352/80 (shrink); henxels clean.	2026-09-11 15:36:08 +01:00
Nick	2da0afb324	feat(PROV-1): deterministic Source Ledger — renderer, persisted metadata, idempotent Gitea publication (closes #282) ... scripts/source_ledger.py — pure deterministic projection: - build_records: accepted OUTWARD artifact + SOURCE_READ/TOOL_FAILED receipts → ledger records with receipt_id (deterministic hash of stage+tool+ canonical_url+timestamp+seq), source_id, requested_url+resolved_url, domain, status, tool, timestamp, source_type, claim_ids, contradiction_ids, blocked_reason - THE safety invariant: READ impossible without a successful machine receipt; artifact-claimed-read with no matching receipt downgrades to FAILED honestly; BLOCKED/FAILED/NOT_SELECTED back ZERO accepted claims - NOT_SELECTED distinct from BLOCKED (never attempted ≠ attempted-refused) - explicit contradicts_source_ids used when present; legacy nesting labeled in render; plain-string contradictions not linked (labeled honestly) - render_markdown: fixed template; runner/model from persisted factual fields only, UNKNOWN if absent — never reconstructed scripts/publish_source_ledger.py — idempotent Gitea publication: - comment identified by marker containing artifact hash; same hash UPDATES, new hash creates; publication failure raises VISIBLY (never silently falsifies the ledger) and does not alter stage outcomes research_stage_executor.py: model + runner persisted into the accepted OUTWARD artifact (smallest authority point; PROV-1 metadata fields) Real acceptance on #161: 16 records (4 READ with machine receipts replayed from the genuine events file, 12 NOT_SELECTED backing zero claims), ledger live on Gitea issue 161 (comment 3510), idempotency proven (second publish updates same comment). Legacy artifact honestly labeled UNKNOWN for runner/model and legacy-nesting noted in render. 14 ledger tests; full suite 1151 passed; ruff clean.	2026-09-09 18:56:53 +01:00