Repository navigation

Phase 02a Packet 9 — audit infrastructure and the entitlement socket - #18

Merged

cemililik merged 75 commits into

mainfrom

development

Sep 11, 2026

Merged

Phase 02a Packet 9 — audit infrastructure and the entitlement socket#18
cemililik merged 75 commits into
mainfrom
development

Commits on Sep 7, 2026
- docs(decisions): decide the audit write path and the entitlement socket
  
  cemililik
  and
  claude
  committed
  6bbc63a
- docs(decisions): amend the five records ADR-0044 and ADR-0045 touch
  
  cemililik
  and
  claude
  committed
  d509c1e
Commits on Sep 8, 2026
- docs: bring the corpus into line with the two Packet 9 decisions
  
  cemililik
  and
  claude
  committed
  5f1fd0f
- docs(decisions): amend the two Packet 9 records against what shipped
  
  cemililik
  and
  claude
  committed
  339fef4
- docs: apply the Opus round and close what it left undecided
  
  cemililik
  and
  claude
  committed
  d676a87
- docs: close the Sonnet round over the Step 1 corpus
  
  cemililik
  and
  claude
  committed
  cac681d
- feat(audit): declare the ports Packet 9 builds against
  
  cemililik
  and
  claude
  committed
  2f10295
- fix(audit): close what the Step 2 review measured
  
  cemililik
  and
  claude
  committed
  e6f0b5f
- docs(audit): carry Amendment 5 into the documents that teach the shapes
  
  cemililik
  and
  claude
  committed
  f762e45
- docs(audit): close the Sonnet round over Step 2
  
  cemililik
  and
  claude
  committed
  4fecf68
- feat(audit): ship the audit schema and its append-only guards
  
  cemililik
  and
  claude
  committed
  75e3362
- fix(audit): close the Opus round over the audit schema
  
  cemililik
  and
  claude
  committed
  443b8cf
- fix(audit): close the Sonnet round over the audit schema
  
  cemililik
  and
  claude
  committed
  f91bd67
- feat(audit): ship the capture and the store
  
  cemililik
  and
  claude
  committed
  c0113c1
- fix(audit): close the Opus round over the capture and the store
  
  cemililik
  and
  claude
  committed
  103803d
- fix(audit): capture the value the column holds, not the entity's
  
  cemililik
  and
  claude
  committed
  bc0d8cf
- fix(audit): close the Sonnet round over the capture and the store
  
  cemililik
  and
  claude
  committed
  dc97924
- docs(audit): settle the three questions the light-up had to answer
  
  cemililik
  and
  claude
  committed
  4c6808c
- feat(audit): light up the pipeline
  
  cemililik
  and
  claude
  committed
  fdb4be4
Commits on Sep 10, 2026
- fix(audit): close the Opus round over the pipeline light-up
  
  cemililik
  and
  claude
  committed
  4ac79ed
- fix(audit): close the Sonnet round over the pipeline
  
  cemililik
  and
  claude
  committed
  14d7593
- feat(tenancy): audit the rejected tenant assertion
  
  cemililik
  and
  claude
  committed
  3d69e4d
- fix(tenancy): close the Opus round over the assertion recorder
  
  cemililik
  and
  claude
  committed
  7f51f68
- fix(audit): close the Sonnet round over the assertion recorder
  
  cemililik
  and
  claude
  committed
  7a49a8d
- feat(cache): admit the killswitch overlay as the second platform family
  
  cemililik
  and
  claude
  committed
  817341d
- feat(tenancy): let an entitlement have no scheduled expiry
  
  cemililik
  and
  claude
  committed
  e8438f6
- feat(tenancy): ship platform_killswitches, read side only
  
  cemililik
  and
  claude
  committed
  11f5964
- feat(entitlements): the key vocabulary and its three registries
  
  cemililik
  and
  claude
  committed
  ffbe507
- feat(entitlements): the provider port and its working default
  
  cemililik
  and
  claude
  committed
  c19b767
- feat(tenancy): the killswitch overlay read path
  
  cemililik
  and
  claude
  committed
  6cca3ef
- feat(tenancy): IFeatureFlags, the only module-facing read
  
  cemililik
  and
  claude
  committed
  67118b1
- docs(entitlements): reconcile the corpus with the shipped socket
  
  cemililik
  and
  claude
  committed
  3e133f5
- fix(entitlements): close the review round over the socket
  
  cemililik
  and
  claude
  committed
  12f7111
- test(audit): implement the six rules the catalogue owed Packet 9
  
  cemililik
  and
  claude
  committed
  56a5176
Commits on Sep 11, 2026
- docs: close Packet 9 in the repository's own status blocks
  
  cemililik
  and
  claude
  committed
  025b493
- fix(decisions): revert an undisclosed edit to Accepted ADR-0043
  
  cemililik
  and
  claude
  committed
  43eb956
- fix(tooling): pop the pre-commit WIP stash when others exist
  
  cemililik
  and
  claude
  committed
  5c30444
- fix(audit): give every intent its subject, context and own outcome
  
  cemililik
  and
  claude
  committed
  2c8c515
- fix(tenancy): commit the platform-scope entry before any work runs
  
  cemililik
  and
  claude
  committed
  1e44556
- test(audit): key the coverage rules on request types, not slugs
  
  cemililik
  and
  claude
  committed
  a47c109
- fix(entitlements): close three gaps the socket's review measured
  
  cemililik
  and
  claude
  committed
  4aa6735
- test(audit): pin frame ownership on the in-transaction writer too
  
  cemililik
  and
  claude
  committed
  5eb5a50
- test(api): resolve every shipped handler from the API's own container
  
  cemililik
  and
  claude
  committed
  6a1d320
- test(audit): restore the closed-set CHECK rule a rewrite deleted
  
  cemililik
  and
  claude
  committed
  54b8933
- test(audit): write the PublicSurface cross-check the catalogue owed
  
  cemililik
  and
  claude
  committed
  03f8f05
- docs: reconcile the corpus with Packet 9's review round
  
  cemililik
  and
  claude
  committed
  35d77ad
- fix(audit): record a collection only where its membership is known
  
  cemililik
  and
  claude
  committed
  c28da8b
- test(audit): hold both composition roots to the discovered catalogue
  
  cemililik
  and
  claude
  committed
  20a60df
- test(audit): fail aggregate-only modules and unreadable matrix rows
  
  cemililik
  and
  claude
  committed
  1fe99d4
- test(audit): pin the frame lifecycle for classification and silence
  
  cemililik
  and
  claude
  committed
  fb33df3
- docs: reconcile the corpus with Packet 9's second review round
  
  cemililik
  and
  claude
  committed
  ab57a0b
- fix(audit): stop calling a created root complete once it loses a member
  
  cemililik
  and
  claude
  committed
  9a7c0b0
- test(audit): read the registering module's matrix and every annotation
  
  cemililik
  and
  claude
  committed
  63c6677
- docs: reconcile the corpus with Packet 9's third review round
  
  cemililik
  and
  claude
  committed
  04a8f91
- fix(deps): move three packages off high-severity advisories
  
  cemililik
  and
  claude
  committed
  9bcd4a0
- ci(backend): fail on any high advisory and build on a patched SDK
  
  cemililik
  and
  claude
  committed
  bb8d30b
- test(audit): refuse set-based writes the audit capture cannot see
  
  cemililik
  and
  claude
  committed
  82c96c8
- docs: close Packet 9's review follow-ups in the corpus
  
  cemililik
  and
  claude
  committed
  b2a2e4f
- docs(decisions): amend four ADRs for Packet 9's review rounds
  
  cemililik
  and
  claude
  committed
  f54fc7b
- fix(security): name the tenant in the two raw projection reads
  
  cemililik
  and
  claude
  committed
  6cf28ff
- fix(audit): record a host mapping's key whole in audit_log
  
  cemililik
  and
  claude
  committed
  38b19df
- fix(audit): raise a standalone write failure once, from the store
  
  cemililik
  and
  claude
  committed
  a4113d9
- test(audit): read every append-only target and every matrix carrier
  
  cemililik
  and
  claude
  committed
  af4e9f2
- docs: reconcile the corpus with Packet 9's fourth review round
  
  cemililik
  and
  claude
  committed
  46ab3ad
- docs(decisions): amend ADR-0033, 0040 and 0045 for the fourth review
  
  cemililik
  and
  claude
  committed
  cb2d5a5
- fix(audit): make audit_config's live-override index partial
  
  cemililik
  and
  claude
  committed
  b8a7b08
- fix(api): send Retry-After on every 503
  
  cemililik
  and
  claude
  committed
  a42d742
- fix(audit): report each write failure once, from whoever saw it
  
  cemililik
  and
  claude
  committed
  7348a18
- fix(entitlements): refuse a flag read that names no real tenant
  
  cemililik
  and
  claude
  committed
  97747ad
- refactor(api): register the lazy data source once
  
  cemililik
  and
  claude
  committed
  b7df1c8
- test(audit): write the cases the fifth review found missing
  
  cemililik
  and
  claude
  committed
  1e49c0f
- ci(backend): pin the SDK in global.json and refuse empty test runs
  
  cemililik
  and
  claude
  committed
  375b06c
- docs: reconcile the corpus with Packet 9's fifth review round
  
  cemililik
  and
  claude
  committed
  26cac61
- docs: link the plain-entity list instead of counting it again
  
  cemililik
  and
  claude
  committed
  4732ba7
- docs(decisions): amend ADR-0033, 0044 and 0045 for the fifth review
  
  cemililik
  and
  claude
  committed
  0c56c75

Commits

Commits on Sep 7, 2026

Commits on Sep 8, 2026

Commits on Sep 10, 2026

Commits on Sep 11, 2026