Fix storage decode policy - #28

Draft

GCdePaula wants to merge 30 commits into

mainfrom

feature/review-ledger-and-tracks

Commits on Aug 24, 2026

feat!: authority-boundary runtime, fact-derived admission, durable history foundation
GCdePaula
committed
f226ce1
docs: distill the corpus — living docs timeless, history in the register
GCdePaula
committed
f1b4b07
fix(egress): make the WS feed's I11 filter unconstructible-to-violate
GCdePaula
committed
1fcb9aa
refactor(run)!: consume config in prepare; one drain loop; collapse the launch bracket
GCdePaula
committed
02a2b34
feat(l1): redact the submitter key at the process edge (SubmitterKey)
GCdePaula
committed
5233880

Commits on Aug 25, 2026

fix(runtime): simplify fee oracle lifecycle and close review gaps
GCdePaula
committed
143a290

Commits on Aug 26, 2026

test(recovery): align E2E clock models
GCdePaula
committed
7a072de

Commits on Sep 4, 2026

docs(review): record the 2026-09-03 branch stock-take

GCdePaula
and
claude
committed
bccf139
fix(ci): stop styling logs off-TTY; assert the danger exit class, not the log line

GCdePaula
and
claude
committed
39748ed
docs: make the runtime prose match what the types enforce

GCdePaula
and
claude
committed
b556578
docs: finish the review-codename sweep

GCdePaula
and
claude
committed
4e66573
chore(storage): gate the remaining test-only surface

GCdePaula
and
claude
committed
b82585d
fix(recovery): log the flush's finality-wait retry as a warning

GCdePaula
and
claude
committed
c8de498
docs(fee): say what fixed_mul's truncation relies on

GCdePaula
and
claude
committed
d1b5b30
fix(ingress): keep the application's error detail out of the /tx 500 body

GCdePaula
and
claude
committed
78d274e
refactor(app): drop the panicking ApplicationProgress constructor

GCdePaula
and
claude
committed
706d1b2
docs(review): record wave 1 of the stock-take follow-ups

GCdePaula
and
claude
committed
43a4391
refactor(runtime): containment writes nothing durable; the bracket writes the black box once

GCdePaula
and
claude
committed
b6c1c3f
refactor(storage): the finalized lease carries its inclusion block non-optionally

GCdePaula
and
claude
committed
0dfab67
fix(recovery): the EnsureOpenTip phase names its causes and enforces its postcondition

GCdePaula
and
claude
committed
09c49b4
refactor(runtime): workers that only need to stop take the notification half

GCdePaula
and
claude
committed
20ae3ca
fix(commands): classify the key file by kind and give every recovery failure one verdict

GCdePaula
and
claude
committed
b346918

Commits on Sep 5, 2026

test(commands): table-drive the exit-code contract and pin two wire values

GCdePaula
and
claude
committed
59010ee
docs(review): record wave 3 of the stock-take follow-ups

GCdePaula
and
claude
committed
8cac024
docs: say only what the code enforces, and give four facts one home

GCdePaula
and
claude
committed
fc1ced5
docs: the register owns the rejected alternatives; the ADR keeps its three homes

GCdePaula
and
claude
committed
1b0f2df
docs: AGENTS.md becomes a map; the invariants register owns the writer roles

GCdePaula
and
claude
committed
c56399a
docs(review): collapse the six stub ledgers into a review history table

GCdePaula
and
claude
committed
32fcea0
docs: module docs explain rather than defend; the abort bound has one name

GCdePaula
and
claude
committed
7c5684e
docs(review): record wave 4 of the stock-take follow-ups

GCdePaula
and
claude
committed
764fda1