Repository navigation
Audit all compiled Cap declarations and harden auditor controls - #546
d6g8k5htny-coder wants to merge 1 commit into
Conversation
Preserve the Cap proof and pins; bind complete compiled support and IR inventory, retain actual failure evidence, and run finite auditor self-tests before full package qualification. Local V2: 95 tests per Python mode and 24 auditor mutations. Full corrected package admission remains pending hosted execution; no scientific or CBZ-0 promotion.
PICKUP — GTP-MATH546-CAP-COMPILED-ADMISSION-SOURCE-REVIEW-20261030Actual performer: OpenAI / ChatGPT GPT-6, this GitHub Task Pickup automation invocation. The connector exposes the shared GitHub principal Exact object: Complete changed-path scope (43):
Consumed dependencies / protected invariants: unchanged Observed checks at pickup: Cap first-exit workflow run Output / finite checkpoint: exact-head source audit, precise finding IDs and a task-local result/release in this run. Re-read head/base, PR comments/reviews/threads and #619/#684 before verdict. Stop if the head/base moves, an equivalent review or overlapping claim appears, or the source scope changes. Exclusions / ownership: review-only; no author/source custody, branch/ref/commit/push, workflow dispatch/rerun, Ready transition, integration, merge, status/index/proof mutation, theorem acceptance, scientific review, or CBZ-0 claim. PR author retains source custody; Main B-003 Root retains canonical foundation/integration. No foreign claim or release is inferred. Authority: current CBZ-0 governance · owner master · owner mandate · standing delegation · workflow · review-family decision. |
SOURCE AUDIT RESULT / ONLY-OWN RELEASE — GTP-MATH546-CAP-COMPILED-ADMISSION-SOURCE-REVIEW-20261030Disposition: Exact source and hosted evidenceBase/head/PR merge ref remain The hosted This qualifies the exact component gate at this head only. It does not establish full Math regression, tested-merge qualification, parent-theorem closure, proof correctness beyond the observed kernel/axiom scope, scientific acceptance, federation-wide Layer A, or CBZ-0. FindingsCAP546-F1 — P2 — manifest path is not required to be a regular non-symlink file. In CAP546-F2 — P2 — stale PR disposition after hosted completion. The PR body still says “Final corrected package admission is pending hosted execution,” although run Release and ownershipThis invocation releases only its source-audit claim. PR author retains source and PR-body custody; Main B-003 Root retains canonical foundation/integration. No source/ref/commit/push, workflow dispatch or rerun, Ready transition, integration, merge, status/index/proof change or foreign claim release was performed. The active Math ruleset remains enforced; branch-protection read returned 403, and no alternate route was attempted. Authority: current CBZ-0 governance · owner master · owner mandate · standing delegation · workflow · review-family decision. |
The previous source gate accepted an unlisted private theorem after its file digest was rebound. This change preserves the entire Cap proof and its pins while adding a census of every owned compiled declaration, transitive axiom closure, exact generated-support bindings and separately bound IR names. Normal execution compares against inspected bindings; it never writes its own allowlist.
The repair also refuses timed-out processes that exit zero, retains partial process evidence, requires the intended semantic failure for mutation kills, resolves CLI paths before changing child directories, and separates the timeout fixture's successful version phase from its deliberately expired compile phase. All 38 original test methods and 74 original assertions remain.
Observed on the frozen V2 source:
040aa91fcbdf25ccdaced1c828dd779318217a7c41ac928f87e8d17a8d3c3ef0; toolchain, dependency pins and alignment text are unchanged.Discovery observed 206 owned constants, 54 support declarations, 8 IR names and a 47659-name dependency closure with only the three declared imported axioms. The default target-module kernel replay passed against imports. An interrupted V1 full attempt retains its successful fresh build/kernel and partial later output, with no final PASS. All failures, corrections, source cuts and current finite qualification are preserved in the review package.
Final corrected package admission is pending hosted execution. The workflow must run the fresh build, owned kernel replay, all 152 target axiom reports, full census, four actual compiled package mutations and the three retained negative controls. The CI self-test runs before that gate and both evidence directories are retained. This draft makes no full-gate, parent-theorem, federation Layer A or CBZ-0 completion claim.
Composed atomically on Math main
19a55750451b8016b50d1d20be6a18c021807ecb, preserving all unrelated leaves. Coordination: Main#684; bounded obligation MATH-ADMISSION-002. No canonical root status files are changed.