Sherlock audit external-v3 — 24 verified findings closed - #27

Merged

sshlg merged 25 commits into

mainfrom

sherlock/impl-20260907

Sep 9, 2026

Commits on Sep 8, 2026

FIX-AS-01.01 — the saga state model: operation_id, pending/applied/unknown/compensated, and no compensation on a guess

Робот
and
claude
committed
3a55516

Commits on Sep 9, 2026

FIX-AS-01.02 — reconciliation and serialization: ask by key, CAS the ledger, compensate only your own

Робот
and
claude
committed
e8487fa
FIX-AS-02.01 — zero is a value, not an absence: the first real spend of a watched-from-zero key counts

Робот
and
claude
committed
4074cb8
FIX-AS-03.01 — similarity proposes, the contradiction gate disposes

Робот
and
claude
committed
8fe002d
FIX-AS-03.02 — the temporal evidence lifecycle: nothing exempts the present from the present

Робот
and
claude
committed
37c0272
FIX-AS-04.01 — the fake-edge test is typed: no payload is not no constraint

Робот
and
claude
committed
bec2c24
FIX-SY-04.02 (cross-repo half) — the coordination note names the resource claim

Робот
and
claude
committed
78f9192
FIX-AS-06.01 — the first release ships with an executable seed corpus

Робот
and
claude
committed
65402d3
FIX-AS-07.01 — the order ban keeps the mandatory happens-before

Робот
and
claude
committed
eee1ff2
FIX-AS-09.01 — extensible OTel fields, and total vs disjoint-bucket tokens

Робот
and
claude
committed
751eda0
FIX-AS-09.02 — disjoint billing buckets reconcile, no token charged twice

Робот
and
claude
committed
3e37e17
FIX-AS-11.01 — the approval grant contract: a boolean the model can set is not authorization

Робот
and
claude
committed
bb002c3
FIX-AS-11.02 — threat-model limits: the trifecta is not full security

Робот
and
claude
committed
b36f14a
FIX-EV-01.23 — the outcome corpus: agent-evals no longer passes by name

Робот
and
claude
committed
9fa1f98
FIX-EV-01.24 — the outcome corpus: agent-harness no longer passes by name

Робот
and
claude
committed
643a36e
FIX-EV-01.25 — the outcome corpus: agent-interop no longer passes by name

Робот
and
claude
committed
fd8c49e
FIX-EV-01.26 — the outcome corpus: agent-orchestrator no longer passes by name

Робот
and
claude
committed
37e493e
FIX-AS-05.01 — auditability is a property of the execution record, not of a static graph

Робот
and
claude
committed
09e295f
FIX-AS-08.01 — proportion intervals and trial units carry their assumptions

Робот
and
claude
committed
39e7116
FIX-AS-08.02 — paired/clustered/unpaired separated; splits are spent once

Робот
and
claude
committed
5f22cb4
FIX-AS-10.01 — a regrade of an old output is not a check of the candidate

Робот
and
claude
committed
0bce8e8
FIX-AS-12.01 — the MCP shipping example pins its SDK

Робот
and
claude
committed
c2f4195
FIX-AS-13.01 — "long-running" is not a protocol choice

Робот
and
claude
committed
13f2853
FIX-AS-14.01 — "no evals" no longer makes the whole audit unfalsifiable

Робот
and
claude
committed
3fc5cf9
ci: the house audit MEASURES the token budget instead of estimating it

Робот
and
claude
committed
71e8484

Navigation Menu

Sherlock audit external-v3 — 24 verified findings closed - #27

Sherlock audit external-v3 — 24 verified findings closed#27
sshlg merged 25 commits into
mainfrom
sherlock/impl-20260907

Commits on Sep 8, 2026

FIX-AS-01.01 — the saga state model: operation_id, pending/applied/unknown/compensated, and no compensation on a guess

Commits on Sep 9, 2026

FIX-AS-01.02 — reconciliation and serialization: ask by key, CAS the ledger, compensate only your own

FIX-AS-02.01 — zero is a value, not an absence: the first real spend of a watched-from-zero key counts

FIX-AS-03.01 — similarity proposes, the contradiction gate disposes

FIX-AS-03.02 — the temporal evidence lifecycle: nothing exempts the present from the present

FIX-AS-04.01 — the fake-edge test is typed: no payload is not no constraint

FIX-SY-04.02 (cross-repo half) — the coordination note names the resource claim

FIX-AS-06.01 — the first release ships with an executable seed corpus

FIX-AS-07.01 — the order ban keeps the mandatory happens-before

FIX-AS-09.01 — extensible OTel fields, and total vs disjoint-bucket tokens

FIX-AS-09.02 — disjoint billing buckets reconcile, no token charged twice

FIX-AS-11.01 — the approval grant contract: a boolean the model can set is not authorization

FIX-AS-11.02 — threat-model limits: the trifecta is not full security

FIX-EV-01.23 — the outcome corpus: agent-evals no longer passes by name

FIX-EV-01.24 — the outcome corpus: agent-harness no longer passes by name

FIX-EV-01.25 — the outcome corpus: agent-interop no longer passes by name

FIX-EV-01.26 — the outcome corpus: agent-orchestrator no longer passes by name

FIX-AS-05.01 — auditability is a property of the execution record, not of a static graph

FIX-AS-08.01 — proportion intervals and trial units carry their assumptions

FIX-AS-08.02 — paired/clustered/unpaired separated; splits are spent once

FIX-AS-10.01 — a regrade of an old output is not a check of the candidate

FIX-AS-12.01 — the MCP shipping example pins its SDK

FIX-AS-13.01 — "long-running" is not a protocol choice

FIX-AS-14.01 — "no evals" no longer makes the whole audit unfalsifiable

ci: the house audit MEASURES the token budget instead of estimating it