From ffccf2deb14be42facbe487c2871564d2e4e5d32 Mon Sep 17 00:00:00 2001 From: "david.yapfest.club" Date: Wed, 16 Sep 2026 05:37:47 -0400 Subject: [PATCH] Record owner ratification of the T-3a/T-3b split (2026-09-16, relayed via Anna) The P0 sitting approved T-1/T-2/T-3 as written and pre-dated the T-3a/T-3b refinement; ADR-012 and DECISIONS.md asserted 'owner-ratified' for the split pending an explicit owner act. Owner's response via Anna: 'can be considered signed'. This commit documents that act in both records; no rule text changed - the docs now rest on a real ratification instead of a documented assumption. --- DECISIONS.md | 2 +- decisions/ADR-012-promotion-evidence-governance.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/DECISIONS.md b/DECISIONS.md index 8d8aead701..f9b3e135a7 100644 --- a/DECISIONS.md +++ b/DECISIONS.md @@ -44,7 +44,7 @@ Entries give **Question; Blocks; Options; Inclination; Evidence; Depends; Status **Question:** Which concepts are native, protected-service objects, or kernel objects; what is the TCB and derived ABI? **Blocks:** implementation boundary. **Options:** minimal kernel, capability microkernel, broader runtime. **Inclination:** derive ABI from protected transitions, not operation count; archive the provisional sketch. **Evidence:** invariant-to-enforcer map; [ADR-011](decisions/ADR-011-boundary-and-abi.md) — **RESOLVED 2026-09-13: TRUSTED_RUNTIME selected** by the frozen v15 strict-subset selector over a G6-authorized production bundle (`_inner_validate` True; exposure sets 48/28/24; unique strict subset; evidence run `v15-evidence-003`, 518/518 jobs, zero halts; independent decision review seven-of-seven CONFIRMED). Known limitations recorded in ADR-011 as D-012 inputs (pin granularity; pre-freeze assembly gate). **Status:** `RESOLVED`. ### D-012 -**Question:** How are Promotion evidence, policy evolution, compiler/verifier trust, freshness, and replay protection governed? **Blocks:** recursive proof. **Options:** pinned policy, signed generations, diverse/reproducible builds. **Inclination:** evidence binds image/source/toolchain/tests/verifier/policy/parent/freshness. **Evidence:** [ADR-012](decisions/ADR-012-promotion-evidence-governance.md) — **RESOLVED 2026-09-14: governance contracts G-1..G-4 adopted** (pre-freeze assembly gate; whole-file identity retained with deferred protected-worker pilot under owner-ratified triggers T-1/T-2/T-3a, plus T-3b: compiler-verifier assurance and the malicious-candidate matrix reopen — and block promotion — at the recursive-proof milestone or any candidate self-build promotion; immutable policy generations with typed compatibility outcomes; final-point fresh one-use admission with global replay registry and atomic final-point transitions), evidenced by bounded executable models rev17 (68/68 tests incl. the alternate-digest retry reconciliation probe, the exception-atomicity failure-injection probes at every commit boundary, the standalone-API-absence probe, the metaclass-behavior probes over M-A intake and M-B time rejection, behavioral identifier/digest/outcome probes, exception-string probes, the no-copy-protocol intake probe, cyclic/over-deep value probes, immutable-expiry-ceiling probes, non-finite-float rejection probes, single-snapshot pair-intake probes, injective-encoding probes, snapshot-derived fork probe, reentrant temporal probes, parameterized cross-registry linearizability probes, no-mutation postconditions, reentrant recovery/expiry probes, closed-grammar and time-domain probes; machine-readable run result) and adversarial reviews (`reviewer:d012-packet-reviewer`, `reviewer:d012-resolution-reviewer`, `reviewer:d012-final-reviewer`, `reviewer:d012-rev5-verify2`, `reviewer:d012-final-reviewer2`, `reviewer:d012-rev7-verifier`, `reviewer:d012-rev8-verifier`, `reviewer:d012-rev9-verifier`, `reviewer:d012-rev10-verifier`, `reviewer:d012-rev11-verifier`, `reviewer:d012-rev12-verifier`, `reviewer:d012-rev13-verifier`, `reviewer:d012-rev14-verifier`, `reviewer:d012-rev15-verifier`, `reviewer:d012-rev16-verifier` — findings corrected through rev17; rev16 review verdict PASS). **Review-closure gate G-5 adopted 2026-09-15** (owner-approved; adversarial review ADOPT-WITH-AMENDMENTS; prospective — first applied to the hosted-proof loop). Owner P0: constrained orchestrator model, TCB pricing deferred, lean caps. Known deferred item: protected-worker pilot (triggers recorded). **Status:** `RESOLVED`. +**Question:** How are Promotion evidence, policy evolution, compiler/verifier trust, freshness, and replay protection governed? **Blocks:** recursive proof. **Options:** pinned policy, signed generations, diverse/reproducible builds. **Inclination:** evidence binds image/source/toolchain/tests/verifier/policy/parent/freshness. **Evidence:** [ADR-012](decisions/ADR-012-promotion-evidence-governance.md) — **RESOLVED 2026-09-14: governance contracts G-1..G-4 adopted** (pre-freeze assembly gate; whole-file identity retained with deferred protected-worker pilot under owner-ratified triggers T-1/T-2/T-3a, plus T-3b: compiler-verifier assurance and the malicious-candidate matrix reopen — and block promotion — at the recursive-proof milestone or any candidate self-build promotion; immutable policy generations with typed compatibility outcomes; final-point fresh one-use admission with global replay registry and atomic final-point transitions), evidenced by bounded executable models rev17 (68/68 tests incl. the alternate-digest retry reconciliation probe, the exception-atomicity failure-injection probes at every commit boundary, the standalone-API-absence probe, the metaclass-behavior probes over M-A intake and M-B time rejection, behavioral identifier/digest/outcome probes, exception-string probes, the no-copy-protocol intake probe, cyclic/over-deep value probes, immutable-expiry-ceiling probes, non-finite-float rejection probes, single-snapshot pair-intake probes, injective-encoding probes, snapshot-derived fork probe, reentrant temporal probes, parameterized cross-registry linearizability probes, no-mutation postconditions, reentrant recovery/expiry probes, closed-grammar and time-domain probes; machine-readable run result) and adversarial reviews (`reviewer:d012-packet-reviewer`, `reviewer:d012-resolution-reviewer`, `reviewer:d012-final-reviewer`, `reviewer:d012-rev5-verify2`, `reviewer:d012-final-reviewer2`, `reviewer:d012-rev7-verifier`, `reviewer:d012-rev8-verifier`, `reviewer:d012-rev9-verifier`, `reviewer:d012-rev10-verifier`, `reviewer:d012-rev11-verifier`, `reviewer:d012-rev12-verifier`, `reviewer:d012-rev13-verifier`, `reviewer:d012-rev14-verifier`, `reviewer:d012-rev15-verifier`, `reviewer:d012-rev16-verifier` — findings corrected through rev17; rev16 review verdict PASS). **Review-closure gate G-5 adopted 2026-09-15** (owner-approved; adversarial review ADOPT-WITH-AMENDMENTS; prospective — first applied to the hosted-proof loop). **Owner ratification of the T-3a/T-3b split recorded 2026-09-16** (relayed via Anna; owner: "can be considered signed"). Owner P0: constrained orchestrator model, TCB pricing deferred, lean caps. Known deferred item: protected-worker pilot (triggers recorded). **Status:** `RESOLVED`. ### D-013 **Question:** Which native target substrate follows the hosted proof? **Blocks:** H1 only. **Options:** seL4/Microkit, other capability kernel, exokernel, custom. **Inclination:** none before semantic evidence. **Evidence:** TCB/port experiments. **Depends:** D-011. **Status:** `DEFERRED`. diff --git a/decisions/ADR-012-promotion-evidence-governance.md b/decisions/ADR-012-promotion-evidence-governance.md index e5d9fabd47..2b4024e157 100644 --- a/decisions/ADR-012-promotion-evidence-governance.md +++ b/decisions/ADR-012-promotion-evidence-governance.md @@ -18,7 +18,7 @@ D-012 resolves as a **governance contract**, not an empirical discrimination: - **P0-1: CONSTRAINED.** The orchestration layer is treated as fallible, not hostile. (Residual: TA-1 in the packet's trusted-assumption register; a hostile posture would activate the pilot via T-3 and tighten the fence.) - **P0-2: TCB-composition pricing DEFERRED.** Recorded as an open evaluator-design question. D-011's TRUSTED_RUNTIME result is unaffected (its criterion was frozen before evaluation). -- **P0-3: Triggers ADOPTED as written** (P0 sitting approved T-1/T-2/T-3), subsequently refined and **owner-ratified** into **T-1/T-2/T-3a (identity pilot) + T-3b (compiler-verifier assurance and malicious-candidate matrix reopen at the recursive-proof milestone or any candidate self-build promotion, blocking promotion until resolved)**. +- **P0-3: Triggers ADOPTED as written** (P0 sitting approved T-1/T-2/T-3), subsequently refined and **owner-ratified** into **T-1/T-2/T-3a (identity pilot) + T-3b (compiler-verifier assurance and malicious-candidate matrix reopen at the recursive-proof milestone or any candidate self-build promotion, blocking promotion until resolved)**. **Owner ratification of the T-3a/T-3b split itself recorded 2026-09-16** (relayed via Anna; owner's words: "can be considered signed") — the P0 sitting had approved the original T-1/T-2/T-3 as written and pre-dated the split; with this record the refinement is confirmed by an explicit owner act rather than resting on documented assumption. - **P0-4: Lean caps ADOPTED** (models bounded to the named transition classes and crash cuts; scope growth requires a versioned packet invalidation). ## Process record -- 2.51.2