Context
Parent: #8828 (Phase 4 — trust surface; highest impact/cost of the architecture items). A contributor closed by ORB today cannot see which ruleset version or clause closed them. The remedy is a content-addressed decision record published with the verdict — the SLSA Verification Summary Attestation shape, which exists for exactly this delegation pattern.
Requirements
- Every terminal verdict emits a structured record: ruleset URI + SHA-256 digest, prompt-template digest, model ID and dated snapshot version, head/base SHAs, resolved-config snapshot hash (digest only — the private VPS config contents stay private), CI check states consumed, and the rule clause(s)/policy closeKind that fired.
- Rendered in the public review surface (bounded, human-readable summary + a details block with the digests) and persisted in full with the decision.
- Digests computed over canonical JSON (stable key order, no insignificant whitespace) so identical inputs always hash identically; the canonicalization function is shared, pure, and exported.
- The decision record is the input format the golden-corpus replay (sibling sub-issue) consumes — one schema, two consumers.
Test Coverage Requirements
99%+ patch coverage, branch-counted; canonicalization property-tested (key order invariance, unicode stability).
Expected Outcome
"The bot closed me" becomes "clause X of ruleset abc123 closed me" — inspectable, arguable, and pinned to content addresses even where contents are private.
Context
Parent: #8828 (Phase 4 — trust surface; highest impact/cost of the architecture items). A contributor closed by ORB today cannot see which ruleset version or clause closed them. The remedy is a content-addressed decision record published with the verdict — the SLSA Verification Summary Attestation shape, which exists for exactly this delegation pattern.
Requirements
Test Coverage Requirements
99%+ patch coverage, branch-counted; canonicalization property-tested (key order invariance, unicode stability).
Expected Outcome
"The bot closed me" becomes "clause X of ruleset abc123 closed me" — inspectable, arguable, and pinned to content addresses even where contents are private.