Skip to content

v0.19.0 — Verified Repair Proposal Governance Scaffolding

Choose a tag to compare

View all tags
@Alajmah Alajmah released this 21 Jun 00:49
· 181 commits to master since this release
v0.19.0
77544c6

v0.19.0 — Verified Repair Proposal Governance Scaffolding

v0.19.0 implements the governed repair-proposal lifecycle, durable evidence boundaries, patch artifacts, verification-result gates, critic-review gates, and receipt/snapshot scaffolding.

Passing verification remains disabled until an isolated executor backend is authorized. verified and review_ready are intentionally unreachable — ALLOWED_PASS_EXECUTION_BACKENDS is empty and the host spawn executor always returns inconclusive.

Repair Pipeline

detected → evidence_collected → proposed → verified → review_ready → approved → applied → verified_after_apply

States verified and review_ready are structurally wired but dormant.

Items Shipped

# Item PR Commit
1 Repair Proposal Model #47 dd0923c
2 Trusted CI Evidence Collection #48 8eb9aea
3 Diagnosis Worker #49 3ee70cf
4 Patch Proposal Worker #50 b744638
5 Verification Boundary #51 6a45db9
6 Critic Review Boundary #52 fc81bda
7 Execution-Receipt Backend #53 ebcff5d

New Infrastructure

  • Migrations: 031–035 (repair proposals, event provenance, patch artifacts, execution receipts, source snapshots)
  • Canonical methods: recordCiEvidenceCollection(), recordPatchProposal(), recordVerificationResult(), recordCriticReview()
  • Shared verifier: 15-check verifyExecutionReceiptAgainstLockedProposal() — used by both verification and critic gates
  • Durable receipts: Content-addressed, write-once, re-hashed under lock
  • Source snapshots: Composite key (snapshot_hash, repo_full_name, base_sha) prevents cross-repo collisions
  • Background queues: ci-evidence, diagnosis, patch, verification, critic

Test Coverage

57 suites, 1,961 tests — all green.

Next Milestone

v0.20.0 — Isolated Pass-Capable Executor: A Docker/Podman/nsjail backend can produce a pass receipt only when it runs the canonical validation plan in an isolated, resource-bounded environment with no network, no credentials, non-root execution, pinned image digest, and verified source/artifact bindings.

Assets 2
Loading