v146.0 — Execution Bridge (Proof-Carrying Actions)

🚀 Release Notes
v146.0 — Execution Bridge (Proof-Carrying Actions)
Summary

Introduces the Execution Bridge layer: a deterministic, proof-carrying representation of governed actions.

This release converts:

decision → governance → allow

into:

decision → refinement → governance → certified action capsule

without introducing execution semantics.

This is the first step from analysis → application representation.

Core Additions
New Module
src/qec/analysis/action_capsule_kernel.py
New Artifacts
ActionDescriptor
Minimal, bounded, canonical action representation
Strict schema enforcement
No execution semantics allowed
ProofCarryingActionCapsule
Frozen, canonical, lineage-linked artifact
Governance-certified (allow only)
Fully replay-safe
Deterministic identity (capsule_hash, replay_identity)
ActionCapsuleProofReceipt
Compact verification artifact
Validates capsule integrity without re-execution
Core API
build_action_capsule(
transition_receipt,
refinement_receipt,
governance_receipt,
) -> (ProofCarryingActionCapsule, ActionCapsuleProofReceipt)
Determinism Guarantees

Canonical JSON:

json.dumps(..., sort_keys=True, separators=(",", ":"), ensure_ascii=True, allow_nan=False)
Stable SHA-256 hashing (lowercase, 64-char hex)

Replay identity:

SHA-256(transition_hash | refinement_hash | governance_hash)

Float normalization:

round(value, 12)
No randomness, no wall-clock, no async
Integrity & Validation
Strict Enforcement
governance verdict MUST be "allow"
full lineage consistency across:
transition
refinement
governance
descriptor ↔ capsule lineage cross-checks
nested stable_hash validation:
transition decisions
refinement steps
governance policy + checks + verdict
Payload Constraints
minimal schema only:
transition identity
refined outcome
governance linkage
no redundant lineage duplication
no execution semantics
no NaN / inf
no dynamic structure
Hash Safety
self-hash exclusion enforced (no recursion)
canonical hashing delegated to canonical_hashing
SHA-256 format strictly validated
deterministic tuple construction (no sets)
Test Coverage

New test suite:

tests/test_action_capsule_kernel.py
Coverage includes:
deterministic replay
cross-instance determinism
canonical reconstruction
lineage mismatch rejection
governance rejection (hold, reject)
nested tampering detection
payload schema enforcement
hash format validation
tuple ordering stability
self-hash consistency

All tests passing:

10/10 passed

• existing upstream tests passing
  Architectural Position

QEC now supports:

deterministic decision system

• governance layer
• policy evaluation lab
• proof-carrying action representation

This release introduces:

representation of execution

NOT:

execution itself
Constraints (Preserved)
analysis-layer only
no decoder changes
no side effects
no runtime hooks
no I/O
no control loops
no device interaction
Strategic Impact

v146.0 establishes the formal bridge:

governed decision → certifiable action artifact

This enables:

downstream verification systems
execution adapters (future)
formal audit pipelines
proof-carrying workflows
Final Note

This release maintains the QEC law:

same input → same bytes

while extending the system into application-ready form without compromising determinism.