Graph-complete corpus federation
AsDecided v0.29.0 composes a bounded graph of pinned corpora into one verified, source-aware closure while preserving source identity, read-only inheritance, and deterministic resolution.
What shipped
- Added manifest version 2 with one to 32 direct parents, bounded recursive DAG verification, topology-binding
sha256-v2pins, same-pin diamond deduplication, deterministic cycle and divergent-pin failures, and complete physical-route verification. - Made
corpus.sourcethe stable global namespace for artifacts and paths, with source-qualified IDs, source-local aliases, legal equal IDs across sources, and deterministic bare-reference ambiguity. - Added explicit Decision-backed override chains and diamond reconvergence while retaining every original, replacement, rationale, mapping owner, and provenance state.
- Unified validation, search, retrieval,
decisions-for, Gate, Sentry, all six MCP tools, caches, audit identity, and viewer/documents/graph exports over the same immutable verified closure. - Added
decided corpus statusfor verified topology and projection reporting. - Added
decided corpus explainfor contextual resolution and complete ordered override provenance. - Added a runnable four-source federation example with two direct parents, a shared diamond ancestor, independently verified routes, and an explicit root override.
- Added versioned Draft 2020-12 schemas for viewer, documents, and graph export contracts.
Compatibility and boundaries
Repositories without a manifest and manifest-v1 repositories retain their released behaviour. Inherited corpus material remains read-only at every depth, and stale, tampered, cyclic, divergent, ambiguous, or escaping routes fail before partial output.
Corpus truth remains forge-neutral: Core consumes verified working-tree bytes and does not require GitHub, Cursor Origin, a remote named origin, a branch named main, a .git directory, or network access.