[ticket-017] feat(anonym): preserve diagnostic context

[tom-sapletta-com]

Created by governed goal -a pull-request delivery.

[ifuri-validator-agent]

Deterministic Validator approval for exact head 610bcb1db9bff2bb2021a47be2543cb747ce4b9b.

Ticket: ticket-017
Correlation ID: fixos-pr-35-ticket-017-610bcb1db9
Model: zai/glm-5.3
Reviewed diff chunks: 5
Advisory LLM verdict: APPROVE
Advisory summary: Reviewed all 5 diff chunk(s). Chunk 1/5 refactors the anonymizer into a context-preserving alias system with a backward-compatible facade. Tests pass on all platforms. No blocking issues visible in this chunk. | Chunk 2 of the anonymizer refactor: rewrites anonymize() with ordered irreversible redaction, stable contextual aliases for hostnames/home paths/UUIDs/IPv4 with classification, SHA-256 payload digest, and a hardened deanonymize() requiring context plus allowed_aliases for contextual resolution with legacy token fallback. Ticket-017 governance docs added. Code is security-oriented and tests all pass. | Chunk contains ticket documentation and logs for the ticket-017 anonymization work. Reported test evidence is consistent, with all hosted and local checks passing (including the two corrections iterated after multi-environment verification). Claims are precise: no Docker E2E result is claimed where infrastructure failed, no credentials used, and root-cause analysis for boundary defects is documented with regression coverage. | This chunk contains ticket-017 governance metadata, preprompt documentation, and updated e2e tests reflecting the new category-scoped alias anonymization format ([USER-2], [IP-PRIVATE-1], [UUID-1]). Tests no longer rely on preserving raw subnet prefixes, aligning with the opaque-alias design. All CI checks pass. | Test-only chunk adding thorough regression and contract tests for the anonymizer: context-preserving aliases, fail-closed deanonymization, IP semantics, idempotence, and report leak checks. Assertions were updated to the new alias scheme ([USER-2], [IP-PRIVATE-1]).
Advisory findings: none
The LLM output above is advisory and was not used as the approval trust root.
Merge will be attempted after this approval when explicitly authorized.

Decision record (recomputable)

DECISION D-017-1417
TICKET ticket-017
HEAD_SHA 610bcb1db9bff2bb2021a47be2543cb747ce4b9b
CORRELATION_ID fixos-pr-35-ticket-017-610bcb1db9
ACTOR agent:ifuri-validator-agent[bot]
APPLIED_RULE P-CORE-015
INPUT author_login = "tom-sapletta-com"
INPUT observed_checks = ["test-summary=PASS","test (3.12)=PASS","test (3.10)=PASS","test-alpine=PASS","test-arch=PASS","test-debian=PASS","test (3.11)=PASS","test-fedora=PASS","test-ubuntu=PASS","governance / remote lifecycle=PASS","onedev/local-verify=PASS"]
INPUT required_checks = ["onedev/local-verify","test (3.10)","test (3.11)","test (3.12)","test-summary"]
INPUT required_checks_source = "protected registry (env/request)"
INPUT reviewer_login = "ifuri-validator-agent[bot]"
INPUT superseded_checks = []
VERDICT APPROVE AUTHORITY DETERMINISTIC
REJECTED REQUEST_CHANGES BECAUSE NO_UNSAFE_CHANGE_REASON_FOUND
ADVISORY llm_verdict = "APPROVE" MODEL "zai/glm-5.3"
ASSERT VERDICT_AUTHORITY != "ADVISORY"