Skip to content

Preserve bounded retained capability failure locations - #4716

Merged
2 commits merged into
mainfrom
work/db429-1024-capability-failure-evidence
Oct 24, 2026
Merged

2 commits merged into
mainfrom
work/db429-1024-capability-failure-evidence

Conversation

@shiny-code-app

@shiny-code-app shiny-code-app Bot commented Oct 24, 2026 •

Copy link
Copy Markdown
Contributor

Discord Blue testing preparation passed capability qualification, but its following activation returned only false from a matching terminal capability run. The service dropped the failure location, so the supported caller could not identify the refusing predicate.

Emit bounded numeric stdin traceback locations and preserve them with the exact recognized Python-body SHA-256 through inspection and completed negative preparation receipts, including replay. Existing native marker validation and source bounds reject malformed or out-of-body evidence. Historical programs remain recognizable and missing evidence stays unknown. No capability predicate, full specification comparison, immutable-image proof, custody, retry, qualification or deployment authority changes. No new records or recovery framework.

Related #4333 and cbusillo/discord-blue#265. Both completed negative activations and all old resources remain retained. Live continuation waits for actual deployment of this change and a fresh hold check.

Validation on f79fc0d: failing-first old-producer, cold-import and terminal-receipt regressions; 40 focused tests pass; whole application-flow module 101 pass; seven selected reader/capability/preparation/caller safety modules 99 tests complete (98 passed, one existing optional skip). Ruff, formatting, mypy over 1763 files, new-comment checks and OpenAPI drift pass. Test-quality scan reports only existing candidates in unchanged files. IDE inspection NOT RUN under the explicit brief ban. All 45 current-head CI checks are green; complete-suite CI is the required Ready gate.

Own Anthropic claude-opus-5-5[1m] diagnosis and two source review rounds completed. Reproduced defects fixed; final review found no blocking defect. Current-head disposition: #4716 (comment) . Ten files, 328 insertions and 14 deletions, mostly executable behavior coverage.

Client test notes

Nothing for the Client to test: bounded internal diagnostics for a held testing lane.

@shiny-code-app

Copy link
Copy Markdown
Contributor Author

Review result: weighed
Head: f79fc0d

Review disposition for f79fc0d.

Own review of record: Anthropic claude-opus-5-5[1m], model confirmed by CLI, effort unreported. Both source rounds completed through model-review; final review read the final source directly and found no blocking defect, no medium-or-higher finding, and no regression in safety, authorization, custody, retry or qualification.

Round-one reproduced defects fixed: production stdin frames are tested using compile(..., "", "exec"); structural AST raise-line checks catch offsets; the fresh-interpreter import cycle is fixed by moving marker constants to the existing leaf module. Removed the unnecessary Odoo emitted-script change. Independently reproduced and fixed terminal negative preparation receipts dropping the same diagnostic fields, with stable replay and no second provider dispatch.

Final-round dispositions:

  • Documentation placement: decline as organization only. The final paragraph accurately documents completed preparation receipts in the existing activation document; both paragraphs remain correct. It changes no operator decision or supported action.
  • Defensive marker revalidation: retain the existing closed boundary; negligible cost and protects the inspection consumer.
  • Split imports: cosmetic, Ruff passes; no behavior defect.
  • Unsupported partial legacy-program negative fixture: code already rejects that variant; current exact/legacy provenance coverage passes. Additional coverage alone does not justify a further patch after two rounds.

Failing-first evidence includes actual old-producer missing-marker replay, cold-import failure and terminal-receipt metadata loss. Current focused tests: 40 pass. Final selected reader safety: 99 tests pass with one existing optional skip. Final full application-flow module and CI remain pending as of this comment. Ruff, formatting and mypy over 1763 files pass. IDE inspection NOT RUN under the explicit brief ban; no IDE process touched.

The end-to-end invariant is that safe non-secret provider refusal/backoff evidence survives provider, service and supported caller. Missing evidence stays UNKNOWN and cannot qualify a lane. All existing full-specification and immutable-image proofs remain mandatory.

@shiny-code-app

Copy link
Copy Markdown
Contributor Author

Ready for the merge train

Head: f79fc0d

@shiny-code-app shiny-code-app Bot added the ready-to-merge Every Code PR is ready for repository owner merge review label Oct 24, 2026
@shiny-code-app

shiny-code-app Bot commented Oct 24, 2026 •

Copy link
Copy Markdown
Contributor Author

Launchplane completed the merge-train step for this pull request.

Launchplane landed this pull request through protected batch PR #4731.

Launchplane manages this comment and will update it as the train moves.

shiny-code-app Bot added a commit that referenced this pull request Oct 24, 2026
@shiny-code-app shiny-code-app Bot closed this pull request by merging all changes into main in 23ba61a Oct 24, 2026
@shiny-code-app
shiny-code-app Bot deleted the work/db429-1024-capability-failure-evidence branch October 24, 2026 18:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ready-to-merge Every Code PR is ready for repository owner merge review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants