Skip to content

feat(policy): add accountable traces and exact replay - #73

Merged
Codevena merged 55 commits into
masterfrom
feat/policy-accountability-trace
Aug 11, 2026
Merged

feat(policy): add accountable traces and exact replay#73
Codevena merged 55 commits into
masterfrom
feat/policy-accountability-trace

Conversation

@Codevena

Copy link
Copy Markdown
Owner

Summary

  • add a closed 18-pass policy catalog plus two explanatory stages and per-finding accountability traces
  • persist canonical audit traces and run exact provider-free Bench and Rig ablations
  • add branch-isolated multi-turn replay, artifact binding, contract fixtures, and mutation evidence

Verification

  • bun test: 3515 pass, 12 skip, 0 fail across 454 files
  • bunx tsc --noEmit
  • bun run lint: 670 files clean
  • bun run build
  • compiled bench matrix, rig replay, and audit help smokes
  • independent contract and security reviews: PASS, no CRITICAL or WARN

Notes

No policy pass is deleted or default-disabled in this slice. The next milestone measures all passes before pruning.

Codevena added 30 commits August 7, 2026 12:31
31 of 36 recorded pilot turns open with the previous turn's final
pending.json, byte-identical; 13 turns count findings they did not
produce, 9 of them produce none of their own.

The archiver's docstring says it captures every version that APPEARS
while a turn runs; it was implemented as every version that EXISTS.
The harvester then folds those into the turn's totals, corrupting the
M2 denominator and slope, M3 recall, M4 escape rate, suppression
totals and criticRuns attribution.

Rule: a report belongs to the turn whose audit delta contains its
run_id (verified 1:1 across all 34 recorded gate runs). Works
retroactively on the pilots; no rebuild needed for that half.
@Codevena
Codevena merged commit 214bd3f into master Aug 11, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant