Operational rename, slice 1: CHRONICLE_* env names, chronicle.db output, configurable buckets, cutover checklist (#143, mechanism 3) - #226

Open

MaxGhenis wants to merge 105 commits into

mainfrom

ops-rename-slice1

Commits on Sep 4, 2026

Add one shared chronicle-first env helper

MaxGhenis
and
claude
committed
d9c3199
Make R2 buckets configurable and emit chronicle.db

MaxGhenis
and
claude
committed
e2e0af0
Add hermetic tests for the rename window

MaxGhenis
and
claude
committed
de03d37
Document the rename window and the bucket cutover

MaxGhenis
and
claude
committed
08d950b
Pin the boundary guard against the bucket rename

MaxGhenis
and
claude
committed
d032ec5
Isolate the rename window for every test, not one module

MaxGhenis
and
claude
committed
b8d717d
Refuse to attach a recorded R2 URI to different bytes

MaxGhenis
and
claude
committed
5cb357a
Document publisher revisions alongside the bucket rename

MaxGhenis
and
claude
committed
58706dd
Record the gate round-1 fixes in PROGRESS.md

MaxGhenis
and
claude
committed
0e7e095
Read the recorded object's identity from its URI too

MaxGhenis
and
claude
committed
83b8ba0
Pin the preserved block's field order too

MaxGhenis
and
claude
committed
45b7d25
Say what the reproduction actually ran

MaxGhenis
and
claude
committed
8cf2886
Record the round-2 gate findings and the corpus scan

MaxGhenis
and
claude
committed
c074341
Reject the chronicle spelling of the derived-row marker

MaxGhenis
and
claude
committed
5e41b75
Let CHRONICLE_SCHEMA configure the mirror writer, at call time

MaxGhenis
and
claude
committed
fa4a82f
Address the manifest a fetch is actually revising, and read it strictly

MaxGhenis
and
claude
committed
e68fdd0
Document identity, manifest selection and locator checks

MaxGhenis
and
claude
committed
ad828b1
Name the strict storage reader for the pair it belongs to

MaxGhenis
and
claude
committed
7b68988
Record what each round-2 fix does and how it was reproduced

MaxGhenis
and
claude
committed
272283e
Say which fields a recorded block actually needs

MaxGhenis
and
claude
committed
7f628d1
Say what --record-revision is an opt-in over

MaxGhenis
and
claude
committed
0605c47
Say when the manifest guards actually run

MaxGhenis
and
claude
committed
3abacef
Drop a blank line ruff format rejects after the rebase onto #228
MaxGhenis
committed
f6bce08
Gate round: manifest-name refusals reach the CLI, files blocks are validated before I/O, renames are refused by name, preserved-bucket objects are skipped not red, stray default manifests are refused
MaxGhenis
committed
73a1826
Record into a fresh mapping when a manifest's files block is an explicit null
MaxGhenis
committed
d911e1f
Start Sol gate round progress log
MaxGhenis
committed
2e8aae0
Refuse unsafe fetch manifest rewrites
MaxGhenis
committed
7c06b1a
Sweep every package manifest safely
MaxGhenis
committed
19f0cf2
Validate R2 routes before cutover skips
MaxGhenis
committed
4042819
Restore Supabase schema compatibility aliases
MaxGhenis
committed
c218dcc
Make the Supabase cutover instructions truthful
MaxGhenis
committed
701712c
Complete strict artifact preflight coverage
MaxGhenis
committed
2881a8c
Record Sol gate final verification
MaxGhenis
committed
0c04260
Start eight-finding Sol gate progress log
MaxGhenis
committed
8688cbd
Reproduce duplicate manifest key loss
MaxGhenis
committed
7cabf11
Read artifact manifests with strict YAML loader
MaxGhenis
committed
a430d2d
Record strict manifest loader progress
MaxGhenis
committed
a49e1f4
Reproduce artifact and manifest path escapes
MaxGhenis
committed
82d05b4
Harden artifact and manifest path boundaries
MaxGhenis
committed
f2432cd
Record path-boundary fixes
MaxGhenis
committed
403e500
Reproduce stale shared-file revision owners
MaxGhenis
committed
b0d29b7
Update every owner of a revised shared artifact
MaxGhenis
committed
215cc4f
Record shared revision ownership fix
MaxGhenis
committed
20b4028
Reproduce tracked registry cutover failures
MaxGhenis
committed
a644be8
Preserve compatible historical R2 routes
MaxGhenis
committed
eb4d43a
Record cutover compatibility fix
MaxGhenis
committed
ec902b0
Reproduce malformed revision history loss
MaxGhenis
committed
5f55184
Refuse malformed revision history before I/O
MaxGhenis
committed
9e26ca5
Record revision history validation
MaxGhenis
committed
f5efc50
Reproduce frozen Supabase schema aliases
MaxGhenis
committed
27909da
Honor schema env in compatibility exports
MaxGhenis
committed
cdc7968
Record schema compatibility fix
MaxGhenis
committed
9060f18
Reproduce residual artifact boundary escapes
MaxGhenis
committed
1096ace
Close residual artifact path boundaries
MaxGhenis
committed
f2fc086
Record residual path boundary hardening
MaxGhenis
committed
26d22e4
Preflight complete packages before raw publish
MaxGhenis
committed
619d5cd
Reproduce source-package artifact path escapes
MaxGhenis
committed
3db6c85
Reproduce normalized source artifact alias
MaxGhenis
committed
531de1c
Reproduce manifest-named source artifact read
MaxGhenis
committed
70b2d69
Reproduce source-package manifest path escapes
MaxGhenis
committed
bd49f52
Harden source-package artifact paths
MaxGhenis
committed
f431ae7
Reproduce residual artifact side effects
MaxGhenis
committed
446bd17
Preflight artifact operations before side effects
MaxGhenis
committed
6f74c4f
Record artifact preflight verification
MaxGhenis
committed
c4f59fe
Record final eight-finding verification
MaxGhenis
committed
7e62a1e
Reproduce Sol round-3 findings: identity segments, alias enumeration, resource-directory containment, non-regular manifests
MaxGhenis
committed
29336c2
Close Sol round 3: canonical identity segments, alias enumeration, resource-directory containment, non-regular manifests refused
MaxGhenis
committed
768bed8
docs: start peer round 4 fix journal
MaxGhenis
committed
0981354
test: reproduce publication preflight and identity findings
MaxGhenis
committed
317f051
fix: validate immutable R2 provenance in source artifact loading
MaxGhenis
committed
c88b8c7
fix: require exact canonical manifest identity declarations
MaxGhenis
committed
1727737
fix: validate logical vintages in every manifest consumer
MaxGhenis
committed
12ef53d
fix: refuse facts citing configured derived storage routes
MaxGhenis
committed
ce083e7
fix: refuse nonregular source package resources before opening
MaxGhenis
committed
8bb8219
fix: report nonregular manifest siblings through shared errors
MaxGhenis
committed
2c683a4
test: exercise sibling refusal through the top-level CLI
MaxGhenis
committed
2f7cb31
test: cover locator validation and remaining publication routes
MaxGhenis
committed
4cecc72
fix: preflight the complete derived tree before publication
MaxGhenis
committed
1c3a223
fix: refuse normalized artifact aliases in publication and inventory
MaxGhenis
committed
b223066
fix: validate new publication identities before artifact reads
MaxGhenis
committed
1570fec
fix: validate recorded R2 identity before counting inventory links
MaxGhenis
committed
b7c88a1
fix: bind custom derived publication to recognized provenance routes
MaxGhenis
committed
9a6345f
fix: recognize derived R2 provenance regardless of URI scheme case
MaxGhenis
committed
62cc351
test: cover noncanonical report identities and namespace escapes
MaxGhenis
committed
b3511ed
fix: serialize raw identity refusals without weakening validation
MaxGhenis
committed
b87231f
fix: keep publication vintage and build segments inside their routes
MaxGhenis
committed
20663fb
docs: record final focused checks and full-suite restart
MaxGhenis
committed
d6d9fad
docs: record completed peer round 4 verification
MaxGhenis
committed
a00e274
Pin the cutover sweep test by its invariants, not today's registry counts
MaxGhenis
committed
ba8147a
Reproduce Astra round-1 findings: legacy -derived routes accepted; YAML-aliased owners skipped on revision
MaxGhenis
committed
49a3ad7
Keep the legacy -derived route rule beside configured routes; identify revision owners by manifest and vintage
MaxGhenis
committed
e72f194
Judge duplicate manifest keys before YAML merges expand
MaxGhenis
committed
ff99d83

Commits on Sep 5, 2026