Register raw microdata releases as source artifacts: licence/access fields, hash-only registration, first UK registrations (#221) - #227

Open

MaxGhenis wants to merge 70 commits into

mainfrom

microdata-registration

Commits on Sep 4, 2026

Add one shared chronicle-first env helper

MaxGhenis
and
claude
committed
ca00231
Make R2 buckets configurable and emit chronicle.db

MaxGhenis
and
claude
committed
03c5b5d
Add hermetic tests for the rename window

MaxGhenis
and
claude
committed
c386594
Document the rename window and the bucket cutover

MaxGhenis
and
claude
committed
69c7c4f
Pin the boundary guard against the bucket rename

MaxGhenis
and
claude
committed
b3c80ac
Isolate the rename window for every test, not one module

MaxGhenis
and
claude
committed
5fdea39
Refuse to attach a recorded R2 URI to different bytes

MaxGhenis
and
claude
committed
aad6d69
Document publisher revisions alongside the bucket rename

MaxGhenis
and
claude
committed
f0265b3
Record the gate round-1 fixes in PROGRESS.md

MaxGhenis
and
claude
committed
a4bfec6
Read the recorded object's identity from its URI too

MaxGhenis
and
claude
committed
7e9a58d
Pin the preserved block's field order too

MaxGhenis
and
claude
committed
6cb181b
Say what the reproduction actually ran

MaxGhenis
and
claude
committed
a9591fc
Record the round-2 gate findings and the corpus scan

MaxGhenis
and
claude
committed
7101fb1
Reject the chronicle spelling of the derived-row marker

MaxGhenis
and
claude
committed
b46bee1
Let CHRONICLE_SCHEMA configure the mirror writer, at call time

MaxGhenis
and
claude
committed
d9476ef
Address the manifest a fetch is actually revising, and read it strictly

MaxGhenis
and
claude
committed
e7d1cd1
Document identity, manifest selection and locator checks

MaxGhenis
and
claude
committed
03bbe5c
Name the strict storage reader for the pair it belongs to

MaxGhenis
and
claude
committed
6f1ea25
Record what each round-2 fix does and how it was reproduced

MaxGhenis
and
claude
committed
f742d08
Say which fields a recorded block actually needs

MaxGhenis
and
claude
committed
ee9bdb3
Say what --record-revision is an opt-in over

MaxGhenis
and
claude
committed
53d038a
Say when the manifest guards actually run

MaxGhenis
and
claude
committed
3fceb40
Drop a blank line ruff format rejects after the rebase onto #228
MaxGhenis
committed
aa768dd
Gate round: manifest-name refusals reach the CLI, files blocks are validated before I/O, renames are refused by name, preserved-bucket objects are skipped not red, stray default manifests are refused
MaxGhenis
committed
70e46f9
Record into a fresh mapping when a manifest's files block is an explicit null
MaxGhenis
committed
fb1bc1d
Add licence/access fields and hash-only artifact registration

MaxGhenis
and
claude
committed
31f7aa1
Register FRS 2023-24 and SPI 2022-23 hash-only, add the emit/plan script

MaxGhenis
and
claude
committed
b774dbe
Test the registration refusal surface end to end

MaxGhenis
and
claude
committed
58298fc
Document hash-only registrations and the BE-SILC blocker

MaxGhenis
and
claude
committed
8a4acf5
Refuse a multi-file vintage in the source-package artifact path

MaxGhenis
and
claude
committed
cf8b218
Close six escapes found auditing the registration boundary

MaxGhenis
and
claude
committed
67ca2ce
Document --kind for public microdata releases

MaxGhenis
and
claude
committed
c9f53e5
Match house doc style in the new sections

MaxGhenis
and
claude
committed
1ea2a56
Make classification, redistribution evidence and attestation explicit

MaxGhenis
and
claude
committed
17e91fc
Validate the manifest and the filename before a fetch touches anything

MaxGhenis
and
claude
committed
44e1f8d
Refuse hash-only entries at the byte reader, before any store is touched

MaxGhenis
and
claude
committed
060f2b6
Register consumer pins with their commit and plan the reviewed identity

MaxGhenis
and
claude
committed
29f8afc
Pin every refusal with hermetic tests and a synthetic consumer checkout

MaxGhenis
and
claude
committed
98d3765
Document the explicit kind, the evidence rule, attestation and staging

MaxGhenis
and
claude
committed
d88373d
Reconcile the rebase onto PR #226's gate round

MaxGhenis
and
claude
committed
baf9449
Hold the byte boundary across every manifest a package directory keeps

MaxGhenis
and
claude
committed
c0d9d74
Read manifests strictly and validate every entry field the byte boundary relies on

MaxGhenis
and
claude
committed
7f9bfe6
Start PR 227 Sol fix progress ledger
MaxGhenis
committed
c2a906f
Reproduce manifest boundary findings 1 through 4
MaxGhenis
committed
02c5a3b
Enforce complete manifest boundary validation
MaxGhenis
committed
235c616
Reproduce registration persistence findings
MaxGhenis
committed
c19e3b5
Make hash-only registration atomic and alias-safe
MaxGhenis
committed
3a2a048
Reproduce inventory and sweep findings
MaxGhenis
committed
197a3fc
Validate inventory locators and discover all manifests
MaxGhenis
committed
d184b5a
Reproduce consumer pin provenance findings
MaxGhenis
committed
beeb468
Bind consumer pins to loaded Git blobs
MaxGhenis
committed
94fa6f9
Reproduce adversarial registration boundary gaps
MaxGhenis
committed
36965eb
Extend adversarial boundary reproductions
MaxGhenis
committed
57156d1
Refuse symlinked registration output paths
MaxGhenis
committed
56c74fc
Honor normalized byte identity at every boundary
MaxGhenis
committed
c2b7722
Bind recorded R2 objects to complete release identity
MaxGhenis
committed
9648d82
Scope release identity checks to microdata
MaxGhenis
committed
71a0744
Record focused verification after hardening
MaxGhenis
committed
5376913
Reproduce traversal and non-commit pin gaps
MaxGhenis
committed
f6305cb
Extend final adversarial reproductions
MaxGhenis
committed
d7db5f8
Reproduce publish preflight ordering gap
MaxGhenis
committed
e1d1ac1
Check symlinks before resolving parent traversal
MaxGhenis
committed
073edaa
Require commit objects and compare FRS access drift
MaxGhenis
committed
231e7bc
Preflight complete packages before publishing
MaxGhenis
committed
c88649b
Record focused verification
MaxGhenis
committed
2675a1c
Correct focused format count
MaxGhenis
committed
4421db2
Reproduce publish preflight byte-read gap
MaxGhenis
committed
8bf5f84
Refuse invalid packages before reading artifacts
MaxGhenis
committed
6552612
Record no-read preflight verification
MaxGhenis
committed
b605d96
Record final verification
MaxGhenis
committed
5557cb9