Root identity: hash-pin every raw microdata input and reference its Chronicle registration (#848) - #853

Open

MaxGhenis wants to merge 13 commits into

mainfrom

root-identity-848

Commits on Sep 2, 2026

Start the #848 root-identity lane journal

MaxGhenis
and
claude
committed
bf83f12
Declare the raw-microdata identity contract in the source manifest loader

MaxGhenis
and
claude
committed
4590061
Derive the Chronicle access class from the artifact kind and pin one registration per file

MaxGhenis
and
claude
committed
0acfa65
Pin every UK raw microdata root to a Chronicle registration and list the rest

MaxGhenis
and
claude
committed
45d5af5
Refuse to build from raw microdata whose bytes are not the registered ones

MaxGhenis
and
claude
committed
92cddc6
Record the root-identity rule in DESIGN.md and add the changelog fragment

MaxGhenis
and
claude
committed
0274235
Bring the #848 lane journal up to the implemented contract

MaxGhenis
and
claude
committed
607718e
Refuse an ambiguous microdata key instead of picking one of its pins

MaxGhenis
and
claude
committed
7f7be2c
Re-pin the manifest and spec digests after rebasing onto main

MaxGhenis
and
claude
committed
a3130e3
Read the pinned digest without an assert in the identity gate

MaxGhenis
and
claude
committed
24cc32a
Scope the shared allowlist by country when auditing a raw manifest mapping

MaxGhenis
and
claude
committed
eaf9216
Match the UK bundle's quoting to the generated US one and re-pin the spec digests

MaxGhenis
and
claude
committed
24c16b5
Note in the lane journal that source_runtime source is spec-attested

MaxGhenis
and
claude
committed
b90e550