feat(lab): CL-02 immutable evidence ledger and projection - #1333

Merged

Wibias merged 31 commits into

lidge-jun:devfrom

Wibias:feat/cl-02-evidence-ledger

Aug 9, 2026

Commits on Aug 9, 2026

feat(lab): CL-02 immutable evidence ledger and SQLite projection
Wibias
committed
247d2d3
docs(devlog): record CL-02 draft PR #1333 and implementation tip
Wibias
committed
cb94cf0
docs(devlog): point CL-02 stack tip at current branch HEAD
Wibias
committed
07bc292
fix(lab): harden CL-02 evidence ledger per review findings
Wibias
committed
96ecd65
test(lab): add CL-02 review regression coverage and update status
Wibias
committed
cf626d1
fix(lab): close CL-02 phase-2 independent-review blockers
Wibias
committed
1251d31
fix(lab): reject symlink targets before artifact create
Wibias
committed
00785fd
fix(lab): lstat symlink squatters before artifact create
Wibias
committed
afc6697
fix(lab): centralize evidence producer version
Wibias
committed
40725d6
fix(lab): fail closed when sanitizing evidence
Wibias
committed
1eb173d
fix(lab): enforce restricted state directories
Wibias
committed
f7c0a8c
fix(lab): validate suite manifest authority
Wibias
committed
0afa852
fix(lab): bound invalidation target lookup
Wibias
committed
527d97f
fix(lab): make purge artifact retention fail closed
Wibias
committed
4f6f9ab
fix(lab): constrain projection enum columns
Wibias
committed
21906ac
fix(lab): make sensitive purge progress explicit
Wibias
committed
2af46f3
fix(lab): complete ledger appends across short writes
Wibias
committed
a12a555
fix(lab): reject POSIX paths before ledger admission
Wibias
committed
3dddcda
fix(lab): verify artifact digests by class
Wibias
committed
f3d878a
fix(lab): persist real conformance evidence metadata
Wibias
committed
441b782
fix(lab): enforce verification contracts and freshness
Wibias
committed
dca7624
fix(lab): make verdict projection contract-safe
Wibias
committed
6ed1838
fix(lab): rebuild projection atomically
Wibias
committed
0644000
fix(lab): accept measured runner timestamps
Wibias
committed
9ba59cd
test(lab): cover phase-2 evidence fixes
Wibias
committed
1ac3d32
fix(lab): classify artifact filesystem failures
Wibias
committed
daab377
fix(lab): remove raw ledger production reader
Wibias
committed
e5af56a
docs(lab): document sensitive purge exception
Wibias
committed
02ca5b5
refactor(lab): isolate validation error type
Wibias
committed
eecec3a
refactor(lab): break validation import cycle
Wibias
committed
0c9dc4d
fix(lab): validate claim source event ids
Wibias
committed
1eed4ff

Navigation Menu

feat(lab): CL-02 immutable evidence ledger and projection - #1333

feat(lab): CL-02 immutable evidence ledger and projection#1333
Wibias merged 31 commits into
lidge-jun:devfrom
Wibias:feat/cl-02-evidence-ledger

Commits on Aug 9, 2026

feat(lab): CL-02 immutable evidence ledger and SQLite projection

docs(devlog): record CL-02 draft PR #1333 and implementation tip

docs(devlog): point CL-02 stack tip at current branch HEAD

fix(lab): harden CL-02 evidence ledger per review findings

test(lab): add CL-02 review regression coverage and update status

fix(lab): close CL-02 phase-2 independent-review blockers

fix(lab): reject symlink targets before artifact create

fix(lab): lstat symlink squatters before artifact create

fix(lab): centralize evidence producer version

fix(lab): fail closed when sanitizing evidence

fix(lab): enforce restricted state directories

fix(lab): validate suite manifest authority

fix(lab): bound invalidation target lookup

fix(lab): make purge artifact retention fail closed

fix(lab): constrain projection enum columns

fix(lab): make sensitive purge progress explicit

fix(lab): complete ledger appends across short writes

fix(lab): reject POSIX paths before ledger admission

fix(lab): verify artifact digests by class

fix(lab): persist real conformance evidence metadata

fix(lab): enforce verification contracts and freshness

fix(lab): make verdict projection contract-safe

fix(lab): rebuild projection atomically

fix(lab): accept measured runner timestamps

test(lab): cover phase-2 evidence fixes

fix(lab): classify artifact filesystem failures

fix(lab): remove raw ledger production reader

docs(lab): document sensitive purge exception

refactor(lab): isolate validation error type

refactor(lab): break validation import cycle

fix(lab): validate claim source event ids