fix(sync): verify threshold human attestations#1997

Open

gltanaka wants to merge 150 commits into

codex/issue-1932-playwright-adapterfrom

codex/issue-1932-threshold-attestation

Commits on Jul 11, 2026

feat: add verifiable global sync foundation

Greg Tanaka
authored and
Greg Tanaka
committed
feat: enforce canonical sync proof boundaries

Greg Tanaka
authored and
Greg Tanaka
committed
fix: harden sync transaction destination writes

Greg Tanaka
authored and
Greg Tanaka
committed
fix: block unstaged protected sync mutations

Greg Tanaka
authored and
Greg Tanaka
committed
feat: bind candidate wheel to sync certificate

Greg Tanaka
authored and
Greg Tanaka
committed
docs: record round nine sync blockers

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce foundation CI regressions

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): resolve foundation CI regressions

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce remaining CodeQL alerts

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): eliminate remaining CodeQL alerts

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce remaining foundation regressions

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): restore foundation compatibility boundaries

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce xhigh review findings

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): harden xhigh certification boundaries

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce xhigh re-review findings

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): close xhigh re-review gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix: harden sync certification harness

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce top-level pytest probe shadow

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): load pytest collection probe by absolute path

Greg Tanaka
authored and
Greg Tanaka
committed
test(heal): reproduce manual-merge operation failure

Greg Tanaka
authored and
Greg Tanaka
committed
fix(heal): skip manual-merge terminal operations

Greg Tanaka
authored and
Greg Tanaka
committed
fix: harden candidate lifecycle wheel install

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover pytest support isolation gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): bind pytest support and private home

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce unbound candidate wheel provenance

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): bind candidate wheel to certified source

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): verify candidate provenance in certificate paths

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): isolate protected pytest execution

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): align verifier fixture with provenance policy

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): keep runner contract lint-clean

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce CLI candidate replay gap

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): wire candidate replay ledger in certify

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce concurrent candidate replay race

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): make candidate replay ledger atomic

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce historical provenance expiry

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): validate historical provenance at observation time

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce protected pytest closure gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): protect exact-head pytest closure

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce unmeasured lifecycle runtime lock

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): bind measured lifecycle runtime inputs

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): keep hardened foundation lint-clean

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce round-nine trust-boundary gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): close provenance and support-closure gaps

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce sandbox loader and replay gaps

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): require lifecycle measurement schema

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): enforce verifiable execution and replay boundaries

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): expose remaining verification boundary gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): require portable verifiable boundaries

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): define protected replay root boundary

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): anchor candidate replay storage at protected root

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): expose round 11 trust boundary gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): close round 11 verification boundaries

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): expose round 13 verification boundaries

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): close round 13 verification boundaries

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): ignore reaped supervised processes

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): provision hosted runner sandbox with sudo

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce missing trusted Jest adapter

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): add trusted Jest verification adapter

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): fail closed for unbound Jest project plugins

Greg Tanaka
authored and
Greg Tanaka
committed
test: cover Jest trust boundary gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix: bind Jest support closure and reject local runner

Greg Tanaka
authored and
Greg Tanaka
committed
test: cover remaining Jest trust gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix: harden Jest command and closure trust

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover Jest round three gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): wire protected Jest validation CLI

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): normalize JS support imports

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): reject pathless JS validator operands

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): retain Jest trust checks before isolation

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce missing trusted Vitest adapter

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): add trusted Vitest verification adapter

Greg Tanaka
authored and
Greg Tanaka
committed
test: cover Vitest trust boundary gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix: bind Vitest support closure and reject local runner

Greg Tanaka
authored and
Greg Tanaka
committed
test: cover remaining Vitest trust gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix: harden Vitest command and aliases

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover Vitest validate CLI wiring

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): wire protected Vitest validation CLI

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover Vitest parent import closure

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): use JS support candidates in Vitest closure

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): reject pathless Vitest validator operands

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): retain Vitest trust checks before isolation

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce missing trusted Playwright adapter

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): add trusted Playwright verification adapter

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce Playwright protected clone dependency gap

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): exercise Playwright clone dependency resolution

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): resolve Playwright protected clone dependencies

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): clean Playwright adapter lint import

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce Playwright relative result path gap

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): parse Playwright relative result paths

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): parse Playwright relative result paths

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce Playwright isolated browser cache gap

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): use pinned Playwright browser cache

Greg Tanaka
authored and
Greg Tanaka
committed
test: cover Playwright trust boundary gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix: reject unbound Playwright toolchains

Greg Tanaka
authored and
Greg Tanaka
committed
test: cover remaining Playwright trust gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix: harden Playwright command and config trust

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover Playwright round three gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): wire protected Playwright validation CLI

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): bind Playwright JS support candidates

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): reject pathless Playwright validator operands

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover Playwright dependency binding gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): bind Playwright dependency environment

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover Playwright round seven trust gaps

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reject Playwright prefix preload options

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): isolate Playwright trust descriptors

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): retain Playwright trust checks before isolation

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover Playwright round eight trust gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): close Playwright round eight trust gaps

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover Playwright round nine trust gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): close Playwright round nine trust gaps

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover Playwright AST and identity trust boundary

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover immutable Playwright protocol identity

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): enforce Playwright AST and immutable toolchain closure

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): synchronize Playwright parser dependencies

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover Playwright round eleven trust gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): close Playwright round eleven trust gaps

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover Playwright round twelve trust gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): close Playwright round twelve trust gaps

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover Playwright round thirteen gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): close Playwright round thirteen gaps

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce missing threshold attestation adapter

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): verify threshold human attestations

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reject duplicate threshold attestation keys

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): reject duplicate threshold attestation keys

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reproduce shared approval store rejection

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): select exact human approval quorum

Greg Tanaka
authored and
Greg Tanaka
committed
test: cover human attestation revocation gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix: validate human attestation revocations

Greg Tanaka
authored and
Greg Tanaka
committed
test: require final artifact closure attestation

Greg Tanaka
authored and
Greg Tanaka
committed
fix: sign finalized artifact closure digest

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover human attestation validate CLI wiring

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): wire protected human attestation CLI

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): specify reporting metrics encoding

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reject unsafe threshold attestations

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): harden threshold attestation boundaries

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): bind threshold closure by field name

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): anchor threshold replay trust root

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): cover canonical human config plumbing

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): share protected finalizer configuration

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reject compromised replay roots

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): reject compromised replay roots

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): normalize replay filesystem failures

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): normalize replay filesystem failures

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): specify legacy attestation migration

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): version legacy attestation migration

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): preserve non-writable replay roots

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): reject boolean payload versions

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): close threshold attestation review gaps

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): close threshold attestation review gaps

Greg Tanaka
authored and
Greg Tanaka
committed
test(sync): reject vulnerable legacy runner evidence

Greg Tanaka
authored and
Greg Tanaka
committed
fix(sync): version legacy runner attestation migration

Greg Tanaka
authored and
Greg Tanaka
committed

Uh oh!

Commits

Commits on Jul 11, 2026