Adopt the reviewed IAM permission contract and merged RDM evidence #534

Merged
weichen merged 28 commits from feature/iam-i1-permission-boundaries into main 2026-10-13 16:53:16 +00:00
28 Commits
Author SHA1 Message Date
weichen ccbbdec74b Record the sync checkpoint
ci / svc-realcombo (pull_request) Successful in 2m2s
ci / test (pull_request) Successful in 5m1s
ci / test-pg (pull_request) Successful in 8m22s
Why: bind the task validation checkpoint to the integration baseline.

Evidence: SELF recursive component checks; sync_base=e793e9804a1f5ecf49b29a40b4baac90ceb04e55; before_record=49dac767dcb32a21f2f9f703126c7aba09bedca8.

Impact: task metadata only.

Refs: .task/feature-iam-i1-permission-boundaries.md
2026-10-13 16:40:53 +00:00
weichen 49dac767dc Merge authoritative main into the task branch
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=e793e9804a1f5ecf49b29a40b4baac90ceb04e55.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
2026-10-13 16:40:27 +00:00
weichen 9c052a25e6 Fix the reviewed IAM integration candidate for final CI
Why: Preserve independent final review and current-source equivalence before platform admission.

Evidence: Final document and integration metadata review has zero findings; full composition test and source equivalence receipts are retained with precise SELF object boundaries.

Impact: Delivery evidence only; no production, provider, guideline or document changes from the reviewed candidate.

Refs: IAM I1 integration task; Documents 98/99; RDM 360/362.
2026-10-13 16:40:23 +00:00
weichen 19b02b3cad Record merged IAM delivery and validate the final integration
Why: Preserve actual component merge results and current delivery authorization before integration CI.

Evidence: RDM PR 360 merged at exact successful CI head; new Dev make test passed and independent metadata checks preserved approved digests and pins.

Impact: Clarify historical task records and current approved repair scope; preserve documentation and delivery evidence only.

Refs: Documents PRs 98 and 99; RDM PRs 360 and 362; IAM I1 task record.
2026-10-13 16:36:35 +00:00
weichen a8c42d9a59 Record the sync checkpoint
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=1e5c6b9c10ba77ed34663fd670138621a17342bd; candidate=72d67216ef52730c17cc304f79307eed8b10c559.

Impact: task metadata only.

Refs: .task/feature-iam-i1-permission-boundaries.md
2026-10-13 16:26:32 +00:00
weichen 72d67216ef Merge authoritative main into the task branch
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=1e5c6b9c10ba77ed34663fd670138621a17342bd.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
2026-10-13 16:26:08 +00:00
weichen d26e1b0b5b Adopt the approved IAM projection contract and delivery evidence
Why: Carry the actual merged contract and approved permission implementation boundary into the integration composition.

Evidence: Documents PR 99 merged as a7ff466d9ae91fc67a53d2bf4991f47fc63a2a4c after independent review and verified source digest; RDM PR 360 preserves actual-actor projection semantics.

Impact: Update documentation pin, navigation and delivery records only; new composition tests and final-head CI remain required.

Refs: IAM I1 permission contract section 8; Documents PRs 98 and 99; RDM PR 360.
2026-10-13 16:26:05 +00:00
weichen eca92e9920 Record the sync checkpoint
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=5efbeebbdc09f8c2484613230a29c882c54652f0; candidate=9c139b6402697f65465001d3c4b8f703a84aa997.

Impact: task metadata only.

Refs: .task/feature-iam-i1-permission-boundaries.md
2026-10-13 15:45:12 +00:00
weichen 9c139b6402 Merge authoritative main into the task branch
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=5efbeebbdc09f8c2484613230a29c882c54652f0.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
2026-10-13 15:44:46 +00:00
weichen f3c0551feb Adopt the reviewed IAM contract from merged Documents
Why: Record user acceptance and use the actual merged permission contract in the integration composition.

Evidence: Documents PR 98 merged as 3cf263962bd106529ee0531c8415cb16eecedfe3; independent document review and full SELF receipts retained in the task record.

Impact: Advance only Documents and delivery evidence; full IAM later increments and deployment remain outside scope.

Refs: Documents PR 98; IAM I1 U1-U2; policy/delivery.md stages 8-9.
2026-10-13 15:41:52 +00:00
weichen 4292fe3c6d Record the sync checkpoint
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=5aae47ebca20ad1f3add3b080212cca7e1c6edf9; candidate=23af0398b60d8728531ce7d0841441c7ee840f83.

Impact: task metadata only.

Refs: .task/feature-iam-i1-permission-boundaries.md
2026-10-13 15:26:24 +00:00
weichen 23af0398b6 Merge authoritative main into the task branch
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=5aae47ebca20ad1f3add3b080212cca7e1c6edf9.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
2026-10-13 15:26:00 +00:00
weichen 6ee5b36dec Record the sync checkpoint
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=69c5c84d8a2f1a7966ebfb809cbb26d54e8e8abb; candidate=f198789e5dbbe60974f27c47dcdb1c4ccd49c79d.

Impact: task metadata only.

Refs: .task/feature-iam-i1-permission-boundaries.md
2026-10-13 15:09:19 +00:00
weichen f198789e5d Merge authoritative main into the task branch
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=69c5c84d8a2f1a7966ebfb809cbb26d54e8e8abb.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
2026-10-13 15:08:53 +00:00
weichen a6b530a96c Save the final I1 acceptance composition evidence
Why: Final fixed Documents composition and current modules passed their checks and now require the user acceptance decision.

Evidence: Complete SELF make test and document checks passed at4af5956; receipt5e81c91e and the independent RDM replay subjects are retained.

Impact: Record-only checkpoint after user stage 6 approval; do not claim stage 7 approval or shipping.

Refs: I1 bounded acceptance; policy/delivery.md
2026-10-13 14:58:56 +00:00
weichen 4af5956eb7 Pin the I1 formal acceptance report
Why: Keep the user-approved implementation and pending acceptance separate in the fixed integration records.

Evidence: Current Dev make test passed at10789653 and RDM combined checks passed at70e27b08; final text-only combination is verified next.

Impact: Documents and card records only; no permission source, pins in RDM, existing services or production data changes.

Refs: I1 stage 7 acceptance candidate
2026-10-13 14:52:43 +00:00
weichen 10789653f9 Save the approved I1 objects and bounded acceptance stage
Why: Preserve the human stage 6 approval separately from the synchronized formal test candidate.

Evidence: Original reviewed objects and the user approval are recorded; startup recovery and synchronization outputs are captured as complete SELF receipts.

Impact: Advance approval records only, retain all upstream membership records and enter planned I1 API/command verification. No production operations or later increments started.

Refs: User approval; policy/delivery.md stage 6 to 7
2026-10-13 14:31:56 +00:00
weichen 8f3ee56ce2 Record the sync checkpoint
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=ee9b437b22b49f96e1bc65f79417b22e8e82a37c; candidate=5c47b86b928a5cbd3d9a291d7de3b5b4614f4a2f.

Impact: task metadata only.

Refs: .task/feature-iam-i1-permission-boundaries.md
2026-10-13 14:26:01 +00:00
weichen 5c47b86b92 Merge authoritative main into the task branch
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=ee9b437b22b49f96e1bc65f79417b22e8e82a37c.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
2026-10-13 14:25:30 +00:00
weichen 10e484ca87 Restore the I1 workspace on the current integration baseline
Why: The resumed task requires a fresh baseline before recording the approved implementation and formal checks.

Evidence: Startup identified SYNC_REQUIRED; Documents pointer conflict was resolved by merging the referenced upstream commit while preserving all three approved I1 documents byte-for-byte.

Impact: Workspace recovery only; retain incoming project-membership records and the fixed I1 approval objects. Formal checks remain pending.

Refs: User approval of I1 implementation; policy/governance.md startup and recovery
2026-10-13 14:22:19 +00:00
weichen 72ed8b4abe Finalize the I1 local evidence and human review handoff
Why: Preserve final fixed-composition verification and separate the local implementation from formal acceptance and shipping.

Evidence: Final Dev make test and document checks passed on 5b8cb91a with full SELF receipt 7ac5b1db; RDM make test and independent preliminary review are linked through their owning task.

Impact: Task record only. No implementation component changes, push, PR, merge or deployment.

Refs: Approved IAM I1 U1-U2; Documents c023551 review record
2026-10-13 10:54:26 +00:00
weichen 5b8cb91a41 Record the sync checkpoint
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=d5428c5f05fc5f625e6232ab3156b17f13e14d6a; candidate=4e141edcc1c0e3b2a209e4203ff1aa8873be6932.

Impact: task metadata only.

Refs: .task/feature-iam-i1-permission-boundaries.md
2026-10-13 10:47:03 +00:00
weichen 4e141edcc1 Merge authoritative main into the task branch
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=d5428c5f05fc5f625e6232ab3156b17f13e14d6a.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
2026-10-13 10:46:42 +00:00
weichen 1484c58763 Save I1 local verification and the review record
Why: Keep the reviewable contract and observed verification together in the fixed parent composition.

Evidence: Dev make test passed on 0ab70b0c and RDM make test passed on ef075bd1, recorded as complete SELF receipts. Final parent pin verification follows this metadata checkpoint.

Impact: Advance the text-only review record and save evidence; no implementation components changed.

Refs: IAM I1 U1-U2 local review
2026-10-13 10:46:39 +00:00
weichen 0ab70b0c9b Record the sync checkpoint
Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=143e6367367760deceac91ac3de5ccb3ed6adebc; candidate=d03c1d4cdeabe8ca81f1e1c9889f88760e9e38a9.

Impact: task metadata only.

Refs: .task/feature-iam-i1-permission-boundaries.md
2026-10-13 10:39:48 +00:00
weichen d03c1d4cde Merge authoritative main into the task branch
Why: include the current integration baseline before verification.

Evidence: fetched origin/main=143e6367367760deceac91ac3de5ccb3ed6adebc.

Impact: integrate upstream changes without rewriting task history.

Refs: task-sync
2026-10-13 10:39:24 +00:00
weichen 5869f74aa5 Pin the I1 contract and local review record
Why: Keep the accepted IAM direction and I1 review entry visible from the authoritative integration checkout.

Evidence: Full SELF document consistency receipts are recorded in the I1 task card. Final synchronized parent combination verification follows this checkpoint.

Impact: Advance Documents only and record I1 local authorization; backend, frontend and UI behavior pins remain unchanged.

Refs: Approved IAM plan r1; I1 U1-U2
2026-10-13 10:39:21 +00:00
weichen 2610e34954 Record the task card for feature-iam-i1-permission-boundaries
Why: establish the authorized task workspace and its initial baseline.

Evidence: preserved precheck receipt in .task/feature-iam-i1-permission-boundaries.md; R0=ff3fb4a7ebe432ab21c6b9668abc9823aca2fdd1.

Impact: task metadata only; the feature workspace starts at ff3fb4a7eb.

Refs: .task/feature-iam-i1-permission-boundaries.md
2026-10-13 09:05:36 +00:00