3 Commits

Include renames

Author	SHA1	Message	Date
weichen	e9c0281404	feat(ctxmgr): wildcard session allowlist for semantic replace rollout ... - SEMANTIC_SUMMARY_REPLACE_SESSIONS supports * (all sessions, present and future), mirroring INTENT_PLAN_PROJECT_ALLOWLIST; empty allowlist still replaces nothing (fail-closed defense in depth unchanged) - declare SEMANTIC_SUMMARY_REPLACE(_SESSIONS) in dev/test/main compose app env (stale Wave2 "REPLACE unwired" comment fixed); extend A-4 declaration test; .env.example key docs updated - sysadmin feature catalog: SESSIONS description + REPLACE reason note * Prepares dev degraded-flags enable (task degraded-flags-enable-2026-09-26-r4): user-authorized all-session replace, plan tier confirm, shadow summary, PI change-report narrative; env ops and runtime verification follow.	2026-09-26 02:29:29 +00:00
weichen	aee774b894	fix(ctxmgr): keep displaced deterministic narrative for rollback-safe replace ... Runtime verification found the deterministic generator merges the prior served narrative, so a replaced (semantic) narrative would linger after rollback. Store the displaced deterministic narrative in the shadow report (persisted via shadow_json) and merge that instead when the prior summary source is semantic_replace.	2026-09-25 23:14:07 +00:00
weichen	ffa41d78df	feat(ctxmgr): wire fail-closed gray REPLACE for chat semantic narrative ... Unseal SEMANTIC_SUMMARY_REPLACE under explicit user authorization with a defense-in-depth session allowlist (SEMANTIC_SUMMARY_REPLACE_SESSIONS): swap happens only for allowlisted sessions after result digests and served watermark validation, bounded narrative size; facts/counts stay deterministic and the daily digest stays advisory. Master flag alone replaces nothing.	2026-09-25 22:56:36 +00:00