eric/ConfigKit
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Verify integer version provenance and protections

Browse Source
This commit is contained in:
Eric Rakestraw
2026-09-12 00:30:32 +00:00
parent 6eb40c5492
commit 8702121fa4
5 changed files with 121 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
docs/roadmap/implementation.md
View File

@@ -92,7 +92,7 @@ history, rendering, composition ownership, detachment, and redaction invariants.
## Stage 3 — Verify provenance and pipeline invariants
Status: not started. Depends on: Stage 2.
Status: complete (2026-09-12). Depends on: Stage 2.
Scope: `explain_test.go`, `provenance_test.go`, import/profile/override and secret
test owners as needed. Production changes only for demonstrated integration gaps.
@@ -116,6 +116,15 @@ needs repair, retain original input rather than suppressing its history.
Validation: `go test . -run 'Version|Import|Profile|Override|Provenance|Explain|Secret'`,
`go test -race ./...`, then the everyday checker.
Completion record: end-to-end inspection now proves a numeric retained input, a
string typed/effective value, a decoding reconciliation event, exact base origin
and location, historical lookup, equal-default handling, and detached repeated
results. Integer fixtures exercise fragment, profile, and CLI version protection.
Sensitive version history is redacted and performs no credential lookup. The
focused suite, race suite, and `./scripts/check.sh` pass with Go 1.26.7 on Linux.
Stage 4 should finish the maintained Notarius evidence, canonical documentation,
and release-readiness validation without publishing a release.
## Stage 4 — Complete consumer evidence and release readiness
Status: not started. Depends on: Stage 3.