Verify the integrated resilient processing contract

This commit is contained in:
2026-09-24 18:03:25 +00:00
parent a770c77a23
commit 6523d7ac74
5 changed files with 242 additions and 33 deletions

View File

@@ -2,8 +2,8 @@
**Last updated:** 2026-09-24
**Status:** Ready for implementation; all stages below are pending. Planning only:
no implementation is claimed by this document.
**Status:** Implemented. All stages below are complete; completion notes record
the checks performed for each unit of work.
## Scope and Execution Instructions
@@ -823,6 +823,27 @@ competing current contract or implicit legacy compatibility promise.
## Stage 14 — Verify the Integrated Resilience Contract
**Completed 2026-09-24.** Audited the target acceptance criteria against the
assembled CLI, runner, validator, reporting, and output-session tests. Added
controlled-provider subprocess coverage for all-proposal and all-validation
failure across repeated modules, all reporting/debug selections, a repaired and
filtered proposal response followed by a later failure, a repaired response with
invalid validation decisions, and signal cancellation with failed reports and no
transcript. Added an atomic-replacement cleanup check for a failed rename and
asserted ordinary reports omit transcript text and the configured secret. Existing
runner/validator tests cover survivor re-batching, fixed chunk membership and
cross-chunk rejection after text growth, segment metadata and ordering, and
active/queued cancellation; output-session tests cover initial
and final write failures, intentional replacement, and destination alias checks.
**Final validation:** `go test ./...` and `go vet ./...` passed. Focused
`go test -race` passed for runner, LLM, validators, process-report assembly,
reporting, diagnostics/output, and the subprocess package. The release build
script produced valid Linux amd64 and arm64 binaries using `v0.0.0` in a temporary
directory; a separate macOS arm64 cross-build also passed. No live provider or
released artifact was used; provider behavior is covered by deterministic local
HTTP fixtures. Builds were cross-compiled and not executed on target platforms.
**Work:** Audit every acceptance criterion in `resilience.md` against final code and
retained tests. Add only missing integration coverage. In particular verify the
following cross-component outcomes rather than relying solely on green leaf tests:

View File

@@ -2,9 +2,9 @@
**Last updated:** 2026-09-24
**Status:** Target behavior agreed; not implemented. This document defines the
desired end state and user intent. Concrete design decisions and implementation
steps are recorded in [implementation.md](implementation.md).
**Status:** Implemented. This document records the selected behavior and user
intent. Concrete design decisions and completion evidence are in
[implementation.md](implementation.md).
## Purpose and User Intent
@@ -33,20 +33,21 @@ Internal structures and measurements must serve Audita's processing workflow.
The reporting package adapts those outcomes to structured and human-facing
presentations, rather than reshaping processing around a reporting convenience.
## Current Baseline and Intended Change
## Historical Baseline and Implemented Change
The [pipeline](../internal/pipeline.md), [LLM integration](../integrations/openai-compatible-llm.md),
[report assembly](../internal/diagnostics-reporting.md), and
[artifact lifecycle](../operations.md) describe current behavior.
Currently, exhausted structural repairs can become warnings and skipped proposals
or rejected validation batches. Other model runtime failures cancel peer work,
stop subsequent modules, and prevent final transcript output. Successful repairs
appear in execution observations rather than a dedicated recovery classification.
Detailed artifacts are written during ordinary runs and may subsequently be
removed by retention. The working transcript is re-chunked between modules.
Before this work, exhausted structural repairs could become warnings and skipped
proposals or rejected validation batches. Other model runtime failures canceled
peer work, stopped subsequent modules, and prevented final transcript output.
Successful repairs appeared in execution observations rather than a dedicated
recovery classification. Detailed artifacts were written during ordinary runs
and could later be removed by retention. The working transcript was re-chunked
between modules.
This feature deliberately changes those behaviors. It builds on the completed
This feature changed those behaviors. It builds on the completed
[library adoption](library-adoption.md) and [review remediation](remediation.md).
Fatal cancellation remains necessary; unsuccessful model work must be separated
from failures that actually require cancellation of the run.
@@ -278,8 +279,7 @@ volume, and a short reason breakdown. Detailed inspection belongs in YAML or deb
failures, and reporting/debug selections. Preserve domain safeguards, capacity
limits, and redaction.
- Canonical CLI, configuration, operations, integration, internal, and architecture
documentation describes the implemented final behavior. Until implementation,
this roadmap does not change their current implemented contracts.
documentation describes the implemented final behavior.
## Implementation Reference