Repository navigation
seal gains a producer identity (built_by) -- the #7072 prerequisite #7075
Description
Epic #6655 / #7072 option A, decided: identity belongs on the thing being cited. Today a seal's producer is sealed_by: t27c-bootstrap@0.4.0 -- a version, no build commit -- while a receipt's producer is its toolchain string (t27c <git>, #7044). receipt.t27's producer_matches is verbatim equality, so no receipt can ever match any seal: the two sides share no vocabulary.
What (one PR)
fn producer_identity()in t27c -- the ONE producer string format, defined once:t27c-bootstrap@<version>+<git>(the build commit subsumes the tree state, FROZEN_HASH included).seal --savewrites it asbuilt_byon every new seal. Additive: old seals simply lack the field and any reader must treat that as unknown, never as a match.- After this lands, silicon: every hardware run writes a receipt artifact (R2-1/R2-2) (Closes #7041) #7044's
silicon_toolchainswitches to the same definition (one format, both sides), and the R2-4 (tool half): t27c reads the receipts and judges one run -- plus a producer-vocabulary gap to decide #7072 reader gets a realproducers_match_sealfact.
🤖 Generated with Claude Code
Activity
fix(seal): emit T27C_BUILD_GIT from build.rs here -- producer_identit…
seal: every new seal names its build -- built_by, the producer identi…
fix(seal): emit T27C_BUILD_GIT from build.rs here -- producer_identit…
seal: every new seal names its build -- built_by, the producer identi…
fix(seal): emit T27C_BUILD_GIT from build.rs here -- producer_identit…
seal: built_by -- every new seal names its build (the #7072 prerequis…
fix(policy): carry the #7041 entry through the #7076/#6970 rebase; th…
fix(policy): resolve the exceptions tail the fd7afd4 replay left conf…
gHashTag commentedon Oct 6, 2026
Done by #7076 (merged 2026-10-06 21:38Z):
seal --savewritesbuilt_by=producer_identity()=t27c-bootstrap@<version>+<git>(the build.rsT27C_BUILD_GITemission), pinned bybootstrap/tests/seal_built_by.rs. The issue was referenced but not closed by the PR body'sRefs; closing manually now that the deliverable is on master. #7044's receipts match this field verbatim (R2-2), andt27c run-record(#7130) judges the match.silicon: every hardware run writes a receipt artifact (R2-1/R2-2) (Cl…
t27b: tail expressions and discarded calls as the reference prints th…
ci(spec-guards): published figures are red only for a defect of the c…