Skip to content

Bridge admitted scheduled slots to signed-run ports - #24

Merged
scbrown merged 1 commit into
mainfrom
harding/6vf-signed-receiver
Oct 15, 2026
Merged

scbrown merged 1 commit into
mainfrom
harding/6vf-signed-receiver

Conversation

@scbrown

@scbrown scbrown commented Oct 15, 2026

Copy link
Copy Markdown
Collaborator

Connect an already admitted scheduled delivery to the durable slot ledger and a trusted signed-run port. Persist started before the execution callback, preserve the actual success/failure/hold outcome, and commit the terminal receipt before publication. Redelivery after a lost publication acknowledgement retries publication only. A crash or signing failure leaves UNKNOWN and never authorizes another child execution.

The deterministic run identifier reversibly includes job, revision, host, manifest digest, agent, workflow and scheduled slot, so signed scope does not depend on an unsigned hash lookup. Full delivery scope and value types must match. The port remains responsible for real key/registration admission, durable signed records and governed export/read-back. This module supplies the sequencing bridge; it supplies no concrete signing adapter, daemon, schedule or activation. Exit code is local metadata, not an arbitrary payload bound by Shuttle v1 signatures.

Validation: 219 tests and 25 subtests pass, including duplicate delivery, publication failure, start/terminal failure, child exception, hold/failure distinction and scope mismatch. HOME guard: 157 paths/five resources unchanged. Ruff passes; wheel build and isolated installed-module imports pass.

Demo: recording, caption and reproduction uses a clearly labelled synthetic signing port and one child callback across two deliveries. Recording replayed. No real key, signature, child process or graph write is used. Rollback is a normal source revert while preserving any persistent slot ledger. No release/install/runtime action is requested by this source PR.

Bead: aegis-6vf

Overlap preflight: e9e0dcfe5ba54bb1cae8150e47d88d34eb689f98f93356b2d0762a996bf7b0e8

  • PR feat: package Chaski with releases, docs and event verification #14 @ 3cb9699: independent — The only shared path is pyproject.toml. This proposal adds scheduled_receiver to the current main module list, retaining current Python >=3.11 and dependency pins. PR14 proposes the earlier packaging/release bundle and Python3.10 floor; none of that bundle is copied or activated here. Existing main707e0d9 already contains packaging from the later landed lane. PR14 remains unchanged; no absorb, release or closure is attempted.

@scbrown
scbrown merged commit ed83911 into main Oct 15, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant