Skip to content

fix(Alden): recover reappearing sources and prove collection-to-graph lineage - #29

Draft
twoimo wants to merge 30 commits into
codex/alden-integrity-recovery-20261011from
codex/alden-pipeline-readback-20261011
Draft

twoimo wants to merge 30 commits into
codex/alden-integrity-recovery-20261011from
codex/alden-pipeline-readback-20261011

Conversation

@twoimo

@twoimo twoimo commented Oct 10, 2026

Copy link
Copy Markdown
Owner

Fixes a real source lifecycle failure and makes the existing multi-target collection path inspectable from original bytes through persisted search and graph evidence.

Trigger and fix: A complete snapshot of A, then removal, then an exact A reappearance previously reused the original deterministic run ID and skipped reactivation. Bind the snapshot run identity to its monotonic source order, preserving same-order replay idempotence and all original record versions. A fixture proves both nodes and explicit edges disappear on removal, then reappear without duplicate replay events.

Integration: Add read-only, project/target/version-scoped trace_document through CollectionStore, Alden's existing native menu bridge, desktop settings API, and the owned alden_knowledge_trace stdio MCP. Verify original SHA-256, committed collection run stages, FTS5 text binding, separate local Dense vector binding (without claiming model residency), permissible active relations and journal checkpoint. Display the proof only on a selected 3D node whose ID/version/target exactly matches; no fictitious events or pulse. A denied project exposes no document-existence signal. A true stdio initialize/list/call test checks project rejection and unchanged events/runs after reads.

Validation: macOS GitHub Actions pipeline run 38068189206, exact validation SHA c227accdf2b20af46c8f816ace8332016214eb2f, Python 113/113, focused UI 30/30, production TypeScript/Vite build. The initial failing run 38067548142 is retained as evidence of the actual A→removed→A bug plus a CI-only missing local embedding service fixture, both resolved. Additional Tauri Rust and unsigned arm64 package CI are in progress separately.

Scope: stacked directly on draft PR #28, itself stacked on PR #27. Existing Mac clone, uncommitted user edits, original databases, source files, enrollment, model selection, message queue and running processes untouched. The owned read-only MCP is separate from the outside osk-system MCP. Real user Mac MLX/STT/TTS, osk-system host readbacks, application installation/physical rendering and Developer ID notarization remain independent delivery gates.

See pipeline source trace/continuation evidence.

twoimo added 30 commits October 11, 2026 01:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant