Skip to content

H1 batch: GOV-001, AXW-020R/020A/020B/020C - #72

Open
DTALEX66 wants to merge 16 commits into
mainfrom
axw/execution-h1
Open

H1 batch: GOV-001, AXW-020R/020A/020B/020C#72
DTALEX66 wants to merge 16 commits into
mainfrom
axw/execution-h1

Conversation

@DTALEX66

@DTALEX66 DTALEX66 commented Aug 9, 2026

Copy link
Copy Markdown
Owner

Scope

H1 (RawAsset, Evidence, early learning loop) batch from the frozen execution baseline. Based on origin/main f269a01 (post-H0 merge). Each change is a separate checkpoint with its own RED→GREEN evidence.

Included (6 commits)

  • ad4480e GOV-001 — Machine Knowledge fail-close: add scope to MachineKnowledgeUnitV1; list_runtime_machine_knowledge(scope=...) returns only approved units whose scope matches (or generic). A scoped approved unit never leaks to a different scope. Independent read-only review PASS.
  • f09f940 GOV-001 review response — legacy row has no scope column; fail closed on scoped unit legacy round-trip (ContractMappingError) instead of silently dropping scope.
  • 4a62440 AXW-020R — object reuse & migration matrix (SourceRecord/Claim/Evidence/LearningArtifact/MasterySignal/Job/Outbox/Receipt); forbids parallel rebuild.
  • c09379e AXW-020A — complete RawAsset contract: mime_type, retention_policy, save_state added to RawAssetRecord (backward-compatible).
  • bc6cad2 AXW-020B — ConversionRun → DerivedDocument → DerivedBlocks with stable content-derived IDs, explicit versioning, LossReport, SQLite persistence (new tables).
  • 514841d AXW-020C — EvidenceAnchor (page/block/char-region + source revision) and rebuildable IndexRevision that never presents derived index as source of truth (new tables).

Explicitly excluded

  • No merge to main (not authorized for this H1 batch yet).
  • Frozen baseline / status-log files untouched (status appended on the separate codex/frozen-roadmap-deepseek-v1 branch).
  • No user WIP; canonical main worktree untouched.

Verification

  • Each change: RED → GREEN; changed-file Ruff; architecture guard; repository conventions.
  • GOV-001 passed an independent read-only review (all checkpoints PASS, one low-severity WARNING now resolved with fail-closed fix).
  • Local: machine-knowledge 11 passed, raw-asset 8 passed, conversion-run 4 passed, evidence-anchor 6 passed.

Risk / Rollback

  • Three new SQLite tables (conversion_runs/derived_blocks, evidence_anchors, index_revisions) — schema additions, additive only, no existing-table mutation. Each commit is independently revertible.

DTALEX66 added 6 commits August 9, 2026 23:37
@DTALEX66
feat(knowledge): scope-gated machine knowledge retrieval (GOV-001)
ad4480e 
Add optional scope to MachineKnowledgeUnitV1 and filter
list_runtime_machine_knowledge by retrieval scope. A scoped approved unit is
only visible to retrievals requesting that exact scope; a generic (scope-less)
unit remains visible to any retrieval. Existing callers (workspace service,
closed_loop, adapters) are backward-compatible via the default None. Fail-closed:
a scoped unit never leaks to a different-scope retrieval.
@DTALEX66
docs(intake): add AXW-020R object reuse and migration matrix
4a62440 
Map H1 domain objects (SourceRecord/Claim/Evidence/LearningArtifact/
MasterySignal/Job/Outbox/Receipt) to existing contracts, tables and adapters
so H1 never builds parallel implementations. New RawAsset/Import/Derived/
EvidenceAnchor are explicitly additive where the existing model lacks those
semantics.
@DTALEX66
feat(ingestion): complete RawAsset contract with mime/retention/save-…
c09379e 
…state (AXW-020A)

Extend RawAssetRecord with mime_type, retention_policy and save_state so the
stored asset contract is complete and stable (source, hash, MIME, size, save
state, retention). store_original accepts optional mime/retention with sane
defaults, preserving backward compatibility with the AXW-012A minimal store.
@DTALEX66
feat(ingestion): add conversion run and derived document contracts (A…
bc6cad2 
…XW-020B)

ConversionRun converts one raw asset into a DerivedDocument of DerivedBlocks,
with stable IDs derived from content identity (raw hash + source + engine),
explicit versioning, and aggregate LossReport. Persisted to a local SQLite
store with a run->document->block relation. Empty conversions are rejected
fail-closed.
@DTALEX66
feat(evidence): add EvidenceAnchor and rebuildable IndexRevision (AXW…
514841d 
…-020C)

EvidenceAnchor pins content to a source version by page/block/char-region
with a stable anchor id. IndexRevision records a rebuildable derived index
(FTS/vector) that points at the raw source hash so it can never be presented
as the source of truth; rebuild increments the count against a newer source
revision.
@DTALEX66
fix(adapters): fail closed on scoped machine knowledge legacy round-trip
f09f940 
GOV-001 review: the legacy row has no scope column, so a scoped unit cannot
be round-tripped losslessly. Raise ContractMappingError instead of silently
dropping the scope. Adds an adapter behaviour assertion.
DTALEX66 added a commit that referenced this pull request Aug 9, 2026
@DTALEX66
docs(truth): record PR #72 exact-head CI success
fb2bd4d
DTALEX66 added 3 commits August 9, 2026 23:47
@DTALEX66
feat(ingestion): bind raw-asset import to durable Job/Outbox/Receipt …
9ca07ff 
…(AXW-021A)

ImportJobStore + run_import_with_receipt persist the original bytes, convert,
and write job + outbox + receipt in a single SQLite transaction reusing the
existing workspace job/outbox/receipt store. A conversion failure rolls back
the whole set so no orphaned outbox event survives. Same command id is
idempotent.
@DTALEX66
test(workspace): add AXW-021B crash-recovery and retry fault tests
9abded5 
Prove the lease-fenced outbox dispatcher supports AXW-021B: an expired lease
from a dead worker is reclaimed with an incremented attempt count (retry), a
handler failure is recorded as failed with no delivered_at, and a valid
confirmation is required for delivery.
@DTALEX66
fix(ingestion): no orphaned raw file on failed or conflicting import
bb951f0 
AXW-021A independent review: a conversion failure or a same-command-id
conflict rolled back SQLite but left the just-written content-addressed raw
file orphaned. Clean up the written byte file on any import failure, and
raise ImportJobError consistently (including store_original write failures).
Adds orphan-file assertions for both the failure and conflict paths.
DTALEX66 added a commit that referenced this pull request Aug 9, 2026
@DTALEX66
docs(truth): record AXW-021A/021B and PR #72 head CI
ff60e2a
DTALEX66 added 3 commits August 9, 2026 23:53
@DTALEX66
feat(evidence): add Claim/Evidence core graph (AXW-024A)
58c5664 
A Claim may be backed by multiple Evidence nodes. Each node is traceable to a
source locator, generation method, review state and provenance. The graph
validator rejects evidence belonging to a different claim, caller-supplied
evidence without human review, and a claim with no evidence (fail-closed).
@DTALEX66
feat(evidence): add CrossValidation EvidenceBundle (AXW-024B)
dd7a0a0 
Bundle groups evidence about one claim with supports/refutes/qualifies
relations, cross-source comparison and conflict detection. Caller-supplied
bundles require human review; invalid relations and unknown-evidence
references are rejected fail-closed.
@DTALEX66
feat(knowledge): add learning objectives and retrieval practice (AXW-…
873e652 
…025A)

LearningObjective states what a learner must be able to do; RetrievalPractice
pairs a prompt with an answer and an explicit scoring rationale. Scoring is
driven only by the recorded answer vs expected, never by model confidence
(model confidence is accepted but never influences accuracy).
DTALEX66 added a commit that referenced this pull request Aug 9, 2026
@DTALEX66
docs(truth): record PR #72 head 873e652 CI success
eaaa384
DTALEX66 added 2 commits August 9, 2026 23:58
@DTALEX66
feat(knowledge): add Teach-Back and transfer evidence (AXW-025B)
d9b03e2 
TeachBackRecord captures a learner restating a concept; TransferItem applies
it to a new situation. Each outcome preserves a human truth/prediction pair
(learner self-assessment vs graded truth) tied to the source locator so the
result is traceable. Model confidence is never the learning truth.
@DTALEX66
test(workspace): assert versioned DTO never leaks SQLite internals (A…
5579d61 
…XW-030A)

The v1 BFF/API responses must never expose internal table names, column names
or persistence identifiers; the frontend consumes a versioned DTO, not a raw
SQLite projection.
DTALEX66 added a commit that referenced this pull request Aug 9, 2026
@DTALEX66
docs(truth): record PR #72 head 5579d61 CI success
0063c99
@DTALEX66
feat(evidence): add content-addressed PDF serving backend (AXW-022A b…
78091cc 
…ackend)

Serve original PDF bytes to the reader by content hash (sha256: prefixed),
read-only and size-bounded, so the frontend PDF.js reader never sees the
storage path. Empty/oversized input and non-sha256 keys are rejected
fail-closed.
DTALEX66 added a commit that referenced this pull request Aug 9, 2026
@DTALEX66
docs(truth): record PR #72 head 78091cc CI success
b43d030
@DTALEX66
fix(ingestion): write durable failure record on failed import (AXW-02…
1c688c7 
…1A review)

Independent review warning: run_import_with_receipt failed without recording a
durable failure, deviating from the AXW-012A contract. Now a failure record is
written (auditable) before the transaction and orphan file are rolled back.
Adds a regression test asserting the failure record exists after a failed
import.
DTALEX66 added a commit that referenced this pull request Aug 9, 2026
@DTALEX66
docs(truth): record PR #72 head 1c688c7 CI success
5e1e737
@DTALEX66 DTALEX66 mentioned this pull request Aug 10, 2026
Merged
DTALEX66 added a commit that referenced this pull request Aug 10, 2026
@DTALEX66
docs: sync authority blueprints and update repository description (#73)
ae59790 
Pull the CODEX-frozen execution blueprint, addenda and truth/handoff docs
(docs/truth/, docs/taskpacks/) into main, and update README + PROJECT_STATUS
to reference them as the authoritative task definition source for H1-H10 and
the Web/KLC addenda. H0 (v0.5.1) is merged; H1 backend is in PR #72 (not yet
merged), so product capability prose stays scoped to main's actual state.

Co-authored-by: DTALEX66 <DTALEX66@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@DTALEX66