feat(cluster-server): add durable PostgreSQL public gateway ledger#141

Draft

usr-bin-roygbiv wants to merge 132 commits into

LycaonLLC:mainfrom

usr-bin-roygbiv:agent/t4-op05-durable-gateway-ledger

Commits on Jul 22, 2026

test: define T4 API v1 client conformance
usr-bin-roygbiv
committed
feat: define T4 API v1 contract and SDK boundary
usr-bin-roygbiv
committed
ci: emit T4 API generation artifacts
usr-bin-roygbiv
committed
build: recover T4 API generation lockfile
usr-bin-roygbiv
committed
fix: use OpenAPI parser named API
usr-bin-roygbiv
committed
feat: add generated T4 API v1 types
usr-bin-roygbiv
committed
fix: typecheck T4 API conformance fixtures
usr-bin-roygbiv
committed
test: expose T4 API semantic blockers
usr-bin-roygbiv
committed
fix: enforce T4 API public contract semantics
usr-bin-roygbiv
committed
build: accept authorized T4 API schema artifact
usr-bin-roygbiv
committed
test: complete bounded API conformance cases
usr-bin-roygbiv
committed
test: expose remaining API runtime blockers
usr-bin-roygbiv
committed
fix: fail closed across public API payloads
usr-bin-roygbiv
committed
build: accept revised T4 API schema artifact
usr-bin-roygbiv
committed
fix: select bounded conformance frames
usr-bin-roygbiv
committed
test: assert bounded consecutive watch retries
usr-bin-roygbiv
committed
test: cover OP03 fail-closed review contracts
usr-bin-roygbiv
committed
fix: close OP03 fail-closed review gaps
usr-bin-roygbiv
committed
build: accept authorized OP03 schema artifact
usr-bin-roygbiv
committed
fix: enforce exact watch response contract
usr-bin-roygbiv
committed
fix: close watch retry and body ownership gaps
usr-bin-roygbiv
committed
test: prove watch media and stream cleanup
usr-bin-roygbiv
committed
test: align terminal watch protocol assertions
usr-bin-roygbiv
committed
test: cover Unicode bounds and SSE cancellation
usr-bin-roygbiv
committed
fix: validate response lengths by code point
usr-bin-roygbiv
committed
test: cover strict response protocol gaps
usr-bin-roygbiv
committed
fix: enforce declared response protocol
usr-bin-roygbiv
committed
test: reject invalid mutations before idempotency
usr-bin-roygbiv
committed
fix: close strict API contract gaps
usr-bin-roygbiv
committed
test: type omitted command metadata
usr-bin-roygbiv
committed
fix: preserve optional generated defaults
usr-bin-roygbiv
committed
chore: accept authorized API schema artifact
usr-bin-roygbiv
committed
fix: require API generation in release gate
usr-bin-roygbiv
committed
test: cover final strict conformance gaps
usr-bin-roygbiv
committed
fix: validate create and watch contracts
usr-bin-roygbiv
committed
test: cover final header and precondition parity
usr-bin-roygbiv
committed
fix: align required response headers
usr-bin-roygbiv
committed
chore: accept required-header schema artifact
usr-bin-roygbiv
committed
test(t4-api): cover final strict response gaps
usr-bin-roygbiv
committed
fix(t4-api): close strict response gaps
usr-bin-roygbiv
committed
test(t4-api): isolate watch query validation
usr-bin-roygbiv
committed
test(t4-api): pin leap dates and RFC850 pivot
usr-bin-roygbiv
committed
fix(t4-api): validate announced leap seconds
usr-bin-roygbiv
committed
test(t4-api): require declared request media
usr-bin-roygbiv
committed
fix(t4-api): enforce JSON request media
usr-bin-roygbiv
committed
test(t4-api): sanitize media fixture keys
usr-bin-roygbiv
committed
test(t4-api): bound resync session ids
usr-bin-roygbiv
committed
fix(t4-api): bound resync session ids
usr-bin-roygbiv
committed
test(t4-api): require truthful mutation contracts
usr-bin-roygbiv
committed
feat(t4-api): expose truthful mutation contracts
usr-bin-roygbiv
committed
chore: accept truthful API schema artifact
usr-bin-roygbiv
committed
test(t4-api): use fixture auth proof
usr-bin-roygbiv
committed
test(t4-api): reject malformed page cursors
usr-bin-roygbiv
committed
test(t4-api): reject silent version downgrade
usr-bin-roygbiv
committed
fix(t4-api): reject invalid cursors and downgrades
usr-bin-roygbiv
committed
test(t4-api): require issued page cursors
usr-bin-roygbiv
committed
fix(t4-api): bind issued page cursors
usr-bin-roygbiv
committed
fix(t4-api): issue unique opaque page cursors
usr-bin-roygbiv
committed
test(t4-api): reject stale issued cursors
usr-bin-roygbiv
committed
fix(t4-api): sign scoped page cursors
usr-bin-roygbiv
committed
test(t4-api): reject noncanonical cursor signatures
usr-bin-roygbiv
committed
fix(t4-api): require canonical cursor signatures
usr-bin-roygbiv
committed
test(t4-api): cover every cursor signature alias
usr-bin-roygbiv
committed
test(t4-api): reject every cursor signature alias
usr-bin-roygbiv
committed
test(t4-api): avoid needless alias allocation
usr-bin-roygbiv
committed
test(t4-api): reject oversized snapshots and duplicate cursors
usr-bin-roygbiv
committed
fix(t4-api): align snapshot and watch cursor bounds
usr-bin-roygbiv
committed
test(operator): define CRD lifecycle contract
usr-bin-roygbiv
committed
feat(operator): enforce CRD lifecycle gates
usr-bin-roygbiv
committed
fix(operator): close lifecycle contract test
usr-bin-roygbiv
committed
fix(operator): use structural fixture round trips
usr-bin-roygbiv
committed
fix(operator): assert default without new modules
usr-bin-roygbiv
committed
test(operator): expose CRD lifecycle blockers
usr-bin-roygbiv
committed
fix(operator): validate proposed CRD semantics
usr-bin-roygbiv
committed
test(operator): account for local preflight
usr-bin-roygbiv
committed
ci(operator): emit validator module metadata
usr-bin-roygbiv
committed
ci(operator): freeze validator dependencies
usr-bin-roygbiv
committed
ci(operator): preserve ordinary Go gate
usr-bin-roygbiv
committed
test(operator): expose transition CEL gap
usr-bin-roygbiv
committed
fix(operator): validate unchanged CEL transitions
usr-bin-roygbiv
committed
test(operator): expose live CR narrowing gap
usr-bin-roygbiv
committed
fix(operator): validate every live CR before apply
usr-bin-roygbiv
committed
test(t4-api): cover snapshot boundary and heartbeat cursors
usr-bin-roygbiv
committed
test(operator): require dependency event convergence
usr-bin-roygbiv
committed
feat(operator): reconcile dependency changes
usr-bin-roygbiv
committed
test(operator): require host policy convergence
usr-bin-roygbiv
committed
fix(operator): fail closed on host storage drift
usr-bin-roygbiv
committed
fix(operator): require explicit workspace storage class
usr-bin-roygbiv
committed
test(operator): reject stale dependency authority
usr-bin-roygbiv
committed
fix(operator): revoke untrusted dependency authority
usr-bin-roygbiv
committed
test(operator): revoke terminal storage authority
usr-bin-roygbiv
committed
fix(operator): clear terminal storage authority
usr-bin-roygbiv
committed
test(operator): stop owned siblings on conflict
usr-bin-roygbiv
committed
fix(operator): stop owned siblings on conflict
usr-bin-roygbiv
committed
test(operator): preserve dependency status on conflicts
usr-bin-roygbiv
committed
fix(operator): preserve ready dependencies on conflicts
usr-bin-roygbiv
committed
test(operator): cover cleanup and create races
usr-bin-roygbiv
committed
fix(operator): close child ownership races
usr-bin-roygbiv
committed
test(operator): model stale cache after create race
usr-bin-roygbiv
committed
test(operator): cover workspace PVC create race
usr-bin-roygbiv
committed
fix(operator): validate authoritative create winners
usr-bin-roygbiv
committed
test(operator): cover authoritative cleanup policy
usr-bin-roygbiv
committed
fix(operator): precondition authoritative cleanup
usr-bin-roygbiv
committed
test(operator): cover split-reader dependency cleanup
usr-bin-roygbiv
committed
fix(operator): authoritatively clean revoked sessions
usr-bin-roygbiv
committed
test(operator): expose stale workspace session cache
usr-bin-roygbiv
committed
fix(operator): list workspace sessions authoritatively
usr-bin-roygbiv
committed
test(operator): reject stale PVC authority
usr-bin-roygbiv
committed
fix(operator): revalidate PVC authority
usr-bin-roygbiv
committed
fix(t4-api): preserve heartbeat cursor semantics
usr-bin-roygbiv
committed
test(operator): gate existing pods on PVC authority
usr-bin-roygbiv
committed
test(t4-api): model heartbeat cursor liveness
usr-bin-roygbiv
committed
fix(operator): gate child repairs on PVC authority
usr-bin-roygbiv
committed
chore(op05): integrate final operator and API contracts
usr-bin-roygbiv
committed
test(cluster-server): require durable PostgreSQL gateway
usr-bin-roygbiv
committed
test(cluster-server): expose durable gateway red
usr-bin-roygbiv
committed
feat(cluster-server): persist public gateway ledger
usr-bin-roygbiv
committed
fix(cluster-server): transact durable migrations
usr-bin-roygbiv
committed
fix(cluster-server): validate durable ledger epochs
usr-bin-roygbiv
committed
test(cluster-server): compare PostgreSQL counts as bigint
usr-bin-roygbiv
committed
test(cluster-server): scope PostgreSQL suite to service job
usr-bin-roygbiv
committed
test(cluster): cover durable gateway review repairs
usr-bin-roygbiv
committed
fix(cluster): harden durable gateway ledger
usr-bin-roygbiv
committed
fix(cluster): close durable gateway race gaps
usr-bin-roygbiv
committed
test(cluster): stabilize durable gateway concurrency proof
usr-bin-roygbiv
committed
test(cluster): pause atomic event retention boundary
usr-bin-roygbiv
committed
test(cluster): isolate durable gateway scenarios
usr-bin-roygbiv
committed
test(cluster): preserve durable restart state
usr-bin-roygbiv
committed
test(cluster): preserve lease owner across restart
usr-bin-roygbiv
committed
test(chart): match quoted secret projection keys
usr-bin-roygbiv
committed
test(cluster): cover review repair contracts
usr-bin-roygbiv
committed
fix(cluster): close durable gateway review defects
usr-bin-roygbiv
committed