integration/consolidated-current — single-branch consolidation + Phase 2 (2A/2B) - #8

Draft

focusedbrain wants to merge 149 commits into

mainfrom

integration/consolidated-current

Commits on Jul 24, 2026

docs: WR Handshake gap analysis deliverables (findings report, gap matrix, migration and risk, refactor plan)

Local Dev
and
cursoragent
committed
6f90f55
refactor(handshake): Phase 1 - hygiene and guards (full-claim identity, ingress admission, dead-path removal)

Local Dev
and
cursoragent
committed
c13c942
refactor(handshake): Phase 2 - canonical core (full-coverage signing, frozen core record, key extraction, anti-rollback)
Local Dev
committed
53ac2ab
Phase 3: profile registry with fail-closed dispatch, core store split, ledger freeze

Local Dev
and
cursoragent
committed
cdf45fd
refactor(handshake): Phase 4 - one formation pipeline (Connect-offer gate, handshake_type elimination, silent revocation, edge-agent retirement)

Local Dev
and
cursoragent
committed
0ed2443
refactor(handshake): Phase 5 - grants & evidence (grant objects, per-tap execution consent, Tier-L evidence chain, capability tokens)

Local Dev
and
cursoragent
committed
617ff66
chore: build045 stamp (phase 5 grants/evidence)

Local Dev
and
cursoragent
committed
b9a4b83

Commits on Aug 1, 2026

art50: WP1 core AiProvenance module and generation log

Local Dev
and
cursoragent
committed
8c506d4
art50: WP2 instrument generation points with AiProvenance

Local Dev
and
cursoragent
committed
83847d0
art50: WP3 propagate provenance on wire and HTTP envelopes

Local Dev
and
cursoragent
committed
c425fd3
art50: WP4 outbound MIME headers and BEAP content_provenance

Local Dev
and
cursoragent
committed
5fe3f9c
art50: WP5 first-interaction AI disclosure component and mounts

Local Dev
and
cursoragent
committed
ff79481
art50: WP6 draft origin tracking and send-time AI labelling

Local Dev
and
cursoragent
committed
d75e256
art50: WP7 clipboard export and field-apply chain-of-custody

Local Dev
and
cursoragent
committed
4c3bddc
art50: WP8 stop stripping AI self-disclosure boilerplate

Local Dev
and
cursoragent
committed
d66e275
art50: WP9 verification tests for marking and disclosure contracts

Local Dev
and
cursoragent
committed
15ac103
art50: WP3 attach provenance on chatWithContext IPC results

Local Dev
and
cursoragent
committed
7f34656
art50-fix: phase1 Layer B non-dismissible disclosure and editorial responsibility logging

Local Dev
and
cursoragent
committed
7c937fa
art50-fix: phase2 once-at-generation provenance and IPC propagation

Local Dev
and
cursoragent
committed
507cc5b
art50-fix: phase3 carrier honesty for clipboard export and Zoho Layer A

Local Dev
and
cursoragent
committed
9ff18b9
art50-fix: phase4 integration tests and createProvenance invariant grep

Local Dev
and
cursoragent
committed
b7e72f4
art50-fix: phase2 persist stream-analyze provenance into ai_analysis_json

Local Dev
and
cursoragent
committed
188c327

Commits on Aug 7, 2026

phase 1: baseline code module + CPR + trust-signal hygiene; spec v1.4; stamp build046

Local Dev
and
cursoragent
committed
7a9921c
phase 1 correction: retire wrcode_valid condition; fix zoho aiProvenance import depth

Local Dev
and
cursoragent
committed
b848b27
merge main into wr-code-email-e2e-phase-1 for integration testing

cursoragent
and
focusedbrain
committed
3152f0f

Commits on Aug 8, 2026

docs(spec): track Refactor Order Delta v1.1 (Annex XIV 5.5 + Annex XVII additions)

cursoragent
and
focusedbrain
committed
560d005
docs: add Annex XVII - WR Entries and the Publisher Console v1.0 (7 Aug 2026)

cursoragent
and
focusedbrain
committed
0690a93
docs(spec): add A6 to Delta v1.1 - suspension triple ruled

cursoragent
and
focusedbrain
committed
e5d3b67
docs(spec): replace Delta v1.1 Phase 4 status bullet with author text

cursoragent
and
focusedbrain
committed
e404d32
merge origin/main into wr-code-email-e2e-phase-2

cursoragent
and
focusedbrain
committed
93289fd
phase 2 (2A.1): provenance gates BEAP detection on the inline path

cursoragent
and
focusedbrain
committed
06753a9
phase 2 (2A.2): close all three fail-open degradations on the inline path

cursoragent
and
focusedbrain
committed
8b2a18e
phase 2 (2A.3): source-walking guard tests for the provenance gate

cursoragent
and
focusedbrain
committed
a181aae
phase 2 (2B.1): shared rule-8 provenance alert + extension wiring

cursoragent
and
focusedbrain
committed
a155e09
chore(graphify): add code/ knowledge graph (AST-only, no PDFs/docs)

cursoragent
and
focusedbrain
committed
e1e993c
fix(handshake): close three Host-AI / IPC authorization gaps

cursoragent
and
focusedbrain
committed
3442b5b
merge: integrate refactor/wr-code-email-e2e-phase-2 into consolidation

cursoragent
and
focusedbrain
committed
a38e8cd
merge: integrate cursor/graphify-knowledge-graph-c56a (#7)

cursoragent
and
focusedbrain
committed
dffec03
test: align #7 regression fixtures with Phase-2 same_principal gate

cursoragent
and
focusedbrain
committed
2a24cdb
fix(ci): use pnpm in WebMCP Release Gate workflow

Local Dev
and
cursoragent
committed
1f13880
chore(graphify): stop committing generated graphify-out artifacts

cursoragent
and
focusedbrain
committed
123adba
fix(deps): sync pnpm lockfile for extension @repo/shared-beap-ui

cursoragent
and
focusedbrain
committed
f42ba48
chore: remove accidental vitest dump phase2-before-native.json

cursoragent
and
focusedbrain
committed
d856175
chore: ignore .cursor/ tooling artefacts

cursoragent
and
focusedbrain
committed
743fd75
phase 2 (2B Option 2): wire shared CPR alert; defer extension sync plumbing

cursoragent
and
focusedbrain
committed
0c8466a
chore: keep the Cursor/Graphify integration visible in .gitignore

cursoragent
and
focusedbrain
committed
5f5d06a
phase 2 (2C): CPR as a declared, typed input to local scam analysis

cursoragent
and
focusedbrain
committed
8089bb4
docs(phase 2): report — consolidation, 2A/2B/2C, and the do-not-regress capture

cursoragent
and
focusedbrain
committed
a310cb9
docs: diagnosis-only pass on the consolidation-inherited failures

cursoragent
and
focusedbrain
committed
2c2e007
docs(spec): WRC Registry API Contract v1.0 (author document drop)

cursoragent
and
focusedbrain
committed
20794bf
test(harness): add validated_at / validation_reason to createHarnessDb

cursoragent
and
focusedbrain
committed
892bacf
test: align clone-prepare fixtures with coordination-device-id role derivation

cursoragent
and
focusedbrain
committed
a5ad04b
test(seal-gate): assert the contract these four cases actually have

cursoragent
and
focusedbrain
committed
3299671
test(coordination): pin the retired-relay refusal and stop reading ambient mode

cursoragent
and
focusedbrain
committed
c5447a4
docs: consolidation-inherited remediation acceptance

cursoragent
and
focusedbrain
committed
b46680a
docs: record author dispositions for the three carried-forward items

cursoragent
and
focusedbrain
committed
4a3695b
phase 3 (3A/3B/3C/3D/3E/3F): WRC resolution client, contract-first

cursoragent
and
focusedbrain
committed
58aa71c
phase 3: exit-criteria tests — hardening, divergence matrix, r7 alignment

cursoragent
and
focusedbrain
committed
ef87c6b
docs(phase 3): report — resolution infrastructure

cursoragent
and
focusedbrain
committed
1c1cb3e

Commits on Aug 9, 2026

phase 3 addendum (3G): contract v1.1 — delegation travels in the head

cursoragent
and
focusedbrain
committed
d8ac21b
docs(phase 3): 3G addendum + codified standing rules

cursoragent
and
focusedbrain
committed
de25492
pre-phase-4 (i): split the conflated inbox-read error code

cursoragent
and
focusedbrain
committed
3a77709
pre-phase-4 (iii): move the anti-rollback epoch floor into the native DB

cursoragent
and
focusedbrain
committed
49022f0
pre-phase-4 (ii): seal-key-source policy findings — diagnosis only

cursoragent
and
focusedbrain
committed
74e6f70
test(wrc): the floor survives eviction because of where it lives now

cursoragent
and
focusedbrain
committed
df3dcdf
docs: pre-Phase-4 block acceptance report

cursoragent
and
focusedbrain
committed
97cb52a
docs: pin the pre-block tip hash in the report

cursoragent
and
focusedbrain
committed
56dbf7c
phase 4 (4A/4B): A6 status composition and the resolution-bearing offer

cursoragent
and
focusedbrain
committed
3af4af8
phase 4: keep the staged-offer table to its one owning module

cursoragent
and
focusedbrain
committed
485880c
docs(phase 4): report — entry lifecycle and offer schema

cursoragent
and
focusedbrain
committed
0a7ca3a

Commits on Aug 11, 2026

fix(ii): verify inbox rows against the providers policy permits, not just the tag

cursoragent
and
focusedbrain
committed
6c758b8
docs: seal-key-source fix report + third isolation-risk observation

cursoragent
and
focusedbrain
committed
ed3d3ed
docs: capture persistence — commit the identity sets, record legacy reseal drift

cursoragent
and
focusedbrain
committed
cd282ea
phase 5 (5A/5B/5C + delta): email→offer path, offer presentation, manual entry

cursoragent
and
focusedbrain
committed
5636eb4
phase 5: re-point two guards the phase's own changes invalidated

cursoragent
and
focusedbrain
committed
470bac5
docs(phase 5): final report — surfaces, E2E acceptance, integration-pending

cursoragent
and
focusedbrain
committed
f12c626
chore(build): build047 stamp for the final rig build

cursoragent
and
focusedbrain
committed
21389e8
docs: pre-flight verification report — one blocking item

cursoragent
and
focusedbrain
committed
44871b3
fix: narrow BeapMessage.channelProvenance to the shared record type

cursoragent
and
focusedbrain
committed
183e147
docs: pre-flight verdict corrected to RIG-READY; record typecheck blind spot

cursoragent
and
focusedbrain
committed
adcc99c
chore(build): build048 stamp for the final rig build

cursoragent
and
focusedbrain
committed
be14528

Commits on Aug 12, 2026

docs: PSL implementation analysis v1 — partial, two inputs missing

cursoragent
and
focusedbrain
committed
1135937
docs(psl): STOP on failed identity verification; record the 12 Aug rulings

cursoragent
and
focusedbrain
committed
a356779
chore(build): build007 stamp

cursoragent
and
focusedbrain
committed
66dc5fe

Commits on Aug 30, 2026

docs(wr-code): Annex XVI v1.93 state analysis; check core survives, framing does not

Local Dev
and
cursoragent
committed
426963d
docs(wr-code): record author ruling AR-1/AR-2; discharge the v1.93 input hold

Local Dev
and
cursoragent
committed
a62d485
feat(wr-code): Phase 0 - Appendix A conformance oracle; correct the quasigroup verdict

Local Dev
and
cursoragent
committed
e28913a
feat(wr-code): take custody of Annex XVI v1.95; rebase the check conformance suite

Local Dev
and
cursoragent
committed
698a702
fix(wr-code): Q11 closed upstream - Appendix A is now clean; raise Q12 on identity

Local Dev
and
cursoragent
committed
e1afb4a
Add WR Code reference grammar v2 core module (Annex XVI v1.95)

Local Dev
and
cursoragent
committed
003a52b
Replace old 6+5+1 Baseline Code API with grammar-v2 capture surface

Local Dev
and
cursoragent
committed
e4d3cf0
Add WR Code detection, manual-entry RPC, and grammar transcription guard

Local Dev
and
cursoragent
committed
d5e4db5
Move connect-offer WR-code staging to grammar v2 with fail-closed admission

Local Dev
and
cursoragent
committed
17aa6db
Add non-destructive legacy shim for pre-v2 WR-code offer rows

Local Dev
and
cursoragent
committed
d16ce14
Add grammar v1.95 implementation run report

Local Dev
and
cursoragent
committed
1085c13
Add XVI.7.6 six-gate resolution pipeline with interim namespace anchor

Local Dev
and
cursoragent
committed
d13e3a5
Add XVI.8.1/8.3 entry lifecycle model as the Entry gate substrate

Local Dev
and
cursoragent
committed
23e1c69
Add XVI.8.4 one-time-use state with atomic claim compare-and-set

Local Dev
and
cursoragent
committed
6472be6
Add Run 2 report: six gates, entry lifecycle, one-time-use

Local Dev
and
cursoragent
committed
7c8cea0
Add canonical WR Code entry designator per Annex XVI 1.95 5.10/5.11

Local Dev
and
cursoragent
committed
9f15b96
Expand ordered-pair and combination designation through Gate 3

Local Dev
and
cursoragent
committed
cfcffc5
Prove S* parent binding and cross-parent collision end to end

Local Dev
and
cursoragent
committed
7b8b79e
Pin non-destructive designator persistence in the native use-state table

Local Dev
and
cursoragent
committed
db90b84
Add Run 3 entry-designation report

Local Dev
and
cursoragent
committed
4832178
Document Run 4 normative trust and admission model from Annex XVI 1.95

Local Dev
and
cursoragent
committed
cb6fa79
Replace Gate-2 interim anchor with the Annex XVI 6.4/6.5 Namespace Directory

Local Dev
and
cursoragent
committed
487eecd
Implement SE session and expiry lifecycle per Annex XVI 5.7

Local Dev
and
cursoragent
committed
6f1965f
Add Device Pass and Registered Counterpart Device behind Gate 4 per Annex XVI 13.7

Local Dev
and
cursoragent
committed
2b23f44
Wire pairing slots into the canonical entry and device model per Annex XVI 5.10

Local Dev
and
cursoragent
committed
c1a71fe

Commits on Aug 31, 2026

Implement Gate 5 relay release chain with signed claims and delegation per Annex XVI 7.6

Local Dev
and
cursoragent
committed
19ab570
Implement Gate 6 capsule admission chain with sealed nonce verification per Annex XVI 7.6

Local Dev
and
cursoragent
committed
43eb1fb
Add full-chain conformance matrix and Run 4 report

Local Dev
and
cursoragent
committed
6c80858
Run 5 Slice 0: baseline capture and runtime/persistence inventory

Local Dev
and
cursoragent
committed
5e8a178
Run 5 Slice 1: production composition root - runtime-owned identity, singleton security deps, no caller-supplied trusted state

Local Dev
and
cursoragent
committed
1380019
Run 5 Slice 2: WRC security DB with durable directory generation floors, fail-closed floor semantics, no memory fallback in runtime

Local Dev
and
cursoragent
committed
6488fe4
Run 5 Slice 3: durable device registry - generation-gated DB store, atomic pairing commit, runtime wiring

Local Dev
and
cursoragent
committed
d4966a3
Run 5 Slices 4+5: durable relay replay ledger and Gate-6 request-id idempotency, atomic bind-and-settle, runtime wiring

Local Dev
and
cursoragent
committed
d223bea
Run 5 Slices 6-8: production-composition proofs - relay, device trust, capsule admission through the runtime RPC surface

Local Dev
and
cursoragent
committed
1fe0517
Run 5 Slice 9: explicit acceptance boundary - wrc.acceptReference token protocol over the durable Run-2 consume CAS

Local Dev
and
cursoragent
committed
3840f4e
Run 5 Slice 10: fail-closed persistence proofs; close the security-DB handle on failed open/migrate

Local Dev
and
cursoragent
committed
db387d1
Run 5 Slice 11: restart/crash/concurrency matrix suite over the native security DB

Local Dev
and
cursoragent
committed
d575ebc
Run 5 Slice 12: production full-path suite (all 7 classes via the RPC dispatcher) + anti-bypass proofs

Local Dev
and
cursoragent
committed
047ca7d
Run 5 Slice 13: bounded lazy security-DB maintenance (schema v4 indexes, retention pruning, never touches floors/uses/devices)

Local Dev
and
cursoragent
committed
f9ec23f
Run 5 report: production runtime wiring, durable security state, restart/crash safety - after-capture identical failing set, +78 passing

Local Dev
and
cursoragent
committed
8f0a564

Commits on Sep 25, 2026

wip(art50): de-duplicate AiInteractionDisclosure mounts (host tree, 2026-08-12)
Local Dev
committed
296123b
wip(rebrand): Rebrand Wave 1, WR Desk to Optirando (host tree, 2026-08-12)
Local Dev
committed
1702378
wip(rebrand): originDeleteFlow confirm copy WRDesk to Optirando (source unverified)
Local Dev
committed
c67d14c
docs(analysis): resync 2026-09 - ground truth, drift, resume plan
Local Dev
committed
306ea18
docs(analysis): resync 2026-09 addendum - reclassification, decision packet, housekeeping
Local Dev
committed
46afac1
test: add test:prepare to build the workspace packages tests fork or spawn
Local Dev
committed
9469d15
Merge wip/host-2026-08-12-art50-rebrand-w1: Art. 50 disclosure de-dup and Rebrand Wave 1
Local Dev
committed
28d6f4f
fix(wr-code): no ingest-time scan of loose e-mail references (Annex XVI 3, 7.4a)
Local Dev
committed
0e180b8
fix(types): close the ingestion-core typecheck blind spot; fix two masked TS2322
Local Dev
committed
19572ec
test(wr-code): close the Runs 3-5 acceptance-review guard gaps (S2a)
Local Dev
committed
0e6b497
feat(wr-code): route wrc.* through the product dispatchers behind the SSO session (S2b, route)
Local Dev
committed
6f484b2
docs(analysis): iteration 01 report and after-capture
Local Dev
committed
54ea118

Commits on Sep 26, 2026

docs(spec): WRC registry contract delta v2.0 draft for Author ratification (S2)
Local Dev
committed
1f844e0
fix(wr-code): bind P entries to their local block; prove every relied-on domain by DNS (C1, C2)
Local Dev
committed
6285f39
docs: ratify WRC contract delta v2.0 (Q20-Q27 = A); iteration 02 report and captures
Local Dev
committed
dd236fb
feat(wr-code): built-in test registry for wrc-test builds; release trust pinned in source
Local Dev
committed
ca181c4
docs(analysis): iteration 03 report and after-capture (WR Code test registry, pinned release trust)
Local Dev
committed
47ebee8
feat(wr-code): WR Code panel in the mail view (S2b UI, first increment)
Local Dev
committed
93cb50f
docs(analysis): iteration 04 report, after-capture and screenshots (S2b UI, first increment)
Local Dev
committed
1b80bfc
fix(handshake): desktop accept of staged connect offers, pinned to the rendered preview (HC5); directory C3/C4/C5/C8
Local Dev
committed
e1014a4
docs(analysis): iteration 05 report, after-capture and screenshots (HC5 desktop accept, directory C3/C4/C5/C8)
Local Dev
committed
f1274ad
feat(wr-code): responsible domain in the offer (S5); operator rollover channel (C6); account-tier credential and 401 (C7); HC5 in the extension and on every product route
Local Dev
committed
3927cfa
docs(analysis): iteration 06 report, after-capture and screenshots (S5, C6, C7, HC5 extension)
Local Dev
committed
4eaecaa
chore(build): build009 stamp (extension outDir, Windows output dir)
Local Dev
committed
a9e6791
docs(analysis): iteration 06 — Q9 is answered, not open
Local Dev
committed
ad03c74