Commit Graph
5068 Commits
Author SHA1 Message Date
Dotta 5c69b69ef2 Integrate Cursor child counter provenance
Co-Authored-By: Paperclip <noreply@paperclip.ing>

* commit '986f8cc5344107cc199c69e0581cba5401c54282':
  Verify Cursor child usage lifecycle and fence profile v9

# Conflicts:
#	doc/architecture/runner-cursor-capabilities.md
2026-09-30 05:34:15 -05:00
DottaandPaperclip 986f8cc534 Verify Cursor child usage lifecycle and fence profile v9
Mark missing and invalid child run ordinals as partial observations. Exercise the pinned vendor child construction and reuse methods on all three platforms and regenerate the Cursor-only execution identity.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 05:33:44 -05:00
DottaandPaperclip 3518902733 Integrate bounded warm retirement recovery
Co-Authored-By: Paperclip <noreply@paperclip.ing>

* commit '84a50124a997f4256932eab15fe79dd9ce875940':
  fix(runner): bound instruction collection and preserve pending retirement
2026-09-30 05:29:03 -05:00
DottaandPaperclip 84a50124a9 fix(runner): bound instruction collection and preserve pending retirement
Stop immediate collection retries when ownership is deferred or attempts stop advancing. Keep unconfirmed agent-file retirement recoverable through generic cleanup, with later-owner and restart-proof regressions.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 05:28:06 -05:00
DottaandPaperclip 6e0f54f565 Include the checked Cursor profile fixture in the combined candidate
Co-Authored-By: Paperclip <noreply@paperclip.ing>

* commit '4d6e2c00b88af9902facb20ad9177fb70a3a26e0':
  Keep the next Cursor profile fixture within the typed contract
2026-09-30 05:23:15 -05:00
DottaandPaperclip 4d6e2c00b8 Keep the next Cursor profile fixture within the typed contract
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 05:23:00 -05:00
DottaandPaperclip 34672c0c06 Combine reviewed remote observer fixture fixes
Co-Authored-By: Paperclip <noreply@paperclip.ing>

* commit 'a1145db4d8dbde17e624f8a14ef2726b33d09083':
  test(runner-e2e): require observer startup readiness
  fix(runner-e2e): bound remote observer startup requests
2026-09-30 05:14:31 -05:00
DottaandPaperclip b09e0a1967 Combine warm recovery and versioned ACP usage candidates
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 05:14:31 -05:00
DottaandPaperclip e95e28d9c8 Preserve partial Cursor native usage diagnostics and version ACP profiles
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 05:12:44 -05:00
DottaandPaperclip 3be4f778c6 fix(runner): fence warm directory successor ownership and recovery
Retain stable projectless scope, transfer collection to the exact successor lease, and preserve stopped remote files without restarting their sandbox. Validate complete remote directories and cover the composed DB/session lifecycle, retirement, and fresh preparation.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 05:05:41 -05:00
DottaandPaperclip a1145db4d8 test(runner-e2e): require observer startup readiness
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 04:51:08 -05:00
DottaandPaperclip 5c98f04299 fix(runner-e2e): bound remote observer startup requests
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 04:33:09 -05:00
DottaandPaperclip 8d8e57a58f docs(runner): record corrected plan and current qualification evidence
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 04:04:26 -05:00
DottaandPaperclip 5d4b3ac6c4 Finish stop-proved recovery of retained agent directories
Mark lost remote unchanged-turn copies unavailable only after exact termination proof, then perform owned cleanup. Preserve the live unchanged-turn guard and document warm ownership and crash preservation boundaries.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 04:03:03 -05:00
DottaandPaperclip 6c6c05dccb Retain unchanged agent files with their warm native owner
Probe complete materializations in bounded children, atomically transfer current-run collection authority, and preserve the exact agent home across warm turns. Retire before collecting changed or uncertain copies, fence stale claims and cleanup, and retain unresolved retirement ownership.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 03:59:20 -05:00
Dotta 3d21d375de Record current profile qualification and controller settlement fix 2026-09-30 02:56:03 -05:00
DottaandPaperclip 44e1b421cb Record Cursor plan correlation failure and reviewed profile7 candidates
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 02:55:29 -05:00
DottaandPaperclip 654ec2a9cc Fix Copilot materialization rollback and cover replay identity
Roll back only files and directories created by a failed materialization. Cover partial writes, retry, foreign entries, and session replay isolation. Refresh the Copilot v7 source binding.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 02:55:29 -05:00
DottaandPaperclip 913f374191 Preserve native Copilot assistant message identities
Verify and extract the pinned Copilot distribution, preserve native message IDs on the ordered ACP stream, and bind the guarded distribution to profile v7. Keep interim messages separate from final output.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 02:55:29 -05:00
DottaandPaperclip c58a8881f2 fix: validate Cursor plan waits against canonical contract policy
Reuse the production completion-contract envelope hash and exercise real contract creation and reuse in accepted-plan persistence tests.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 02:54:16 -05:00
DottaandPaperclip b74ca5eb97 test(runner): dereference the owned Node fixture copy
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 02:24:13 -05:00
DottaandPaperclip 6fa2399392 test(runner): isolate the qualified OpenCode Node fixture
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 02:15:31 -05:00
DottaandPaperclip a2984a0a9d Preserve historical Cursor plan proof query bounds
Retain the original Cursor6 event filter when verifying an exact committed wait. Progress rows remain part of Cursor7 lifecycle proof without consuming the historical query budget.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 02:15:04 -05:00
DottaandPaperclip 770dc88a11 Bind Cursor plan waits to the native tool lifecycle
Carry the admitted native plan parent tool into canonical request identity and require its exact successful durable lifecycle before passive settlement. Preserve historical committed Cursor6 waits while versioning new admission to Cursor7.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 01:56:28 -05:00
DottaandPaperclip 4b94270a0b Await clean Stop continuation settlement in recovery test
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 01:56:28 -05:00
DottaandPaperclip ade7c83dbb Preserve committed Cursor plan waits across profile upgrades
Keep current profile qualification mandatory when first creating a wait. Recovery uses its scoped committed receipt to verify the entire original proof, so future catalog/settings changes cannot authorize task work. Cover actual persisted finalization, catalog drift, original-profile tampering, and document explicit user continuation.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 01:56:28 -05:00
DottaandPaperclip 72a88e124d Keep accepted Cursor plans waiting for explicit continuation
Bind normal native plan acceptance to its durable request, delivered answer, admitted run and completion contract. Commit a passive in-progress result with a visible next-message summary, preserve semantic finish priority, and suppress recovery until task-specific continuation without changing modes.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 01:56:28 -05:00
DottaandPaperclip aec34c693f Record final local verification and Copilot message identity candidate
Keep the failed full invocation and original paid cases explicit. Link the exact fixture corrections and independently reviewed v7 source proof.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 01:34:21 -05:00
DottaandPaperclip f401b831f2 Stabilize route setup and attachment announcement handling
Load route modules during fixture setup so cold transforms cannot leave a timed-out request running against the next test mock state. Dismiss delayed product announcements through the normal Board UI in the attachment receipt fixture.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 01:32:15 -05:00
DottaandPaperclip 6b1e96af0f Record Copilot command and message-boundary qualification limits
Retain the failed paid case and original proof gaps. Document the verified private dependency-lock overlay and bot-owned tracked lock restoration.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 01:02:34 -05:00
DottaandPaperclip c9a0aaffa1 Bound Copilot fixture command prefix equivalence
Keep raw native command digests and exact execution origins while admitting at most eight leading ASCII space or tab bytes. Verify the relation in the settlement grader and retain independent local observations before a command mismatch aborts grading.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 00:58:04 -05:00
DottaandPaperclip 788e3b88ff Restore bot-owned lockfile bytes
Keep the private verified install overlay separate from the source lockfile.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 00:55:08 -05:00
DottaandPaperclip 672555ffbc Record current rich ACP qualification evidence and capability gaps
Separate source415 and source81 controller evidence from the unchanged e822 runtime. Retain failed attempts, scope the native denial pass, document pending plan settlement and exact command correlation, and distinguish implemented Pi notices from remaining rich-field gaps.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 00:48:33 -05:00
DottaandPaperclip 9d27311635 Refresh ACPX patch hashes in the frozen dependency lock
Regenerate pnpm 9.15.4 patch metadata without changing dependency versions or peer resolution. Bind both ACPX installations to their checked-in patches, including complete terminal diagnostics and rich protocol guards.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 00:44:30 -05:00
DottaandPaperclip 81c20ad227 fix: use non-secret text in the environment editor demo
Replace the static demo credential shape so bundled UI evidence does not trigger the secret scanner.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-30 00:07:46 -05:00
DottaandPaperclip 41503eb38f fix: avoid fresh attachment staging paths for empty wakes
Keep authorized residue scrubbing and unsafe-path checks while leaving untouched workspaces unchanged when no wake attachments were selected.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 23:16:23 -05:00
DottaandPaperclip 4597967f89 Handle durable cancellation before workspace failure recovery
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 23:15:13 -05:00
DottaandPaperclip 05d8b40a06 fix(evals): correlate denied Copilot tool target by origin
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 23:13:23 -05:00
DottaandPaperclip e822b614fc fix(runner): await cancellation proof after clean event EOF
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 22:25:41 -05:00
DottaandPaperclip 8b6136bf66 test(runner): align native selector fixture with Pi profile v9
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 21:40:17 -05:00
DottaandPaperclip 285073afe0 fix(runner): settle ACPX cancellation after verified retirement
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 21:40:17 -05:00
DottaandPaperclip 951b06d08a fix(runner): fence warm ACPX owners on runtime contract changes
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 21:40:17 -05:00
DottaandPaperclip d6ff17fd0d test(runner-e2e): isolate denied-target watchers from startup churn
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 21:40:17 -05:00
DottaandPaperclip 632e7c9802 docs(runner): record paid ACP qualification gaps
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 21:40:17 -05:00
DottaandPaperclip 4376dbe0be fix(evals): recognize native ACPX sidecar requests
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 21:40:17 -05:00
DottaandPaperclip e154e85394 test: scope Telegram lease fault to its fixture company
Fence the credential-reclamation hook used by the global recovery sweep so it cannot leave synthetic lease owners on earlier companies. Exercise a paused foreign receipt after the fault is armed and verify it settles without a leaked lease.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 20:12:20 -05:00
DottaandPaperclip 5605c350b2 fix(runner): retain native Cursor mode in shared session checkpoints
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 19:59:27 -05:00
DottaandPaperclip a1ccf64737 test: clarify runnerd bootstrap ID correlation
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 19:13:40 -05:00
DottaandPaperclip 794e90a258 test: require exact attested bootstrap reads in native qualification
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 17:54:12 -05:00
DottaandPaperclip b41ff0377b fix: attest single-file ACP bootstrap read targets
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-29 17:54:12 -05:00