| content |
{"Commits":[{"Sha1":"d024dfe85 {"Commits":[{"Sha1":"d024dfe85721e112a2963bcb2aed4abc84863540","Message":"chore(evidence): record static 20/20 and test:scripts 609/609 at e799172\n\nRebinds the 19 static reports from the clean detached run of e799172\n(runId local-static-1793476729341-68527-f85f3688-c967-43e5-8979-e716418fe6b3)\nand extends the consumer-type receipt with the second adversarial round:\n36 cases red on 90fdd87, 214/214 targeted green, five mutations red. The\npre-existing release-verification timing race (V14) failed the first\npnpm check and the first standalone test:scripts; reruns from restored\nclean reports passed.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-31T13:09:22-07:00"},{"Sha1":"e7991721a7e57f7dd19bf495b3d3296636978094","Message":"fix(consumer-alignment): closed D3 status whitelist, peer-only deps not hosts, wider markers\n\nSecond adversarial round (V9-V13, non-blocking):\n- V9: receipt passedStatuses must come from a closed whitelist taken from the\n statuses existing D3 receipts use (passed, passed-local,\n passed-independent-local, passed-local-clean-fixed-source,\n passed-local-isolated-fixed-source).\n- V12: peerDependencies no longer make a package a host or UI server;\n dependencies and optionalDependencies still count.\n- V10: host-loading markers also match npm: aliases of *domain-sdk packages,\n \u003cpkg\u003e/engine.js|.mjs|/index.(m)js targets and domain_package / mixed-case\n manifest names.\n- V11: listener list extended (elysia, hyper-express, ultimate-express,\n @tinyhttp/app, uWebSockets.js, @feathersjs/express|koa, @adonisjs/core,\n sails); ws/socket.io deliberately excluded.\n- V13: bounded-ingress exceptions under apps/api-* or with @nestjs/* in any\n section are invalid.\n- docs state the finite listener list, package.json-only scanning, the marker\n variants not recognised and the exception check limits.\n\nVerification: 36 new cases red on 90fdd87, targeted 214/214, check:quick 17/17.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-31T12:49:09-07:00"},{"Sha1":"90fdd874bb6536b763fd72cbc832da67165f8211","Message":"chore(evidence): record static 20/20 and test:scripts 573/573 at f6157c4\n\nRebinds the 19 static reports from the clean detached run of f6157c4\n(runId local-static-1793473921388-65358-d0ff7828-1e9f-41e2-9d4c-fb14aac20170)\nand extends the consumer-type receipt with the adversarial-review round:\n46 cases red on 7e525e2, 178/178 targeted green, seven mutations red. The\nfirst full run hit the pre-existing release-verification timing race\n(unchanged since 01fb4be); the rerun from restored clean reports passed.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-31T12:18:20-07:00"},{"Sha1":"f6157c4b4f7ac034832f78467c66bad097df095a","Message":"fix(consumer-alignment): close hostless and D3 false greens found in adversarial review\n\n- hostless: detect host-loaded package markers (*domain-sdk dependency,\n \u003cpkg\u003e/engine import mapping, domain-package manifests) as\n HOSTLESS_HOST_LOADED_MARKERS; key the hosted twin guard by repository.\n- D3 detection: scan dependencies/optionalDependencies/peerDependencies with a\n wider listener list; no longer skip outputs/dist/releases/snapshots/backup-*;\n retired apps/api-fastify|api-express found from any tracked file; Next.js-style\n UI servers observed for D3 rows and treated as escapes for hostless rows.\n- D3 matching: exact host directories; exceptions must be detected non-NestJS,\n non-retired host packages (D3_EXCEPTION_INVALID), marked DECLARED_NOT_VERIFIED.\n- D3 receipts: passed/passed-\u003cqualifier\u003e grammar without negating qualifiers;\n mandatory kind/check/decision identity naming D3 (D3_RECEIPT_IDENTITY);\n record-only successors limited to root reports/, Markdown and receipt files.\n- declared hosts with a second raw HTTP framework: D3_SECOND_HTTP_FRAMEWORK.\n- docs (derived-matrix, COMPATIBILITY §3.1, CHANGELOG, CLAUDE.md) narrowed to the\n implemented protections and their limits.\n\nVerification: 46 new/adjusted cases red on 7e525e2 implementation, targeted\nsuites 178/178 green, check:quick 17/17. Full static gate pending on clean\ncheckout.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-31T11:59:35-07:00"},{"Sha1":"7e525e279f18d1ba7a93cb973aab5b956a46fea7","Message":"chore(evidence): record static 20/20 and test:scripts 525/525 at 620e608\n\n- reports/*.latest.json from a clean detached `pnpm check` at 620e608\n (runId local-static-1793468744547-…, 20 steps, 525/525 script tests).\n- reports/consumer-type-alignment-2026-10-31.json: gate receipt only\n (red-before at 01fb4be and 3c7e7cd, clean runs, five mutations). The\n consumer dry-run catalog and output are not stored in this repo; they are\n handed to the workspace 00 layer.\n- CLAUDE.md GOVERNANCE-BASELINE dated entry.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-31T10:52:48-07:00"}],"HeadCommit":{"Sha1":"d024dfe85721e112a2963bcb2aed4abc84863540","Message":"chore(evidence): record static 20/20 and test:scripts 609/609 at e799172\n\nRebinds the 19 static reports from the clean detached run of e799172\n(runId local-static-1793476729341-68527-f85f3688-c967-43e5-8979-e716418fe6b3)\nand extends the consumer-type receipt with the second adversarial round:\n36 cases red on 90fdd87, 214/214 targeted green, five mutations red. The\npre-existing release-verification timing race (V14) failed the first\npnpm check and the first standalone test:scripts; reruns from restored\nclean reports passed.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-31T13:09:22-07:00"},"CompareURL":"luoanwu/base-framework/compare/01fb4befa02ffbef8f259700b9601817de87e05e...d024dfe85721e112a2963bcb2aed4abc84863540","Len":7}... |