Skip to content
Original file line number Diff line number Diff line change
Expand Up @@ -15,9 +15,12 @@ typed symbol/manifest, and tests.
| `WS-REV-001-PLAN` | Review And Revision Lifecycle Planning | L1 | None | Merged PR #128 |
| `WS-REV-001-01` | Canonical Contract Adoption And Dependency Conformance | L1 | PLAN | Merged PR #145 |
| `WS-REV-001-02` | Locked Review Policy And Task Lifecycle Alignment | L1 | 01 | Merged PR #147; non-executable split record |
| `WS-REV-001-PLAN2` | REV-02A Runtime Readiness Plan Refresh | L1 | 02; planning-only human start | Active planning/specification chunk; no runtime |
| `WS-REV-001-02A` | Project Guide Activation Sequence And Publication Locking | L1 | Exact merged AUTH contributor foundation; refreshed SHA/head; separate human start | Runtime blocked |
| `WS-REV-001-02B` | Locked Review Policy And Dormant Task Lifecycle Compatibility | L1 | 02A; approved duration defaults; separate start | Proposed |
| `WS-REV-001-PLAN2` | REV-02A Runtime Readiness Plan Refresh | L1 | 02; planning-only human start | Merged PR #150 |
| `WS-REV-001-02A` | Guide Chronology And Task Locking Split | L1 | PLAN2; exact merged AUTH contributor foundation; separate human start | Active planning-only split record after preimplementation FAIL; no runtime |
| `WS-REV-001-02A1` | Project And Setup Publication Fence | L1 | 02A; current writer inventory; separate human start | Proposed executable child |
| `WS-REV-001-02A3` | Guide Activation Chronology | L1 | 02A1; current AUTH foundation/head; separate human start | Proposed executable child |
| `WS-REV-001-02A4` | Task Guide Triplet And Screening | L1 | 02A3; current migration head; separate human start | Proposed executable child |
| `WS-REV-001-02B` | Locked Review Policy And Dormant Task Lifecycle Compatibility | L1 | 02A4; approved duration defaults; separate start | Proposed |
| `WS-REV-001-02C` | Submission Attribution, Context, And Immutable Lineage | L1 | 02B; merged AUTH canonical contributor constraints; separate start | Proposed |
| `WS-REV-001-03` | Review Queue And Lease Persistence | L1 | 02C | Non-executable split record |
| `WS-REV-001-03A` | Queue And Lease Base Persistence | L1 | 02C; merged `WS-CON-001-03B`; contract review | Proposed; no contract yet |
Expand All @@ -36,7 +39,7 @@ typed symbol/manifest, and tests.
| `WS-REV-001-07A` | Lease-Bounded Packet And Review Chain Context | L1 | 06C; exact ART packet-read owner chunk | Proposed; owner chunk unscheduled |
| `WS-REV-001-07B` | Reviewer Finding Evidence Candidate And Finalize | L1 | 07A; exact ART review-evidence owner chunk and AUTH binding contracts | Proposed; owner chunk unscheduled |
| `WS-REV-001-08` | Pure Decision, Final Acceptance, And Task-Effect Contract | L1 | 07B; typed participant contracts | Proposed; executable contract after repair, no canonical write |
| `WS-REV-001-02A2` | Prepared Superseded Guide Reactivation | L1 | 08; merged AUTH-PREP/custody; AUTH-12 contract amendment; `project.guide.activate` remains unavailable | Proposed hidden behavior; manifest gates AUTH-12 evaluator/cutover/activation |
| `WS-REV-001-02A2` | Prepared Superseded Guide Reactivation | L1 | 08 and 02A4; merged AUTH-PREP/custody; AUTH-12 contract amendment; `project.guide.activate` remains unavailable | Proposed hidden behavior; manifest gates AUTH-12 evaluator/cutover/activation |
| `WS-REV-001-09A` | Revision Context Preparation And Resubmission | L1 | 08 | Non-executable split record |
| `WS-REV-001-09A1` | Review-Rooted Revision Preparation Persistence | L1 | 02A2; approved human round/deadline semantics; migration/head refresh | Proposed; no contract yet |
| `WS-REV-001-09A2` | Revision Preparation Participant, Resolver, And Task Context | L1 | 09A1 | Proposed; task-owned flush-only participant, no transaction composition |
Expand Down Expand Up @@ -67,7 +70,8 @@ typed symbol/manifest, and tests.
## Same-initiative order

```text
PLAN -> 01 -> 02(parent) -> PLAN2 -> 02A -> 02B -> 02C
PLAN -> 01 -> 02(parent) -> PLAN2 -> 02A(parent split)
-> 02A1 -> 02A3 -> 02A4 -> 02B -> 02C
-> 03(parent) -> 03A -> 03B
-> 04(parent) -> 04A -> 04B
-> 05(parent) -> 05A -> 05B
Expand Down Expand Up @@ -97,14 +101,16 @@ owner chunk ID + merged PR + merge SHA + migration head (if schema)
```

Known merged/planned CON IDs may be named, but proposed status remains blocked.
The contributor clean cut and ART packet-read/review-evidence/digest work do not
yet have trusted-main owner chunk IDs. REV neither invents those IDs nor edits
owner plans.
The contributor clean cut is merged as
`WS-AUTH-001-CONTRIBUTOR-FOUNDATION` through PR #153 at `8d5eb15b`. ART
packet-read/review-evidence/digest work still lacks exact merged owner chunks;
REV neither invents those IDs nor edits owner plans.

## Parent split records

Existing parent contract files for 03, 04, 05, 06, 07, 09A, 11, 12, former
12A release control, and 13 are non-executable historical planning records.
After this planning-only split merges, parent 02A joins the existing parent
contract files for 03, 04, 05, 06, 07, 09A, 11, 12, former 12A release control,
and 13 as a non-executable historical planning record.
They must not be used as implementation authorization. New child contracts are
authored only from the then-current main when each child receives a human start.

Expand All @@ -117,7 +123,6 @@ configuration, or coverage changes add CI integrity.

## Stop condition

Complete and merge only `WS-REV-001-PLAN2`, then stop. Its schema-v2 merge
intent names `WS-REV-001-02A` and requires a separate explicit start after the
exact AUTH runtime foundation merges. Do not begin 02A or any later child from
this planning PR.
Complete and merge only the planning-only parent split `WS-REV-001-02A`, then
stop. Its schema-v2 merge intent names `WS-REV-001-02A1` and requires a separate
explicit start. Do not begin 02A1, 02A3, 02A4, 02A2, or 02B from this PR.
Original file line number Diff line number Diff line change
Expand Up @@ -6,12 +6,12 @@ No row is complete from prose or an unmerged owner contract.
| Area | Owning chunks | Required executable proof | Release proof |
|---|---|---|---|
| Authority | 05B, 06A-C, 07A-B, 08, 02A2, 09A2-A5, 10, 11A-D, 12P2, 12A1-A4, 13C | Exact active/project reviewer grant; canonical human actors; AUTH-first prepared mutations; opaque one-use bindings; clean denial/restaging; service identity isolation; no direct grant reads; no adjudication authority | Exact merged feature manifests -> AUTH activation -> phase-enabled HTTP denial/allow matrix |
| Guide chronology | 02A, 02A2 | Positive immutable per-project sequence; exact status/provenance; Project-first publication/screening; immutable Task triplet; hidden prepared If-Match reactivation; both-order races | Forward/backward active guide changes without reviewer-side rebase or stale retry |
| Guide chronology | 02A1, 02A3, 02A4, 02A2 | Complete Project/setup writer fence; positive immutable per-project sequence; canonical-human approval; exact status/provenance; Project-first screening; immutable Task triplet; hidden prepared If-Match reactivation; both-order races | Forward/backward active guide changes without reviewer-side rebase or stale retry |
| Queue routing | 03A-B, 05A-B, 06A-C, 09B, 11A/C | Exact checker admission; one open/preferred entry; normalized packet membership; current returns lease/offer/none; duplicate/supersession races; authorized batched historical classification | New and historical eligible rows, preferred return, takeover, counts/age evidence |
| Leases | 03A-B, 06A-C, 11A/C | One active lease globally; canonical reviewer; packet manifest; reviewer ContributionPolicyVersion freeze; release/decline/expiry/revocation/lazy recovery and both-order races | Claim/release/expiry/reclaim/revocation through exact admitted service identities |
| Review history | 04A-B, 08, 10 | Every decision/finding/resolution immutable; exact predecessor/assignment lineage; reviewer CON operation before branch; accept-only FinalAcceptance and submitter operation; reject exact assignment; atomic rollback | Real accept/needs_revision/reject HTTP/database/audit/CON agreement and changed replay denial |
| Revision paths | 02C, 09A1-A5, 09B, 10, 11B-D | Human Review revision creates one immutable non-branching preparation before readable state; checker remediation persists unique immutable `remediation_source_checker_run_id`, keeps task context, creates no Review/preparation/CON record, and is never classified as legacy | Separate checker and human drills both reach corrected N+1 without policy or lineage drift |
| Revision context | 02A-C, 09A1-A5, 09B | Review-rooted task-owned preparation; kept/forward/backward/blocked; exact head acknowledgement; one winner per head; replacement successor; no contribution-policy rebase; checker path bypasses rebase | Human context display, checker rerun, prior-reviewer preference, resolution, final decision; checker correction returns open |
| Revision context | 02A1, 02A3, 02A4, 02A2, 02B-C, 09A1-A5, 09B | Prepared `If-Match`-protected superseded-guide reactivation; Review-rooted task-owned preparation; kept/forward/backward/blocked; exact head acknowledgement; one winner per head; replacement successor; no contribution-policy rebase; checker path bypasses rebase | Human context display, checker rerun, prior-reviewer preference, resolution, final decision; checker correction returns open |
| Limits/deadlines | 09A1-A4, 11B | Human-approved round/deadline semantics only; DB time and frozen episode facts; checker retries excluded; repair cannot bypass exhaustion; D6 close only | Before/equal/after, exact replay/races, checker D6 denial, no synthetic Review/CON record |
| Reject/admin close | 10, 11B/D | Human reject only from Review; exact assignment blocked/task rejected. PM/Operator closes use canonical cancelled reasons and create no Review/CON | Authorized/denied/cross-project/rollback proof; no `closed` token |
| Artifact evidence | 03B, 07A-B, 09A3, 11D | Active-exact-lease bytes; metadata-only history; ART candidate/finalize; immutable slot plus append-only attachment; orphan-only failed finalization; no raw store/provider path | Local/MinIO/S3 owner conformance plus outage/integrity no-adverse-outcome drill |
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -130,16 +130,15 @@ They are replaced in chunk 09A with direct project/guide/policy/context
integrity constraints and a Submission-to-preparation binding. The original
WorkstreamTask locks and all earlier Submissions remain unchanged.

Guide ordering never compares version strings. Chunk 02A adds a per-project,
Guide ordering never compares version strings. Chunk 02A3 adds a per-project,
monotonic immutable `activation_sequence`. Existing active/superseded guides are
backfilled deterministically from effective time, creation time, and ID under
migration validation; drafts remain null until first activation. Active or
superseded state requires a non-null sequence, draft state requires null, and a
sequence is allocated exactly once while locking the project. Task stamps guide
identity in 02A, Submission stamps it in 02C, and later preparation stamps it in
09A. Equal
identity/sequence keeps. Any different currently active guide identity/sequence
rebases, including an intentional backward rebase to an older activation
identity in 02A4, Submission stamps it in 02C, and later preparation stamps it
in 09A. Equal identity/sequence keeps. Any different currently active guide
identity/sequence rebases, including an intentional backward rebase to an older activation
sequence. An internally inconsistent pair whose identity and activation sequence
do not belong to the same guide record, or incomplete/unsafe context, blocks for
manager repair.
Expand Down Expand Up @@ -495,22 +494,24 @@ combined guide, policy/lifecycle, and Submission migration unreviewable as one
chunk. Parent 02 is therefore a non-executable split record:

```text
02A guide activation sequence/publication locking
02A parent split
-> 02A1 Project/setup publication fence
-> 02A3 guide activation chronology
-> 02A4 Task guide triplet screening
-> 02B immutable review/revision policy and dormant task/assignment states
-> 02C Submission attribution/context/immediate-predecessor immutability
```

Trusted main does not assign REV a migration and does not contain the contributor
foundation. AUTH-09D-A merged through PR #148 as
AUTH-09D-A merged through PR #148 as
`99ae4c963e53f317175dcb308b9e47c93ccf19ed`, establishing migration
`0026_actor_profile_lifecycle` and database-backed ActorProfile lifecycle
provenance without renaming either retired task field. AUTH next owns the
separately reviewed contributor-field foundation from that then-current head.
That foundation clean-cuts both retired task-subsystem contributor-identity
fields to `contributor_id`, preserves current behavior, and supplies database-backed
canonical-human ActorProfile lineage. REV records its exact merged PR/SHA and
constraint contract before generating any child migration; REV never supplies a
parallel rename, compatibility alias, or ActorProfile constraint.
provenance. `WS-AUTH-001-CONTRIBUTOR-FOUNDATION` later merged through PR #153 at
`8d5eb15b` with migration `0027_contributor_foundation`. It clean-cuts both
retired task-subsystem contributor-identity fields to `contributor_id`, preserves
current behavior, and supplies database-backed canonical-human ActorProfile
lineage. REV consumes that exact merged contract and never supplies a parallel
rename, compatibility alias, or ActorProfile constraint. Each executable REV
child allocates a migration only from its then-current explicit-start head.

02B keeps terminal Task/Assignment values dormant. It adds no transition into
`accepted`, `rejected`, `completed`, or `blocked`, and no reject Review FK.
Expand Down Expand Up @@ -546,9 +547,14 @@ bypassed through context repair.

### D24 - Guide Chronology Precedes Hidden Authorized Reactivation

02A adds activation sequence, Project-first publication/screening locking, and
immutable Task guide stamps while preserving public superseded-candidate denial.
After AUTH-PREP/custody and an AUTH-12 contract amendment, 02A2 adds hidden
Parent 02A is a planning-only split after L1 review rejected its combined
runtime boundary. 02A1 first makes the complete Project/setup writer graph share
one Project-first fence. 02A3 then adds activation sequence and canonical-human
approval provenance, freezes the complete activated guide row except exact
lifecycle transitions, and adds an explicit no-write active-repeat success while
preserving public superseded-candidate denial. 02A4 adds immutable Task guide
stamps and Project-first screening. After AUTH-PREP/custody and an
AUTH-12 contract amendment, 02A2 adds hidden
bodyless `If-Match` reactivation while `project.guide.activate` remains
unavailable. Its complete resource manifest gates AUTH-12 evaluator/cutover/
activation. This prevents new behavior from appearing under legacy local roles
Expand Down Expand Up @@ -578,7 +584,7 @@ decision command.

### D27 - Oversized Parent Contracts Are Non-Executable

Parents 03, 04, 05, 06, 07, 09A, 11, 12, 12A, and 13 are split records. Only
Parents 02A, 03, 04, 05, 06, 07, 09A, 11, 12, 12A, and 13 are split records. Only
the unique children in `CHUNK_MAP.md` may receive future implementation
contracts. Chunk 08 is pure contracts/validation only; chunk 10 is the first
canonical Review/FinalAcceptance/CON commit. Active release docs and router
Expand Down
Loading
Loading