quilt kernel P7: canon ledger — Layer H, the git log verified against the claim - #8
Closed
SuperInstance wants to merge 1 commit into
Closed
SuperInstance wants to merge 1 commit into
SuperInstance wants to merge 1 commit into
Conversation
… the claim
Fleet canon doctrine: the repo's git log IS the ledger. verify(t) replays
the log and verifies every packet against the Layer C claim (CANON.md).
In hermit this was provable but unclaimed: the bench contract and quilt
kernel commits exist, the claim didn't. Now the claim is load-bearing.
- src/quilt/canon-ledger.ts
- parseClaim/loadClaim: Layer C front matter -> typed claim (yaml)
- buildPackets: git log replay over the claim's scope (canonical docs
+ CANON.md + src/quilt/), oldest first, each packet tagged with the
claim fields it serves (feeds:tidepool, canonical_docs:<path>, claim)
- verify: kernel commits fail if the claim drops feeds:[tidepool];
a canonical doc's REMOVAL is attributed to the exact commit that
deleted it (tree check against commit and parent, not the worktree)
- replayHash: FNV-1a 64 over the canonical serialization — drift is
one string, not a feeling (same algo as the fleet rate limiter)
- CLI: bun run src/quilt/canon-ledger.ts [repo] — exit 1 on failure
- Implicit mode when CANON.md is absent (this ref predates PR #7):
kernel scope only, packets ok with a declared warning
- tests/canon-ledger.test.ts: 11 hermetic fixtures (tmp git repos), no
network. Includes replay determinism (rebuild -> identical hash) and
ledger growth changing the hash.
Suite: 411 pass / 4 pre-existing env fails (lobster artwork pipeline,
verified failing on the clean base branch — magick/dwebp env).
Ref: SuperInstance/SuperInstance PR openclaw#18 (fleet-canon doctrine), hermit PR #7 (Layer C claim)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Fleet canon Layer H lands on hermit. Doctrine (SuperInstance/SuperInstance#18): the repo's git log IS the ledger. verify(t) replays the log and verifies every packet against the Layer C claim (CANON.md, hermit#7). The claim becomes load-bearing: drift fails CI, loudly, at the commit that caused it.
Rules enforced
src/quilt/**) fails verification if the claim no longer saysfeeds: [tidepool]. Editing CANON.md to drop the acknowledgment breaks the ledger on every kernel packet.canonical_docsis attributed to the exact commit that deleted it (tree check against commit AND parent, not the worktree).replayHash, or the ledger is forked.Numbers
src/quilt/canon-ledger.ts(~200 lines) +tests/canon-ledger.test.ts— 11/11 pass, hermetic tmp-git fixtures, no networkfeeds:tidepoolCLI
bun run src/quilt/canon-ledger.ts [repoPath] # exit 1 on failureStacked on #6 (quilt-kernel-p6-tidepool). Layers: #7 = Layer C claim, this = Layer H ledger.