Harden Registry Contract v1 and repository trust boundaries - #18

Merged

Wonderforge-Lab merged 121 commits into

mainfrom

hardening/registry-contract-v1

Sep 2, 2026

Commits on Sep 2, 2026

Draft Registry Contract v1
Wonderforge-Lab
committed
7683a44
Record Registry Surface Audit
Wonderforge-Lab
committed
67ea50b
Record Registry Contract field decisions
Wonderforge-Lab
committed
ccffaeb
Record Registry Contract lifecycles
Wonderforge-Lab
committed
7954ac9
Define Registry Contract v1 executable design
Wonderforge-Lab
committed
1108877
Add Registry Contract v1 shared schema primitives
Wonderforge-Lab
committed
8165f57
Add packet record schema
Wonderforge-Lab
committed
69ea4e4
Add response record schema
Wonderforge-Lab
committed
4405824
Add message record schema
Wonderforge-Lab
committed
efacc74
Add notification record schema
Wonderforge-Lab
committed
30bcb7d
Add visit record schema
Wonderforge-Lab
committed
818d3ec
Add visitor record schema
Wonderforge-Lab
committed
87cb776
Add tag record schema
Wonderforge-Lab
committed
aa599ee
Fix type-specific identifier validation
Wonderforge-Lab
committed
498d1b6
Fix type-specific identifier validation
Wonderforge-Lab
committed
709c139
Add validator dependency
Wonderforge-Lab
committed
45f9acd
Add read-only Registry Contract validator scaffold
Wonderforge-Lab
committed
6da95e3
Add valid packet validator fixture
Wonderforge-Lab
committed
10b5008
Add valid fixture artifact
Wonderforge-Lab
committed
d5f54c4
Add invalid packet validator fixture
Wonderforge-Lab
committed
8562b6c
Add invalid fixture artifact
Wonderforge-Lab
committed
33887be
Add validator smoke test harness
Wonderforge-Lab
committed
a274d04
Run validator smoke tests in CI
Wonderforge-Lab
committed
aa13f9b
Require acceptance metadata for accepted tags
Wonderforge-Lab
committed
271f423
Require a message recipient or group
Wonderforge-Lab
committed
dd4b378
Add valid response schema fixture
Wonderforge-Lab
committed
2f354bc
Add valid visitor schema fixture
Wonderforge-Lab
committed
7997003
Add valid visit schema fixture
Wonderforge-Lab
committed
dca37ce
Add invalid response schema fixture
Wonderforge-Lab
committed
994da4f
Add invalid message schema fixture
Wonderforge-Lab
committed
1400fde
Add invalid visit schema fixture
Wonderforge-Lab
committed
d145349
Add invalid notification schema fixture
Wonderforge-Lab
committed
6e9a98a
Add valid message schema fixture
Wonderforge-Lab
committed
f1ff846
Add valid notification schema fixture
Wonderforge-Lab
committed
147fae8
Add invalid visitor schema fixture
Wonderforge-Lab
committed
ceff07e
Add valid tag schema fixture
Wonderforge-Lab
committed
c6e6300
Add invalid tag schema fixture
Wonderforge-Lab
committed
6bda2d7
Expand validator smoke coverage across record types
Wonderforge-Lab
committed
ac95a9c
Migrate notification_record.json to Registry Contract v1
Wonderforge-Lab
committed
59b145e
Migrate response_record.json to Registry Contract v1
Wonderforge-Lab
committed
070828a
Migrate packet_record.json to Registry Contract v1
Wonderforge-Lab
committed
75f6e30
Migrate visit_record.json to Registry Contract v1
Wonderforge-Lab
committed
535064c
Migrate message_record.json to Registry Contract v1
Wonderforge-Lab
committed
2adae8a
Migrate tag_record.json to Registry Contract v1
Wonderforge-Lab
committed
7003863
Migrate ai_response_packet.md to Registry Contract v1
Wonderforge-Lab
committed
f7ef846
Migrate datadrop_packet.md to Registry Contract v1
Wonderforge-Lab
committed
a6bdcec
Migrate message_packet.md to Registry Contract v1
Wonderforge-Lab
committed
8162428
Migrate notification_request.md to Registry Contract v1
Wonderforge-Lab
committed
766261b
Migrate visit_signoff.md to Registry Contract v1
Wonderforge-Lab
committed
a8670e3
Migrate visitor_registration.md to Registry Contract v1
Wonderforge-Lab
committed
515c1b5
Add canonical visitor record template
Wonderforge-Lab
committed
5543d95
Use canonical IDs in example_ai_response_packet.md
Wonderforge-Lab
committed
891d426
Use canonical IDs in example_datadrop_packet.md
Wonderforge-Lab
committed
89d0496
Use canonical IDs in example_message_packet.md
Wonderforge-Lab
committed
cef9ed2
Use canonical IDs in example_visit_signoff.md
Wonderforge-Lab
committed
793fbde
Add validating message example record
Wonderforge-Lab
committed
852bac7
Add validating response example record
Wonderforge-Lab
committed
a183f09
Add validating packet example record
Wonderforge-Lab
committed
5c923d3
Add validating visit example record
Wonderforge-Lab
committed
6ebdab5
Validate canonical example record pairs
Wonderforge-Lab
committed
76a9d11
Verify canonical example records in smoke test
Wonderforge-Lab
committed
6aa4879
Add artifact for notification valid fixture
Wonderforge-Lab
committed
9406570
Add artifact for response valid fixture
Wonderforge-Lab
committed
16ba591
Add artifact for message valid fixture
Wonderforge-Lab
committed
af81b75
Add artifact for visit valid fixture
Wonderforge-Lab
committed
6acd12b
Add missing-artifact validator fixture
Wonderforge-Lab
committed
9ef8065
Test missing artifact paths in validator smoke suite
Wonderforge-Lab
committed
390aa6f
Verify record paths resolve inside the repository
Wonderforge-Lab
committed
945000b
Add filename identity validator fixture
Wonderforge-Lab
committed
9ac8e95
Check canonical record filenames against IDs
Wonderforge-Lab
committed
d1cc846
Exercise filename identity validation
Wonderforge-Lab
committed
513093e
Add missing-reference validator fixture
Wonderforge-Lab
committed
117be8a
Resolve typed record references during batch validation
Wonderforge-Lab
committed
3313a7b
Exercise typed reference validation
Wonderforge-Lab
committed
5f74c5a
Exercise valid tag resolution in packet fixture
Wonderforge-Lab
committed
ad5cce1
Add unknown-tag validator fixture
Wonderforge-Lab
committed
76f89b2
Resolve record tags against canonical vocabulary
Wonderforge-Lab
committed
802d943
Exercise tag vocabulary validation
Wonderforge-Lab
committed
2cf8738
Add lifecycle-path validator fixture
Wonderforge-Lab
committed
4c61eed
Exercise lifecycle bucket validation
Wonderforge-Lab
committed
3c58ef2
Enforce lifecycle storage buckets for registry records
Wonderforge-Lab
committed
e2d9096
Migrate capstanai-labnote tag to Registry Contract v1
Wonderforge-Lab
committed
90bbd50
Migrate human-in-the-loop tag to Registry Contract v1
Wonderforge-Lab
committed
2eefc8d
Migrate example-project tag to Registry Contract v1
Wonderforge-Lab
committed
973e284
Migrate provenance tag to Registry Contract v1
Wonderforge-Lab
committed
5832efb
Migrate workflow-testing tag to Registry Contract v1
Wonderforge-Lab
committed
19d6f58
Include canonical registry in validator smoke suite
Wonderforge-Lab
committed
fe992cf
Validate the canonical registry record set
Wonderforge-Lab
committed
a38297f
Run registry validation in CI
Wonderforge-Lab
committed
db84731
Clarify session-level security trust boundary
Wonderforge-Lab
committed
e64d4b5
Define control-plane and content-plane trust boundary
Wonderforge-Lab
committed
b9b2a84
Align registry guide with Contract v1
Wonderforge-Lab
committed
6b6ffa3
Add generated canonical registry index
Wonderforge-Lab
committed
143eb9b
Add canonical registry view generator
Wonderforge-Lab
committed
68a2aea
Test generated registry views are current
Wonderforge-Lab
committed
b992098
Generate visitor_registry.csv from canonical records
Wonderforge-Lab
committed
7f306ab
Generate response_registry.csv from canonical records
Wonderforge-Lab
committed
54288e2
Generate visit_registry.csv from canonical records
Wonderforge-Lab
committed
22f528a
Generate notification_registry.csv from canonical records
Wonderforge-Lab
committed
55e68d4
Generate packet_registry.csv from canonical records
Wonderforge-Lab
committed
0a60acb
Generate message_registry.csv from canonical records
Wonderforge-Lab
committed
6626e4b
Document generated registry compatibility views
Wonderforge-Lab
committed
cad9544
Check generated registry views in CI
Wonderforge-Lab
committed
c23b37b
Mark legacy visitor ID rules as superseded
Wonderforge-Lab
committed
94db702
Correct historical bridge configuration references
Wonderforge-Lab
committed
1c4e311
Remove circular prerequisite steps from deposit quickstart
Wonderforge-Lab
committed
04ef30c
Version and clarify bridge configuration role
Wonderforge-Lab
committed
fbea3fa
Reference versioned configuration path map from entrypoint
Wonderforge-Lab
committed
170aa92
Add canonical English tag display catalogue
Wonderforge-Lab
committed
e20298f
Add canonical English localization glossary
Wonderforge-Lab
committed
b2d61e6
Add repository Markdown link checker
Wonderforge-Lab
committed
b5fadb9
Test repository Markdown links
Wonderforge-Lab
committed
13fe74f
Check repository Markdown links in CI
Wonderforge-Lab
committed
af04878
Add versioned bridge configuration schema
Wonderforge-Lab
committed
fcc5361
Document safe LabNote scaffold upgrades
Wonderforge-Lab
committed
7f9313c
Test bridge configuration against schema
Wonderforge-Lab
committed
bcfd864
Validate versioned bridge configuration in CI
Wonderforge-Lab
committed
830e9d7
Add same-change-set tag promotion guard
Wonderforge-Lab
committed
9e07543
Guard same-PR tag promotions in CI
Wonderforge-Lab
committed
2cde6a9
Run repository validation on every change
Wonderforge-Lab
committed
82e6cae
Close registry validator review gaps
Wonderforge-Lab
committed
a13bffd