From f5735ce1e96a2e1e14260114839e128e5e6f244e Mon Sep 17 00:00:00 2001 From: John Morrissey Date: Wed, 1 Jul 2026 23:39:15 +1000 Subject: [PATCH] docs(seam): cite hub seam-index + PDR-0045; dissolve self-appointed steward role MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Executes weft hub decision PDR-0045 (hub reclaims the seam-index canon). This registry is now a producer-contributed CONFORMANCE MIRROR, not federation canon — the canonical seam-index is hub-owned at weft/contracts/seam-index.json. - seam_registry.json (legis->warpline preflight row): remove the self-appointed "weft seam steward = wardline" language + the cross-sibling dispatch; the two rulings now CITE hub PDRs (reverify-drop -> PDR-0037; legis-conforms-down -> PDR-0045) instead of asserting a wardline steward decision. The "false freeze" verdict is updated to RESOLVED (legis 1.4.0 rewired to WarplineMcpClient; HttpWarplineClient gone from src) with the residual legis consumer-oracle re-freeze tracked as a distributed legis-CI task (weft-51699a641c). The attestation-row "OBLIGATION" dispatch reframed as a described warpline-side gap. - test_seam_registry.py: docstring canon-provenance note (mirror, not canon). - program plan: SUPERSEDED banner — the P0-W2/P8-W2 "populate hub FROM registry + sync-lint" direction is reversed by PDR-0045 (mirror CITES the hub index). Docs/prose only, gate-neutral: the conformance gate asserts structure only and never parses "steward"/"ruling"; all structural fields byte-identical; bar_verdict stays gap; evidence_paths untouched. git grep -i steward == 0. Gate 6/6 green; tests/conformance/ 304 passed. Closes weft-dbaada5883 condition 2 (hub PR: weft-83c25d96e3). Co-Authored-By: Claude Opus 4.8 (1M context) --- .../plans/2026-06-24-weft-seam-conformance-program.md | 8 ++++++++ tests/conformance/seam_registry.json | 8 ++++---- tests/conformance/test_seam_registry.py | 9 +++++++++ 3 files changed, 21 insertions(+), 4 deletions(-) diff --git a/docs/superpowers/plans/2026-06-24-weft-seam-conformance-program.md b/docs/superpowers/plans/2026-06-24-weft-seam-conformance-program.md index 3949a3c9..451346c7 100644 --- a/docs/superpowers/plans/2026-06-24-weft-seam-conformance-program.md +++ b/docs/superpowers/plans/2026-06-24-weft-seam-conformance-program.md @@ -2,6 +2,14 @@ > **Status:** PLAN — awaiting approval. No execution (no merges, no publishes) until signed off. > **Date:** 2026-06-24 +> +> **⚠ SUPERSEDED — hub-index direction (PDR-0045, 2026-07-01):** the P0-W2 / P8-W2 tracks +> below describe the hub seam-index as POPULATED FROM this registry (a hub-side sync-lint +> validating the hub against wardline's export), homed at a `~/loom` that never existed. +> That direction is REVERSED by hub decision PDR-0045: the canonical seam-index is hub-owned +> at `~/weft/contracts/seam-index.json`; THIS registry is a producer-contributed conformance +> MIRROR that CITES the hub index (pull-down). Any drift check is a wardline-side source-drift +> job, never a hub-side lint. The sync-lint was never built, so nothing was migrated. > **Provenance:** produced by a throttled (4-wide) multi-agent audit across the five Loom repos > + warpline. 40 seams discovered; skeptically audited against the SEI bar; reusable kit designed; > plan synthesized and adversarially reviewed (24 findings, 8 blocking — folded into this final). diff --git a/tests/conformance/seam_registry.json b/tests/conformance/seam_registry.json index f3913d3d..dfa1abe0 100644 --- a/tests/conformance/seam_registry.json +++ b/tests/conformance/seam_registry.json @@ -506,10 +506,10 @@ ] }, { - "seam": "legis\u2192warpline preflight_impact advisory read (warpline.preflight_impact.v1 envelope = warpline_impact_radius_get; consumer legis, producer warpline; reverify_worklist consumption ruled OUT per steward decision 2026-06-26)", + "seam": "legis\u2192warpline preflight_impact advisory read (warpline.preflight_impact.v1 envelope = warpline_impact_radius_get; consumer legis, producer warpline; reverify_worklist consumption ruled OUT per hub ruling PDR-0037)", "authority": "warpline", "consumer_or_second_producer": "legis", - "wire": "warpline.preflight_impact.v1 advisory impact set, surfaced via warpline_impact_radius_get (MCP/CLI success envelope: data.affected[], data.completeness, data.staleness, meta.local_only). legis consumes as advisory preflight context, never gates governance (SEAM 4 section 4A / GV-LG-1). reverify_worklist consumption ruled OUT per steward decision 2026-06-26.", + "wire": "warpline.preflight_impact.v1 advisory impact set, surfaced via warpline_impact_radius_get (MCP/CLI success envelope: data.affected[], data.completeness, data.staleness, meta.local_only). legis consumes as advisory preflight context, never gates governance (SEAM 4 section 4A / GV-LG-1). reverify_worklist consumption ruled OUT per hub ruling PDR-0037.", "two_sided": true, "oracle_shape": null, "oracle_test": null, @@ -525,7 +525,7 @@ "/home/john/weft/pm/2026-06-13-warpline-interface-lock.md:587-589", "legis@6f50a33 tests/warpline_preflight/test_warpline_preflight_oracle.py" ], - "peer_conformance": "STEWARD DECISION 2026-06-26 (weft seam steward = wardline). Contract basis: interface-lock SEAM 4 section 4A freezes warpline.preflight_impact.v1 at the SAME wire shape as warpline_impact_radius_get -- the MCP/CLI success envelope (data.affected[], data.completeness, data.staleness, meta.local_only) -- NOT a flat HTTP body; GV-LG-3 requires legis to read meta.local_only/peer_side_effects, which a flat {affected,count} body lacks. RULING: legis conforms DOWN to warpline's frozen envelope (consume data.affected, verify meta per GV-LG-3); warpline ships NOTHING -- a flat HTTP producer was the explicitly-REJECTED branch (a new non-MCP surface contradicting warpline's local-only/MCP-first identity). No lock amendment needed; this is the lock's status quo. REVERIFY RULED OUT (option b): section 4A sanctions ONLY impact_radius for legis; legis's reverify_worklist call is unsanctioned (named reverify consumers are filigree section 2A + wardline section 3), so legis DROPS it and relies on preflight_impact alone -- no new seam minted. STILL GAP (not at_bar): legis's current consumer oracle (legis@6f50a33 byte-pin 44bb515d528fdaca5b12703a896f55cd96c2483b) is a FALSE FREEZE -- it pins the flat {affected,count}/{entries,count} shape warpline never serves (G1-class: a mirror frozen to nothing real). Closeable once legis re-freezes its consumer against warpline's REAL warpline_impact_radius_get envelope (data.affected + meta) over a shared vendored golden; the Layer-2 recheck arms then. SIBLING SWEEP CLEAN (2026-06-26): wardline (delta_scope.py: data.items envelope) and filigree (warpline_consumer.py: data.get('items')) both consume the envelope correctly, plainweave has zero warpline refs -- legis is the SOLE offender, so the 'legis copied filigree's shape' theory is DISPROVEN (filigree reads the envelope). legis code fix dispatched in parallel (not wardline-resident)." + "peer_conformance": "Hub rulings (PDR-0037 + PDR-0045), recorded here by the mirror -- HUB blessings, not a wardline self-appointment. Contract basis: interface-lock SEAM 4 section 4A freezes warpline.preflight_impact.v1 at the SAME wire shape as warpline_impact_radius_get -- the MCP/CLI success envelope (data.affected[], data.completeness, data.staleness, meta.local_only) -- NOT a flat HTTP body; GV-LG-3 requires legis to read meta.local_only/peer_side_effects, which a flat {affected,count} body lacks. RULING (PDR-0045): legis conforms DOWN to warpline's frozen envelope (consume data.affected, verify meta per GV-LG-3); warpline ships NOTHING -- a flat HTTP producer was the explicitly-REJECTED branch (a new non-MCP surface contradicting warpline's local-only/MCP-first identity). No lock amendment needed; this is the lock's status quo. REVERIFY RULED OUT (PDR-0037): section 4A sanctions ONLY impact_radius for legis; legis's reverify_worklist call is unsanctioned (named reverify consumers are filigree section 2A + wardline section 3), so legis DROPS it and relies on preflight_impact alone -- no new seam minted. FALSE-FREEZE RESOLVED (2026-07-01): legis 1.4.0 rewired to WarplineMcpClient (HttpWarplineClient gone from src); the earlier flat {affected,count}/{entries,count} byte-pin is superseded. Residual legis consumer-oracle re-freeze against warpline's REAL warpline_impact_radius_get envelope (data.affected + meta) is a distributed legis-CI task (weft-51699a641c). SIBLING SWEEP CLEAN (2026-06-26): wardline (delta_scope.py: data.items envelope) and filigree (warpline_consumer.py: data.get('items')) both consume the envelope correctly, plainweave has zero warpline refs. Canonical seam catalog + blessing is hub-owned at weft/contracts/seam-index.json (PDR-0045); this registry is a producer-contributed conformance mirror, not federation canon." }, { "seam": "legis per-SEI attestation read for warpline verification (attestation_get)", @@ -542,7 +542,7 @@ "deferred_reason": null, "wire_change": "none", "evidence_paths": [], - "peer_conformance": "Legis producer frozen, warpline consumer unwired (wardline not a party; warpline mid-flight). legis PRODUCER frozen (legis@6f50a33 tests/conformance/test_warpline_attestation_oracle.py, REAL attestation_get MCP wire, byte-pin ad894cc0d93cb9e8f5631bfccacbdeacbbae4994, SEI-keyed/rename-stable, fail-closed unavailable discriminant). OBLIGATION: warpline's LegisClient.governance_for_sei is 'disabled' (unwired) \u2014 must read attestation_get and map status->posture (unavailable != empty, the asymmetric-error security rule). Not yet two-sided \u2014 honest gap." + "peer_conformance": "Legis producer frozen, warpline consumer unwired (wardline not a party; warpline mid-flight). legis PRODUCER frozen (legis@6f50a33 tests/conformance/test_warpline_attestation_oracle.py, REAL attestation_get MCP wire, byte-pin ad894cc0d93cb9e8f5631bfccacbdeacbbae4994, SEI-keyed/rename-stable, fail-closed unavailable discriminant). GAP TO CLOSE (warpline-side, not a wardline dispatch): warpline's LegisClient.governance_for_sei is 'disabled' (unwired) \u2014 must read attestation_get and map status->posture (unavailable != empty, the asymmetric-error security rule). Not yet two-sided \u2014 honest gap." }, { "seam": "Charter\u2192Filigree issue/work traceability (filigree_issue --implements_work_for--> requirement_version; filigree_issue --resolves_gap--> gap)", diff --git a/tests/conformance/test_seam_registry.py b/tests/conformance/test_seam_registry.py index 9c20d548..70e8b6d4 100644 --- a/tests/conformance/test_seam_registry.py +++ b/tests/conformance/test_seam_registry.py @@ -7,6 +7,15 @@ re-derives, from the filesystem, whether each row's claim is backed by an artifact that actually exists and actually fails closed. +CANON PROVENANCE (PDR-0045, 2026-07-01): the canonical weft seam-index is +HUB-OWNED at ``weft/contracts/seam-index.json`` (a catalog + blessing registry). +This ``seam_registry.json`` is a producer-contributed CONFORMANCE MIRROR: it +RUNS the gate and SURFACES findings -- it is NOT federation canon, and it does +not issue cross-sibling rulings (those are hub blessings; the wardline +self-appointment as weft seam arbiter was dissolved by PDR-0045). Any drift +check is a wardline-side source-drift job against the hub index, never a +hub-side lint against this mirror's export. + A row that claims ``at_bar`` with a fabricated ``oracle_test`` path, an unregistered pytest marker, or (when two-sided) a ``drift_test`` that lacks a Layer-1 byte-pin must turn this suite RED. Green therefore comes from an HONEST