Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,14 @@

> **Status:** PLAN — awaiting approval. No execution (no merges, no publishes) until signed off.
> **Date:** 2026-06-24
>
> **⚠ SUPERSEDED — hub-index direction (PDR-0045, 2026-07-01):** the P0-W2 / P8-W2 tracks
> below describe the hub seam-index as POPULATED FROM this registry (a hub-side sync-lint
> validating the hub against wardline's export), homed at a `~/loom` that never existed.
> That direction is REVERSED by hub decision PDR-0045: the canonical seam-index is hub-owned
> at `~/weft/contracts/seam-index.json`; THIS registry is a producer-contributed conformance
> MIRROR that CITES the hub index (pull-down). Any drift check is a wardline-side source-drift
> job, never a hub-side lint. The sync-lint was never built, so nothing was migrated.
> **Provenance:** produced by a throttled (4-wide) multi-agent audit across the five Loom repos
> + warpline. 40 seams discovered; skeptically audited against the SEI bar; reusable kit designed;
> plan synthesized and adversarially reviewed (24 findings, 8 blocking — folded into this final).
Expand Down
8 changes: 4 additions & 4 deletions tests/conformance/seam_registry.json
Original file line number Diff line number Diff line change
Expand Up @@ -506,10 +506,10 @@
]
},
{
"seam": "legis\u2192warpline preflight_impact advisory read (warpline.preflight_impact.v1 envelope = warpline_impact_radius_get; consumer legis, producer warpline; reverify_worklist consumption ruled OUT per steward decision 2026-06-26)",
"seam": "legis\u2192warpline preflight_impact advisory read (warpline.preflight_impact.v1 envelope = warpline_impact_radius_get; consumer legis, producer warpline; reverify_worklist consumption ruled OUT per hub ruling PDR-0037)",
"authority": "warpline",
"consumer_or_second_producer": "legis",
"wire": "warpline.preflight_impact.v1 advisory impact set, surfaced via warpline_impact_radius_get (MCP/CLI success envelope: data.affected[], data.completeness, data.staleness, meta.local_only). legis consumes as advisory preflight context, never gates governance (SEAM 4 section 4A / GV-LG-1). reverify_worklist consumption ruled OUT per steward decision 2026-06-26.",
"wire": "warpline.preflight_impact.v1 advisory impact set, surfaced via warpline_impact_radius_get (MCP/CLI success envelope: data.affected[], data.completeness, data.staleness, meta.local_only). legis consumes as advisory preflight context, never gates governance (SEAM 4 section 4A / GV-LG-1). reverify_worklist consumption ruled OUT per hub ruling PDR-0037.",
"two_sided": true,
"oracle_shape": null,
"oracle_test": null,
Expand All @@ -525,7 +525,7 @@
"/home/john/weft/pm/2026-06-13-warpline-interface-lock.md:587-589",
"legis@6f50a33 tests/warpline_preflight/test_warpline_preflight_oracle.py"
],
"peer_conformance": "STEWARD DECISION 2026-06-26 (weft seam steward = wardline). Contract basis: interface-lock SEAM 4 section 4A freezes warpline.preflight_impact.v1 at the SAME wire shape as warpline_impact_radius_get -- the MCP/CLI success envelope (data.affected[], data.completeness, data.staleness, meta.local_only) -- NOT a flat HTTP body; GV-LG-3 requires legis to read meta.local_only/peer_side_effects, which a flat {affected,count} body lacks. RULING: legis conforms DOWN to warpline's frozen envelope (consume data.affected, verify meta per GV-LG-3); warpline ships NOTHING -- a flat HTTP producer was the explicitly-REJECTED branch (a new non-MCP surface contradicting warpline's local-only/MCP-first identity). No lock amendment needed; this is the lock's status quo. REVERIFY RULED OUT (option b): section 4A sanctions ONLY impact_radius for legis; legis's reverify_worklist call is unsanctioned (named reverify consumers are filigree section 2A + wardline section 3), so legis DROPS it and relies on preflight_impact alone -- no new seam minted. STILL GAP (not at_bar): legis's current consumer oracle (legis@6f50a33 byte-pin 44bb515d528fdaca5b12703a896f55cd96c2483b) is a FALSE FREEZE -- it pins the flat {affected,count}/{entries,count} shape warpline never serves (G1-class: a mirror frozen to nothing real). Closeable once legis re-freezes its consumer against warpline's REAL warpline_impact_radius_get envelope (data.affected + meta) over a shared vendored golden; the Layer-2 recheck arms then. SIBLING SWEEP CLEAN (2026-06-26): wardline (delta_scope.py: data.items envelope) and filigree (warpline_consumer.py: data.get('items')) both consume the envelope correctly, plainweave has zero warpline refs -- legis is the SOLE offender, so the 'legis copied filigree's shape' theory is DISPROVEN (filigree reads the envelope). legis code fix dispatched in parallel (not wardline-resident)."
"peer_conformance": "Hub rulings (PDR-0037 + PDR-0045), recorded here by the mirror -- HUB blessings, not a wardline self-appointment. Contract basis: interface-lock SEAM 4 section 4A freezes warpline.preflight_impact.v1 at the SAME wire shape as warpline_impact_radius_get -- the MCP/CLI success envelope (data.affected[], data.completeness, data.staleness, meta.local_only) -- NOT a flat HTTP body; GV-LG-3 requires legis to read meta.local_only/peer_side_effects, which a flat {affected,count} body lacks. RULING (PDR-0045): legis conforms DOWN to warpline's frozen envelope (consume data.affected, verify meta per GV-LG-3); warpline ships NOTHING -- a flat HTTP producer was the explicitly-REJECTED branch (a new non-MCP surface contradicting warpline's local-only/MCP-first identity). No lock amendment needed; this is the lock's status quo. REVERIFY RULED OUT (PDR-0037): section 4A sanctions ONLY impact_radius for legis; legis's reverify_worklist call is unsanctioned (named reverify consumers are filigree section 2A + wardline section 3), so legis DROPS it and relies on preflight_impact alone -- no new seam minted. FALSE-FREEZE RESOLVED (2026-07-01): legis 1.4.0 rewired to WarplineMcpClient (HttpWarplineClient gone from src); the earlier flat {affected,count}/{entries,count} byte-pin is superseded. Residual legis consumer-oracle re-freeze against warpline's REAL warpline_impact_radius_get envelope (data.affected + meta) is a distributed legis-CI task (weft-51699a641c). SIBLING SWEEP CLEAN (2026-06-26): wardline (delta_scope.py: data.items envelope) and filigree (warpline_consumer.py: data.get('items')) both consume the envelope correctly, plainweave has zero warpline refs. Canonical seam catalog + blessing is hub-owned at weft/contracts/seam-index.json (PDR-0045); this registry is a producer-contributed conformance mirror, not federation canon."
},
{
"seam": "legis per-SEI attestation read for warpline verification (attestation_get)",
Expand All @@ -542,7 +542,7 @@
"deferred_reason": null,
"wire_change": "none",
"evidence_paths": [],
"peer_conformance": "Legis producer frozen, warpline consumer unwired (wardline not a party; warpline mid-flight). legis PRODUCER frozen (legis@6f50a33 tests/conformance/test_warpline_attestation_oracle.py, REAL attestation_get MCP wire, byte-pin ad894cc0d93cb9e8f5631bfccacbdeacbbae4994, SEI-keyed/rename-stable, fail-closed unavailable discriminant). OBLIGATION: warpline's LegisClient.governance_for_sei is 'disabled' (unwired) \u2014 must read attestation_get and map status->posture (unavailable != empty, the asymmetric-error security rule). Not yet two-sided \u2014 honest gap."
"peer_conformance": "Legis producer frozen, warpline consumer unwired (wardline not a party; warpline mid-flight). legis PRODUCER frozen (legis@6f50a33 tests/conformance/test_warpline_attestation_oracle.py, REAL attestation_get MCP wire, byte-pin ad894cc0d93cb9e8f5631bfccacbdeacbbae4994, SEI-keyed/rename-stable, fail-closed unavailable discriminant). GAP TO CLOSE (warpline-side, not a wardline dispatch): warpline's LegisClient.governance_for_sei is 'disabled' (unwired) \u2014 must read attestation_get and map status->posture (unavailable != empty, the asymmetric-error security rule). Not yet two-sided \u2014 honest gap."
},
{
"seam": "Charter\u2192Filigree issue/work traceability (filigree_issue --implements_work_for--> requirement_version; filigree_issue --resolves_gap--> gap)",
Expand Down
9 changes: 9 additions & 0 deletions tests/conformance/test_seam_registry.py
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,15 @@
re-derives, from the filesystem, whether each row's claim is backed by an
artifact that actually exists and actually fails closed.

CANON PROVENANCE (PDR-0045, 2026-07-01): the canonical weft seam-index is
HUB-OWNED at ``weft/contracts/seam-index.json`` (a catalog + blessing registry).
This ``seam_registry.json`` is a producer-contributed CONFORMANCE MIRROR: it
RUNS the gate and SURFACES findings -- it is NOT federation canon, and it does
not issue cross-sibling rulings (those are hub blessings; the wardline
self-appointment as weft seam arbiter was dissolved by PDR-0045). Any drift
check is a wardline-side source-drift job against the hub index, never a
hub-side lint against this mirror's export.

A row that claims ``at_bar`` with a fabricated ``oracle_test`` path, an
unregistered pytest marker, or (when two-sided) a ``drift_test`` that lacks a
Layer-1 byte-pin must turn this suite RED. Green therefore comes from an HONEST
Expand Down