Add storage-first ceremony workflow and setup v3 policy - #52

Merged

mellowcroc merged 72 commits into

mainfrom

feat/storage-first-ceremony

Sep 17, 2026

Commits on Sep 17, 2026

feat: add storage-first ceremony foundation
mellowcroc
committed
348555b
docs: make beacon lead signed ceremony policy
mellowcroc
committed
e29cb99
docs: distinguish legacy beacon timing rule
mellowcroc
committed
ff6743b
feat: add configurable ceremony assurance policy
mellowcroc
committed
fb4e661
test: preserve full ceremony policy context
mellowcroc
committed
c55ee34
fix: permit authenticated nested evidence output
mellowcroc
committed
8460619
fix: identify invalid evidence directory
mellowcroc
committed
9f35c36
test: drive resolved assurance recipe
mellowcroc
committed
24fb82e
fix: project complete storage-first lifecycle
mellowcroc
committed
2d6a8ef
feat: show complete authenticated storage position
mellowcroc
committed
ff6b6aa
build: pin released storage-first proof tool
mellowcroc
committed
714f47d
fix: replay transcript before release signing
mellowcroc
committed
2025af9
test: supply replay evidence to release signer
mellowcroc
committed
f7e344f
Add transport-only delivery foundation and trusted-services plan
mellowcroc
committed
797b1d1
Model bounded delivery recovery and record reviewed V4 implementation
mellowcroc
committed
6960fd0
Record reviewed checkpoint artifact verification scope
mellowcroc
committed
9e0828b
Record real contribution checkpoint test and remaining scope
mellowcroc
committed
bd8f57e
Record reviewed custody and assurance completion gates
mellowcroc
committed
46bdbd9
Track reviewed enrollment and mirror implementation
mellowcroc
committed
df071d0
Record witness and beacon evidence gate verification
mellowcroc
committed
adcdda7
Record verified V4 final-candidate replay boundary
mellowcroc
committed
2886baf
Record audit verification and terminal governance requirements
mellowcroc
committed
6090264
Record reviewed bundle, termination and final-review boundaries
mellowcroc
committed
5f5196a
Record reviewed V4 final verification and test boundaries
mellowcroc
committed
94f72d0
Specify reviewed release package and exact dependency boundary
mellowcroc
committed
66bace4
Record V4 package verification and reviewed recovery safeguards
mellowcroc
committed
fc9c1fc
Document reviewed compact release checkpoint and checksum bounds
mellowcroc
committed
60e71ae
Record private release checkpoint validation and inventory safeguards
mellowcroc
committed
285a6d3
Plan versioned production decision binding for V4 packages
mellowcroc
committed
833e730
Record reviewed V3 decision source and verification boundaries
mellowcroc
committed
5891127
Update trusted-flow implementation boundary after V4 CLI verification
mellowcroc
committed
b42a3b3
Add reviewed V4 structural storage synchronization bridge
mellowcroc
committed
51a4e67
Verify V4 guidance facts with one ancestry pass
mellowcroc
committed
15c2284
Record reviewed V4 turn-guidance invariants
mellowcroc
committed
e336731
Derive V4 turn guidance from verified progress and exact retained work
mellowcroc
committed
eea3214
Reconstruct distinct computed and signed candidate inventories
mellowcroc
committed
f19851b
Document reviewed V4 operation recovery integration
mellowcroc
committed
ab60ae4
Record isolated V4 operation intents and restart boundaries
mellowcroc
committed
60037e7
Connect V4 contribution and cleanup operation handlers
mellowcroc
committed
7730785
Route V4 normal guides to authenticated backend status
mellowcroc
committed
8127f82
Download V4 receipt inputs from normal participant guide
mellowcroc
committed
423a7aa
Align Relay with simplified storage-first turns
mellowcroc
committed
b79a699
Connect storage-first participant workflow
mellowcroc
committed
3385238
Connect storage-first coordinator turns
mellowcroc
committed
dbf0d4f
Publish complete initial storage state
mellowcroc
committed
0785c13
Connect storage-first enrollment journey
mellowcroc
committed
9f6760c
Connect storage-first phase lifecycle
mellowcroc
committed
2dc2ac8
Validate initial V4 state on live R2
mellowcroc
committed
c7ce12f
Connect V4 coordinator final replay
mellowcroc
committed
781bc94
Freeze V4 release review in storage state
mellowcroc
committed
0b37505
Connect V4 release signer storage journey
mellowcroc
committed
1da60cf
Test V4 release signer profile binding
mellowcroc
committed
d98f0c2
Reverify retained release package before upload
mellowcroc
committed
4dea069
Complete live V4 release publication
mellowcroc
committed
d66141a
Sync complete final release inventories
mellowcroc
committed
5cc59ac
Require multi-relay beacon evidence in V4 flow
mellowcroc
committed
ae17887
Collect every required V4 role enrollment
mellowcroc
committed
7032e9d
Use one verified beacon response in V4
mellowcroc
committed
2319e7a
Complete storage-first V4 lifecycle validation
mellowcroc
committed
ec6fefe
Document storage-first rebase compatibility
mellowcroc
committed
38f8ea9
Reject reuse of retired V4 candidates
mellowcroc
committed
ae8a3f4
Clarify V4 retired allocation recovery
mellowcroc
committed
51d57c1
Bind retained V4 inputs with both digests
mellowcroc
committed
16ee7ac
Record BLAKE runtime dependency checksums
mellowcroc
committed
91e61b7
Pin BLAKE dependencies in release inventory
mellowcroc
committed
3d01bac
Guide rejection of invalid V4 candidates
mellowcroc
committed
4c93ecc
Require verified candidate rejection inputs
mellowcroc
committed
acfaa57
Recover verified V4 candidate downloads
mellowcroc
committed
48eb57d
Harden V4 candidate download recovery
mellowcroc
committed
049ec8f
Test V4 candidate recovery guidance
mellowcroc
committed
9762490
Allow fresh work after rejected V4 candidates
mellowcroc
committed
7366b7c
Pin released storage-first proof tool
mellowcroc
committed
26679cb