R4 LEDGER (prove half): reservation-linkage + partition-ledger claim contract#12
Closed
sftimeless wants to merge 1 commit into
Closed
R4 LEDGER (prove half): reservation-linkage + partition-ledger claim contract#12sftimeless wants to merge 1 commit into
sftimeless wants to merge 1 commit into
Conversation
…contract Public contract (spec==code) for the two verifier claims over the append-only budget_allocation_events ledger, with the anchor-contingent attestation-grade enum the round-5 NO-GO requires. - claim_registry/v0.json: add quota.reservation_linkage.v1 and budget.partition_ledger.v1. - semantics/quota/reservation_linkage_v1.json: the pinned recipe — signed/unsigned evidence shapes, the reservation-lifecycle reconciliation + conservation (clamped commit.spent_added), the anchor-state dependency keyed off body.anchor, the ordered trust-grade enum (signed_identity > keel_attested_unsigned > keel_self_signed_unanchored), and the downgrade/withhold + minimum-grade fail-closed rules. - semantics/budget/partition_ledger_v1.json: active-cap sum replayed from cap-lifecycle events (latest-by-seq wins), never the mutable cap. - spec/quota-reservation-linkage-v1.md + spec/budget-partition-ledger-v1.md: normative specs; README spec index + version bump to 1.7.0. - spec/failure-codes.md: RESERVATION_LINKAGE_CONFLICT / _INSUFFICIENT, PARTITION_LEDGER_OVERCOMMIT / _INSUFFICIENT. v6 stays frozen; v7 quota_reservation_id stays null. "Keel-attested," never "independent," until the S1 external monotonic witness. Heavy signed-pack fixtures live in the verifier negative corpus. repo-integrity + public-hygiene checks pass. Co-authored-by: Claude <noreply@anthropic.com> Co-authored-by: Codex <noreply@openai.com>
Member
Author
|
Superseded by #11 (Codex's R4 LEDGER permit build, merged) per the dedup decision — keeping one implementation. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Part 1/3 of the R4 LEDGER (prove half). The public contract (spec==code) the verifier and producer consume.
What
claim_registry/v0.json: addsquota.reservation_linkage.v1andbudget.partition_ledger.v1.semantics/quota/reservation_linkage_v1.json: the pinned recipe — signed/unsigned evidence shapes, reservation-lifecycle reconciliation + conservation (clampedcommit.spent_added), the anchor-state dependency keyed offbody.anchor, the ordered trust-grade enumsigned_identity > keel_attested_unsigned > keel_self_signed_unanchored, and the downgrade/withhold + minimum-grade fail-closed rules.semantics/budget/partition_ledger_v1.json: active-cap sum replayed from cap-lifecycle events (latest-by-seq), never the mutable cap.RESERVATION_LINKAGE_*/PARTITION_LEDGER_*.Why
The round-5 NO-GO requires the linkage claim be anchor-contingent:
keel_attested_unsignedonly over an anchored bundle; never over an unanchored one. This PR defines that contract.Verification
tools/check_repo_integrity.py --require-jsonschema+check_public_hygiene.pypass. v6 frozen; v7quota_reservation_idstays null. "Keel-attested," never "independent," until the S1 external monotonic witness.Consumed by keelapi/keel-verifier# and keelapi/keel-api#.
🤖 Generated with Claude Code