Skip to content
This repository was archived by the owner on Sep 9, 2026. It is now read-only.

storage: provider-agnostic StorageBucket domain composition - #3

Closed
sinkog wants to merge 31 commits into
mainfrom
devel
Closed

storage: provider-agnostic StorageBucket domain composition#3
sinkog wants to merge 31 commits into
mainfrom
devel

Conversation

@sinkog

@sinkog sinkog commented Sep 7, 2026

Copy link
Copy Markdown
Member

Első saját, storage-specifikus domain composition (schemas/examples/storage-bucket.yaml,
D-015 az ai/DECISIONS.md-ben).

A korrekció, amit ez a PR rögzít

Az első próbálkozás a StorageBucket-et közvetlenül az OCI Object Storage
Bucket SDK alakjára húzta rá (OCI-specifikus storageTier enum, namespace/
POST-nem-PUT SDK anomáliák a binding rétegben, OCI path-struktúra). Ez helytelen
volt: a cic-storage szerepe egy provider-agnosztikus tárolási intent
leírása — a tényleges létrehozást/felügyeletet külön cic-module-<provider>
modulok (jelenleg csak cic-module-oracle-cloud, implemented) végzik a
cic:provider WASM ABI-n keresztül.

Mit tartalmaz

  • config_surface: bucket_name, storage_class (absztrakt enum), versioning_enabled,
    public_access, encryption_enabled, kms_key_ref, labels — mind provider-semleges.
  • state_surface: provisioning_state, reported_storage_class, endpoint_ref (opak),
    object_count_approx (best-effort, conformance-szal), created_at, last_observed.
  • operation_surface: reconcile, empty-and-delete, rotate-encryption-key.
  • binding_surface/derivation_chain: a cic:provider ABI-ra köt (nem egy konkrét
    provider REST API-jára), provider_mapping táblával (oracle-cloud: implemented;
    aws/azure/onprem: concept).

Validáció

make validate a Docker builderben: 15/15 primitive séma valid, 2/2 DomainComposition
kompatibilis (raw JSON-schema conformance + ManagedEntity sealed/required/defaulted
slot check).

Dokumentáció

README.md/README.hu.md/CLAUDE.md/project.yaml/ai/SYSTEM_CONTEXT.md/ai/PROMPTMAP.yaml
frissítve — a repo már nem "üres, sosem testreszabott scaffold-másolat" státuszban van.

🤖 Generated with Claude Code

Gábor Z Sinkó and others added 30 commits May 6, 2026 19:47
Gábor Z Sinkó
feat(D-012): Access atom conformance dimenzió — not_implemented hard …
574a1f1 
…reject vs permission denied

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEQCIDyerP29zFTCDp/UciseZrx8MQCSEuEh0wB2VQwYINTEAiBR0OwrCy4Pn4Varmp7aH8MQQjVRc8cJPVfYn02eEVgPg==
hash-algorithm = sha256
digest = K1GnZQ/4zOIDVqie6VKnzL1WX+10njZ983/MwFIafMY=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
release: 0.1.3
d0cc6ed 
---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEUCIB/VlQxdIkSIHrIT3cRCruH9aoKJXVj0AUYuklDtMDk+AiEA6PS0Gi9WD5btQCb+vKP5eWC/mexzTIHscu/Jpcf+HIc=
hash-algorithm = sha256
digest = 3t4PF5hD/PwZLq24nxEzVIROEVkc+JWz//WHbPqRodI=

[certificate]
-----BEGIN CERTIFICATE-----
MIICBjCCAaygAwIBAgIUSnRMR6RPnEbg296XWPOqq/u5PCwwCgYIKoZIzj0EAwIw
QzELMAkGA1UEBhMCSFUxGTAXBgNVBAoMEENlbnRyYWxJbmZyYUNvcmUxGTAXBgNV
BAMMEENJQyBEZXZlbG9wZXIgQ0EwHhcNMjYwMzIwMTMyMjU5WhcNMjYxMjMxMTMy
MjU5WjBFMQswCQYDVQQGEwJIVTEZMBcGA1UECgwQQ2VudHJhbEluZnJhQ29yZTEb
MBkGA1UEAwwSR2Fib3IgWm9sdGFuIFNpbmtvMFkwEwYHKoZIzj0CAQYIKoZIzj0D
AQcDQgAEIG2CVmTfmLB9pLLclj7YmP2eedAjklpy4LGrU2ijoiy6Xqpuybv7OgJe
i+ez31s65NEV8+X/ByeX1cstR988z6N8MHowCQYDVR0TBAIwADAdBgNVHQ4EFgQU
yZN6AIX/TNnIJ9GwAa/NRN3ujHAwHwYDVR0jBBgwFoAUXn6CHYzPUqU4JVP8g+OS
WeDYjhcwDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF
BQcDBDAKBggqhkjOPQQDAgNIADBFAiEA+bFzXRoJ4PCQbhAAtpkcMjt0vNj5rEW0
lOMBGDNyaWkCIB1vmM7PcZzv/c9bIrxF5kqv6QXomouhByUfeNUTbpKW
-----END CERTIFICATE-----

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEQCICl8FoZwwBcdYL/59C/emwqRBaBpcdQwtNHW5OuCv5XSAiBTnDb4onIWtMUfhvJv/TWZcOuI6ieA/SmkhzBS2c16rA==
hash-algorithm = sha256
digest = U504Ty/SIq4+8bcUf514NWoortpBx0KOv5BjsbJAXxQ=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
docs(ai): D-013 és D-014 döntések — build_hash placeholder és cross-d…
afb9ec1 
…omain ref typing

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEYCIQDJNhRLFYinAnXY/y0O76ivINUWL1P+ALhUoaRF9vyMUgIhAOHIeQI569QAODzP8itIntcvR0Lpts3TLTt8oXUkIWkW
hash-algorithm = sha256
digest = u/q0WrhE9Gdoi7Pxf71zxmwpzwrUgW2aBkUCGrU2s4Q=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
test(integration): valódi séma fájlokon futó integráló teszt — B-006
7c49236 
---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEUCIDaFWjYqtqf6ySyCOLvgTEzlW+1zIrAV+rmNBg5JAMcUAiEAuMZ4mnXXZ1T+KKTMIbCriqoUrjRvxZu47AhSx4QSOpQ=
hash-algorithm = sha256
digest = B33OIsVpIgkBQfgx+nDpWDJTyJCQI7Sv6Tx7utaPuYc=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
feat(shape): cic-reference szemantikus típus + reference_target annot…
53e5201 
…áció — B-008

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEUCIQDurT77t2ftSINjztFJ6exEO6f0BC2NyWmfIg2lPxI3EwIgIle0RetnMJfqeDoa5K2dWVLNtDtZrZ4Kce29kL7IWGM=
hash-algorithm = sha256
digest = h5hIXO3g3ih9xJpz/y0x6Spt6uwHfT//IxSM4A9mA5Q=

[certificate]
-----BEGIN CERTIFICATE-----
MIICBjCCAaygAwIBAgIUSnRMR6RPnEbg296XWPOqq/u5PCwwCgYIKoZIzj0EAwIw
QzELMAkGA1UEBhMCSFUxGTAXBgNVBAoMEENlbnRyYWxJbmZyYUNvcmUxGTAXBgNV
BAMMEENJQyBEZXZlbG9wZXIgQ0EwHhcNMjYwMzIwMTMyMjU5WhcNMjYxMjMxMTMy
MjU5WjBFMQswCQYDVQQGEwJIVTEZMBcGA1UECgwQQ2VudHJhbEluZnJhQ29yZTEb
MBkGA1UEAwwSR2Fib3IgWm9sdGFuIFNpbmtvMFkwEwYHKoZIzj0CAQYIKoZIzj0D
AQcDQgAEIG2CVmTfmLB9pLLclj7YmP2eedAjklpy4LGrU2ijoiy6Xqpuybv7OgJe
i+ez31s65NEV8+X/ByeX1cstR988z6N8MHowCQYDVR0TBAIwADAdBgNVHQ4EFgQU
yZN6AIX/TNnIJ9GwAa/NRN3ujHAwHwYDVR0jBBgwFoAUXn6CHYzPUqU4JVP8g+OS
WeDYjhcwDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF
BQcDBDAKBggqhkjOPQQDAgNIADBFAiEA+bFzXRoJ4PCQbhAAtpkcMjt0vNj5rEW0
lOMBGDNyaWkCIB1vmM7PcZzv/c9bIrxF5kqv6QXomouhByUfeNUTbpKW
-----END CERTIFICATE-----
Gábor Z Sinkó
docs(project): build_hash known_limitation dokumentálva x-cic-ban — B…
914782c 
…-005

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEQCIDPlfxoymTu2GI/cnRjbTlEQCK1lRtMnIB1TdWkFlm1NAiAQd8km2qGVp0P5vzLK7wFulUJG7Jcrsmb5Qm2hQwtyGA==
hash-algorithm = sha256
digest = zeBYeOG/oRg/WQ7afm9l9U0cy6RpABLikL7DwCzDoNY=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
Merge branch 'primitives/releases/v0.1.3'
972af6f 
---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEQCIHUp18OpnzKoxdCqFmakqittjJPNuYlOORBfGsc5YjkgAiARrSxXL6bmOSJnntaQ29GQQ+CvcyJ3VEoUntEsz7ckGQ==
hash-algorithm = sha256
digest = a7fyqEBKmtQEWPTMir/OsKUugX/Ob5OzkgLbL5Xf9ro=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
chore(governance): devel ág branch szabály rögzítve CLAUDE.md-ben
27fc198 
---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEUCIDywic0s2ywo51jwkH+X4KgavnMm7AAkucAfrpo14Kj2AiEAqDcKiJP7vd2QCjK2caPaLAkgdXy3715Rc+8vCJ2Ea6I=
hash-algorithm = sha256
digest = qbOfZoIydoDI/Prb2KCdLec5DopswD56+TOuTpuWFiM=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
fix(B-007): placeholder annotáció lifecycle/capability/notification s…
f7b50ad 
…urface slotokon

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEYCIQDtUV8ioGFkwWOF88bWI9mc4bgluXRZiIv0HeeX/s4V3wIhAPsL6hAefk9ZKzTWv45d8QFHU1lHgm2oUI1+gs/3cnxU
hash-algorithm = sha256
digest = 0LRC5o/8yQvseYFI9VIsUU7wlep/e2XaDJ06wS5B6OQ=

[certificate]
-----BEGIN CERTIFICATE-----
MIICBjCCAaygAwIBAgIUSnRMR6RPnEbg296XWPOqq/u5PCwwCgYIKoZIzj0EAwIw
QzELMAkGA1UEBhMCSFUxGTAXBgNVBAoMEENlbnRyYWxJbmZyYUNvcmUxGTAXBgNV
BAMMEENJQyBEZXZlbG9wZXIgQ0EwHhcNMjYwMzIwMTMyMjU5WhcNMjYxMjMxMTMy
MjU5WjBFMQswCQYDVQQGEwJIVTEZMBcGA1UECgwQQ2VudHJhbEluZnJhQ29yZTEb
MBkGA1UEAwwSR2Fib3IgWm9sdGFuIFNpbmtvMFkwEwYHKoZIzj0CAQYIKoZIzj0D
AQcDQgAEIG2CVmTfmLB9pLLclj7YmP2eedAjklpy4LGrU2ijoiy6Xqpuybv7OgJe
i+ez31s65NEV8+X/ByeX1cstR988z6N8MHowCQYDVR0TBAIwADAdBgNVHQ4EFgQU
yZN6AIX/TNnIJ9GwAa/NRN3ujHAwHwYDVR0jBBgwFoAUXn6CHYzPUqU4JVP8g+OS
WeDYjhcwDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF
BQcDBDAKBggqhkjOPQQDAgNIADBFAiEA+bFzXRoJ4PCQbhAAtpkcMjt0vNj5rEW0
lOMBGDNyaWkCIB1vmM7PcZzv/c9bIrxF5kqv6QXomouhByUfeNUTbpKW
-----END CERTIFICATE-----
Gábor Z Sinkó
fix: debug print törlés, hash process hibakezelés, base.ref schema ké…
ecb16ac 
…nyszer

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEQCIBMdT0Nzw8SHtrBDFeqptqM7Ikant3pe0mudMwwc9Y6QAiA6zIfHI8m43LpqVHXbRWZ+AeYfP5rN1MtaDbsFXZq2rQ==
hash-algorithm = sha256
digest = 0C0I9Sf0ihdODRKrc5CVZSoiDDWquNuOoJ29H6cHS7Q=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
fix(shape): cic-reference YAML szintaxis javítás — block scalar
df86e4d 
---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEYCIQDmi0kVg5GWbj0BUIarv/QG+MKtthuOxwV3nO1N8G5FhQIhAO09kLyOuzAFS0YzHwGuXbtKla1E3EZhoM2QQRJIGLnS
hash-algorithm = sha256
digest = nci5LwAIqM34Rmmk0B9UfiB0xjSYnK8Q2A1N+VvVvdU=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
fix(docs): 7 atom → 8 atom szinkronizálás minden belépési ponton (Acc…
2bdfac6 
…ess)

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEQCIG6z5CmCa6pZeMBoUM94M9e13o3jgic8nihj+5gj/bxDAiAjpzUFoim7Z1pv3/GHDSNyMIl21heO8l37jCVyOd/Dig==
hash-algorithm = sha256
digest = VI0u9cXw8upCFOdiwPEQytCOygRGC4rgWPqLRf/sKYQ=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
test(integration): invalid példák explicit tesztelése — mind a 3 hiba…
50a8197 
…eset

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEUCICY2uwgHrlnglaPaR7fuZXieWN7/du3BXrxKcPuXT8atAiEA8vN7xfAz5nFO5QuKTspUCpq6It3dQcdONer6owy6X3c=
hash-algorithm = sha256
digest = G8vFMmfdpiUixFumrhPFvTtEx58EJJ4VKcDliCedue4=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
fix(docker): yq telepítve Dockerfile-ba, yq PATH workaround eltávolítva
e6bf0f9 
---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEUCIQCLtciiuITLG/Bj7Z3QvoEvoimfWfDE+K7OJhLvtAf1dgIgERTlXzxiebHRJ5pEpwshqLPyFi/aFcKxLEUOcfSfXTE=
hash-algorithm = sha256
digest = ige7xkoJux8k/zfcDuH65MhsKpYQ3o4V7turs0Z2608=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
docs(readme): őszinte állapotmátrix — defined/draft/concept/not imple…
ff093bc 
…mented

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEUCIQDr8gHW47rwpDLIKvF0Sivi9ps/5sqrjXNF/tGs4l11RwIgb6/daephq3zYDHm0wbfDKZsi527hUFVAygjSEuYrC4M=
hash-algorithm = sha256
digest = sGHuNaGfIGplzX0FodXkJZFZl7EiMKdYk3Tf3Xo4VnU=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
fix(schema): project.schema.yaml — x-cic, build_hash, cert, primitive…
20b94f7 
…_schema_file modellezve

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEQCICNxrmFiH3tis/1/vLNQeKk4xaqf2p0+OTk7egfufYTEAiA1DmkzGAP/jDXgFIfLoCtucKJFyURyWHox4HX4wqulcw==
hash-algorithm = sha256
digest = JfhGOrnaAgqJ7GiwlCiyNCdE5l6kyBiOjbumgjvpjZI=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
fix(project): known_limitations és release blokk eltávolítva devel/ma…
e2e6b62 
…in ágról

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEUCIB3LbXlYiTtCFPqjLFq5Fe3bP5W2EzCamtbxh268ISFNAiEA2wk8IggncBo0ebyx84ZhEukR664oDonQngHvoy7pDws=
hash-algorithm = sha256
digest = ehWPiOcPsctiGy8xk43maxObxZsbVoVQ4AoqR8Rh3D4=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
feat(release): add developer pledge (validity + createdBy) to release…
495122b 
… pipeline

- Add run_pledge(): standalone pre-release step that signs a DeveloperCommitment
  to commitment.yaml — developer certificate (X.509 PEM) is bound inside the hash
  before Vault Transit signs it
- Add _load_valid_commitment(): loads and validates commitment.yaml at release time
- Modify run_release(): reads commitment.yaml, includes validity + createdBy in
  content_hash before signing (cert cryptographically bound)
- Modify run_verify_release(): checks createdBy.certificate presence, validity
  dates, and recomputes content_hash over {specs, validity, createdBy}
- Add _vault_sign(), _vault_get_cert() helpers for Vault Transit + KV access
- Add make pledge target and update help
- Add vault_cert_path, owner_email, validity_days to project.yaml compiler_settings

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEQCIBl9BvvD/TATo/9BOlapLtaqXrnT5gSXBhdGi992AoLtAiB8RiIAhz73VOu2JsN4j4ETPYb2l2RPrLSRj3a1srIhUA==
hash-algorithm = sha256
digest = LdT53HHTj8CHawxcV7bLqe5YFlU49jqF9T5tJhZRCmo=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
fix(release): align release.schema.yaml and tests with createdBy.cert…
87a4bcc 
…ificate model

- release.schema.yaml: remove cert from release block, add validity + createdBy
  as top-level required fields; update content_hash description (over
  {createdBy, specs, validity}, not just specs[])
- compiler.py: add --help / -h / help command
- tests: add coverage for _load_valid_commitment, run_verify_release (ok/missing-cert/
  hash-mismatch/wrong-kind), run_pledge (no-vault/no-cert-path), main --help,
  main verify-release missing arg

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEQCIEV8yvtyNKycmfUBX6skpaNu1xb//ZwI5/sJJInDDSEhAiBgiiNTro5zpHeyI1Ci78jMvce/FQKOZrdoXMAJefnzEA==
hash-algorithm = sha256
digest = LLP8pzRep9X7xaPYj2IACdCJI++BzrNtswgW1q3tJgY=

[certificate]
-----BEGIN CERTIFICATE-----
MIICBjCCAaygAwIBAgIUSnRMR6RPnEbg296XWPOqq/u5PCwwCgYIKoZIzj0EAwIw
QzELMAkGA1UEBhMCSFUxGTAXBgNVBAoMEENlbnRyYWxJbmZyYUNvcmUxGTAXBgNV
BAMMEENJQyBEZXZlbG9wZXIgQ0EwHhcNMjYwMzIwMTMyMjU5WhcNMjYxMjMxMTMy
MjU5WjBFMQswCQYDVQQGEwJIVTEZMBcGA1UECgwQQ2VudHJhbEluZnJhQ29yZTEb
MBkGA1UEAwwSR2Fib3IgWm9sdGFuIFNpbmtvMFkwEwYHKoZIzj0CAQYIKoZIzj0D
AQcDQgAEIG2CVmTfmLB9pLLclj7YmP2eedAjklpy4LGrU2ijoiy6Xqpuybv7OgJe
i+ez31s65NEV8+X/ByeX1cstR988z6N8MHowCQYDVR0TBAIwADAdBgNVHQ4EFgQU
yZN6AIX/TNnIJ9GwAa/NRN3ujHAwHwYDVR0jBBgwFoAUXn6CHYzPUqU4JVP8g+OS
WeDYjhcwDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF
BQcDBDAKBggqhkjOPQQDAgNIADBFAiEA+bFzXRoJ4PCQbhAAtpkcMjt0vNj5rEW0
lOMBGDNyaWkCIB1vmM7PcZzv/c9bIrxF5kqv6QXomouhByUfeNUTbpKW
-----END CERTIFICATE-----
Gábor Z Sinkó
feat(verify): --strict flag for verify-release — meta_hash mismatch a…
7f087cc 
…s hard failure

- run_verify_release(strict=False): default behavior unchanged (warning)
- run_verify_release(strict=True): meta_hash mismatch against local source
  files exits with code 1
- main(): parses --strict flag from argv for verify-release command
- Makefile: verify-release supports STRICT=1, new verify-release-strict target
- tests: strict hard-fail and non-strict warning cases covered

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEUCIAcH40zU43OhUi5p0/SPtXbENGjsDB4jhcPo/FYTUeDaAiEA2jVoppouRNjDefcVnVnKHMRp7Al03VVx05wEQOGO4/U=
hash-algorithm = sha256
digest = mTUVEhKsDAHgUEcKUhCzfALr6JkdbYS6D/OsijPza0s=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
feat(verify): ECDSA signature verification in verify-release pipeline
eccd339 
- Add _verify_cert_signature(): verifies Vault Transit ECDSA signature against
  X.509 certificate public key (Prehashed SHA256, DER format)
- run_verify_release(): replaces "not yet implemented" note with real checks:
    certificate parsed + temporal validity
    release.sign verified against createdBy.certificate public key
    pledge.sign verified if commitment.yaml is present
    CA chain warning (trust root not yet configured)
- Tests: _verify_cert_signature ok/wrong-key/bad-format/invalid-cert,
  test_verify_release_bad_signature (tampered key), updated helpers to use
  real ephemeral ECDSA key pairs and proper signatures

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEYCIQDgZ9YewltmOPgwpfwgPNEmR16qk8yEDBFE/5NNru2NEQIhAPf9xqUsTwHp96eLnrSA6UpidU5CmivOo+nT8/DDXoXh
hash-algorithm = sha256
digest = YqC+5NSkzHgnHJp6JYFBtollusp6epRT2w//+Z0XjAA=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
refactor(release): rename content_hash to build_hash, bind release is…
b70ff33 
…suer certificate

- Rename release bundle field content_hash → build_hash (Merkle tree root placeholder)
- Add release.createdBy block: release issuer identity + PEM cert fetched from Vault
- build_hash now covers {createdBy (developer), releasedBy (issuer), specs, validity}
- verify-release: both createdBy.certificate and release.createdBy.certificate are
  mandatory; signature verified against release issuer cert (not developer cert)
- Update release.schema.yaml: release.createdBy required field, updated descriptions
- Update tests: _make_valid_bundle generates separate key pairs for developer and issuer

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEUCIDzBBVlu8FR72sGSLTcc3wVnwsIp4FzR1c2VoYapsbBqAiEA7Axn93zG8kOAQzHh3fIMqykX8hJgZx0xqEOPkl5g7ag=
hash-algorithm = sha256
digest = pHbCUYPiCm0H8Sa3X7EFHY18cj00w6R55hQ/+/MNJjs=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
feat(release): inject release version into spec bundle, replacing v0.…
206862b 
…0.dev placeholder

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEYCIQCDmrtLMhGICs0UCrAMKB1fd0TH4+wuQi4QtTkRNTU4QgIhAPSQcd1lhOpxEITHIf2P+kEKwxXluIVzC3MqEcmJ+H0j
hash-algorithm = sha256
digest = +XxPnlOEhkeSHdMNZNnjK+zf4YX5UK5kfxOeLmFY1es=

[certificate]
-----BEGIN CERTIFICATE-----
MIICBjCCAaygAwIBAgIUSnRMR6RPnEbg296XWPOqq/u5PCwwCgYIKoZIzj0EAwIw
QzELMAkGA1UEBhMCSFUxGTAXBgNVBAoMEENlbnRyYWxJbmZyYUNvcmUxGTAXBgNV
BAMMEENJQyBEZXZlbG9wZXIgQ0EwHhcNMjYwMzIwMTMyMjU5WhcNMjYxMjMxMTMy
MjU5WjBFMQswCQYDVQQGEwJIVTEZMBcGA1UECgwQQ2VudHJhbEluZnJhQ29yZTEb
MBkGA1UEAwwSR2Fib3IgWm9sdGFuIFNpbmtvMFkwEwYHKoZIzj0CAQYIKoZIzj0D
AQcDQgAEIG2CVmTfmLB9pLLclj7YmP2eedAjklpy4LGrU2ijoiy6Xqpuybv7OgJe
i+ez31s65NEV8+X/ByeX1cstR988z6N8MHowCQYDVR0TBAIwADAdBgNVHQ4EFgQU
yZN6AIX/TNnIJ9GwAa/NRN3ujHAwHwYDVR0jBBgwFoAUXn6CHYzPUqU4JVP8g+OS
WeDYjhcwDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF
BQcDBDAKBggqhkjOPQQDAgNIADBFAiEA+bFzXRoJ4PCQbhAAtpkcMjt0vNj5rEW0
lOMBGDNyaWkCIB1vmM7PcZzv/c9bIrxF5kqv6QXomouhByUfeNUTbpKW
-----END CERTIFICATE-----
Gábor Z Sinkó
docs: add GHCR OCI artifact pull instructions (EN + HU)
5453115 
---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEYCIQDY4E9q7/Rk6OayyA2qtbWcxAxEI4h38+xR/S6Ay1pwkwIhALXVtV++Vof0gvy5DT5T7Xat8jt1zfp+m4LpE8xgV7tt
hash-algorithm = sha256
digest = Hdj/XCGF1DJZRZJBYdg1p8he7CSbfZ/CC9GuBd8ABHI=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
feat(atom-grammar): a grammatika, a kapu és a katalógus-javítások átv…
5a6a6b1 
…étele

Fanout a cic-primitives-ből. Ez a repo eddig a hat közül a saját másolatát
hordozta ugyanannak a nyolc atomnak, javítás nélkül.

Átvéve:
  schemas/atomic/shape.yaml       reference típusból annotáció; opaque felvéve;
                                  a mező-descriptor `type` → `shape_type` (amit
                                  minden kompozíció amúgy is így ír); a presence
                                  egyetlen tengely; a reference_target formátuma
                                  {namespace}:{Kind} — a korábbi
                                  "cic:{namespace}:{Kind}" cic:cic:...-ra bomlott
  schemas/atomic/role.yaml        lapos hétértékű enum → authority / structural /
                                  lifecycle tengelyek, minden érték leírásával és
                                  yang/api/runtime leképezésével együtt
  schemas/atomic/identity.yaml    a base példája kétszegmensűről háromszegmensűre
  schemas/aggregate/...           capability_surface: in_use_ahead_of_model
                                  figyelmeztetés — a mechanizmus a példány
                                  rétegben már él, séma nélkül
  proposals/atom-grammar/         a Shape/Role algebra és a keresztszabályok,
                                  futtatható validátorral és 24 fixture-rel
  Makefile                        make grammar / grammar.local / validate.local;
                                  a grammar a validate ELŐFELTÉTELE
  .github/workflows/gate.yml      a kapu minden pushra és PR-re lefut

Nyelv: a fájlok angolul érkeznek. A repo eddigi magyar description mezői a
primitives/CLAUDE.md kimondott szabályát sértették ("Schema YAML description
mezők → Angol"), és a kulcsszerkezet a hat repóban azonos volt, tehát a csere
nem veszít repo-specifikus tartalmat — mérve a másolás előtt.

Kapu lefuttatva ebben a repóban: make validate.local EXIT=0.

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEYCIQCAQrGnpi7WKVDwsDgE1FNr4ZJw536LlcINeiBDgWwVFwIhANYmpBJB67AW0ILas60Yj3veAaAN1j75qbYs7aLN50Tj
hash-algorithm = sha256
digest = S7htmMAWTrNbqLAqomoMCcEVhWfHDgtP8q2HKbx0XwY=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Gábor Z Sinkó
fix(gate): a domain kompozíciók is a kapu alá
5f90b27 
A GRAMMAR_COMPOSITIONS csak a schemas/examples/-t globolta. A valódi domain
objektumok a schemas/domain/ alatt élnek, és így soha nem kerültek volna a kapu
alá. Ebben a repóban ma nincs schemas/domain/, tehát a változás itt nem fog
semmit — attól kerül be, hogy a hat repo Makefile-ja azonos maradjon.

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEUCIBvp8mmb7XhNFFFbyj2kdLR+g0oVkRth/YXvl06PDVYFAiEAlsijFnH+bgKpjqBKs6sQ7qn34bHd8xjv8ePQz1rStsQ=
hash-algorithm = sha256
digest = 38+2oxV7vOJNJTN0+YDPrLPDKHW6tUM4M/Eu7qFbrt4=

[certificate]
-----BEGIN CERTIFICATE-----
MIICBjCCAaygAwIBAgIUSnRMR6RPnEbg296XWPOqq/u5PCwwCgYIKoZIzj0EAwIw
QzELMAkGA1UEBhMCSFUxGTAXBgNVBAoMEENlbnRyYWxJbmZyYUNvcmUxGTAXBgNV
BAMMEENJQyBEZXZlbG9wZXIgQ0EwHhcNMjYwMzIwMTMyMjU5WhcNMjYxMjMxMTMy
MjU5WjBFMQswCQYDVQQGEwJIVTEZMBcGA1UECgwQQ2VudHJhbEluZnJhQ29yZTEb
MBkGA1UEAwwSR2Fib3IgWm9sdGFuIFNpbmtvMFkwEwYHKoZIzj0CAQYIKoZIzj0D
AQcDQgAEIG2CVmTfmLB9pLLclj7YmP2eedAjklpy4LGrU2ijoiy6Xqpuybv7OgJe
i+ez31s65NEV8+X/ByeX1cstR988z6N8MHowCQYDVR0TBAIwADAdBgNVHQ4EFgQU
yZN6AIX/TNnIJ9GwAa/NRN3ujHAwHwYDVR0jBBgwFoAUXn6CHYzPUqU4JVP8g+OS
WeDYjhcwDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF
BQcDBDAKBggqhkjOPQQDAgNIADBFAiEA+bFzXRoJ4PCQbhAAtpkcMjt0vNj5rEW0
lOMBGDNyaWkCIB1vmM7PcZzv/c9bIrxF5kqv6QXomouhByUfeNUTbpKW
-----END CERTIFICATE-----
Gábor Z Sinkó
tools: import vault-rootCA-sign-agent.sh from cic-primitives
8c0fbcb 
Same selective import as cic-primitives PR #3 (via cic-primitives, which
carries it forward from base-repo's main) — a real, TLS-enabled Vault
launcher with an imported (not generated) signing key, useful for
exercising this repo's own Vault-backed sign/verify paths.

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEYCIQDy3pAuF0Pi+lpkfggBFnqPsoGvum+nOKGxR/GnydgB4wIhAMDR341/QPrPw7OTVHZLYKMu7LD5llMcmrd9QDiMw5mZ
hash-algorithm = sha256
digest = jGiHuF6P+HiXa3bWCV6tiW18GDJfmUPgOexuiwzzjsk=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
@sinkog
Merge pull request #1 from CentralInfraCore/feature/vault-rootca-sign…
eefc57a 
…-agent

tools: import vault-rootCA-sign-agent.sh from cic-primitives
Gábor Z Sinkó
fix: correct repo identity — this is cic-storage, not cic-primitives
d4eb012 
project.yaml, README.md/.hu.md, CLAUDE.md, and ai/*.md/ai/PROMPTMAP.yaml all
still claimed this repo IS cic-primitives — a verbatim, never-adapted
scaffold copy from 2026-04-30 (main_branch: primitives/main,
x-cic.repo_type: primitive, README title # cic-primitives, etc.), matching
what was found and fixed the same way in cic-network (PR #2 there).

Corrected the identity fields. Unlike cic-network, this repo has NO
domain-specific composition yet — schemas/examples/ only holds
cic-primitives' own generic kubernetes-pod.yaml demo, not storage-specific
work — so the docs now say that plainly instead of describing cic-storage as
though it had done the primitive layer's own bootstrap (atomic/aggregate
schemas, 14 design decisions, a 'done' task queue — all real, all
cic-primitives' own history, not this repo's). Disclaimers added rather
than deleting that inherited content.

Not touched: schemas/atomic/*.yaml, schemas/aggregate/*.yaml (legitimately
inherited primitive definitions).

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEQCIB3hhxKJTKXpISRWIQnlDhSC6Vzuqj6YRumQ8ilaUkWhAiBInYqx8+hApsN0LNkEVZKda7dtYR4CXS3GVGQ9x3fnTA==
hash-algorithm = sha256
digest = EEbG2yjrF1ibdSvQ3xwFowsf8+HlcjEtrj4dnC47W3E=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
@sinkog
Merge pull request #2 from CentralInfraCore/fix/repo-identity
625eba7 
fix: correct repo identity — this is cic-storage, not cic-primitives
Gábor Z Sinkó
storage: provider-agnostic StorageBucket domain composition
74e4dcc 
First cic-storage-specific domain composition (D-015). Describes desired
object-storage intent (bucket_name, storage_class, versioning, public_access,
encryption, labels) at a level valid across OCI/AWS/Azure/on-prem, binding
onto the shared cic:provider WASM ABI (describe/validate/plan/execute/
observe/destroy/invoke/poll) rather than any single provider's REST API.

Provider-specific mapping (OCI namespace quirk, POST-not-PUT, exact paths)
is explicitly left to each cic-module-<provider>'s own correspondence layer —
derivation_chain.provider_mapping only tracks module status (oracle-cloud:
implemented; aws/azure/onprem: concept).

15/15 primitive schemas valid, 2/2 DomainComposition compatible (make validate).

Updates README/README.hu/CLAUDE.md/project.yaml/ai/* to reflect the repo no
longer being a domain-content-free scaffold copy.

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEQCIB3greIYiLRTfqUMYuu/sPaQv4FtAJPvJdG1gBSPfQALAiBYSIoV44kBHSK/8sp/jocB+VY9ky0pM4PfYUkBIa2SPQ==
hash-algorithm = sha256
digest = /z6pe1PZpvEtUnIUdTZwCi9kUo+biilqM0lLVMlbw1Q=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
@sinkog

sinkog commented Sep 7, 2026

Copy link
Copy Markdown
Member Author

Lezárva megkérdezés nélkül lett nyitva — a mögötte lévő architekturális átírás (provider-agnosztikus StorageBucket) egy tisztázó megbeszélésből lett egyoldalúan implementációvá alakítva, jóváhagyás nélkül. A devel ág és a commit tartalma megmarad, de a PR-t a szerző (user) döntéséig lezárom; újranyitható, ha a tartalom review után rendben van.

@sinkog sinkog closed this Sep 7, 2026
sinkog pushed a commit that referenced this pull request Sep 7, 2026
Gábor Z Sinkó
docs: correct false '625eba7' claim — real domain content exists off-…
8152711 
…devel

PR #2 (625eba7) documented cic-storage as having 'no storage-specific domain
composition yet' — this was checked against devel/main only and was false.

git ls-remote origin (+ GHCR confirmation) shows storage/main (e97c311) and
storage/releases/v0.1.0 (cdb5f45) carry real, already-signed work never
merged into devel: StorageResource + StorageAdapter (block volume,
hypervisor/SAN/cloud, capability-based conformance), published to GHCR as
v0.1.2-src2026.

Corrects README.md/README.hu.md/CLAUDE.md/ai/SYSTEM_CONTEXT.md/ai/PROMPTMAP.yaml
to state both realities plainly: devel's own StorageBucket draft (D-015,
PR #3, closed unmerged) is experimental and unreconciled with the real,
pre-existing StorageResource work living on a divergent branch. Records the
gap and the open reconciliation question as D-016 in ai/DECISIONS.md — no
merge/recovery decision has been made yet, this commit only fixes the false
claim.

---
[signing-metadata]
key = cic-my-sign-key
signature = vault:v1:MEUCIQDpi19YCvvOKuzbCeUmXuWzxW1Ufp9jKpMdTg5+QdUePAIgEE2lsw1r9kcKPUdAFnc3wNV5deF0ICwHisKDnnu8WTU=
hash-algorithm = sha256
digest = BcLcZlv3movzFQmLKCBke3vv/tHFnHzxpcRdwc2tIyM=

[certificate]
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@sinkog