integrate(project): adopt Resource Admission ancestry - #1179

Closed

seonghobae wants to merge 151 commits into

fix/project-save-atomic-publication-962from

fix/audio-resource-policy-781

Commits on Aug 16, 2026

test(audio): define canonical resource policy contract
seonghobae
committed
cb251f7
feat(audio): add canonical resource policy
seonghobae
committed
3e96ed6
test(score): require bounded validated PDF reads
seonghobae
committed
f83a1ba
refactor(core): expose bounded score reader module
seonghobae
committed
d659d9d
refactor(core): preserve public API through root module
seonghobae
committed
fc1af87
fix(score): bound stored PDF reads before allocation
seonghobae
committed
1df5fe0
fix(score): use bounded native PDF reader
seonghobae
committed
521fe12
style(score): keep bounded reader rustfmt-clean
seonghobae
committed
ca20dc5
docs(changelog): record bounded stored-score reads
seonghobae
committed
e6d31ee
fix(core): preserve desktop-core package contract
seonghobae
committed
051e39d
test(score): cover non-file stored score reads
seonghobae
committed
c11af77
test(score): prove same-descriptor growth detection
seonghobae
committed
f86e266
test(audio): require policy parity at orchestration and decode boundaries
seonghobae
committed
6aa0098
fix(audio): add one-sample decode probe to resource policy
seonghobae
committed
ee3b48c
fix(audio): bind temporal decode to canonical resource policy
seonghobae
committed
a982e7f
fix(audio): enforce canonical policy before stem inference
seonghobae
committed
38b3fb6
fix(audio): apply canonical byte policy at request preflight
seonghobae
committed
ed6e4f7
docs(audio): record resource-boundary evidence
seonghobae
committed
e7671de
docs(changelog): record canonical audio resource bounds
seonghobae
committed
9549647
docs(security): bind local audio to canonical resource policy
seonghobae
committed
b35bc12
test(audio): reject resource-policy arithmetic overflow
seonghobae
committed
710ed16
fix(audio): fail closed on extreme sample-rate arithmetic
seonghobae
committed
6e80527
style(audio): keep policy bounds formatter-clean
seonghobae
committed
572333e
test(audio): reject unrepresentable policy and decoder values
seonghobae
committed
adbfad0
fix(audio): make resource policy arithmetic fully fail closed
seonghobae
committed
428db0a
docs(audio): record checked policy arithmetic
seonghobae
committed
84f60b3
test(audio): reject oversized desktop selection at the bridge
seonghobae
committed
e42ff5c
test(audio): enforce encoded-byte parity for imported sources
seonghobae
committed
05fbbb3
fix(audio): enforce encoded-byte parity at desktop bridge
seonghobae
committed
b23e51a
docs(changelog): record desktop audio-policy parity
seonghobae
committed
509c18b
fix(changelog): restore full release history after parity note drift
seonghobae
committed
9823e0e
fix(ci): format audio resource policy regressions
seonghobae
committed
f631049
test(audio): reject fractional encoded byte metadata
seonghobae
committed
0ba0593
fix(audio): require integral encoded byte metadata
seonghobae
committed
ceb7f71
test(audio): require native encoded-byte admission
seonghobae
committed
84f7691
chore(audio): stack native resource policy on bounded core root
seonghobae
committed
da676cb
fix(audio): enforce native encoded-byte ceiling
seonghobae
committed
0488c8f
fix(audio): export native resource policy
seonghobae
committed
fbc7d7d
fix(audio): enforce native bootstrap byte ceiling
seonghobae
committed
e61e858
docs(audio): record native intake enforcement
seonghobae
committed
3f976e5
test(audio): require YouTube download to use canonical 100 MiB policy

cursoragent
and
seonghobae
committed
2b9d5e3
fix(audio): abort YouTube downloads at the canonical encoded-byte ceiling

cursoragent
and
seonghobae
committed
19064f4
docs(audio): record YouTube download-time policy evidence

cursoragent
and
seonghobae
committed
7b3b1e7
test(audio): cover fail-closed resource admission branches
seonghobae
committed
d1a75c9
merge(audio): consolidate YouTube admission repair into canonical #866
seonghobae
committed
1f3fdb8
fix(audio): delete owned YouTube partials on in-flight abort

cursoragent
and
seonghobae
committed
5e8fa77
style(audio): wrap zero-byte decoder regression
seonghobae
committed
6df13ae
test(audio): reject malformed YouTube duration metadata
seonghobae
committed
6d3b9b2
fix(audio): reject malformed YouTube duration metadata
seonghobae
committed
86f7272
docs(changelog): record YouTube duration metadata guard
seonghobae
committed
bc0fc98
test(audio): bound decoded buffer memory
seonghobae
committed
ec64aa7
fix(audio): enforce decoded memory budget
seonghobae
committed
104573a
docs(audio): record decoded memory admission
seonghobae
committed
c6d9368
docs(audio): record decoded memory budget
seonghobae
committed
f60eb17
test(youtube): cover fail-closed duration conversion
seonghobae
committed
aeb42da

Commits on Aug 17, 2026

test(youtube): avoid exceptional float subclasses
seonghobae
committed
f35f1d4
test(youtube): reject noncanonical numeric metadata
seonghobae
committed
f5f0c3d
fix(youtube): reject non-canonical duration numerics
seonghobae
committed
f4cee9e
docs(changelog): record strict duration metadata type gate
seonghobae
committed
69cdf8b
fix(youtube): remove unreachable duration conversion branch
seonghobae
committed
3ea49d3
test(youtube): require post-download duration revalidation
seonghobae
committed
97490c7
test(youtube): model owned cleanup on duration drift
seonghobae
committed
d58c24e
fix(youtube): revalidate duration after download
seonghobae
committed
d3e2792
test(privacy): fail on temporal path disclosure
seonghobae
committed
1c85058
fix(privacy): redact temporal analysis failure diagnostics
seonghobae
committed
4a6e269
test(privacy): align temporal diagnostics with redaction contract
seonghobae
committed
6d3c388

Commits on Aug 18, 2026

test(security): reject foreign YouTube download paths
seonghobae
committed
aa0191c
fix(security): bind completed YouTube path to import cache
seonghobae
committed
48d06cf
docs(security): record YouTube completed-path authority
seonghobae
committed
85424c9
docs(changelog): record YouTube completed-path containment
seonghobae
committed
7eca596
test(audio): exercise module entrypoint with owned path
seonghobae
committed
6a728fd
style(tests): restore Ruff formatting
seonghobae
committed
2b83681

Commits on Aug 19, 2026

test(audio): reject malformed model stem output
seonghobae
committed
2909bc8
fix(audio): reject malformed model stem output
seonghobae
committed
e5293a9
test(audio): use explicit raw error pattern
seonghobae
committed
2464ff9
test(audio): cover model conversion failures
seonghobae
committed
c35d55d
test(audio): reproduce GPU tensor NumPy boundary
seonghobae
committed
15a9edb
fix(audio): move accelerator stems to CPU before NumPy
seonghobae
committed
c5519a4
fix(audio): preserve CPU tests while bridging accelerator stems
seonghobae
committed
389f057

Commits on Aug 20, 2026

test(security): reproduce stem worker log disclosure
seonghobae
committed
2ea9e07
test(security): cover parent stem failure logs
seonghobae
committed
b7dd015
fix(security): redact analysis API tracebacks
seonghobae
committed
cf8b62e
fix(security): keep API privacy init lint-safe
seonghobae
committed
2f281be
test(security): scope analysis log redaction
seonghobae
committed
a8bbb77
fix(security): scope stem diagnostic redaction
seonghobae
committed
223dd78

Commits on Aug 28, 2026

fix(audio): preflight source metadata before decode
seonghobae
committed
c2cc5bb

Commits on Aug 29, 2026

Merge remote-tracking branch 'origin/develop' into HEAD
seonghobae
committed
b4a3513
fix(chords): handle zero-element layouts
seonghobae
committed
505a595

Commits on Sep 1, 2026

test(audio): require actionable oversize rejection copy
seonghobae
committed
ecc2279
fix(audio): name the next action for oversized sources
seonghobae
committed
f88d3a4
test(audio): preserve structured resource rejection contract
seonghobae
committed
3ac09a6
fix(audio): preserve resource rejection provenance
seonghobae
committed
336195a
test(audio): fail closed on parser ValueError leakage
seonghobae
committed
7862ad2
fix(audio): contain metadata parser ValueError details
seonghobae
committed
1f33cde

Commits on Sep 3, 2026

fix(audio): document decode-port regressions
seonghobae
committed
c5cc94f
Merge protected develop into Resource Admission owner
seonghobae
committed
609de8d

Commits on Sep 5, 2026

test(audio): bind native intake diagnostics to resource owner
seonghobae
committed
9852265
merge: adopt protected develop in resource admission lane
seonghobae
committed
dbeee9c
test(audio): reject growth while materializing admitted source
seonghobae
committed
804a286
fix(audio): bound admitted source materialization
seonghobae
committed
0beee45
fix(audio): materialize selected source into project storage
seonghobae
committed
a2b1bd9
docs(audio): trace app-owned source materialization
seonghobae
committed
0ee15f0
fix(audio): export bounded source materialization port
seonghobae
committed
323a7fa
docs(audio): record native port export repair
seonghobae
committed
dcb3b25
test(audio): expose bounded-copy destination error
seonghobae
committed
131d6d7
fix(audio): distinguish bounded-copy destination failure
seonghobae
committed
ac4adfd
docs(audio): record bounded-copy diagnostics repair
seonghobae
committed
e2257d9
test(audio): require native content identity receipt
seonghobae
committed
dc41379
fix(audio): emit streaming content identity receipt
seonghobae
committed
566cd1f
docs(audio): trace native content identity receipt
seonghobae
committed
f955661
test(core): require reusable SHA-256 reader boundary
seonghobae
committed
373824c
fix(core): expose reusable SHA-256 reader boundary
seonghobae
committed
d1ba406
docs(core): record reusable SHA-256 consolidation port
seonghobae
committed
8a4f50c
test(audio): require publication-bound source identity
seonghobae
committed
fdfdd70
fix(audio): verify published source identity
seonghobae
committed
a1c85cb
fix(audio): expose publication receipt verifier
seonghobae
committed
20e7faa
docs(audio): trace publication receipt verification
seonghobae
committed
505d214
test(audio): bound publication verification to receipt size
seonghobae
committed
6a0692e
fix(audio): stop publication verification at expected bytes
seonghobae
committed
c65a9fd
docs(audio): bound publication verification read evidence
seonghobae
committed
92f436a
test(audio): reject invalid publication receipt lengths
seonghobae
committed
dedaab7

Commits on Sep 6, 2026

test(audio): require publication-bound materializer receipt
seonghobae
committed
ed9fe7e
fix(audio): bind published source to native receipt
seonghobae
committed
bdf8f87
docs(audio): align publication identity traceability
seonghobae
committed
539bd57
test(audio): align native oversize policy expectation
seonghobae
committed
51734ce
test(audio): keep zero-byte guard on decode port
seonghobae
committed
dd78dee
test(audio): patch canonical decode boundary
seonghobae
committed
6ef0096
test(audio): preserve unrelated separation test wording
seonghobae
committed
e5726df
docs(security): align local-audio publication authority
seonghobae
committed
46ca91a
test(audio): require no-clobber source publication
seonghobae
committed
45b1f72
fix(audio): publish local source without clobber race
seonghobae
committed
eb972e9
docs(audio): record no-clobber publication decision
seonghobae
committed
55b0da5
test(audio): require path-free publication identity handoff
seonghobae
committed
bad908c
fix(audio): expose path-free publication identity
seonghobae
committed
87bdeea
fix(audio): export publication identity handoff
seonghobae
committed
344a9a3
docs(audio): record path-free publication identity boundary
seonghobae
committed
681675d
test(audio): require native publication identity retention
seonghobae
committed
645457e
test(audio): keep Tauri retention as next production slice
seonghobae
committed
f89996b
test(audio): require native retention of publication identity
seonghobae
committed
cbfa967
test(audio): keep native-retention RED off canonical head
seonghobae
committed
d8c57ce
test(audio): require native retention of publication identity
seonghobae
committed
106ae75
fix(audio): retain verified publication identity natively
seonghobae
committed
e4e2ba7
docs(audio): record native publication identity retention
seonghobae
committed
9a13d2b
fix(ci): format audio decode regressions
seonghobae
committed
06092be
fix(ci): format audio metadata regression
seonghobae
committed
839f5a0
chore(test): normalize decode docstring wrap
seonghobae
committed
841e1c9