fix(project): stage saves before atomic publication - #970

Draft

seonghobae wants to merge 459 commits into

fix/project-save-atomic-publication-962

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 5, 2026

docs(project): describe v2 playback preference migration
seonghobae
committed
9518d84
docs(traceability): record v2 playback preference migration
seonghobae
committed
ae97f88
refactor(project): keep historical core source in place
seonghobae
committed
e95b1db
docs(traceability): record minimal v2 module boundary
seonghobae
committed
5dc4d7b
test(ci): require v2 project-format Windows evidence triggers
seonghobae
committed
770942f
fix(ci): cover v2 project-format Windows evidence
seonghobae
committed
72434d1
docs(traceability): record v2 Windows evidence repair
seonghobae
committed
e4913d7
test(project): require typed v2 IPC preference admission
seonghobae
committed
ed5dd9a
fix(project): admit typed v2 IPC preference documents
seonghobae
committed
7711b4f
docs(traceability): record typed v2 IPC admission
seonghobae
committed
21e7519
fix(project): expose typed v2 IPC admission
seonghobae
committed
4f076ce
docs(traceability): record public v2 IPC surface repair
seonghobae
committed
5320607
test(project): require selected-source IPC bridge
seonghobae
committed
ecc2904
feat(project): define renderer v2 document boundary
seonghobae
committed
30bfa59
feat(project): bridge v2 document through TypeScript IPC
seonghobae
committed
64613fb
feat(project): carry v2 document through native save and load
seonghobae
committed
7f9d118
fix(project): preserve score removal project scope
seonghobae
committed
327c83f
docs(project): trace v2 IPC bridge boundary
seonghobae
committed
8149d43
docs(project): align format with v2 IPC bridge
seonghobae
committed
1a20bf5
test(project): reject prototype-bearing persistence records
seonghobae
committed
3db1096
fix(project): require plain renderer persistence records
seonghobae
committed
7cc4869
docs(project): trace plain-record IPC admission hardening
seonghobae
committed
4c2eaa8
test(project): cover prototype admission edge cases
seonghobae
committed
3f4ce38
docs(project): record prototype edge coverage
seonghobae
committed
d1d4d0e
test(project): reject trapped project record access
seonghobae
committed
a71439d
fix(project): fail closed on trapped record access
seonghobae
committed
bc8e144
docs(project): trace trapped renderer record hardening
seonghobae
committed
eba9669
test(project): cover nested accessor rejection
seonghobae
committed
bc7e6c5
docs(project): record nested accessor edge coverage
seonghobae
committed
1777705
test(project): require durable app-owned audio source reference
seonghobae
committed
3191f38
feat(project): add versioned app-owned source reference
seonghobae
committed
7e315da
fix(project): export source reference contract
seonghobae
committed
90ae48e
test(project): require source reference across renderer bridge
seonghobae
committed
6acd761
feat(project): validate renderer source reference contract
seonghobae
committed
f54be00
fix(project): keep optional source admission trap-safe
seonghobae
committed
04b4a93
test(project): keep source-reference admission passive
seonghobae
committed
c1cdcd0
docs(project): document version 3 source reference boundary
seonghobae
committed
5203c28
docs(traceability): record v3 source-reference decision
seonghobae
committed
76e203e
docs(changelog): record project format v3 source reference
seonghobae
committed
818b9b5
fix(project): align historical migration tests with v3 envelope
seonghobae
committed
ace91a2
docs(traceability): record v3 predecessor-test RCA
seonghobae
committed
c4980be
docs(architecture): align project persistence with v3
seonghobae
committed
a0bb091
docs(architecture): date v3 persistence boundary
seonghobae
committed
bb40053
docs(traceability): mark v2 preference as historical
seonghobae
committed
d0eb7a6
docs(traceability): align v2 IPC history with v3
seonghobae
committed
28588c1
docs(project): align bridge comments with v3
seonghobae
committed
8383b3a
docs(traceability): align shared-song contract with v3
seonghobae
committed
9e9d9ce
docs(traceability): ground v3 source reference in SSDF and CWE
seonghobae
committed
7653c80
test(project): require durable source content identity
seonghobae
committed
39fb181
test(project): constrain source digest evidence
seonghobae
committed
ac5a080
fix(project): require SHA-256 source identity evidence
seonghobae
committed
c2117f2
test(project): require source digest across renderer bridge
seonghobae
committed
16e5478
fix(project): enforce source digest in renderer admission
seonghobae
committed
7e853c5
docs(project): trace SHA-256 source identity decision
seonghobae
committed
a684ab5
docs(project): make v3 source identity code-current
seonghobae
committed
5ec9465
docs(changelog): record v3 source content identity
seonghobae
committed
2f5634b
test(project): keep source digest admission passive
seonghobae
committed
0e9e823
test(security): bound Security Notes section evidence
seonghobae
committed
45037f9
fix(security): stop Security Notes evidence at peer headings
seonghobae
committed
907f3a7
docs(project): use required Security Notes heading
seonghobae
committed
00418cb
docs(project): document passive admission helpers
seonghobae
committed
70c2313
test(security): keep policy regression lint-clean
seonghobae
committed
0837570
test(security): stop nested notes at parent section
seonghobae
committed
65e422c
fix(security): stop Security Notes at parent headings
seonghobae
committed
d1ba145
style(security): keep verifier imports canonical
seonghobae
committed
3883f34
docs(traceability): record bounded Security Notes evidence
seonghobae
committed
08e5531
test(project): preserve unrelated rollback artifact
seonghobae
committed
3eabb08
fix(project): preserve mismatched rollback artifacts
seonghobae
committed
a93626e
test(audio): preserve approved native intake errors
seonghobae
committed
9816fe4
fix(audio): preserve safe native intake diagnostics
seonghobae
committed
04e813e
test(audio): bind native intake diagnostics to resource owner
seonghobae
committed
9852265
merge: adopt protected develop in resource admission lane
seonghobae
committed
dbeee9c
test(audio): reject growth while materializing admitted source
seonghobae
committed
804a286
fix(audio): bound admitted source materialization
seonghobae
committed
0beee45
fix(audio): materialize selected source into project storage
seonghobae
committed
a2b1bd9
docs(audio): trace app-owned source materialization
seonghobae
committed
0ee15f0
fix(audio): export bounded source materialization port
seonghobae
committed
323a7fa
docs(audio): record native port export repair
seonghobae
committed
dcb3b25
test(audio): expose bounded-copy destination error
seonghobae
committed
131d6d7
fix(audio): distinguish bounded-copy destination failure
seonghobae
committed
ac4adfd
docs(audio): record bounded-copy diagnostics repair
seonghobae
committed
e2257d9
test(audio): require native content identity receipt
seonghobae
committed
dc41379
fix(audio): emit streaming content identity receipt
seonghobae
committed
566cd1f
docs(audio): trace native content identity receipt
seonghobae
committed
f955661
test(core): require reusable SHA-256 reader boundary
seonghobae
committed
373824c
fix(core): expose reusable SHA-256 reader boundary
seonghobae
committed
d1ba406
docs(core): record reusable SHA-256 consolidation port
seonghobae
committed
8a4f50c
test(audio): require publication-bound source identity
seonghobae
committed
fdfdd70
fix(audio): verify published source identity
seonghobae
committed
a1c85cb
fix(audio): expose publication receipt verifier
seonghobae
committed
20e7faa
docs(audio): trace publication receipt verification
seonghobae
committed
505d214
test(audio): bound publication verification to receipt size
seonghobae
committed
6a0692e
fix(audio): stop publication verification at expected bytes
seonghobae
committed
c65a9fd
docs(audio): bound publication verification read evidence
seonghobae
committed
92f436a
test(audio): reject invalid publication receipt lengths
seonghobae
committed
dedaab7

Commits on Sep 6, 2026

test(audio): require publication-bound materializer receipt
seonghobae
committed
ed9fe7e
fix(audio): bind published source to native receipt
seonghobae
committed
bdf8f87
docs(audio): align publication identity traceability
seonghobae
committed
539bd57
test(audio): align native oversize policy expectation
seonghobae
committed
51734ce
test(audio): keep zero-byte guard on decode port
seonghobae
committed
dd78dee
test(audio): patch canonical decode boundary
seonghobae
committed
6ef0096
test(audio): preserve unrelated separation test wording
seonghobae
committed
e5726df
docs(security): align local-audio publication authority
seonghobae
committed
46ca91a
test(audio): require no-clobber source publication
seonghobae
committed
45b1f72
fix(audio): publish local source without clobber race
seonghobae
committed
eb972e9
docs(audio): record no-clobber publication decision
seonghobae
committed
55b0da5
test(audio): require path-free publication identity handoff
seonghobae
committed
bad908c
fix(audio): expose path-free publication identity
seonghobae
committed
87bdeea
fix(audio): export publication identity handoff
seonghobae
committed
344a9a3
docs(audio): record path-free publication identity boundary
seonghobae
committed
681675d
test(audio): require native publication identity retention
seonghobae
committed
645457e
test(audio): keep Tauri retention as next production slice
seonghobae
committed
f89996b
test(project): reject oversized source references
seonghobae
committed
03f14fc
test(project): bound renderer source identity bytes
seonghobae
committed
a74d05d
fix(project): bound durable source identity bytes
seonghobae
committed
c956044
fix(project): align renderer source identity ceiling
seonghobae
committed
83127b5
test(audio): require native retention of publication identity
seonghobae
committed
cbfa967
test(audio): keep native-retention RED off canonical head
seonghobae
committed
d8c57ce
test(audio): require native retention of publication identity
seonghobae
committed
106ae75
fix(audio): retain verified publication identity natively
seonghobae
committed
e4e2ba7
docs(audio): record native publication identity retention
seonghobae
committed
9a13d2b
fix(ci): format audio decode regressions
seonghobae
committed
06092be
fix(ci): format audio metadata regression
seonghobae
committed
839f5a0
chore(test): normalize decode docstring wrap
seonghobae
committed
841e1c9
test(project): reject renderer-authored source identity
seonghobae
committed
37ea9a5
fix(project): reject renderer-authored source identity
seonghobae
committed
01c09cf
test(project): block renderer source identity before IPC
seonghobae
committed
4ea8c2a
fix(project): block renderer source identity before IPC
seonghobae
committed
0268568
test(project): align bridge with native source authority
seonghobae
committed
a747cd6
fix(persistence): consolidate desktop core crate root
seonghobae
committed
7b2ade1
fix(persistence): integrate project format into canonical core root
seonghobae
committed
ce81744
refactor(persistence): remove duplicate desktop core wrapper
seonghobae
committed
548c46e
fix(persistence): reconcile Resource Admission stack
seonghobae
committed
2a27d30
fix(persistence): adopt Resource Admission ancestry
seonghobae
committed
8893a92
docs(core): explain canonical compatibility alias
seonghobae
committed
649e335
test(project): require typed resource-admission persistence handoff
seonghobae
committed
3a96be6
fix(project): add typed resource-admission persistence ACL
seonghobae
committed
c2d3541
fix(project): export resource-admission persistence ACL
seonghobae
committed
b0355a9
test(project): fail closed on browser save preview
seonghobae
committed
6eea76f
fix(project): fail closed on browser save preview
seonghobae
committed
cb7f4fd
docs(project): align IPC traceability with native source authority
seonghobae
committed
e29f0de
test(project): require native source-reference save adapter
seonghobae
committed
cd3c67d
fix(project): inject retained native source identity on save
seonghobae
committed
ffdac30
test(project): require explicit project-id save selector
seonghobae
committed
570894b
fix(project): forward explicit project-id save selector
seonghobae
committed
979ac4d
test(project): require mounted local save project identity
seonghobae
committed
28d94d0
fix(project): preserve analyzed local project save authority
seonghobae
committed
06afcbe
docs(project): record native source-reference save handoff
seonghobae
committed
4869ee8
docs(project): correct bridge RED provenance
seonghobae
committed
8f44188
test(project): require restart audio byte re-admission
seonghobae
committed
f1d307d
fix(project): re-admit persisted audio bytes on restart
seonghobae
committed
823cd4a
fix(project): export restart audio re-admission
seonghobae
committed
54390ce
refactor(project): keep restart identity verification minimal
seonghobae
committed
3389786
test(project): cover malformed restart source evidence
seonghobae
committed
20ded47
test(project): distinguish malformed restart identity cases
seonghobae
committed
cbfc23f
docs(project): trace restart source re-admission boundary
seonghobae
committed
8b84312
docs(project): complete restart Security Notes contract
seonghobae
committed
dbe4959
test(project): prove malformed restart evidence is not read
seonghobae
committed
e115811
test(project): require safe app-owned source reopen authority
seonghobae
committed
66ed5ec
fix(project): bind restart re-admission to native opener
seonghobae
committed
f36996f
feat(project): export native reopen ACL
seonghobae
committed
c7e112f
test(project): exercise restart ACL through native opener
seonghobae
committed
b80dea3
test(project): cover project-root restart binding
seonghobae
committed
b975843
style(project): format restart opener coverage
seonghobae
committed
909d54f
docs(project): trace native restart opener boundary
seonghobae
committed
6801d95
test(project): require non-provisioning restart root lookup
seonghobae
committed
ece508c
fix(project): add non-provisioning restart root resolver
seonghobae
committed
f7e8685
test(project): bind restart lookup to read-side resolver
seonghobae
committed
b2fb798
test(project): require production restart source re-admission
seonghobae
committed
9cd4681
fix(project): restore verified source authority on reopen
seonghobae
committed
0f20b07
style(project): rustfmt restart root resolver
seonghobae
committed
ddeff8b
docs(project): trace production restart re-admission
seonghobae
committed
3e21973
docs(project): document restart directory guards
seonghobae
committed
382f029
test(project): reject linked app-local reopen base
seonghobae
committed
1c8bc3d
fix(project): bind reopen to a real app-local base
seonghobae
committed
a839b5b
docs(project): trace app-local reopen authority
seonghobae
committed
9a924ba
test(project): cover Windows app-local reparse base
seonghobae
committed
232db73
test(project): require fresh source bytes at analysis dispatch
seonghobae
committed
90f60a7
fix(project): revalidate app-owned audio before dispatch
seonghobae
committed
ae1f568
fix(project): revalidate source before analysis dispatch
seonghobae
committed
b84ed0e
test(project): format dispatch revalidation contract
seonghobae
committed
f5730fd
docs(traceability): record analysis dispatch revalidation
seonghobae
committed
c6351fc
test(audio): require content-bound decode snapshot
seonghobae
committed
9dc5336
fix(audio): bind decoder to admitted content snapshot
seonghobae
committed
93d2c99
test(audio): require scoped native admission evidence
seonghobae
committed
65baf71
fix(audio): consume scoped native admission evidence
seonghobae
committed
e0bec86
test(audio): require per-process decode evidence handoff
seonghobae
committed
404586a
fix(audio): scope native evidence to analysis child
seonghobae
committed
a0809cd
test(audio): forbid duplicate CLI path decode
seonghobae
committed
cbaaf86
fix(audio): skip duplicate path probe for admitted source
seonghobae
committed
a1136c5
test(audio): pin scoped child evidence contract
seonghobae
committed
e1b5092
style(audio): wrap admitted snapshot construction
seonghobae
committed
88beb62
docs(audio): trace content-bound decoder handoff
seonghobae
committed
e11f73c
test(audio): bind cache workspace to source identity
seonghobae
committed
19c2112
fix(audio): scope analysis workspaces by source digest
seonghobae
committed
063164e
docs(audio): bind cache provenance to source digest
seonghobae
committed
e67f9b2
test(audio): reject uncached Demucs remote lookup
seonghobae
committed
716438d
fix(audio): fail closed before Demucs model download
seonghobae
committed
61b629b
test(audio): preserve mocked Demucs unit boundary
seonghobae
committed
8ccdf20
docs(audio): trace local-only Demucs model admission
seonghobae
committed
b91d120
test(audio): reject tampered cached Demucs checkpoint
seonghobae
committed
fb9571b
fix(audio): verify cached Demucs checkpoint checksum
seonghobae
committed
d043218
docs(audio): trace Demucs cache integrity admission
seonghobae
committed
e2b8721
docs(audio): block commercial Demucs weight packaging
seonghobae
committed
58f30d4
test(separation): require immutable local Demucs snapshot
seonghobae
committed
9fd9b56
fix(separation): bind Demucs load to verified local snapshot
seonghobae
committed
3662de1
test(separation): bound local Demucs snapshot size
seonghobae
committed
7ac4bc1
fix(separation): bound Demucs checkpoint snapshot
seonghobae
committed
c21c6c4
docs(traceability): record bounded Demucs snapshot
seonghobae
committed
cce5638
docs(changelog): record bounded local model load
seonghobae
committed
6cdea97
test(mir): reject Demucs checkpoint growth after preflight
seonghobae
committed
f4ef3dc
fix(mir): bind Demucs snapshot to admitted descriptor size
seonghobae
committed
0d0c6c3
docs(traceability): bind Demucs snapshot to descriptor size
seonghobae
committed
f9758eb
docs(changelog): record exact Demucs snapshot size binding
seonghobae
committed
c7d22c0
test(audio): use one separator import boundary
seonghobae
committed
bd18d28
test(separation): use one Demucs separator import boundary
seonghobae
committed
e8aa3db
test(project): preserve reopen source authority on resave
seonghobae
committed
9ceeb2f
fix(project): retain reopen persistence identity
seonghobae
committed
9a9151d
docs(project): trace reopen save authority
seonghobae
committed
d76d90b
docs(changelog): record reopen resave authority
seonghobae
committed
767b87e
test(mir): expose PyTorch weights-only model incompatibility
seonghobae
committed
5789562
fix(mir): bound PyTorch weights-only model load failure
seonghobae
committed
d395c60
docs(trace): record PyTorch weights-only model boundary
seonghobae
committed
4838ee8
docs(changelog): record bounded Demucs weights-only failure
seonghobae
committed
e4c606b
test(separation): reject unsafe torch load override
seonghobae
committed
3ae3646
fix(separation): fail closed on unsafe torch load override
seonghobae
committed
0d9fb9f
docs(traceability): record torch environment downgrade guard
seonghobae
committed
28c73a3
docs(changelog): record torch environment downgrade guard
seonghobae
committed
dc59326
test(separation): reject torch backend autoload
seonghobae
committed
4d0b16b
fix(separation): fail closed on torch backend autoload
seonghobae
committed
000fdb5
docs(traceability): bind pytorch runtime environment
seonghobae
committed
3fc5a87
docs(changelog): record torch backend autoload guard
seonghobae
committed
4676650
docs(security): structure cross-platform plan notes
seonghobae
committed
f5db38a
docs(security): structure harness plan notes
seonghobae
committed
707d680
docs(security): structure supply-chain plan notes
seonghobae
committed
87d6cd7
docs(security): record analysis dispatch threats
seonghobae
committed
87690cd
docs(traceability): align v2 preference security notes
seonghobae
committed
eee919d
docs(traceability): align v3 source security contract
seonghobae
committed
21fb89b
docs(traceability): align project IPC security notes
seonghobae
committed
9388e8c
docs(architecture): align local audio authority flow
seonghobae
committed
349d67d
test(project): bind dispatch opener closure
seonghobae
committed
8feb0c3
test(project): accept generic restart adapter signature
seonghobae
committed
dbc3dd7
fix(desktop): remove stale rehearsal parser import
seonghobae
committed
8a94753
test(security): format Security Notes policy regressions
seonghobae
committed
67b1ebc
test(ci): fix security notes import order
seonghobae
committed
f9553f0
test(ci): make Security Notes imports Ruff-canonical
seonghobae
committed
542791a
test(ci): match Ruff import-block spacing
seonghobae
committed
bab276e
style(ci): terminate temporal analyzer source canonically
seonghobae
committed
2d2e5a9
style(ci): terminate transcription source canonically
seonghobae
committed
50837f1
style(ci): apply Ruff layout to Security Notes test
seonghobae
committed
46478c4