V37 Gate 8: Conversation Telemetry Proof Hooks And Docs

[geraldarthurdavis]

Summary

• adds package-owned ConversationTelemetryProofHooks canon source and deterministic proof artifact
• wires API conversation stream rows and the fullscreen Conversations telemetry proof panel to source-safe dashboard/runbook metadata
• documents public Conversations telemetry disclosure limits and internal dashboard/runbook repair posture
• extends Gate 8 scripts, specs, roadmap, workflow wiring, and protocol/API/UI tests

Validation

• pnpm run check:v37-conversation-telemetry-proof-hooks
• pnpm run check:v37-gate8
• BITCODE_RUN_PACKAGE_MANAGER_TESTS=1 node scripts/check-v37-gate8-conversation-telemetry-proof-hooks.mjs --skip-branch-check
• node --test --test-force-exit packages/protocol/test/conversation-telemetry-proof-hooks.test.js
• pnpm --filter @bitcode/api exec jest --config jest.config.cjs --runTestsByPath src/conversations/tests/telemetry.test.ts src/conversations/tests/stream-events.test.ts --runInBand --forceExit
• pnpm -C uapi exec jest tests/api/conversationTelemetryProofHooks.test.ts tests/conversationTelemetryProofPanel.test.tsx tests/conversationStreamPipelineLog.test.tsx --runInBand
• pnpm --filter @bitcode/api build
• pnpm --dir uapi exec tsc --noEmit --pretty false
• pnpm --filter @bitcode/protocol typecheck
• pnpm --filter @bitcode/protocol test
• pnpm --dir uapi run lint
• bash scripts/find-uppercase-raw-promptparts.sh
• bash scripts/check-import-casing.sh
• node scripts/check-bitcode-spec-family.mjs --version V37 --mode draft --current-target V36
• node scripts/check-v37-gate1-conversations-roadmap-opening.mjs --skip-branch-check
• node scripts/check-v37-gate2-conversation-session-route-history-contracts.mjs --skip-branch-check
• node scripts/check-v37-gate3-conversation-stream-event-contracts.mjs --skip-branch-check
• node scripts/check-v37-gate4-conversation-writing-workspace.mjs --skip-branch-check
• node scripts/check-v37-gate5-conversation-source-selector.mjs --skip-branch-check
• node scripts/check-v37-gate6-conversation-terminal-handoff.mjs --skip-branch-check
• node scripts/check-v37-gate7-conversation-persistence-privacy-redaction.mjs --skip-branch-check
• node scripts/check-bitcode-canonical-inputs.mjs --current-target V36
• node scripts/check-bitcode-canon-posture-drift.mjs --active-canon V36 --draft-target V37
• git diff --check

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
engi-uapi	Ready	Preview, Comment	May 24, 2026 5:19pm

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fa6ada205b

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Redact every protected-context token in telemetry strings

sanitizeText replaces PROTECTED_CONTEXT_RE only once, because the regex is not global and there is no loop. If metadata/correlation text contains multiple protected markers (for example both raw prompt and protected source), later matches remain in expandedMetadata and can be emitted in stream telemetry logs, violating the source-safe boundary this hook is meant to enforce.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Reject previews when sourceSafePreview still contains unsafe text

assertConversationTelemetryProofPreviewSourceSafe only inspects boolean flags in preview.metadata, but buildConversationTelemetryProofPreview hardcodes those flags to safe values. As a result, this assertion can return admitted: true even when sourceSafePreview still contains unredacted sensitive/protected content (e.g., a pattern not covered by the current redactor), so callers cannot rely on it as an actual safety gate.

Useful? React with 👍 / 👎.