V34 Gate 4: Ledger Database Object Storage Deployment Posture

.bitcode/v34-deployment-host-capability-catalog.json

@@ -350,7 +350,7 @@
       ]
     },
     {
-      "digest": "sha256:6090906d79ae35e86d0548ca67e0f3c75300dd24d21574bb5b407174ba1ed0c2",
+      "digest": "sha256:70f7d98470ffa6ec95d96a079bfa50f4893070256d158c247bcf54b12b5651f9",
       "relativePath": "packages/btd/src/index.ts",
       "requiredTokens": [
         {
@@ -360,7 +360,7 @@
       ]
     },
     {
-      "digest": "sha256:82edb3ca798a13834379748430690382cfb38bb9f7489e5a180986431abfdff4",
+      "digest": "sha256:91837c65a866ed769915f0440cf05e799197f2b1634a2d11b7fc58915e923ce6",
       "relativePath": "BITCODE_SPEC_V34.md",
       "requiredTokens": [
         {

.bitcode/v34-distributed-execution-runtime-receipts.json

@@ -379,7 +379,7 @@
       ]
     },
     {
-      "digest": "sha256:82edb3ca798a13834379748430690382cfb38bb9f7489e5a180986431abfdff4",
+      "digest": "sha256:91837c65a866ed769915f0440cf05e799197f2b1634a2d11b7fc58915e923ce6",
       "relativePath": "BITCODE_SPEC_V34.md",
       "requiredTokens": [
         {

.bitcode/v34-environment-lane-contracts.json

@@ -218,7 +218,7 @@
       ]
     },
     {
-      "digest": "sha256:81211d9c1ac9db3b0c01ce07629c3c6170fbb3711a3ffefe0a52292c937196b8",
+      "digest": "sha256:11a994733d2754edaa7776fb30d7299f2087455775cd87b965d229e831154940",
       "relativePath": "BITCODE_SPEC_V34_DELTA.md",
       "requiredTokens": [
         {

.github/workflows/bitcode-gate-quality.yml

@@ -150,6 +150,7 @@ jobs:
             node scripts/check-v34-gate1-deployment-roadmap-opening.mjs --skip-branch-check
             node scripts/check-v34-gate2-host-capability-environment-lanes.mjs --skip-branch-check
             node scripts/check-v34-gate3-distributed-execution-runtime-contracts.mjs --skip-branch-check
+            node scripts/check-v34-gate4-deployment-storage-posture.mjs --skip-branch-check
           else
             echo "Unexpected BITCODE_SPEC.txt pointer: $POINTER" >&2
             exit 1
@@ -186,6 +187,7 @@ jobs:
           pnpm --filter @bitcode/btd test -- --runTestsByPath __tests__/interface-telemetry-proof-hook.test.ts
           pnpm --filter @bitcode/btd test -- --runTestsByPath __tests__/interface-consumer-ux-regression-proof.test.ts
           pnpm --filter @bitcode/btd test -- --runTestsByPath __tests__/deployment-host-capability-catalog.test.ts
+          pnpm --filter @bitcode/btd test -- --runTestsByPath __tests__/deployment-storage-posture.test.ts
           pnpm --filter @bitcode/btd test -- --runTestsByPath __tests__/v32-testnet-mainnet-readiness-rehearsal.test.ts
           pnpm --dir packages/protocol exec node --test --test-force-exit test/v32-promotion-proof-generation.test.js
           pnpm --filter @bitcode/api exec jest --config jest.config.cjs --runTestsByPath src/routes/__tests__/btd-crypto.test.ts --runInBand

.github/workflows/ci.yml

@@ -254,7 +254,9 @@ jobs:
       - uses: actions/checkout@v4
       - uses: reviewdog/action-actionlint@v1
         with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
+          reporter: local
+          filter_mode: nofilter
+          fail_level: error
 
 # --------------------------------------------------------------------------
 # 5. CodeQL static security analysis (JavaScript/TypeScript)

BITCODE_SPEC_V34.md

@@ -3,12 +3,12 @@
 ## Status
 
 - Version: `V34`
-- V34 state: Gate 3 distributed execution runtime contracts are closed over promoted V33 canon
+- V34 state: Gate 4 ledger/database/object-storage deployment posture is closed over promoted V33 canon
 - Current canonical/latest target: `V33`
 - Prior canonical anchor: `BITCODE_SPEC_V33.md`
 - Prior generated proof appendix: `BITCODE_SPEC_V33_PROVEN.md`
-- Generated structured artifact inventory: draft V34 specifying artifacts `.bitcode/v34-spec-family-report.json`, `.bitcode/v34-canonical-input-report.json`, Gate 2 artifacts `.bitcode/v34-deployment-host-capability-catalog.json` and `.bitcode/v34-environment-lane-contracts.json`, Gate 3 artifact `.bitcode/v34-distributed-execution-runtime-receipts.json`, and later deployment-depth artifacts as gates close
-- Source parity state: Gate 3 closes V34 host capability, environment lane, and distributed execution runtime receipt parity; storage, approval, rollback, repair-job registry, rehearsal, and promotion source parity is not closed until the relevant gates close
+- Generated structured artifact inventory: draft V34 specifying artifacts `.bitcode/v34-spec-family-report.json`, `.bitcode/v34-canonical-input-report.json`, Gate 2 artifacts `.bitcode/v34-deployment-host-capability-catalog.json` and `.bitcode/v34-environment-lane-contracts.json`, Gate 3 artifact `.bitcode/v34-distributed-execution-runtime-receipts.json`, Gate 4 artifact `.bitcode/v34-deployment-storage-posture.json`, and later deployment-depth artifacts as gates close
+- Source parity state: Gate 4 closes V34 host capability, environment lane, distributed execution runtime receipt, and storage posture parity; approval, rollback, repair-job registry, rehearsal, and promotion source parity is not closed until the relevant gates close
 - Active canonical pointer during draft opening: `BITCODE_SPEC.txt` -> `V33`
 - Notes companion: `BITCODE_SPEC_V34_NOTES.md`
 - Delta companion: `BITCODE_SPEC_V34_DELTA.md`
@@ -196,7 +196,7 @@ V34 closes through ten gates:
 1. **Gate 1: V34 Deployment Roadmap And Spec Opening** opens the V34 family over V33 canon, updates `SPECIFICATIONS_ROADMAP.md`, documents V33 active / V34 draft posture, and wires `check:v34-gate1`.
 2. **Gate 2: Host Capability And Environment Lane Catalog** inventories runtime hosts, services, queues, observers, broadcasters, storage carriers, and lanes through `DeploymentHostCapabilityCatalog` and `EnvironmentLaneContract`. It is closed by `packages/btd/src/deployment-host-capability-catalog.ts`, `.bitcode/v34-deployment-host-capability-catalog.json`, `.bitcode/v34-environment-lane-contracts.json`, `packages/btd/__tests__/deployment-host-capability-catalog.test.ts`, and `pnpm run check:v34-gate2`.
 3. **Gate 3: Distributed Execution Runtime Contracts** defines `DistributedExecutionRuntimeReceipt` for long-running pipeline, PTRR agent, ThricifiedGeneration, tool, ledger, wallet, proof, object-storage, and repair work. It is closed by `packages/pipeline-hosts/src/distributed-execution-runtime-receipt.ts`, `.bitcode/v34-distributed-execution-runtime-receipts.json`, `packages/pipeline-hosts/src/__tests__/distributed-execution-runtime-receipt.test.ts`, and `pnpm run check:v34-gate3`.
-4. **Gate 4: Ledger Database Object Storage Deployment Posture** hardens ledger-derived state, database projection, object storage, generated proof artifacts, audit logs, backup, retention, and rollback material.
+4. **Gate 4: Ledger Database Object Storage Deployment Posture** hardens ledger-derived state, database projection, object storage, generated proof artifacts, audit logs, backup, retention, and rollback material. It is closed by `packages/btd/src/deployment-storage-posture.ts`, `.bitcode/v34-deployment-storage-posture.json`, `packages/btd/__tests__/deployment-storage-posture.test.ts`, and `pnpm run check:v34-gate4`; source-bearing AssetPack storage remains locked before settlement.
 5. **Gate 5: Secret Rotation And Credential Boundary Operations** defines secret families, storage owners, rotation commands, leak-response posture, CI masking, and runtime availability checks.
 6. **Gate 6: Migration CI/CD Deployment Approval Gates** hardens schema migration approvals, generated type refresh, route scans, promotion commits, Vercel/Supabase lane checks, and deployment blockers.
 7. **Gate 7: Runtime Observers Broadcasters Repair Jobs** makes settlement observers, ledger broadcasters, projection repair jobs, proof generators, and queue consumers explicit deployment jobs with receipts.

BITCODE_SPEC_V34_DELTA.md

@@ -3,12 +3,12 @@
 ## Status
 
 - Version: `V34`
-- V34 state: Gate 3 distributed execution runtime contracts are closed over promoted V33 canon
+- V34 state: Gate 4 ledger/database/object-storage deployment posture is closed over promoted V33 canon
 - Current canonical/latest target: `V33`
 - Prior canonical anchor: `BITCODE_SPEC_V33.md`
 - Prior generated proof appendix: `BITCODE_SPEC_V33_PROVEN.md`
-- Generated structured artifact inventory: draft V34 specifying artifacts `.bitcode/v34-spec-family-report.json`, `.bitcode/v34-canonical-input-report.json`, Gate 2 artifacts `.bitcode/v34-deployment-host-capability-catalog.json` and `.bitcode/v34-environment-lane-contracts.json`, Gate 3 artifact `.bitcode/v34-distributed-execution-runtime-receipts.json`, and later deployment-depth artifacts as gates close
-- Source parity state: Gate 3 closes host capability, environment lane, and distributed execution runtime receipt contracts; source-side storage, credential, approval, repair-job registry, rehearsal, and promotion contracts remain drafted until their gates close
+- Generated structured artifact inventory: draft V34 specifying artifacts `.bitcode/v34-spec-family-report.json`, `.bitcode/v34-canonical-input-report.json`, Gate 2 artifacts `.bitcode/v34-deployment-host-capability-catalog.json` and `.bitcode/v34-environment-lane-contracts.json`, Gate 3 artifact `.bitcode/v34-distributed-execution-runtime-receipts.json`, Gate 4 artifact `.bitcode/v34-deployment-storage-posture.json`, and later deployment-depth artifacts as gates close
+- Source parity state: Gate 4 closes host capability, environment lane, distributed execution runtime receipt, and storage posture contracts; source-side credential, approval, repair-job registry, rehearsal, and promotion contracts remain drafted until their gates close
 - Spec companion: `BITCODE_SPEC_V34.md`
 - Notes companion: `BITCODE_SPEC_V34_NOTES.md`
 - Parity companion: `BITCODE_SPEC_V34_PARITY_MATRIX.md`
@@ -113,9 +113,10 @@ Gate 4 defines durable storage posture.
 
 Closure acceptance:
 
-- ledger-derived state, canonical database projections, object storage, proof artifacts, audit logs, rollback material, backups, retention, encryption posture, and repair commands are specified and tested;
+- ledger-derived state, canonical database projection, object storage, proof artifacts, audit logs, rollback material, backups, retention, encryption posture, and repair commands are specified and tested through `DeploymentStoragePosture`;
 - source-bearing AssetPack storage remains locked before settlement;
-- database and ledger projection drift has a repair posture.
+- database and ledger projection drift has a repair posture;
+- generated storage posture proof is source-safe in `.bitcode/v34-deployment-storage-posture.json`.
 
 ### Gate 5: Secret Rotation And Credential Boundary Operations
 

BITCODE_SPEC_V34_NOTES.md

@@ -3,12 +3,12 @@
 ## Status
 
 - Version: `V34`
-- V34 state: Gate 3 distributed execution runtime contracts are closed over promoted V33 canon
+- V34 state: Gate 4 ledger/database/object-storage deployment posture is closed over promoted V33 canon
 - Current canonical/latest target: `V33`
 - Prior canonical anchor: `BITCODE_SPEC_V33.md`
 - Prior generated proof appendix: `BITCODE_SPEC_V33_PROVEN.md`
-- Generated structured artifact inventory: draft V34 specifying artifacts `.bitcode/v34-spec-family-report.json`, `.bitcode/v34-canonical-input-report.json`, Gate 2 artifacts `.bitcode/v34-deployment-host-capability-catalog.json` and `.bitcode/v34-environment-lane-contracts.json`, Gate 3 artifact `.bitcode/v34-distributed-execution-runtime-receipts.json`, and later deployment-depth artifacts as gates close
-- Source parity state: Gate 3 closes host capability, environment lane, and distributed execution runtime receipt source parity; later deployment-depth source parity remains drafted until each gate closes
+- Generated structured artifact inventory: draft V34 specifying artifacts `.bitcode/v34-spec-family-report.json`, `.bitcode/v34-canonical-input-report.json`, Gate 2 artifacts `.bitcode/v34-deployment-host-capability-catalog.json` and `.bitcode/v34-environment-lane-contracts.json`, Gate 3 artifact `.bitcode/v34-distributed-execution-runtime-receipts.json`, Gate 4 artifact `.bitcode/v34-deployment-storage-posture.json`, and later deployment-depth artifacts as gates close
+- Source parity state: Gate 4 closes host capability, environment lane, distributed execution runtime receipt, and storage posture source parity; later deployment-depth source parity remains drafted until each gate closes
 - Scope: active draft notes for deployment depth after V33 commercial interface canon
 
 This NOTES file does not promote V34.
@@ -57,7 +57,7 @@ Read the system as:
 - Gate 2 source truth is `packages/btd/src/deployment-host-capability-catalog.ts`; generated truth is `.bitcode/v34-deployment-host-capability-catalog.json` and `.bitcode/v34-environment-lane-contracts.json`; validation is `pnpm run check:v34-gate2`.
 - `DistributedExecutionRuntimeReceipt` now represents long-running Reading, settlement, wallet, proof, object-storage, and repair work without relying on route-handler duration. Gate 3 source truth is `packages/pipeline-hosts/src/distributed-execution-runtime-receipt.ts`; generated truth is `.bitcode/v34-distributed-execution-runtime-receipts.json`; validation is `pnpm run check:v34-gate3`.
 - Receipt work kinds are `pipeline_run`, `ptrr_agent`, `thricified_generation`, `tool_call`, `ledger_operation`, `wallet_operation`, `proof_generation`, `object_storage_write`, and `repair_job`; long-running work uses `request_response_not_required` and source-safe roots instead of serialized source, prompt payloads, credentials, or wallet private material.
-- `DeploymentStoragePosture` must cover ledger-derived state, database projection, object storage, proof artifacts, audit logs, rollback material, retention, encryption, and repair commands.
+- `DeploymentStoragePosture` now covers ledger-derived state, database projection, object storage, proof artifacts, audit logs, rollback material, backups, retention, encryption, and repair commands. Gate 4 source truth is `packages/btd/src/deployment-storage-posture.ts`; generated truth is `.bitcode/v34-deployment-storage-posture.json`; validation is `pnpm run check:v34-gate4`; source-bearing AssetPack storage remains locked before settlement.
 - `SecretRotationPlan` must never place secret values in tracked files or generated artifacts.
 - `MigrationApprovalGate` must connect schema diffs, generated types, dry-runs, reviewer approvals, and rollback plans.
 - `DeploymentReadinessRehearsal` must prove local and staging-testnet readiness without value-bearing mainnet admission.