Authenticate V5 review evidence through aggregation - #3604
Merged
Conversation
This was referenced Aug 29, 2026
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
This was referenced Aug 29, 2026
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #3604 +/- ##
=======================================
Coverage 91.85% 91.85%
=======================================
Files 20 20
Lines 6093 6093
=======================================
Hits 5597 5597
Misses 496 496 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
joshlf
force-pushed
the
Gwmskgf6pp5ufbufusyjegs357wjllvtq
branch
from
August 29, 2026 11:11
b1e88b3 to
c3d2551
Compare
joshlf
force-pushed
the
Gwmskgf6pp5ufbufusyjegs357wjllvtq
branch
from
September 1, 2026 22:15
c3d2551 to
ef26c8d
Compare
jswrenn
approved these changes
Sep 2, 2026
jswrenn
approved these changes
Sep 2, 2026
joshlf
force-pushed
the
Ghchu3g3fkri2ofhgm5addjto4rfkyvyi
branch
from
September 2, 2026 20:45
2ddc311 to
98c9f96
Compare
joshlf
force-pushed
the
Gwmskgf6pp5ufbufusyjegs357wjllvtq
branch
from
September 2, 2026 20:45
ef26c8d to
5dda6a4
Compare
This was referenced Sep 2, 2026
joshlf
changed the title
joshlf
force-pushed
the
Ghchu3g3fkri2ofhgm5addjto4rfkyvyi
branch
from
September 3, 2026 04:06
c941428 to
afc8a38
Compare
joshlf
force-pushed
the
Gwmskgf6pp5ufbufusyjegs357wjllvtq
branch
from
September 3, 2026 04:06
513513b to
3441236
Compare
joshlf
force-pushed
the
Ghchu3g3fkri2ofhgm5addjto4rfkyvyi
branch
from
September 3, 2026 04:42
afc8a38 to
471908d
Compare
joshlf
force-pushed
the
Gwmskgf6pp5ufbufusyjegs357wjllvtq
branch
from
September 3, 2026 04:42
3441236 to
c197085
Compare
joshlf
force-pushed
the
Ghchu3g3fkri2ofhgm5addjto4rfkyvyi
branch
from
September 3, 2026 05:14
471908d to
b594f16
Compare
joshlf
force-pushed
the
Gwmskgf6pp5ufbufusyjegs357wjllvtq
branch
from
September 3, 2026 05:14
c197085 to
4c68150
Compare
joshlf
force-pushed
the
Ghchu3g3fkri2ofhgm5addjto4rfkyvyi
branch
from
September 3, 2026 05:47
b594f16 to
7617075
Compare
joshlf
force-pushed
the
Gwmskgf6pp5ufbufusyjegs357wjllvtq
branch
2 times, most recently
from
September 3, 2026 06:17
87d4cfc to
8944f82
Compare
joshlf
force-pushed
the
Ghchu3g3fkri2ofhgm5addjto4rfkyvyi
branch
2 times, most recently
from
September 3, 2026 06:47
365d702 to
f3b2c36
Compare
joshlf
force-pushed
the
Gwmskgf6pp5ufbufusyjegs357wjllvtq
branch
2 times, most recently
from
September 3, 2026 07:16
9597616 to
e51a753
Compare
joshlf
force-pushed
the
Ghchu3g3fkri2ofhgm5addjto4rfkyvyi
branch
from
September 3, 2026 07:16
f3b2c36 to
73d3ccd
Compare
joshlf
force-pushed
the
Gwmskgf6pp5ufbufusyjegs357wjllvtq
branch
from
September 3, 2026 07:46
e51a753 to
7eb2000
Compare
joshlf
force-pushed
the
Ghchu3g3fkri2ofhgm5addjto4rfkyvyi
branch
2 times, most recently
from
September 3, 2026 08:17
b83f623 to
241013e
Compare
joshlf
force-pushed
the
Gwmskgf6pp5ufbufusyjegs357wjllvtq
branch
from
September 3, 2026 08:17
7eb2000 to
4f25f27
Compare
joshlf
force-pushed
the
Ghchu3g3fkri2ofhgm5addjto4rfkyvyi
branch
from
September 3, 2026 08:49
241013e to
6f42990
Compare
joshlf
force-pushed
the
Gwmskgf6pp5ufbufusyjegs357wjllvtq
branch
from
September 3, 2026 08:49
4f25f27 to
2c6c7e5
Compare
joshlf
force-pushed
the
Ghchu3g3fkri2ofhgm5addjto4rfkyvyi
branch
from
September 3, 2026 11:37
6f42990 to
886e72a
Compare
joshlf
force-pushed
the
Gwmskgf6pp5ufbufusyjegs357wjllvtq
branch
from
September 3, 2026 11:37
2c6c7e5 to
ce7b810
Compare
Replace the caller-supplied semantic overlay with an immutable lifecycle of three source reviews and eight snapshot reviews. Require disjoint reviewer identities and bind exact source trees, report materials, authority evidence, work products, receipts, captures, external commitment, and static lock. Carry the same descriptor-captured evidence through aggregation instead of reopening paths or consuming legacy summaries. Correct DRAFT/READY status versions and excluded authority kinds, derive aggregate and gate inputs from the authenticated receipt inventory, and execute only captured trusted word-count bytes. Close receipt, candidate-path, word-counter, and lock-reopen races with no-follow captures, stable inode checks, immutable publication, and exact commitment joins. Document uninterrupted private custody as a TCB premise and exercise the complete mechanical 3+8 review lifecycle plus adversarial replacement, identity, provenance, and aggregation mutations. This remains diagnostic infrastructure. It records no genuine semantic reports or evaluation result, and reviewer honesty, custody, trusted runtime semantics, and collision resistance remain explicit premises. gherrit-pr-id: Gwmskgf6pp5ufbufusyjegs357wjllvtq Agent-Authored-By: AI agent acting on Josh Liebow-Feeser's behalf
joshlf
force-pushed
the
Gwmskgf6pp5ufbufusyjegs357wjllvtq
branch
from
September 3, 2026 12:08
ce7b810 to
ced6ab3
Compare
joshlf
enabled auto-merge
September 3, 2026 12:09
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Replace the caller-supplied semantic overlay with an immutable lifecycle of
three source reviews and eight snapshot reviews. Require disjoint reviewer
identities and bind exact source trees, report materials, authority evidence,
work products, receipts, captures, external commitment, and static lock.
Carry the same descriptor-captured evidence through aggregation instead of
reopening paths or consuming legacy summaries. Correct DRAFT/READY status
versions and excluded authority kinds, derive aggregate and gate inputs from
the authenticated receipt inventory, and execute only captured trusted
word-count bytes.
Close receipt, candidate-path, word-counter, and lock-reopen races with
no-follow captures, stable inode checks, immutable publication, and exact
commitment joins. Document uninterrupted private custody as a TCB premise and
exercise the complete mechanical 3+8 review lifecycle plus adversarial
replacement, identity, provenance, and aggregation mutations.
This remains diagnostic infrastructure. It records no genuine semantic
reports or evaluation result, and reviewer honesty, custody, trusted runtime
semantics, and collision resistance remain explicit premises.
Agent-Authored-By: AI agent acting on Josh Liebow-Feeser's behalf
This PR is on branch codex/unsafe-rust-stack.
Latest Update: v28 — Compare vs v27
📚 Full Patch History
Links show the diff between the row version and the column version.
⬇️ Download this PR
Branch
git fetch origin refs/heads/Gwmskgf6pp5ufbufusyjegs357wjllvtq && git checkout -b pr-Gwmskgf6pp5ufbufusyjegs357wjllvtq FETCH_HEADCheckout
git fetch origin refs/heads/Gwmskgf6pp5ufbufusyjegs357wjllvtq && git checkout FETCH_HEADCherry Pick
git fetch origin refs/heads/Gwmskgf6pp5ufbufusyjegs357wjllvtq && git cherry-pick FETCH_HEADPull
Stacked PRs enabled by GHerrit.