Skip to content

[codex] 0.18 decontamination: planner, timing, verify, inventory - #2101

Closed
TheGreenCedar wants to merge 12 commits into
dev/codestory-nextfrom
codex/2099-v018-decontamination
Closed

[codex] 0.18 decontamination: planner, timing, verify, inventory#2101
TheGreenCedar wants to merge 12 commits into
dev/codestory-nextfrom
codex/2099-v018-decontamination

Conversation

@TheGreenCedar

Copy link
Copy Markdown
Owner

Summary

  • Supersedes contaminated accuracy work on draft PR [codex] remediate 0.18 accuracy and warm indexing #2100 (historical quarantine; not mergeable as an accuracy candidate).
  • Lands decontaminated repository-evidence packet planning, generalization boundary, metamorphic suite, immutable-core / lexical-delta performance slices, InstalledAgentTimingV1 cohort timing, verify_indexed_direct_calls / call-path/v1, and cache inventory + compact rehydrate.
  • Phase 8 focused qualification passed on exact head c18d79485f03b3c930b6a5170748429827f04027. Phase 9 sealed holdout and Phase 10 bump/calibrate/release are not in this PR.

Refs #2099
Refs #2098

Context

Parent program is decontamination-first 0.18 (#2098 / #2099). Accuracy commits and contaminated PR #2100 remain quarantined. Evidence digests (outside repo):

  • contamination ledger ffe1aea86d3fc2e76ee6521ebbb74ffb837f48c7624f72f2c271ae9829928d57
  • dirty remediation complete patch aefaaac79115bb538e23d495539b2145429bafd278f7702ef8c2a10e63393088
  • phase0 complete 0cef0a3e880e8035ecd0d18bde44d3004913daac73a2803caea5fe160fe51a58

What changed

  • Boundary gate + Stage B repository_evidence_plan (frozen planner limits 12/256/512/4/32); public packet budget unchanged (16 rows / 16 KiB).
  • Performance: immutable core generations, lexical deltas / crash matrix, InstalledAgentTimingV1 (no warm_ms = wall_ms authority).
  • Explicit verification: MCP/CLI verify_indexed_direct_calls with legacy dispatch retained for prove_call_path name routing only.
  • Storage: cache inventory + VACUUM INTO compact rehydrate.

How to review

  1. Start with agent planner / metamorphic tests and scripts/check-packet-generalization-boundary.mjs.
  2. Spot-check store immutable core + retrieval fixture RO path.
  3. Confirm plugin catalog/skill advertise verify_indexed_direct_calls (not public prove_call_path).

Verification

Focused Phase 8 on c18d7948 (pass): boundary node+live, agent metamorphic+full, runtime packet candidate/trace/batch/exec-v3, store core_generation+crash-matrix, CLI public_call_path_release, Phase 7 inventory/rehydrate suites, plugin-static, worktree-setup, timing cohort node tests, stdio verify_indexed filter.

Not executed (protected hardware / installed MCP hosts / Redis incremental / cold host-approval / ABBA host cells): no fake receipts.

Risk

Large planner replacement; residual unused-import warnings in neutralized flow scaffolding. #2100 must stay non-mergeable.

Follow-up

  • Phase 9: verifier-owned sealed holdout (implementer does not run).
  • Phase 10: bump/calibrate/qualify/release only after Phase 9.

Made with Cursor

TheGreenCedar and others added 12 commits August 31, 2026 08:20
Land the anti-contamination checker, docs, CI wiring, and failing
black-box agent tests before planner deletion on the decontamination lane.

Co-authored-by: Cursor <cursoragent@cursor.com>
Introduce Stage B graph planning with frozen initial limits and
unit coverage for empty, connected, and vocabulary-only inputs.

Co-authored-by: Cursor <cursoragent@cursor.com>
Delete domain flow classifiers, cleanup passes, and flow-template claim
surfaces; keep generic seeds and Stage B repository evidence planning, and
flip the generalization boundary gate to expect a clean head.

Co-authored-by: Cursor <cursoragent@cursor.com>
Prove Stage B planning stays stable under rename, paraphrase, wrapper
depth, multi-impl, distractors, truncated graphs, and six language paths.

Co-authored-by: Cursor <cursoragent@cursor.com>
Lock Stage B constants after the visible metamorphic suite passed so later
performance replay cannot silently retune relationship search bounds.

Co-authored-by: Cursor <cursoragent@cursor.com>
Strip carrier-coupled evidence predicates to Never, delete unused scoring
and probe leftovers, and ignore runtime packet tests that still expect
deleted flow taxonomies.

Co-authored-by: Cursor <cursoragent@cursor.com>
Stage sealed core generations under core/generations with atomic
publication.json pointers and process-crash matrix coverage.

Co-authored-by: Cursor <cursoragent@cursor.com>
Replay retrieval lexical base/delta compaction, incremental core wall
receipts, and the incremental refresh microprobe onto the clean head.

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Replace exact-candidate warm_ms=wallMs aliases with InstalledAgentTimingV1
phase fields and cohort ids shared across ABBA arms.

Co-authored-by: Cursor <cursoragent@cursor.com>
Skip dense-anchor writes on sealed cores and advertise
verify_indexed_direct_calls in plugin guidance and static checks.

Co-authored-by: Cursor <cursoragent@cursor.com>
@TheGreenCedar

Copy link
Copy Markdown
Owner Author

Failed freeze — do not merge as 0.18 candidate

Phase 9 leakage FAIL on head c18d7948 (receipt digest bf80a213…). This PR remains the failed-candidate record. Remount continues on codex/2099-v018-decontamination-r2 with a new draft PR. Phase 10 blocked.

@TheGreenCedar

Copy link
Copy Markdown
Owner Author

Superseded. Earlier decontamination freeze failed adversarial leakage review. Active work is #2103.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant