[codex] 0.18 decontamination: planner, timing, verify, inventory - #2101
Closed
TheGreenCedar wants to merge 12 commits into
Closed
[codex] 0.18 decontamination: planner, timing, verify, inventory#2101TheGreenCedar wants to merge 12 commits into
TheGreenCedar wants to merge 12 commits into
Conversation
Land the anti-contamination checker, docs, CI wiring, and failing black-box agent tests before planner deletion on the decontamination lane. Co-authored-by: Cursor <cursoragent@cursor.com>
Introduce Stage B graph planning with frozen initial limits and unit coverage for empty, connected, and vocabulary-only inputs. Co-authored-by: Cursor <cursoragent@cursor.com>
Delete domain flow classifiers, cleanup passes, and flow-template claim surfaces; keep generic seeds and Stage B repository evidence planning, and flip the generalization boundary gate to expect a clean head. Co-authored-by: Cursor <cursoragent@cursor.com>
Prove Stage B planning stays stable under rename, paraphrase, wrapper depth, multi-impl, distractors, truncated graphs, and six language paths. Co-authored-by: Cursor <cursoragent@cursor.com>
Lock Stage B constants after the visible metamorphic suite passed so later performance replay cannot silently retune relationship search bounds. Co-authored-by: Cursor <cursoragent@cursor.com>
Strip carrier-coupled evidence predicates to Never, delete unused scoring and probe leftovers, and ignore runtime packet tests that still expect deleted flow taxonomies. Co-authored-by: Cursor <cursoragent@cursor.com>
Stage sealed core generations under core/generations with atomic publication.json pointers and process-crash matrix coverage. Co-authored-by: Cursor <cursoragent@cursor.com>
Replay retrieval lexical base/delta compaction, incremental core wall receipts, and the incremental refresh microprobe onto the clean head. Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Replace exact-candidate warm_ms=wallMs aliases with InstalledAgentTimingV1 phase fields and cohort ids shared across ABBA arms. Co-authored-by: Cursor <cursoragent@cursor.com>
Skip dense-anchor writes on sealed cores and advertise verify_indexed_direct_calls in plugin guidance and static checks. Co-authored-by: Cursor <cursoragent@cursor.com>
This was referenced Aug 31, 2026
Owner
Author
Failed freeze — do not merge as 0.18 candidatePhase 9 leakage FAIL on head |
This was referenced Aug 31, 2026
Owner
Author
|
Superseded. Earlier decontamination freeze failed adversarial leakage review. Active work is #2103. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
InstalledAgentTimingV1cohort timing,verify_indexed_direct_calls/call-path/v1, and cache inventory + compact rehydrate.c18d79485f03b3c930b6a5170748429827f04027. Phase 9 sealed holdout and Phase 10 bump/calibrate/release are not in this PR.Refs #2099
Refs #2098
Context
Parent program is decontamination-first 0.18 (#2098 / #2099). Accuracy commits and contaminated PR #2100 remain quarantined. Evidence digests (outside repo):
ffe1aea86d3fc2e76ee6521ebbb74ffb837f48c7624f72f2c271ae9829928d57aefaaac79115bb538e23d495539b2145429bafd278f7702ef8c2a10e633930880cef0a3e880e8035ecd0d18bde44d3004913daac73a2803caea5fe160fe51a58What changed
repository_evidence_plan(frozen planner limits 12/256/512/4/32); public packet budget unchanged (16 rows / 16 KiB).warm_ms = wall_msauthority).verify_indexed_direct_callswith legacy dispatch retained forprove_call_pathname routing only.cache inventory+VACUUM INTOcompact rehydrate.How to review
scripts/check-packet-generalization-boundary.mjs.verify_indexed_direct_calls(not publicprove_call_path).Verification
Focused Phase 8 on
c18d7948(pass): boundary node+live, agent metamorphic+full, runtime packet candidate/trace/batch/exec-v3, store core_generation+crash-matrix, CLIpublic_call_path_release, Phase 7 inventory/rehydrate suites, plugin-static, worktree-setup, timing cohort node tests, stdioverify_indexedfilter.Not executed (protected hardware / installed MCP hosts / Redis incremental / cold host-approval / ABBA host cells): no fake receipts.
Risk
Large planner replacement; residual unused-import warnings in neutralized flow scaffolding. #2100 must stay non-mergeable.
Follow-up
Made with Cursor