Skip to content

docs(governance): record AC-40 validator evidence #16

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
tom-sapletta-com wants to merge 1 commit into from
+20 −1
Closed

docs(governance): record AC-40 validator evidence #16

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion project/ticket-018/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -247,7 +247,7 @@ existing README/runbook/permissions documentation. No application source in
and mutable/unpinned heads are rejected.
- [x] AC-39: Focused negative/positive tests, both complete repository suites,
governance, Java, gold, SDK examples and Docker smoke pass.
- [ ] AC-40: After a separately trusted bootstrap review merges the policy,
- [x] AC-40: After a separately trusted bootstrap review merges the policy,
the real Validator App reviews PR #13 at its exact SHA and the rerun
proves `governance / enforce` accepts that independent agent evidence.

Expand Down
12 changes: 12 additions & 0 deletions project/ticket-018/ai-codex-logs.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -356,3 +356,15 @@ repository selection: all
transition: BLOCKED -> IN_PROGRESS / VALIDATION
next boundary: publish a fresh ticket-only head, pass deterministic hosted
checks, then request an exact-head direct-pr review from the installed App
2026-08-04 AC-40 LIVE VALIDATION COMPLETE
bootstrap PR #14 merge: 944feda7b3914f747cc67d3682ce8427a7305ff4
reviewed PR #13 head: 68b0c0985f0aa95f8a41e252399491fe7aea29ca
Validator App review run: 30925171580; actor ifuri-validator-agent[bot]
review bindings: ticket-034; correlation todo2code-pr-13-ticket-034-68b0c098
model: openrouter/z-ai/glm-5.2
post-review governance run: 30925337717; governance PASS; verify PASS; Java PASS
PR #13 merge: 4387943e4095926fe2466628b767c3dd83034281
full-diff historical audit run: 30926415029; dry-run/no mutations
diff coverage: 29170 characters, 12 files, 3 complete non-overlapping chunks
aggregated semantic verdict: APPROVE; checks verify/Java/Koru PASS
state: AC-40 complete
7 changes: 7 additions & 0 deletions project/ticket-018/ai-codex.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -205,6 +205,13 @@ Current verified baseline:
Approval evidence is generated in `runner.temp` and bound to repository, PR,
current head, ticket and actor. The earlier checkout-owned resolver is detached
from CI and retained only until the tracked generated-analysis index is refreshed.
- Completed AC-40 after App installation. Validator run `30925171580` approved
PR #13 at exact head `68b0c0985f0aa95f8a41e252399491fe7aea29ca`, and
post-review run `30925337717` proved the protected governance resolver accepted
the App evidence. A later read-only historical audit fixed the previously
truncated semantic input and reviewed all 29,170 diff characters across 12
files in three non-overlapping chunks; run `30926415029` returned `APPROVE`
without creating a review, comment, commit or merge.

## Blockers

Expand Down
Loading