Skip to content

Retain verified observer ownership evidence after main integration #83

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
vanedaltro merged 4 commits into from
Oct 31, 2026
Merged

Retain verified observer ownership evidence after main integration #83

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
b32a98a
Bound pending file observer replacement ownership
vanedaltro Oct 31, 2026
09d5d1d
Merge remote-tracking branch 'origin/main' into fix/pending-file-obse…
vanedaltro Oct 31, 2026
a7b7688
Record observer verification against merged feature changes
vanedaltro Oct 31, 2026
0d97713
Merge main and retain verified observer ownership evidence
vanedaltro Oct 31, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 6 additions & 4 deletions openspec/changes/complete-plugin-hook-runtime/file-observation-pending-owner.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,9 @@ Review reproduced a resource-lifetime defect in the existing observer registry.
A cancelled owner could still be settling. Each remove/readmit cycle then created
another Tokio task awaiting the previous task. The registry held one entry while
its nested chain grew: 256 cycles created 257 replacement tasks in the regression.
This is candidate evidence, without attributing the defect to an unchecked base.
The new regression executed against unchanged production code at main
`3ecf0755` and failed with 257 replacement tasks. Only the test was added for
that baseline run.

A pending replacement now retains its owner token until its predecessor settles.
Removing a Session still cancels that Session's callback token immediately and
Expand All @@ -24,12 +26,12 @@ tests with one subprocess helper intentionally ignored by the parent test runner
All 24 actual HTTP callback lifecycle regressions also pass locally. These
component results do not prove native confinement or current-source platform
acceptance. Scoped `cyber-tools --lib` Clippy with warnings denied and Rust
formatting pass. Strict OpenSpec validates all 107 items; spec lint reports zero
formatting pass. Strict OpenSpec validates all 114 items; spec lint reports zero
errors and 25 warnings.

The focused workflow removes only the pending-owner cancellation guard as a
counterexample. It must execute the regression and fail its exact task-chain
assertion; compilation failure cannot satisfy the control. The exact control
was executed locally and failed at that assertion. Platform CI and composed-feature
acceptance remain required. Task 5.2
stays open, as do the separate plugin native admission and protocol gates.
acceptance remain required. Task 5.2 stays open, as do the separate plugin native
admission and protocol gates.
Loading