Skip to content

feat(authoring): bind public tools to frozen source provisioning #233

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
777genius merged 2 commits into from
Sep 9, 2026
Merged

feat(authoring): bind public tools to frozen source provisioning #233

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
c05c7d9
feat(authoring): bind public tools to frozen source provisioning
777genius Sep 9, 2026
ade405f
fix(authoring): preserve empty closures and stable file identity
777genius Sep 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
266 changes: 266 additions & 0 deletions .github/authoring-public-tools.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,266 @@
{
"schema": "authoring-public-tools/v1",
"controllers": {
"linux-amd64": {
"node": null,
"python": null,
"git": null,
"gh": null,
"tar": null
},
"linux-arm64": {
"node": null,
"python": null,
"git": null,
"gh": null,
"tar": null
},
"darwin-amd64": {
"node": null,
"python": null,
"git": null,
"gh": null,
"tar": null
},
"darwin-arm64": {
"node": null,
"python": null,
"git": null,
"gh": null,
"tar": null
},
"windows-amd64": {
"node": null,
"python": null,
"git": null,
"gh": null,
"tar": null
},
"windows-arm64": {
"node": null,
"python": null,
"git": null,
"gh": null,
"tar": null
}
},
"cells": {
"linux-amd64/kit-node18": {
"runner": null,
"image": null,
"controller": "linux-amd64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
},
"linux-amd64/pair-node22": {
"runner": null,
"image": null,
"controller": "linux-amd64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
},
"linux-amd64/pair-node24": {
"runner": null,
"image": null,
"controller": "linux-amd64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
},
"linux-arm64/kit-node18": {
"runner": null,
"image": null,
"controller": "linux-arm64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
},
"linux-arm64/pair-node22": {
"runner": null,
"image": null,
"controller": "linux-arm64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
},
"linux-arm64/pair-node24": {
"runner": null,
"image": null,
"controller": "linux-arm64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
},
"darwin-amd64/kit-node18": {
"runner": null,
"image": null,
"controller": "darwin-amd64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
},
"darwin-amd64/pair-node22": {
"runner": null,
"image": null,
"controller": "darwin-amd64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
},
"darwin-amd64/pair-node24": {
"runner": null,
"image": null,
"controller": "darwin-amd64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
},
"darwin-arm64/kit-node18": {
"runner": null,
"image": null,
"controller": "darwin-arm64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
},
"darwin-arm64/pair-node22": {
"runner": null,
"image": null,
"controller": "darwin-arm64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
},
"darwin-arm64/pair-node24": {
"runner": null,
"image": null,
"controller": "darwin-arm64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
},
"windows-amd64/kit-node18": {
"runner": null,
"image": null,
"controller": "windows-amd64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
},
"windows-amd64/pair-node22": {
"runner": null,
"image": null,
"controller": "windows-amd64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
},
"windows-amd64/pair-node24": {
"runner": null,
"image": null,
"controller": "windows-amd64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
},
"windows-arm64/kit-node18": {
"runner": null,
"image": null,
"controller": "windows-arm64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
},
"windows-arm64/pair-node22": {
"runner": null,
"image": null,
"controller": "windows-arm64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
},
"windows-arm64/pair-node24": {
"runner": null,
"image": null,
"controller": "windows-arm64",
"npm_node": null,
"shim_node": null,
"npm": null,
"go": null,
"mod_cache": null,
"observer": null,
"installer_policy": null
}
},
"reader": "linux-amd64"
}
44 changes: 44 additions & 0 deletions npm/agentplugins/scripts/packed-installer-bridge.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -362,3 +362,47 @@ E aggregate/authenticated reader and P adapter together. Its npm/process,
workflow and P test names remain outstanding. Native/N2, genuine E, P/Q/B,
anonymous acquisition/readbacks/channels, stable release and phases 0–11
remain open; independent review and required remote CI are not waived.

### C3b first invariant: source-frozen public tools

The controller now reads only `.github/authoring-public-tools.json` beside the
executing trusted checkout. `expectedCommit`, receipt pins, PATH and environment
cannot select that root or an interpreter. `options.node` is comparison only.
`authoring-public-tools/v1` fixes six controller keys, eighteen cell keys and the
Linux-amd64 reader. The closed, ordered JSON encoding is two-space indentation
plus one LF, using the existing encoding/checked-file interface in JavaScript
and minimal standard-library checks in Python. Limits are 1 MiB and depth eight;
unknown, missing, duplicate, reordered and alternate-encoded fields fail.

All fields remain present. `null` means approved provision is unavailable;
there are no approved pins in this checkout. Controller rows contain
`node,python,git,gh,tar`, each eventually `{path,version,sha256}`. Cell
`runner,image,observer,installer_policy` are immutable `{id,sha256}` bindings
supplied by approved provisioning, not guessed runner labels. `npm_node` and
`shim_node` must match the cell major. npm additionally requires
`closure:{root,files:[{path,sha256}]}`: the sorted exhaustive regular-file closure,
including its CLI and dependencies. `mod_cache` uses that same closure shape.
Closures allow at most 4096 files, 8192 entries and 256 MiB; links and path aliases
fail. Go and module cache are required only for Linux-amd64/pair-node22;
installer policy is required for pair cells. Other null capabilities fail with
`PUBLIC_PROVISIONING_REQUIRED:<controller-or-cell>:<field>` before execution.
Provisioned versions are frozen metadata bound to bytes, not inferred by running
a tool. Provisioning owners must supply authentic supply-chain instructions and
immutable host/image identities before any real cell can run.

`readProvisioning()` takes no root argument. `requireController(key)` returns a
verified fixed Node path; `requireCellTools(key)` checks that cell's provision.
Python `require_authenticated_controller()` accepts no caller input. Its initial
TCB is trusted checkout plus trusted Python/workflow OS. Prepared subprocess paths
recheck tools and trusted source before and after invocation, using an environment
that excludes interpreter injection settings. The external provision contract
must keep paths immutable throughout execution; hashes do not prevent hostile
same-UID replacement between checks.

A verified controller does **not** open authenticated summary success. A separate
explicit `C3b execution incomplete` gate remains before receipt reads/effects:
full result/installer/observer validation and independent invocation authority
are still missing. Synthetic unit fixtures mock that later capability and child
execution only; harmless tool bytes are never executed and establish no authentic
acceptance. Full producer/validators/facades, workflow, J/E/P, genuine matrix and
remaining release gates remain mandatory next-lane work.
Loading
Loading