Skip to content

fix: derive opaque non-live runtime scopes - #430

Merged
Pigbibi merged 1 commit into
mainfrom
feat/non-live-runtime-scope
Aug 27, 2026
Merged

fix: derive opaque non-live runtime scopes#430
Pigbibi merged 1 commit into
mainfrom
feat/non-live-runtime-scope

Conversation

@Pigbibi

@Pigbibi Pigbibi commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

Summary

  • add a deterministic scope-digest helper for non-live evidence bindings
  • reject Live targets, Shadow-on-Paper targets, and unscoped non-live targets
  • retain only a SHA-256 scope identity; selectors are hash material only

Safety

  • no account selector, service name, deployment selector, credential, runtime target, order, or Live authority is persisted or emitted
  • Paper remains non-live; Shadow must use an explicit dry-run target

Verification

  • ...................................... [100%]
    38 passed in 0.24s (38 passed)

Co-Authored-By: Codex <noreply@openai.com>
@Pigbibi
Pigbibi force-pushed the feat/non-live-runtime-scope branch from 9e754cf to 88faf51 Compare August 27, 2026 07:59
@Pigbibi
Pigbibi merged commit aae333f into main Aug 27, 2026
1 check passed
@Pigbibi
Pigbibi deleted the feat/non-live-runtime-scope branch August 27, 2026 08:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant