62 lines
3.4 KiB
Markdown
62 lines
3.4 KiB
Markdown
# Private original-span export: Windows verification
|
|
|
|
Tested source **10d7f3340d5cd61a656dc0bcf7c143f8897c5551**, based on
|
|
**1b1c3e3abb6fc3d0934c9dbfbd21fddc8ae4f594**. This is a private typed rename
|
|
adapter, not public source8 support or a mixed-file compositor.
|
|
|
|
The adapter exposes a complete borrowed batch of original spans and qualified
|
|
identities after validating source ownership, complete edit membership, names
|
|
and budget bounds. It creates no replacement source files. Standalone rename
|
|
output retains its original size checks; composition defers hypothetical
|
|
typed-only output size to the future combined emitter. A review caught an
|
|
intermediate standalone budget regression; the final source fixes it and adds
|
|
a test that distinguishes the corrected behavior.
|
|
|
|
Windows x86_64-pc-windows-gnullvm, Rust/Cargo 1.98.1, one compiler job:
|
|
|
|
- Actual library listing: 173 unique tests, all previous 167 retained plus six.
|
|
- Actual typed-source execution: 65 passed, zero failed or ignored, including
|
|
all 11 updater tests and the existing stack-safety cases.
|
|
- Strict `oa-core` all-target Clippy with `-D warnings`: passed.
|
|
- All three gates bind the same 538 committed inputs before and after execution.
|
|
|
|
Commands are preserved exactly in the raw receipts. Tests use
|
|
`cargo test --locked --offline -p oa-core --lib language::analysis_source -- --test-threads=1`;
|
|
lint uses `cargo clippy --locked --offline -p oa-core --all-targets -- -D warnings`.
|
|
The library listing and typed run used the same 39,222,784-byte executable,
|
|
SHA256 `eed1520856679ecbea6ab2c3a202339775b7791cbfb2c24d74984cbde706305d`.
|
|
The executable is not included in this evidence package.
|
|
|
|
## Inspect and verify
|
|
|
|
Run `python -B PATH/verify.py --repo PATH/TO/REPOSITORY`. The repository must
|
|
contain the source commit above. The verifier checks the 13 archived payloads,
|
|
manifest hashes, exact commands, actual listing/runtime membership, successful
|
|
receipts and all 538 inputs against immutable Git blobs. It neither runs the
|
|
archived helpers nor depends on the current checkout. ZIP and JSON payloads
|
|
retain original bytes. The 117,078-byte ZIP has SHA256
|
|
`abd480826c62326b0d553add85e24daa722ce6da2ec4213e34ff1052895e87bc`.
|
|
The archived prior-list receipt is historical inventory;
|
|
its wider provenance is in the separately published
|
|
[S3 evidence](../analysis-source-s3-windows-20260922/README.md).
|
|
|
|
The source review and handoff inside the archive retain their original
|
|
pre-compilation status. This README and raw completed receipts supersede that
|
|
status only for the named gates. Binary identity is receipt-bound; verification
|
|
does not rehash an absent executable. An integrity check verifies recorded
|
|
evidence, not the truth of every semantic claim or a fresh runtime execution.
|
|
|
|
## Remaining boundaries
|
|
|
|
The caller-supplied Budget remains borrowed throughout composition, but the
|
|
private Index does not prove it came from the same parse. Production integration
|
|
must establish a complete bundle/entry/path/profile/model/index witness, merge
|
|
ordinary and typed edits with precise collision rules, enforce combined output
|
|
bounds, recompile the actual output, and compare the whole intended Project.
|
|
Subtree and scoped-parameter changes, deletion repair, movement, reidentity,
|
|
migration, save and history remain separate work.
|
|
|
|
No full-core run was performed for this checkpoint. Earlier unsupported public
|
|
source8 failures remain disclosed in the S2c evidence; this targeted success
|
|
does not resolve them. No GUI, release or Linux acceptance is claimed.
|