Skip to content

feat!: harden CompiledBundle integrity contract - #43

Merged
tuzuminami merged 1 commit into
mainfrom
codex/aster-strict-compiled-contract
Jul 13, 2026
Merged

feat!: harden CompiledBundle integrity contract#43
tuzuminami merged 1 commit into
mainfrom
codex/aster-strict-compiled-contract

Conversation

@tuzuminami

@tuzuminami tuzuminami commented Jul 13, 2026

Copy link
Copy Markdown
Owner

Summary

  • publish the strict CompiledBundle 1.1 integrity schema and ASTER package v2.0.0
  • fail closed on untrusted bundle JSON, stored bundle/source-contract drift, and idempotency replay corruption
  • bind canonicalization, UTF-8 encoding, full provenance, identity, and safe integer limits into the public contract
  • expose the compile response in OpenAPI and enforce the release contract

Verification

  • pnpm run verify

Closes #36
Closes #37
Closes #38
Closes #39
Closes #40
Closes #41
Closes #42

@tuzuminami
tuzuminami merged commit 5d54f7d into main Jul 13, 2026
1 check passed
@tuzuminami
tuzuminami deleted the codex/aster-strict-compiled-contract branch July 13, 2026 13:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment