fix(audio): establish canonical local-audio resource policy - #866

Draft

seonghobae wants to merge 611 commits into

fix/audio-resource-policy-781

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 8, 2026

docs: make output-failure wakeup code-current
seonghobae
committed
b02062a
test(audio): require terminal analysis descendant cleanup
seonghobae
committed
1ae37e7
fix(audio): clean analysis descendants on terminal parent exit
seonghobae
committed
f612c04
docs(audio): record terminal analysis cleanup repair
seonghobae
committed
81fe166
docs(changelog): note terminal analysis descendant cleanup
seonghobae
committed
c7cd9eb
test(audio): require bounded analysis process streams
seonghobae
committed
6cdaca2
fix(audio): centralize bounded analysis stream admission
seonghobae
committed
240c6b1
fix(audio): expose bounded stream readers to desktop adapter
seonghobae
committed
b3c9373
fix(audio): bound analysis process streams
seonghobae
committed
50b5f01
test(audio): preserve terminal containment contract
seonghobae
committed
494d0b5
test(audio): bind containment check to success-path join
seonghobae
committed
4405049
test(audio): require terminal analysis status after process exit
seonghobae
committed
7e6a01c
fix(audio): fail closed on non-terminal engine exit
seonghobae
committed
743d7b7
test(audio): bind helper progress to native job identity
seonghobae
committed
f2ee73a
fix(audio): bind analysis progress to native job identity
seonghobae
committed
57e2ae4
test(audio): reject pre-exit terminal analysis publication
seonghobae
committed
532471c
fix(audio): defer analysis terminal publication until process exit
seonghobae
committed
7d0f4a7
fix(audio): restore score PDF owner call after protocol repair
seonghobae
committed
ce3be1f
docs(changelog): record native analysis protocol authority
seonghobae
committed
f8424cb
docs(security): doctor analysis subprocess protocol authority
seonghobae
committed
bd3008d
docs(product): record native analysis protocol acceptance
seonghobae
committed
50886a3
test(desktop): reject malformed analysis JSONL
seonghobae
committed
476c3a7
fix(desktop): fail closed on invalid analysis JSONL
seonghobae
committed
b075212
fix(desktop): preserve score removal project authority
seonghobae
committed
fb9d3ba
docs(security): record fail-closed analysis JSONL
seonghobae
committed
be6b361
docs(product): record strict analysis JSONL admission
seonghobae
committed
f497cbd
docs(changelog): record fail-closed analysis protocol
seonghobae
committed
9aad97a
test(audio): reject semantically invalid analysis status payloads
seonghobae
committed
e3a6a20
fix(audio): validate analysis status payload semantics
seonghobae
committed
2dbab44
docs(audio): record status payload admission boundary
seonghobae
committed
81940fc
docs(product): align analysis protocol buyer gap
seonghobae
committed
182a250
docs(changelog): record native status semantics
seonghobae
committed
a899db8
test(audio): preserve exact process JSONL payload whitespace
seonghobae
committed
e444365
fix(audio): preserve strict process protocol whitespace
seonghobae
committed
6258b97
docs(audio): record strict JSONL transport boundary
seonghobae
committed
e07a1a5
docs(product): keep resource-admission baseline current
seonghobae
committed
6a8033b
test(audio): retain protocol rejection after child exit
seonghobae
committed
64cb603
fix(audio): keep protocol rejection in join result
seonghobae
committed
ea9428c
docs(audio): record protocol exit-order boundary
seonghobae
committed
327aafc
docs(changelog): record fail-closed protocol exit ordering
seonghobae
committed
ea3ba91
test(audio): preserve blank JSONL records for parser rejection
seonghobae
committed
161de8d
fix(audio): preserve empty JSONL records for fail-closed parsing
seonghobae
committed
f8135e0
docs(audio): doctor blank JSONL fail-closed transport
seonghobae
committed
0f33574
docs(audio): record blank JSONL rejection repair
seonghobae
committed
1ecb447
docs(audio): align buyer gap baseline with JSONL record fidelity
seonghobae
committed
53b57d2
test(audio): bind analysis requested-at authority
seonghobae
committed
082cf63
test(audio): require native requested-at echo
seonghobae
committed
a253c09
fix(audio): preserve native analysis request timestamp
seonghobae
committed
9358035
fix(audio): bind analysis status to native request time
seonghobae
committed
70e4d9d
fix(audio): restore score removal project scope
seonghobae
committed
e43921a
docs(audio): record native request-time authority
seonghobae
committed
b11dff3
docs(audio): note native request-time binding
seonghobae
committed
8fe4337
docs(audio): align buyer gap with request-time authority
seonghobae
committed
76cd953
test(audio): forbid duplicate CLI temporal analysis
seonghobae
committed
15bf1fb
fix(audio): keep local MIR under orchestration owner
seonghobae
committed
f3235e8
docs(audio): record single MIR orchestration owner
seonghobae
committed
4e36937
docs(audio): doctor single orchestration owner
seonghobae
committed
ea94d79
fix(audio): preserve CLI logging while removing MIR pre-pass
seonghobae
committed
8ae19aa
docs(audio): preserve CLI diagnostics claim boundary
seonghobae
committed
e2ca1f2
test(audio): retire deleted CLI MIR pre-pass fixtures
seonghobae
committed
eef9461
test(audio): cover supported CLI orchestration boundary
seonghobae
committed
4b64f57
docs(audio): record obsolete pre-pass test repair
seonghobae
committed
572c490
test(audio): reject non-mono separation output
seonghobae
committed
2cb1e64
fix(audio): fail closed on non-mono model output
seonghobae
committed
2d256a6
docs(audio): record model output shape admission
seonghobae
committed
77e675a
docs(audio): record model shape fail-closed behavior
seonghobae
committed
fdb8697
style(audio): satisfy CLI regression lint
seonghobae
committed
fd8a842
style(audio): format CLI orchestration import
seonghobae
committed
66135ca
test(audio): expose unsafe feature-cache replay admission
seonghobae
committed
fabad0c
fix(audio): bound feature-cache archive replay
seonghobae
committed
9fa3709
repair(audio): satisfy cache-admission quickcheck hygiene
seonghobae
committed
3bdb476
fix(audio): admit persisted stem replay through bounded owner
seonghobae
committed
c929673
repair(audio): preserve existing API docstring semantics
seonghobae
committed
7047b21
docs(audio): doctor bounded feature-cache replay
seonghobae
committed
7595c5a
docs(audio): record bounded feature-cache replay
seonghobae
committed
8dafc46
docs(audio): make buyer-gap baseline cache-current
seonghobae
committed
77c2d43
repair(ddd): return buyer-gap baseline to canonical owner
seonghobae
committed
a635df3
test(cache): reject invented stem identity
seonghobae
committed
ef1e0c9
fix(cache): admit only canonical stem identities
seonghobae
committed
da4916f
docs(cache): bind replay to canonical stem identity
seonghobae
committed
8740cde
docs(changelog): record canonical cache stem admission
seonghobae
committed
c77271a
test(audio): reject contradictory cached stem roles
seonghobae
committed
fd8ad6f
fix(audio): bind cached stem roles to canonical semantics
seonghobae
committed
4d6441c
style(audio): format cache role regression
seonghobae
committed
4546361
refactor(audio): preserve private cache size constant
seonghobae
committed
e9cd807
test(audio): cover stem role sidecar admission branches
seonghobae
committed
afe2ab6
style(audio): apply canonical Ruff formatting to cache admission
seonghobae
committed
0e5f5e1
style(audio): format feature-cache resource regressions
seonghobae
committed
0c2fd24
style(audio): satisfy Ruff line and format contracts
seonghobae
committed
02cbcc6
style(audio): match Ruff binary-expression formatting
seonghobae
committed
66aa433
refactor(audio): make cache byte budget formatter-stable
seonghobae
committed
17b2d0c
docs(audio): doctor persisted feature-cache role admission
seonghobae
committed
2a3710a
docs(audio): record cache role admission in changelog
seonghobae
committed
934eb0c
test(audio): fail closed when feature-cache sidecar disappears
seonghobae
committed
2eb8073
fix(audio): reject missing feature-cache role sidecars
seonghobae
committed
c7e8dfa
docs(audio): narrow feature-cache sidecar race claims
seonghobae
committed
9d697fd
test(audio): reject misaligned cached stem timelines
seonghobae
committed
c2e4484
fix(audio): reject desynchronized cached stem timelines
seonghobae
committed
79c31f5
docs(audio): record synchronized cache timeline invariant
seonghobae
committed
463e1ab
docs(changelog): record synchronized stem cache admission
seonghobae
committed
27de229
test(audio): preserve aligned cached stem timelines
seonghobae
committed
0bcbd5b
test(cache): reproduce npz allocator exhaustion crash
seonghobae
committed
1c47cd7
fix(cache): fail closed on replay allocator exhaustion
seonghobae
committed
b34e4ad
docs(cache): record allocator exhaustion fail-closed boundary
seonghobae
committed
258044e
docs(changelog): record cache allocator exhaustion containment
seonghobae
committed
a209fc9
repair(docs): remove duplicate product gap baseline writer
seonghobae
committed
2c462c7
style(audio): format feature cache admission owner
seonghobae
committed
f01e67a
style(audio): apply canonical Ruff formatting
seonghobae
committed
5c32fc6
style(audio): finish Ruff formatting for replay admission
seonghobae
committed
0bb6e76
style(audio): match Ruff formatter for cache admission
seonghobae
committed
12da677
test(audio): reject replaced cache sidecar stem identity
seonghobae
committed
34e1bdc
fix(audio): bind replay sidecar to admitted stem identity
seonghobae
committed
ee0d79d
docs(audio): record cache sidecar identity admission
seonghobae
committed
581767b
docs(audio): record sidecar identity cache miss semantics
seonghobae
committed
a3ff146
style(audio): finish exact Ruff cache formatting
seonghobae
committed
cb9ffb4
test(audio): reject noncanonical cache role publication
seonghobae
committed
8d26301
test(audio): keep cache role regression at replay boundary
seonghobae
committed
52cc5d8

Commits on Sep 9, 2026

test(cache): reject archive mutation after preflight
seonghobae
committed
af6abc2
fix(cache): reject mutation across archive replay
seonghobae
committed
b824181
fix(cache): avoid deprecated Windows ctime identity
seonghobae
committed
2149d29
docs(cache): record replay mutation rejection
seonghobae
committed
5ce0903
docs(cache): trace archive replay TOCTOU guard
seonghobae
committed
33e0c71
fix(cache): satisfy mutation regression lint
seonghobae
committed
a619ed9
test(cache): require one admitted archive snapshot
seonghobae
committed
f94a4bf
fix(cache): replay one bounded archive snapshot
seonghobae
committed
0cfc54a
test(cache): cover immutable replay snapshot edges
seonghobae
committed
d2b3f49
docs(cache): doctor immutable replay snapshots
seonghobae
committed
3c077f9
docs(changelog): record immutable cache replay snapshot
seonghobae
committed
3bffa3f
test(cache): reject duration outside persisted stem timeline
seonghobae
committed
c60e9dc
test(cache): narrow duration RED to non-finite timeline metadata
seonghobae
committed
ea23114
fix(cache): reject non-finite persisted rehearsal duration
seonghobae
committed
8b3a512
docs(changelog): record cache timeline metadata admission
seonghobae
committed
c79f979
docs(cache): trace non-finite timeline metadata admission
seonghobae
committed
36bd19d
test(cache): fail closed on oversized duration integers
seonghobae
committed
559a95f
fix(cache): contain oversized persisted duration coercion
seonghobae
committed
1350df8
docs(cache): record duration coercion overflow containment
seonghobae
committed
e09421d
test(cache): reject sample-rate sidecar substitution
seonghobae
committed
b75e329
fix(cache): bind replay sample rate across sidecar reads
seonghobae
committed
a658d4d
style(cache): apply repository Ruff layout
seonghobae
committed
d9d71a6
style(cache): make replay guards formatter-stable
seonghobae
committed
98f4d91
test(cache): reject persisted duration outside stem timeline
seonghobae
committed
dfbf288
fix(cache): bind persisted duration to stem timeline
seonghobae
committed
bbaf19a
docs(cache): bind replay duration to sample timeline
seonghobae
committed
f1edee8
test(cache): keep nonfinite replay regression causal
seonghobae
committed
b9a017f
test(cache): reject second-read schema substitution
seonghobae
committed
aa9265c
fix(cache): preserve second-read schema generation
seonghobae
committed
e0fbb03
docs(cache): record schema-generation replay invariant
seonghobae
committed
a9c827b
docs(changelog): record cache schema replay admission
seonghobae
committed
f152730
test(cache): reject metadata generation substitution
seonghobae
committed
73539f6
test(cache): pin required persisted duration authority
seonghobae
committed
6123936
fix(cache): require persisted separation duration
seonghobae
committed
ccda598
docs(changelog): require persisted cache duration
seonghobae
committed
b26be12
docs(cache): align duration admission doctoring
seonghobae
committed
f8eaa15
test(cache): reject repaired first-read duration authority
seonghobae
committed
20c606d
fix(cache): validate first-read duration authority
seonghobae
committed
5d4ce52
fix(cache): contain oversized first-read duration
seonghobae
committed
0984f93
docs(cache): record first-read duration admission
seonghobae
committed
24c39a7
docs(cache): doctor first-read duration authority
seonghobae
committed
8bcc207
test(cache): reject stale first-read stem role semantics
seonghobae
committed
a1eaead
fix(cache): enforce canonical stem role semantics on first read
seonghobae
committed
4fa5648
test(cache): keep role fixtures generation-valid
seonghobae
committed
c69f9ae
style(cache): apply canonical Ruff layout
seonghobae
committed
e9a0ade
style(cache): format role admission regressions
seonghobae
committed
38b4c14
fix(cache): satisfy Ruff import ordering
seonghobae
committed
00cccfe
docs(cache): trace first-read role admission
seonghobae
committed
c400e65
fix(cache): apply Ruff import canonicalization
seonghobae
committed
4704db0
fix(cache): match Ruff import sectioning
seonghobae
committed
d1a4407
test(cache): require one admitted metadata snapshot
seonghobae
committed
335375a
test(cache): drop premature snapshot contract
seonghobae
committed
20b0ef0
test(cache): reject unknown stem role without exception
seonghobae
committed
906bac5
fix(cache): fail closed on unknown persisted stem roles
seonghobae
committed
c0bf2d3
docs(cache): trace unknown-stem fail-closed repair
seonghobae
committed
0e4f1d4
docs(cache): record unknown-stem exception containment
seonghobae
committed
6719f1e
test(cache): fix role-admission import gate
seonghobae
committed
7ade8c0
test(cache): canonicalize role-admission imports
seonghobae
committed
2fc8292
test(cache): make role-admission import order unambiguous
seonghobae
committed
429617d
test(cache): reject noncanonical producer stems
seonghobae
committed
0e436c1
fix(cache): reject noncanonical producer stem identities
seonghobae
committed
4cb93a7
test(admission): pin bounded source-path traversal diagnostic
seonghobae
committed
0e31316
fix(admission): emit bounded source-path traversal diagnostic
seonghobae
committed
5546a17
fix(admission): keep bounded diagnostic delta exact
seonghobae
committed
7c0e858
docs(security): trace bounded request-path diagnostics
seonghobae
committed
af3efa8
style(audio): format feature-cache role regression
seonghobae
committed
7057e7e
style(audio): apply Ruff layout to role regression
seonghobae
committed
4ccb943
test(cache): reject oversized metadata before JSON materialization
seonghobae
committed
2f6e732
fix(cache): bound persisted metadata sidecar reads
seonghobae
committed
a7531f5
test(cache): target bounded sidecar admission owner
seonghobae
committed
4a89c62
docs(cache): doctor bounded metadata sidecar admission
seonghobae
committed
7a10f3c
fix(cache): bound first feature metadata snapshot
seonghobae
committed
02deb79
test(cache): prove both metadata reads share admission
seonghobae
committed
cbfaf3b
docs(cache): close first-read metadata admission gap
seonghobae
committed
3a9d793
docs(changelog): record bounded feature metadata reads
seonghobae
committed
37c65c2
fix(cache): restore unrelated API text after first-read repair
seonghobae
committed
bbbd9cf
test(cache): reject symlinked feature archive
seonghobae
committed
1038bdb
fix(cache): open feature archive without symlink following
seonghobae
committed
4ca8d02
docs(cache): trace archive path admission
seonghobae
committed
37547f8
docs(changelog): record archive path admission
seonghobae
committed
d16d284
style(cache): honor repository Ruff line length for role regression
seonghobae
committed
ff6a0ea
style(cache): apply configured Ruff width to cache admission
seonghobae
committed
f1a2822
test(audio): require verified source identity in analysis handoff
seonghobae
committed
be30f71
fix(audio): hand verified source digest to analysis child
seonghobae
committed
a9c1b43
docs(audio): trace verified source identity handoff
seonghobae
committed
753b068
test(cache): bind local cache namespace to verified source digest
seonghobae
committed
6ce5e95
fix(cache): scope persisted cache to verified source digest
seonghobae
committed
9472f99
test(cache): cover source-bound cache fail-closed cases
seonghobae
committed
693ef83
test(cli): preserve invalid cache root before digest scoping
seonghobae
committed
d94f528
fix(cli): validate cache root before digest scoping
seonghobae
committed
2edcfb7
docs(audio): record validation-before-cache-binding boundary
seonghobae
committed
9178608
test(audio): require source-bound stem work namespace
seonghobae
committed
b8e5562
fix(audio): scope stem work to verified source identity
seonghobae
committed
a7f2af8
test(audio): isolate concurrent stem work by job identity
seonghobae
committed
2c0e463
fix(audio): isolate concurrent stem work by job identity
seonghobae
committed
5d9e2fe
docs(audio): trace source and job scoped stem work
seonghobae
committed
b0da9b7
test(audio): require job-scoped stem work cleanup
seonghobae
committed
adeb7af
fix(audio): clean completed job stem-work namespace
seonghobae
committed
f870cbf
docs(audio): trace job-scoped stem-work cleanup
seonghobae
committed
87bd124
test(audio): cover stem-work namespace safety branches
seonghobae
committed
e8c789a
test(audio): reject symlinked stem-work cleanup escape
seonghobae
committed
8f23455
fix(audio): refuse symlinked stem-work cleanup
seonghobae
committed
8ac2733
test(audio): cover fail-closed temp cleanup branches
seonghobae
committed
7b83277
docs(audio): trace symlink-safe stem-work cleanup
seonghobae
committed
9e66e9c
test(audio): reject symlinked temp cleanup root
seonghobae
committed
8adc454
fix(audio): refuse symlinked temp cleanup roots
seonghobae
committed
880e4b8
test(audio): cover verified symlinked temp root
seonghobae
committed
a7d7056
docs(audio): trace temp-root cleanup authority
seonghobae
committed
4e052bb
test(audio): expose temp cleanup parent swap race
seonghobae
committed
3c0cec3
test(audio): correct cleanup race regression import
seonghobae
committed
911957d
fix(audio): anchor temp cleanup to directory descriptors
seonghobae
committed
1c8ea0c
test(audio): cover descriptor cleanup fail-closed edges
seonghobae
committed
de6d88c
refactor(audio): keep descriptor cleanup coverage-complete
seonghobae
committed
50ae703
docs(audio): doctor descriptor-anchored temp cleanup
seonghobae
committed
6ea6710
fix(audio): scope cleanup descriptors to context lifetime
seonghobae
committed
45b6c3d
docs(audio): record context-managed cleanup descriptors
seonghobae
committed
d51e37c
test(cache): reject over-limit JSON integers without crashing
seonghobae
committed
f667a9e
fix(cache): contain JSON numeric conversion limits
seonghobae
committed
be33674
docs(changelog): record JSON numeric cache containment
seonghobae
committed
12a9d08
docs(cache): trace JSON numeric admission boundary
seonghobae
committed
fb26389
test(cache): reject duplicate metadata members
seonghobae
committed
c772183
fix(cache): reject ambiguous JSON metadata
seonghobae
committed
10f7a36
docs(cache): trace duplicate JSON admission
seonghobae
committed
3476e31
docs(cache): record duplicate-member cache miss
seonghobae
committed
f5d6756
test(cache): require immutable feature generation manifest
seonghobae
committed
9385bcb
fix(cache): bind replay snapshots to committed digests
seonghobae
committed
bcbc68c
feat(cache): add versioned feature generation manifest
seonghobae
committed
7c3b6cd
fix(cache): use nearest verified source namespace
seonghobae
committed
b64fb50
fix(cache): publish immutable feature generations
seonghobae
committed
54d80c9
test(cache): preserve replay substitution seams
seonghobae
committed
b74ddc8
style(cache): format manifest regressions
seonghobae
committed
f622cdd
docs(cache): doctor immutable feature generations
seonghobae
committed
4d936ad
merge(ci): adopt canonical supply-chain formatter repair
seonghobae
committed
9bba385