Skip to content

test(conformance): lock the stance as anti-corrosion invariants#18

Draft
fractionalpm wants to merge 10 commits into
mainfrom
claude/practical-maxwell-47EDa
Draft

test(conformance): lock the stance as anti-corrosion invariants#18
fractionalpm wants to merge 10 commits into
mainfrom
claude/practical-maxwell-47EDa

Conversation

@fractionalpm

@fractionalpm fractionalpm commented Jun 13, 2026

Copy link
Copy Markdown
Contributor

What

Adds a conformance / anti-corrosion test layer (internal/conformance) — the platform's stance made executable. Unit tests prove each component; these prove properties of the whole that must not drift or corrode silently between commits.

Invariant What it locks
TestZeroThirdPartyDependencies go.mod declares no require/replace, and no go.sum exists — the headless, pure-stdlib promise, enforced.
TestNoThirdPartyImports Every import in every .go file (tests included) is stdlib or module-local. A dependency cannot sneak in subconsciously via one import line.
TestCoreIsDeterministic Two independent cores, identical input → identical answer, outcome, and trace (fixed clock). Unbiased and consistent by construction.

The guards bite (verified)

A guard that never fails is worthless, so both anti-corrosion guards were tested against planted violations:

  • a third-party import → TestNoThirdPartyImports FAIL (imports third-party package "github.com/evil/backdoor")
  • a sneaked require line → TestZeroThirdPartyDependencies FAIL (go.mod:5 declares a dependency)

Both pass once reverted.

Verification

  • go vet ./... — OK
  • go test -race ./... — all pass
  • golangci-lint run ./... — 0 issues
  • Zero third-party deps held (this suite is itself pure stdlib + module-local).

Constraints honored

  • Test-only; no behavior change.
  • Sign-forward; no force-push; no history rewrite.
  • Draft — human review gate. Not for merge without your review/sign.

https://claude.ai/code/session_014yCQCSxtrRb6oH1nVbhKqz

Generated by Claude Code

@claude
test(conformance): lock the stance as anti-corrosion invariants
1272526 
Cross-cutting invariants that prove properties of the whole system, so the
platform's stance cannot drift or corrode silently between commits:

- TestZeroThirdPartyDependencies: go.mod declares no require/replace and no
  go.sum exists -- the headless, pure-stdlib promise, enforced.
- TestNoThirdPartyImports: every import in every .go file (tests included)
  is stdlib or module-local. A dependency cannot sneak in subconsciously via
  a single import line.
- TestCoreIsDeterministic: two independent cores, identical input -> identical
  answer, outcome, and trace (fixed clock). Unbiased and consistent by
  construction.

Both anti-corrosion guards were verified to fail on a planted violation (a
third-party import and a sneaked require line) and pass once reverted -- a
guard that never bites is worthless.

Unit tests prove each component; these prove the boundary holds at the edge,
even when crossed inadvertently.
@github-advanced-security

github-advanced-security AI commented Jun 13, 2026

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

claude added 9 commits June 13, 2026 23:18
@claude
test(conformance): ban the faked heartbeat — every turn must offer a …
b044e3c 
…recovery path

A faked heartbeat (health signalled with no path to heal) is the cardinal
distributed-systems sin: it suppresses the recovery the system would
otherwise trigger. The agent must never fake completion.

TestNoFakedHeartbeatAlwaysOffersRecoveryPath enforces the invariant: a turn
either truly answers, or it escalates to a human (the recovery path) — never
a non-answer stop with neither. Escalated <=> the turn did not truly answer;
heartbeat and recovery path are never decoupled.

Verified the guard bites: planting Escalated=false on a non-answer turn (a
faked clean stop) makes the test FAIL; it passes once reverted.
@claude
test(conformance): add core-turn benchmark for performance/efficiency…
4f23afb 
… evidence

BenchmarkCoreTurn measures a full retrieve-then-answer turn on the in-memory
bindings (reason -> guard -> act -> screen -> observe -> persist -> exit).
Baseline: ~27us/turn, 3425 B/op, 29 allocs/op. This is core orchestration
overhead only; real end-to-end latency is model/IO bound (the fenced
nondeterministic exception), which this deliberately excludes.

Evidence over assertion: no faked performance claim without a measurement.
@claude
feat(knowledge): build the kube troubleshooting Kubecontainer (unsigned)
8865be7 
A Kubecontainer is knowledge as a content-addressed, signed Box: curated,
sourced, resolving concepts. Built per the doctrine that emerged in design:

- Concepts that resolve: each carries a source (provenance) and a resolves-check;
  no concept admitted without both.
- Scope is domain-bound (by provenance): authority is the source domain; every
  concept's source must fall within the declared finite domain set.
- Context is work-bound: which concept activates is set by the current work
  (a pod in KubeContainerWaiting selects image-pull-backoff).
- Constraints define the boundaries; an infinite boundary is an invalid contract:
  the contract is bounded by a finite, non-empty domain set (no wildcard tenant).
- Boundaries of operations: sandbox=isolated, read-only diagnosis; may not mutate
  a cluster, touch network/host, or answer outside its domain.

Contents: 8 troubleshooting concepts (image-pull-backoff, crash-loop-backoff,
pending-unschedulable, oom-killed, create-container-config-error,
readiness-probe-failing, node-pressure-eviction, init-container-stuck).
Box digest sha256:623f0b51...; UNSIGNED — boxctl builds, a human signs validity.

The first concept resolves the live KubeContainerWaiting on the k3s deploy.
@claude
docs(autonomyx): capture the Autonomyx specification (DRAFT, unsigned)
fd14e2a 
Persist the working-session definition of Autonomyx so it survives the
session. Founder-authored (@fractionalpm), agent-scribed, bounded by the
founder's horizon, awaiting signature.

Files:
- README.md           overview, provenance, honesty notes
- OBJECTIVE.md         what Autonomyx intends to do (16 captured clauses + the promise)
- DESIGN_PRINCIPLES.md foundations, pin-before-use stack, epistemic floor, actor model
- LEXICON.md           key terms, plain definitions, real referents
- ARCHITECTURE.md      stack: Arithmetic / Fabric / JDO-modeled DB / SurrealDB; DCI identity
- REFERENCES.md        pinned sources (Gartner DCI, Apache JDO, SurrealDB) with honesty notes

NOT included: Cortex/Temporal/Heart (earlier metaphorical framing) — to be
defined as real components if wanted.
@claude
docs(autonomyx): capture primitives + pin Apache HertzBeat as heartbeat
6e79db8 
HertzBeat (hertzbeat.apache.org) pinned as the real heartbeat/monitoring
layer. Cortex/Temporal/Heart captured as earlier metaphor, flagged to be
redefined with real referents before entering the enforceable spec.
@claude
docs(autonomyx): save all chat-only work (creed, analysis, register, …
b73c9c6 
…legal, backlog)

Persist the remaining in-session work so nothing is lost:
- CREED.md              the vision/doctrine (marked: not the enforceable contract)
- ANALYSIS.md           gold-standards benchmark + evaluation scorecard + contract-parser design
- VALIDATION_REGISTER.md  k8s validation protocols + IT-authority layer + alpha/beta/GA staging
- LEGAL_NOTES.md        software-as-software licence drafting, enactability, claim discipline
- BACKLOG.md            defined-but-not-built items + outstanding founder decisions

All DRAFT, unsigned, founder-authored, agent-scribed, bounded by the founder's horizon.
@claude
deploy: one-pass k3s installer (buildpacks + podman, no docker)
a9ab4d3
@claude
deploy(kpack): in-cluster Cloud Native Buildpacks build for k3s
b31f8f0
@claude
docs(autonomyx): mdBook config + SUMMARY (renders the spec as a book)
4de23f9
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@fractionalpm @github-advanced-security @claude