Skip to content

fix(rdp): bind public presentation timeline to reviewed artifacts - #325

Open
abrichr wants to merge 4 commits into
mainfrom
codex/rdp-public-timeline
Open

fix(rdp): bind public presentation timeline to reviewed artifacts#325
abrichr wants to merge 4 commits into
mainfrom
codex/rdp-public-timeline

Conversation

@abrichr

@abrichr abrichr commented Jul 31, 2026

Copy link
Copy Markdown
Member

Summary

  • export a closed, value-free public RDP presentation timeline
  • bind each media interval to an exact retained source frame, compiled graph node, or sanitized request artifact
  • require a detached Ed25519 publication approval for the exact public artifact set
  • reject unknown fields, changed hashes, untrusted signers, invalid signatures, and unbound intervals

Verification

  • 12 focused RDP qualification tests pass
  • Ruff format and lint pass
  • release consistency check passes

Safety boundary

The public artifact contains no source summaries, request values, SQL rows, or record identifiers. The publication approval comes from a separately supplied review key. The renderer has no built-in signer.

@abrichr
abrichr force-pushed the codex/rdp-public-timeline branch from 8053942 to ea782d2 Compare August 2, 2026 09:41
@abrichr
abrichr marked this pull request as ready for review August 2, 2026 09:42
abrichr added 3 commits August 2, 2026 13:39
A consequential remote pointer edge required GuardedRemotePointerActionBackend, so every opaque remote surface that can offer only the documented one-shot lease -- the no-DOM HTML5-canvas class that Citrix Workspace-web presents -- halted on its write step. The lease is the safety property; the typed receipt is retained evidence. Deliver through the lease when no typed receipt exists, keep the refusal for governed runs and qualification-fault proofs, and leave the result unlabeled so the outcome classifier still returns COMPLETED_UNVERIFIED rather than a production-eligible success. The canvas-nodom-ladder qualification is accepted 3/3 again on real CI.
@abrichr
abrichr enabled auto-merge (squash) August 2, 2026 15:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant