feat(guard): add typed execution-assurance receipt - #2002
Conversation
…fields - Add ExecutionAssuranceReceipt dataclass with frozen/slots schema - Add achieved_boundary and attestation_trust typed fields - Add enforced/absent guarantee kind lists with deduplication - Add execution_context_digest and optional terminal_statement_digest - Add proof_lines bounded at 64 lines of <=256 chars, total <=16384 chars - to_receipt_fields() excludes proof_lines for privacy safety - receipt_assurance_payload() and validate_assurance_receipt_schema_version() helpers - 28 tests covering schema validation, typed fields, privacy, immutability Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
|
Caution The consumer version of Gemini Code Assist on GitHub has been sunset. All code review activity has officially ceased. |
|
Warning Review limit reached
Next review available in: 9 minutes Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available. How can I continue?After more reviews become available, a review can be triggered using the To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews. How do review limits work?CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability. For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window. Please refer docs for additional details. Review details⚙️ Run configurationConfiguration used: Repository UI (base), Organization UI (inherited) Review profile: CHILL Plan: Pro Plus Run ID: 📒 Files selected for processing (3)
Comment |
![capy-ai[bot]](https://avatars.githubusercontent.com/in/1915919?s=60&v=4){kind=small}
Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
Signed-off-by: Michael Kantor <6068672+kantorcodes@users.noreply.github.com>
1 participant
Purpose
Wave-two slice: receipt schema extension with typed assurance fields.
Changes
runtime/execution_assurance_receipt.py— frozenExecutionAssuranceReceiptextending the existing receipt model withachieved_boundary,attestation_trust, enforced/absent guarantee kinds, execution-context and terminal-statement digests.receipt_assurance_payloadproduces privacy-safe fields (no command/path/secret);validate_assurance_receipt_schema_versionpins the alpha schema version. Composes alongsidestore_receipts.py/models.pywithout editing them (2.x compatibility preserved).Verification
28 tests pass, including privacy assertions that no secret/path leaks into receipt fields; basedpyright 0 errors/0 warnings; ruff clean. No release or deployment authorized.