Skip to content

Dev - #687

Merged
Brad-Edwards merged 143 commits into
mainfrom
dev
Jul 5, 2026
Merged

Dev#687
Brad-Edwards merged 143 commits into
mainfrom
dev

Conversation

@Brad-Edwards

Copy link
Copy Markdown
Collaborator

Summary

Related Issues

Requirement Context

  • Requirement UID:
  • ADRs touched:
  • Ground Control project: aces-sdl

Changes

Test Plan

  • Relevant tests pass
  • uvx nox -s verify passes, or the unchecked sessions are listed below
  • Docs build passes when documentation changed (uvx nox -s docs)

Checklist

  • Code follows project coding standards (docs/explain/reference/coding-standards.md)
  • FM level classified if semantic change
  • Published contract schemas regenerated if models changed
  • Towncrier fragment added under changelog.d/, or not needed
  • Architectural docs updated if applicable

Notes for Review

feat: add authored evidence requirements
Add a pull_request workflow (.github/workflows/pr-title-lint.yml) that rejects
agent-branded PR title prefixes ([codex], [claude], [openai], [chatgpt]) and
enforces the conventional <type>(<optional-scope>): <subject> shape with a
lowercase-leading subject, on every target branch including dev. The workflow
runs the trusted base-ref copy of tools/check_pr_title.py so a PR cannot weaken
its own required check; the same stdlib validator is shared by the test suite
so the policy cannot drift between CI and local enforcement.
ci: add repo-side pr title guard against agent-branded titles
added: expose ACT-607 authority scope runtime metadata
docs(experiment-core): define replication and replay claims
Test and others added 28 commits July 4, 2026 05:42
Resolve the 7 new-code smells the SonarCloud PR gate flagged:
- decompose _aptl_from_export (backend runs) and _validate_backend_runs
  (validation) so cyclomatic/cognitive complexity is back under threshold;
- reduce build_aptl_backend_run to <=3 returns;
- replace the bare-Any _get helper with typed _mapping/_sequence navigators
  (no bare Any annotations).

Behavior-preserving: the committed corpus and its drift test are unaffected.
…cenario

The backend-neutral live provisioning probe (issue #606) assumed every
backend could realize a hard-coded vm/linux scenario, wrongly failing
fixed-topology emulation and bounded simulation backends that legitimately
cannot realize an arbitrary scenario. run_target_conformance now accepts an
optional reference_scenario (default unchanged); a backend supplies a scenario
it declares it can realize, and the #606 full-realization guard still applies
to whichever scenario is selected. No schema/manifest/profile change.

Temporary runner-parameter bridge for #663; superseded by the
realizability-envelope design (#667) and the scenario/envelope subsumption
relation (#668).
…ility

fixed: parameterize target-conformance probe with a backend-supplied reference scenario
feat(corpus): add paper demonstration corpus with cross-backend invariant ledger
docs: document realization envelope semantics
Behavior-preserving rename across the #598/#614/#615/#600 surfaces so the OSS
repo names reusable capabilities by function, not by 'paper':

- scenario -> enterprise-participant-evidence-loop (file + internal SDL ids)
- aces_operations.libvirt_evidence_run -> aces.libvirt.scenario-evidence-run/v1
- aces_operations.cross_backend_corpus -> aces.cross-backend-evidence-corpus/v1
- CLI: aces libvirt evidence validate (was: aces libvirt paper validate-evidence)
- module-boundary allowlist updated to the new module names

Relocate the research result out of ACES: remove the committed demonstration
corpus (examples/corpus/paper-demonstration/); ACES keeps the producer, and the
canonical published corpus now lives in the public Brad-Edwards/research repo.
The drift test becomes a build-determinism smoke test. No published contracts and
no historical decision-note filenames changed.
refactor(corpus): rename paper-* identifiers to functional names and relocate the corpus
Add the reusable-asset-trust-policy-v1 contract, ADR-071, and a normative
spec declaring, per reusable asset family, the required integrity/authenticity/
provenance/governance evidence classes referencing existing ACES mechanisms.
Invariants are enforced in the model, the published JSON Schema, and negative
conformance fixtures.
Extract the reusable-asset family-policy checks into helpers so the
model validator's cyclomatic complexity drops below the threshold.
Behavior-preserving; the published schema is unchanged.
security: publish reusable-asset trust and integrity policy (GOV-913)
fixed: validate SDL variable substitution
docs: add validation admission profile design
Examine whether the OCR-inherited SDL scoring pipeline
(metrics/evaluations/tlos/goals) and the CybORG agents.reward_calculator
label belong in ACES, against the experiment-vs-data-use boundary already
drawn by ADR-055/064/069. Recommend (proposed) treating these surfaces as
vestigial in the SDL, keeping objectives+conditions, narrowing objective
success to observable state, and routing graded scoring to the
experiment/evaluator plane. Add scoring-scope research notes
(docs/research/scoring-scope/) and a SEM-206 assessment-semantics
compatibility guardrail. Decision deferred to review.

Refs #671. ADR-073. SEM-206.
docs: add proposed ADR-073 on scoring/reward language scope
…omaly

docs(security): record 2026-07-01 commit authorship anomaly
* chore: require Conventional Commit types in /implement plan rules (#684)

* ci: publish aces-sdl to PyPI and auto-release on merge to main (#684)

* ci: add Dependabot for github-actions and pip to keep SHA-pins fresh (#684)
@Brad-Edwards
Brad-Edwards merged commit 8685839 into main Jul 5, 2026
11 checks passed
@sonarqubecloud

sonarqubecloud Bot commented Jul 6, 2026

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant