fix(workflows): enforce immutable model routes - #512

Merged

andrei-hasna merged 30 commits into

mainfrom

fix/OPE2-00252-model-routing-enforcement

Aug 9, 2026

Commits on Aug 9, 2026

test(workflows): specify route enforcement contract
andrei-hasna
committed
1c1559c
feat(workflows): enforce immutable model routes
andrei-hasna
committed
6b72cfc
test(workflows): harden route enforcement evidence
andrei-hasna
committed
2ac1f78
feat(core): enforce workflow route per provider call
andrei-hasna
committed
76d454b
style(workflows): apply hosted formatting
andrei-hasna
committed
9d4df7b
fix(state): import workflow route attestation
andrei-hasna
committed
3eb3f51
style(state): order route attestation import
andrei-hasna
committed
bbd475a
docs(workflows): describe enforced route contract
andrei-hasna
committed
39fd448
fix(workflows): preserve routes for descendants
andrei-hasna
committed
cbf3fa8
test(workflows): cover descendant admission
andrei-hasna
committed
509dfe6
fix(workflows): reject invalid restart routes
andrei-hasna
committed
4b25260
chore(schema): refresh route enforcement artifacts
andrei-hasna
committed
5cae8d4
fix(workflows): preserve descendant worktree route
andrei-hasna
committed
7533344
fix(workflows): freeze admitted session routes
andrei-hasna
committed
2179a36
style(workflows): apply hosted rustfmt output
andrei-hasna
committed
5c680fa
fix(workflows): satisfy routing clippy gate
andrei-hasna
committed
ede0914
fix(state): remove stale route packet field
andrei-hasna
committed
c117bb4
fix(workflows): close hosted routing gaps
andrei-hasna
committed
951e821
style(workflows): apply hosted rustfmt
andrei-hasna
committed
54da03e
fix(app-server): persist descendant requested route
andrei-hasna
committed
e41a037
test(workflows): align runtime route fixtures
andrei-hasna
committed
726885d
test(workflows): satisfy route fixture invariants
andrei-hasna
committed
838f74a
test(app-server): use canonical permission profile
andrei-hasna
committed
81d26c6
fix(workflows): preserve permission route identity
andrei-hasna
committed
33880da
style(workflows): match remote rustfmt
andrei-hasna
committed
09ed9ba
fix(workflows): preserve verifier sandbox support
andrei-hasna
committed
b115af3
style(workflows): match remote rustfmt
andrei-hasna
committed
a538856
test(app-server): preserve Bazel bwrap route
andrei-hasna
committed
d4762c2
test(app-server): expose workflow failure receipt
andrei-hasna
committed
0659545
fix(workflows): align rebased review fixtures
andrei-hasna
committed
744b9a5

Navigation Menu

Uh oh!

fix(workflows): enforce immutable model routes - #512

fix(workflows): enforce immutable model routes#512
andrei-hasna merged 30 commits into
mainfrom
fix/OPE2-00252-model-routing-enforcement

Commits on Aug 9, 2026

test(workflows): specify route enforcement contract

feat(workflows): enforce immutable model routes

test(workflows): harden route enforcement evidence

feat(core): enforce workflow route per provider call

style(workflows): apply hosted formatting

fix(state): import workflow route attestation

style(state): order route attestation import

docs(workflows): describe enforced route contract

fix(workflows): preserve routes for descendants

test(workflows): cover descendant admission

fix(workflows): reject invalid restart routes

chore(schema): refresh route enforcement artifacts

fix(workflows): preserve descendant worktree route

fix(workflows): freeze admitted session routes

style(workflows): apply hosted rustfmt output

fix(workflows): satisfy routing clippy gate

fix(state): remove stale route packet field

fix(workflows): close hosted routing gaps

style(workflows): apply hosted rustfmt

fix(app-server): persist descendant requested route

test(workflows): align runtime route fixtures

test(workflows): satisfy route fixture invariants

test(app-server): use canonical permission profile

fix(workflows): preserve permission route identity

style(workflows): match remote rustfmt

fix(workflows): preserve verifier sandbox support

style(workflows): match remote rustfmt

test(app-server): preserve Bazel bwrap route

test(app-server): expose workflow failure receipt

fix(workflows): align rebased review fixtures