DGR-025: Define exact artifact and runtime recipe identity #9

Closed
opened 2026-07-16 20:36:02 +00:00 by popov · 6 comments
Owner

DGR-025: Define exact artifact and runtime recipe identity

  • Status / triage: completed; passes: true
  • Execution mode: AFK
  • Milestone: M1
  • Dependencies: DGR-018, DGR-021
  • Blocks (derived): DGR-026, DGR-031, DGR-041, DGR-044
  • Labels: area:identity, area:admission, type:domain, priority:p0, ready-for-agent
  • Evidence class: model-free
  • Hardware: none
  • Model: generic
  • Upstream: no

Objective / description

Fresh Ralph session: read .scratch/distributed-gguf-runtime/RALPH-CONTEXT.md, source issue .scratch/distributed-gguf-runtime/issues/025-define-exact-artifact-and-runtime-recipe-identity.md, and evidence READMEs for dependencies (DGR-018, DGR-021) before changing code. Inspect live source/tests rather than trusting legacy pass states. Objective: Ensure the tracker and worker only combine numerically and operationally compatible shards.

Acceptance criteria

  • Fingerprint source artifact SHA, tokenizer revision, architecture adapter/version, boundary schema, runtime pin/patch stack, backend, quant, activation/compute dtype, and KV/state layout.
  • Bind each shard to an exact half-open range without hardcoding a topology or quant.
  • Fail closed on any artifact, adapter, boundary, cache, backend, or runtime mismatch.
  • Unsupported recipes remain registered-but-dark until real-hardware evidence certifies them.
  • Applicable shared quality gates in prd.json pass, and the evidence handoff records exact commands/results, changed files, limitations, and dependency handoff.

Shared quality gates

  • Targeted deterministic tests pass; Python changes also pass python -m compileall packages tests.
  • git diff --check passes.
  • Default tests are model-download-free, API-credit-free, and GPU-free.
  • Evidence README records exact changed files, commands/results, limitations, and dependency handoff; no fabricated evidence or inherited completion credit.

Evidence handoff

Verified evidence: .scratch/distributed-gguf-runtime/evidence/DGR-025/README.md. Legacy evidence remains provenance only and grants no implementation completion credit.

<!-- GENERATED FROM prd.json — DO NOT EDIT AS AN INDEPENDENT SOURCE. prd.json IS AUTHORITATIVE. --> # DGR-025: Define exact artifact and runtime recipe identity - **Status / triage:** completed; `passes: true` - **Execution mode:** `AFK` - **Milestone:** `M1` - **Dependencies:** `DGR-018`, `DGR-021` - **Blocks (derived):** `DGR-026`, `DGR-031`, `DGR-041`, `DGR-044` - **Labels:** `area:identity`, `area:admission`, `type:domain`, `priority:p0`, `ready-for-agent` - **Evidence class:** `model-free` - **Hardware:** `none` - **Model:** `generic` - **Upstream:** `no` ## Objective / description Fresh Ralph session: read `.scratch/distributed-gguf-runtime/RALPH-CONTEXT.md`, source issue `.scratch/distributed-gguf-runtime/issues/025-define-exact-artifact-and-runtime-recipe-identity.md`, and evidence READMEs for dependencies (DGR-018, DGR-021) before changing code. Inspect live source/tests rather than trusting legacy pass states. Objective: Ensure the tracker and worker only combine numerically and operationally compatible shards. ## Acceptance criteria - [x] Fingerprint source artifact SHA, tokenizer revision, architecture adapter/version, boundary schema, runtime pin/patch stack, backend, quant, activation/compute dtype, and KV/state layout. - [x] Bind each shard to an exact half-open range without hardcoding a topology or quant. - [x] Fail closed on any artifact, adapter, boundary, cache, backend, or runtime mismatch. - [x] Unsupported recipes remain registered-but-dark until real-hardware evidence certifies them. - [x] Applicable shared quality gates in `prd.json` pass, and the evidence handoff records exact commands/results, changed files, limitations, and dependency handoff. ## Shared quality gates - Targeted deterministic tests pass; Python changes also pass `python -m compileall packages tests`. - `git diff --check` passes. - Default tests are model-download-free, API-credit-free, and GPU-free. - Evidence README records exact changed files, commands/results, limitations, and dependency handoff; no fabricated evidence or inherited completion credit. ## Evidence handoff Verified evidence: `.scratch/distributed-gguf-runtime/evidence/DGR-025/README.md`. Legacy evidence remains provenance only and grants no implementation completion credit. <!-- ralph-story-id: DGR-025 -->
popov added this to the M1 milestone 2026-07-16 20:36:02 +00:00
popov added status:ready and removed status:blocked labels 2026-07-16 23:35:49 +00:00
deploy added status:in-progress and removed status:ready labels 2026-07-17 19:50:21 +00:00
Collaborator

Controller verification complete for DGR-025. Published commits ad66f7a and independent-review repair db59caa to ralph/distributed-gguf-runtime. Gates: 202 impacted identity/admission tests passed, 108 PRD-schema tests passed, conformance vectors matched, 55-story validation passed, compileall/diff-check passed. Independent re-review: PASS, no remaining P0/P1. Native identity now derives the committed lock-backed pin; node and tracker independently reject forged/noncanonical llama.cpp runtime pins.

Controller verification complete for DGR-025. Published commits `ad66f7a` and independent-review repair `db59caa` to `ralph/distributed-gguf-runtime`. Gates: 202 impacted identity/admission tests passed, 108 PRD-schema tests passed, conformance vectors matched, 55-story validation passed, compileall/diff-check passed. Independent re-review: PASS, no remaining P0/P1. Native identity now derives the committed lock-backed pin; node and tracker independently reject forged/noncanonical llama.cpp runtime pins.
deploy added status:completed and removed status:in-progressready-for-agent labels 2026-07-17 20:20:28 +00:00
deploy reopened this issue 2026-07-17 20:44:11 +00:00
deploy added status:in-progress and removed status:completed labels 2026-07-17 20:44:11 +00:00
Collaborator

Reopened after a later independent controller review reproduced two additional exact-identity blockers: mutable tokenizer references are accepted, and native identity attests the repository manifest rather than the executing runtime/build. DGR-031 continuation is paused while these acceptance gaps are repaired.

Reopened after a later independent controller review reproduced two additional exact-identity blockers: mutable tokenizer references are accepted, and native identity attests the repository manifest rather than the executing runtime/build. DGR-031 continuation is paused while these acceptance gaps are repaired.
popov added status:ready and removed status:in-progress labels 2026-07-18 13:00:34 +00:00
Author
Owner

Controller tick ended with no worker process active. The fixed Fable worktree preserves the DGR-025 repair. Controller added executing-artifact SHA-256 to runtime identity so a different binary copying public lock values receives a different recipe fingerprint; 105 focused and 235 impacted tests passed, compileall/diff-check and 55-story PRD validation passed. Final independent no-P0/P1 review is still pending. Claim released to status:ready; no work was reset or discarded.

Controller tick ended with no worker process active. The fixed Fable worktree preserves the DGR-025 repair. Controller added executing-artifact SHA-256 to runtime identity so a different binary copying public lock values receives a different recipe fingerprint; 105 focused and 235 impacted tests passed, compileall/diff-check and 55-story PRD validation passed. Final independent no-P0/P1 review is still pending. Claim released to `status:ready`; no work was reset or discarded.
popov added status:in-progress and removed status:ready labels 2026-07-18 13:19:28 +00:00
Author
Owner

Policy audit: no worker is active and the dirty identity/attestation repair has not received final independent no-P0/P1 acceptance. Released to status:ready while preserving the detached worktree; no completion or integration credit is granted.

Policy audit: no worker is active and the dirty identity/attestation repair has not received final independent no-P0/P1 acceptance. Released to status:ready while preserving the detached worktree; no completion or integration credit is granted.
popov added status:ready and removed status:in-progress labels 2026-07-18 21:23:21 +00:00
Author
Owner

Policy audit: no worker is active and the dirty identity/attestation repair has not received final independent no-P0/P1 acceptance. Status remains ready; the detached worktree is preserved and no completion or integration credit is granted.

Policy audit: no worker is active and the dirty identity/attestation repair has not received final independent no-P0/P1 acceptance. Status remains ready; the detached worktree is preserved and no completion or integration credit is granted.
Author
Owner

REAL-IMPLEMENTATION CONTINUATION (2026-07-19): the durable workers are now executing repair/verify passes under the hard no-fake/stub/synthetic policy. Fake/in-memory artifacts are being removed and replaced with real generated-gRPC / upstream-patch / runtime-identity behavior. No completion credit is granted until independent review and integrated-branch gates pass.

REAL-IMPLEMENTATION CONTINUATION (2026-07-19): the durable workers are now executing repair/verify passes under the hard no-fake/stub/synthetic policy. Fake/in-memory artifacts are being removed and replaced with real generated-gRPC / upstream-patch / runtime-identity behavior. No completion credit is granted until independent review and integrated-branch gates pass.
popov closed this issue 2026-07-21 18:54:12 +00:00
popov added ready-for-agentstatus:completed and removed status:ready labels 2026-07-21 18:54:12 +00:00
Sign in to join this conversation.
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: popov/neuron-tai#9