85b37e1701Added an audit template and verification notes to AUDITS.md.
Carl Niklas Rydberg
2025-12-22 09:30:15 +0100
b9de21df20Added an Audit Plan section to AUDITS.md
Carl Niklas Rydberg
2025-12-22 09:26:14 +0100
b00f2c8575Enforce PEL1 result invariants and add regression test
Carl Niklas Rydberg
2025-12-22 09:15:15 +0100
dd537f9eb9Documented the audit in a new AUDITS.md at the repo root with scope, findings, resolutions, and test status
Carl Niklas Rydberg
2025-12-22 09:13:07 +0100
f02be17d6cPatched overflow checks in the encoder and added regression tests.
Carl Niklas Rydberg
2025-12-22 08:46:03 +0100
d301823c12Added scheme-aware dispatch for in‑memory exec so non‑SchemeRef_DAG_1 refs are rejected, and exposed it via the CLI.
Carl Niklas Rydberg
2025-12-22 08:34:40 +0100
6dfcb2bfc6Implemented descriptor-aware program binding checks so program interpretation now consults the descriptor’s program_type_tag and program_enc_profile before decoding or tagging artifacts.
Carl Niklas Rydberg
2025-12-22 08:27:41 +0100
db3eb98b83Added a concrete recognition path for TYPE_TAG_PEL_SCHEME_DESC_1 Artifacts by exposing canonical checks and wiring them into amduat-pel validate.
Carl Niklas Rydberg
2025-12-22 08:19:39 +0100
f5e1ab8801Add PEL DAG scheme descriptor codec and validation
Carl Niklas Rydberg
2025-12-22 08:16:58 +0100
4583b1cfd3Support program artifacts in exec
Carl Niklas Rydberg
2025-12-22 07:34:49 +0100
5438b93efdExpose diagnostic messages in formatters
Carl Niklas Rydberg
2025-12-22 07:27:30 +0100
ef3edc7762Refine DAG structural diagnostics
Carl Niklas Rydberg
2025-12-22 07:03:36 +0100
ef2fd955f1Hide DAG exec entrypoints
Carl Niklas Rydberg
2025-12-22 07:01:11 +0100
e838e2c977Add deterministic diagnostics and OOM handling
Carl Niklas Rydberg
2025-12-22 06:55:29 +0100
b891b588eeDemote PEL exec bytes helper
Carl Niklas Rydberg
2025-12-22 06:31:53 +0100
92edd06642Fix PEL DAG params plumbing and surface IO
Carl Niklas Rydberg
2025-12-22 06:25:52 +0100
7c19c04dc4Added an explicit OOM status for kernel ops and routed it as out‑of‑model
Carl Niklas Rydberg
2025-12-22 00:41:18 +0100
3333b577ffImplemented an OOM-aware decode path for PEL/PROGRAM-DAG and plumbed it through the core entrypoints so OOM is treated as out‑of‑model (returns false) while invalid bytes still map to INVALID_PROGRAM.
Carl Niklas Rydberg
2025-12-22 00:36:10 +0100
503ad05061Adjusted PEL core execution to treat allocation failures as out‑of‑model (return false without a core result) and made amduat_pel_exec_program_bytes return deterministic ExecutionResultValue for invalid program bytes or missing inputs, as required by PEL/1‑CORE totality. Updates are in program_dag.c and run.c.
Carl Niklas Rydberg
2025-12-22 00:31:31 +0100
87c8bcc799Align HASH/ASL1 registry and codecs with spec constraints
Carl Niklas Rydberg
2025-12-22 00:21:16 +0100
abf5b5d5f2Added the hash_id == 0 guard in the codec and documented the FS store digest length constraint in the README.
Carl Niklas Rydberg
2025-12-21 23:54:42 +0100
88cde5c243Added the explicit hash_id == 0 guard in the codec. This rejects reserved 0x0000 in both encode and decode paths
Carl Niklas Rydberg
2025-12-21 23:48:45 +0100
ab36856833Updated the ReferenceBytes codec to be spec‑true: it now treats the digest as “remaining bytes” and only enforces digest length when the registry provides a non‑zero expected length. This keeps strictness where hashing/verification happens while allowing unknown hash IDs for pure transport/framing. Changes are in asl1_core_codec.c.
Carl Niklas Rydberg
2025-12-21 23:46:07 +0100
9754582ae7Implement store error IO class, optional config validation, and ops init helper
Carl Niklas Rydberg
2025-12-21 23:29:24 +0100
a992e89766Made StoreConfig enforcement pluggable at the amduat_asl_store_t boundary by adding a validate_config hook to store ops. validate_config is now optional, get rejects refs whose hash_id doesn’t match the store config, and put verifies the returned Reference matches the configured hash_id. This uses the StoreConfig at the boundary without forcing every store to implement the hook.
Carl Niklas Rydberg
2025-12-21 23:18:12 +0100
5443ad041cEnforced StoreConfig at the wrapper boundary by validating the configured encoding/hash and rejecting mismatched hash IDs before delegating to backend ops. This makes the amduat_asl_store_t wrapper actively use/validate its config instead of just storing it.
Carl Niklas Rydberg
2025-12-21 23:09:44 +0100
3dda32b62cAdjusted malformed reference handling so a digest length mismatch (or missing digest data) returns AMDUAT_ASL_STORE_ERR_INTEGRITY instead of AMDUAT_ASL_STORE_ERR_UNSUPPORTED in asl_store_fs.c
Carl Niklas Rydberg
2025-12-21 23:00:45 +0100
24ad51ff46Added AMDUAT_ASL_STORE_ERR_IO and used it in the FS store path so I/O/internal failures no longer surface as integrity errors; updated CLI/error mappings so the new error is visible and gets the IO exit code. This keeps integrity reserved for actual content/hash/collision issues while still preserving existing semantics for not-found/unsupported.
Carl Niklas Rydberg
2025-12-21 22:59:31 +0100
fe9acea94bUpdated amduat_asl_store_fs_put_impl so fsync failure cleanup only unlinks when this call actually created the object, preventing deletion of pre-existing mappings. Change is in asl_store_fs.c.
Carl Niklas Rydberg
2025-12-21 22:49:24 +0100
8e26d11e3bFixed the test include so AMDUAT_ENC_ASL1_CORE_V1 is visible. Re-run:
Carl Niklas Rydberg
2025-12-21 22:39:11 +0100
0188e10ceeAdd ASL ref-derive test and use central derivation
Carl Niklas Rydberg
2025-12-21 22:36:08 +0100
5a002b2a1dAdded a safety check in amduat_octets_eq so it rejects invalid octet views (len>0 with NULL data) before comparing.
Carl Niklas Rydberg
2025-12-21 22:23:12 +0100
39712f7b70Added a central ASL reference-derivation API and wired the filesystem store (plus the PEL stub store) to use it, so all reference creation now goes through the canonical encode+hash path.
Carl Niklas Rydberg
2025-12-21 22:22:17 +0100
Carl Niklas Rydberg