sixfold-space/madtea

SHA256

epic: one guard enforces the recorded limits on every surface #670

New issue

Closed

opened 2026-09-29 19:06:46 +00:00 by hexajon · 0 comments

hexajon commented

2026-09-29 19:06:46 +00:00

Owner

ADR 0046 decides one guard that refuses a write by its effect, on every surface: the CLI, MCP, and the raw API passthrough. No limit has an override.

Children, in the order the work can run:

#653 the guard package with its three effects.
#654 every operation and spec endpoint declares its effects. It needs #538 first, so that the vendored specs come from the live forges.
#659 the git write functions call the guard. Needs #653.
#660 the forge client send functions call the guard. Needs #653 and #654.
#666 every removal is proven by the forge's answer. Needs #653.
#665 a commit on the default branch is refused, with no override. Needs #659.
#668 the raw API passthrough keeps every limit. Needs #653, #654, and #660.
#669 a parity test fails when a write skips the guard. Needs #659 and #660.

Done when every child is closed and the gate passes with the parity test in place. This work ships in v0.20.0, the one release that carries every breaking change to the ADR tooling.

ADR 0046 decides one guard that refuses a write by its effect, on every surface: the CLI, MCP, and the raw API passthrough. No limit has an override. Children, in the order the work can run: - #653 the guard package with its three effects. - #654 every operation and spec endpoint declares its effects. It needs #538 first, so that the vendored specs come from the live forges. - #659 the git write functions call the guard. Needs #653. - #660 the forge client send functions call the guard. Needs #653 and #654. - #666 every removal is proven by the forge's answer. Needs #653. - #665 a commit on the default branch is refused, with no override. Needs #659. - #668 the raw API passthrough keeps every limit. Needs #653, #654, and #660. - #669 a parity test fails when a write skips the guard. Needs #659 and #660. Done when every child is closed and the gate passes with the parity test in place. This work ships in v0.20.0, the one release that carries every breaking change to the ADR tooling.

hexajon added a new dependency

2026-09-29 19:06:51 +00:00

#653 guard: add the guard package with its three effects

hexajon added a new dependency

2026-09-29 19:06:51 +00:00

#654 guard: declare the effects of every operation and every spec endpoint

hexajon added a new dependency

2026-09-29 19:06:51 +00:00

#659 guard: the git write functions call the guard

hexajon added a new dependency

2026-09-29 19:06:51 +00:00

#660 guard: the forge client send functions call the guard

hexajon added a new dependency

2026-09-29 19:06:51 +00:00

#665 guard: refuse every commit on the default branch after the first push, with no override

hexajon added a new dependency

2026-09-29 19:06:52 +00:00

#666 guard: prove every removal with the forge's answer, not local state

hexajon added a new dependency

2026-09-29 19:06:52 +00:00

#668 guard: the raw API passthrough keeps every limit

hexajon added a new dependency

2026-09-29 19:06:52 +00:00

#669 guard: a parity test fails when a write skips the guard

hexajon referenced this issue

2026-09-29 19:31:31 +00:00

epic: v0.20.0 - breaking: clearer ADR tooling and the write guard on every surface #675

hexajon added a new dependency

2026-09-29 19:34:27 +00:00

#675 epic: v0.20.0 - breaking: clearer ADR tooling and the write guard on every surface

hexajon referenced this issue

2026-10-15 19:39:57 +00:00

feat(guard): #653 add the guard package with its three write effects #772

hexajon referenced this issue

2026-10-15 21:37:10 +00:00

guard: prove a squash-merged branch removable via the forge's merged-PR record #777

hexajon referenced this issue

2026-10-15 23:34:20 +00:00

guard: enable the forge-client guard - tag the recoverable deletes, add the completeness test, flip the install on #780

hexajon added a new dependency

2026-10-15 23:34:34 +00:00

#780 guard: enable the forge-client guard - tag the recoverable deletes, add the completeness test, flip the install on

hexajon removed a dependency

2026-10-15 23:42:37 +00:00

#780 guard: enable the forge-client guard - tag the recoverable deletes, add the completeness test, flip the install on

hexajon referenced this issue

2026-10-16 01:00:21 +00:00

api passthrough bypasses the forge write guard #784

hexajon referenced this issue

2026-10-16 01:00:36 +00:00

add the write-guard parity test: no write around the guard #785

hexajon referenced this issue

2026-10-16 01:00:50 +00:00

diffpatch endpoint effect is weaker than its operation effect #786

hexajon referenced this issue

2026-10-16 01:01:05 +00:00

delete-tagging completeness test misses service subpackages #787

hexajon added a new dependency

2026-10-16 01:01:42 +00:00

#784 api passthrough bypasses the forge write guard

hexajon added a new dependency

2026-10-16 01:01:42 +00:00

#785 add the write-guard parity test: no write around the guard

hexajon added a new dependency

2026-10-16 01:01:42 +00:00

#786 diffpatch endpoint effect is weaker than its operation effect

hexajon added a new dependency

2026-10-16 01:01:43 +00:00

#787 delete-tagging completeness test misses service subpackages

hexajon referenced this issue

2026-10-16 02:09:28 +00:00

widen the write-guard parity test to the full-URL mode and the normalized path #789

hexajon referenced this issue

2026-10-16 02:41:35 +00:00

feat(guard): enforce the ADR 0046 write guard on every forge write surface #790

hexajon closed this issue

2026-10-18 05:25:52 +00:00

Sign in to join this conversation.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Blocks

#675 epic: v0.20.0 - breaking: clearer ADR tooling and the write guard on every surface

sixfold-space/madtea

Depends on

#653 guard: add the guard package with its three effects

sixfold-space/madtea

#654 guard: declare the effects of every operation and every spec endpoint

sixfold-space/madtea

#659 guard: the git write functions call the guard

sixfold-space/madtea

#660 guard: the forge client send functions call the guard

sixfold-space/madtea

#665 guard: refuse every commit on the default branch after the first push, with no override

sixfold-space/madtea

#666 guard: prove every removal with the forge's answer, not local state

sixfold-space/madtea

#668 guard: the raw API passthrough keeps every limit

sixfold-space/madtea

#669 guard: a parity test fails when a write skips the guard

sixfold-space/madtea

#784 api passthrough bypasses the forge write guard

sixfold-space/madtea

#785 add the write-guard parity test: no write around the guard

sixfold-space/madtea

#786 diffpatch endpoint effect is weaker than its operation effect

sixfold-space/madtea

#787 delete-tagging completeness test misses service subpackages

sixfold-space/madtea

Reference

sixfold-space/madtea#670

No description provided.