what the verification pass found: momentum truth, load-time signing, utterances that reach their listeners, and docs that match - #95

Merged

radicalkjax merged 17 commits into

mainfrom

cooperation/momentum-counts-only-work

Sep 7, 2026

Commits on Sep 6, 2026

docs: correct stale auth, template, docker, and a11y claims

radicalkjax
and
claude
committed
53c5a50
fix: correct stale comments in Cargo.toml, manifest types, and lock.rs

radicalkjax
and
claude
committed
1d3a5e8
docs(rules): rewrite the manifest rule around the code-built manifest

radicalkjax
and
claude
committed
dd0500b
docs: retire the last two stale auth/Matrix claims in ROADMAP and rules

radicalkjax
and
claude
committed
5271a69
security: refuse to load a WASM connector with no pinned signature

radicalkjax
and
claude
committed
1246b72
security: make AutoAllowApprovalGate unconstructible in production builds

radicalkjax
and
claude
committed
0d13c21
security: authenticate POST /workspaces/onboard like every other mutating route

radicalkjax
and
claude
committed
a9404fc
security: read action hints from one authoritative source

radicalkjax
and
claude
committed
4f8165c
fix(momentum): classify a tick on ActionState, not on alignment

radicalkjax
and
claude
committed
214d0fc
fix(rally): stop double-counting the failure, rally who can respond

radicalkjax
and
claude
committed
eb27aca
fix(rally): make RallyResult::Recovered real

radicalkjax
and
claude
committed
fdcb926
fix(runtime): derive agent activity from the utterance ring

radicalkjax
and
claude
committed
c18b6c0
fix(awareness): let what a peer heard survive the beat, and act on it

radicalkjax
and
claude
committed
c5a0e63
docs: retire the derived-token auth model across arch and operations docs

radicalkjax
and
claude
committed
44e052e

Navigation Menu

Uh oh!

what the verification pass found: momentum truth, load-time signing, utterances that reach their listeners, and docs that match - #95

what the verification pass found: momentum truth, load-time signing, utterances that reach their listeners, and docs that match#95
radicalkjax merged 17 commits into
mainfrom
cooperation/momentum-counts-only-work

Commits on Sep 6, 2026

docs: correct stale auth, template, docker, and a11y claims

fix: correct stale comments in Cargo.toml, manifest types, and lock.rs

docs(rules): rewrite the manifest rule around the code-built manifest

docs: retire the last two stale auth/Matrix claims in ROADMAP and rules

security: refuse to load a WASM connector with no pinned signature

security: make AutoAllowApprovalGate unconstructible in production builds

security: authenticate POST /workspaces/onboard like every other mutating route

security: read action hints from one authoritative source

fix(momentum): classify a tick on ActionState, not on alignment

fix(rally): stop double-counting the failure, rally who can respond

fix(rally): make RallyResult::Recovered real

fix(runtime): derive agent activity from the utterance ring

fix(awareness): let what a peer heard survive the beat, and act on it

docs: retire the derived-token auth model across arch and operations docs

Commits on Sep 7, 2026

Merge branch 'security/verify-on-load-not-only-install' into cooperation/momentum-counts-only-work

Merge branch 'docs/correct-the-stale-claims' into cooperation/momentum-counts-only-work

contract: regenerate the served document after the onboard route moved