admin/isphere-ai-bridge
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: harden send sandbox evidence package v2

Browse Source
This commit is contained in:
zhaoyilun
2026-07-10 20:51:50 +08:00
parent 713917d929
commit 281b9dda2a
8 changed files with 276 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
docs/superpowers/plans/2026-07-10-r6f-r14-continuous-execution-plan.md
View File

@@ -362,7 +362,7 @@ git push gitea main
- `success_ack_or_sent_record_present=true`
- `duplicate_second_send_attempted=false`
- [ ] **Step 1: Add v2 manifest assertions to package verifier**
- [x] **Step 1: Add v2 manifest assertions to package verifier**
```powershell
powershell -NoProfile -ExecutionPolicy Bypass -File scripts\verify-send-sandbox-gate-package.ps1
@@ -370,11 +370,11 @@ powershell -NoProfile -ExecutionPolicy Bypass -File scripts\verify-send-sandbox-
Expected before implementation: FAIL because v2 required returned fields are not enforced.
- [ ] **Step 2: Add v2 checklist to package builder**
- [x] **Step 2: Add v2 checklist to package builder**
Update package contents to include `RETURN-CHECKLIST-V2.md`, `SANDBOX-SEND-INPUTS.schema.json`, and a stricter `CREATE-RETURN-ZIP.ps1` that refuses to package if after-recorder output is missing.
- [ ] **Step 3: Add validator strict mode**
- [x] **Step 3: Add validator strict mode**
Add parameter:
@@ -384,7 +384,7 @@ param([string]$ZipPath, [switch]$StrictV2)
`-StrictV2` exits non-zero if any required returned field is absent.
- [ ] **Step 4: Verify and commit**
- [x] **Step 4: Verify and commit**
```powershell
git diff --check
@@ -400,6 +400,14 @@ git push gitea main
**Acceptance gate:** A generated package can no longer omit the R6d missing after-recorder/timestamp fields.
**R6j Result:**
- `scripts\verify-send-sandbox-gate-package.ps1` first failed against the old package because `RETURN-CHECKLIST-V2.md` was missing.
- `scripts\package-send-sandbox-gate.ps1` now emits `RETURN-CHECKLIST-V2.md`, `SANDBOX-SEND-INPUTS.schema.json`, `CREATE-RETURN-ZIP.ps1`, and strict-v2 fields in `SANDBOX-SEND-INPUTS.template.json`.
- `CREATE-RETURN-ZIP.ps1` refuses to build a return zip when after-recorder output, strict-v2 timestamps, success evidence, or no-duplicate confirmation are missing.
- `scripts\validate-returned-send-sandbox-package.ps1` now supports `-ZipPath` and `-StrictV2`.
- Existing partial package validation remains `partial_use_only`; strict-v2 validation exits non-zero for that partial package.
---
### R6k: Returned sandbox evidence intake v2