From 41b4b5b7d26a14a93542bd8d033690fa78ce07ab Mon Sep 17 00:00:00 2001 From: zhaoyilun Date: Fri, 10 Jul 2026 20:56:46 +0800 Subject: [PATCH] docs: record send sandbox evidence v2 intake --- docs/current-status-card.md | 15 ++++- ...07-10-returned-send-sandbox-analysis-v2.md | 67 +++++++++++++++++++ .../capability-source-matrix.md | 5 +- ...07-10-r6f-r14-continuous-execution-plan.md | 16 +++-- 4 files changed, 94 insertions(+), 9 deletions(-) create mode 100644 docs/source-discovery/2026-07-10-returned-send-sandbox-analysis-v2.md diff --git a/docs/current-status-card.md b/docs/current-status-card.md index 7ea5f11..2fd8478 100644 --- a/docs/current-status-card.md +++ b/docs/current-status-card.md @@ -58,7 +58,7 @@ N13/N14/N15 are pre-business validation results. They can help identify UI eleme ## Current loop -Current loop: `R6j online sandbox-send recording package v2 complete; next R6k returned sandbox evidence intake v2`. +Current loop: `R6k returned sandbox evidence intake v2 complete; next R6l send-message production path gate closure`. Active continuous execution plan: `docs/superpowers/plans/2026-07-10-r6f-r14-continuous-execution-plan.md`. @@ -239,8 +239,8 @@ Continuous execution plan R6f-R14 is approved and execution has started: - Plan file: `docs/superpowers/plans/2026-07-10-r6f-r14-continuous-execution-plan.md`. - Scope: 15 ordered rounds covering send-message connector/gate hardening, send-file preview/idempotency/package, receive-file download preview, receive-message reconciliation, end-to-end business smoke, and release-candidate report. - Execution rule after approval: one round at a time, status-card update, verification, commit, push, then continue automatically until an evidence-only blocker requires user action. -- Last completed round: R6j online sandbox-send recording package v2. -- Next active round: R6k returned sandbox evidence intake v2. +- Last completed round: R6k returned sandbox evidence intake v2. +- Next active round: R6l send-message production path gate closure. R6g send audit and idempotency replay diagnostics is complete: @@ -278,3 +278,12 @@ R6j online sandbox-send recording package v2 is complete: - `scripts\test-validate-returned-send-sandbox-package.ps1` proves the existing partial package remains `partial_use_only` and fails strict-v2. - Standard verification still reports 9 tools and `production_send_enabled=false`. - Next node: R6k returned sandbox evidence intake v2. + +R6k returned sandbox evidence intake v2 is complete: + +- Scanned `C:\Users\zhaoy\Downloads`; no new strict-v2 returned send package was found. +- Re-validated `C:\Users\zhaoy\Downloads\1631.zip` with `-ZipPath` and `-StrictV2`; strict-v2 failed as expected. +- Created `docs\source-discovery\2026-07-10-returned-send-sandbox-analysis-v2.md`. +- Decision: `r6d_gate_pass=false`, `strict_v2_pass=false`, production `isphere_send_message` remains blocked. +- Standard verification still reports 9 tools and `production_send_enabled=false`. +- Next node: R6l send-message production path gate closure. diff --git a/docs/source-discovery/2026-07-10-returned-send-sandbox-analysis-v2.md b/docs/source-discovery/2026-07-10-returned-send-sandbox-analysis-v2.md new file mode 100644 index 0000000..35565e4 --- /dev/null +++ b/docs/source-discovery/2026-07-10-returned-send-sandbox-analysis-v2.md @@ -0,0 +1,67 @@ +# Returned Send Sandbox Analysis V2 + +Date: 2026-07-10 + +## Intake source + +Checked latest zip files under `C:\Users\zhaoy\Downloads`. + +No new strict-v2 returned send-sandbox package was found during this round. + +The only current send-return candidate remains: + +```text +C:\Users\zhaoy\Downloads\1631.zip +``` + +## Validation command + +```powershell +powershell -NoProfile -ExecutionPolicy Bypass -File scripts\validate-returned-send-sandbox-package.ps1 -ZipPath C:\Users\zhaoy\Downloads\1631.zip -StrictV2 +``` + +## Sanitized validation result + +```json +{ + "partial_evidence_usable": true, + "r6d_gate_pass": false, + "strict_v2_pass": false, + "capability_test_ok": true, + "capability_tool_count": 9, + "production_send_enabled": false, + "has_before_probe": true, + "has_after_probe": false, + "operator_started_at_local_present": false, + "operator_clicked_send_at_local_present": false, + "operator_observed_success_at_local_present": false, + "before_recorder_present_flag": false, + "after_recorder_present_flag": false, + "success_ack_or_sent_record_present_flag": false, + "duplicate_second_send_attempted_false": false, + "decision": "partial_use_only" +} +``` + +## Missing for strict-v2 full gate + +- `manual_send_started_at_local` +- `manual_send_finished_at_local` +- `after_recorder_output` +- `operator_started_at_local` +- `operator_clicked_send_at_local` +- `operator_observed_success_at_local` +- `before_recorder_present` +- `after_recorder_present` +- `success_ack_or_sent_record_present` +- `duplicate_second_send_attempted=false` + +## Decision + +`r6d_gate_pass=false` and `strict_v2_pass=false`. + +Production `isphere_send_message` remains blocked. Continue with local-safe rounds. A future full production-send gate requires a returned package generated from the R6j strict-v2 package. + +## Next implementation node + +R6l must keep default production send blocked and make the blocked state machine-readable through the send gate behavior already introduced in R6h. diff --git a/docs/source-discovery/capability-source-matrix.md b/docs/source-discovery/capability-source-matrix.md index e184591..9ee07ec 100644 --- a/docs/source-discovery/capability-source-matrix.md +++ b/docs/source-discovery/capability-source-matrix.md @@ -8,6 +8,7 @@ Returned live probe: `docs/source-discovery/2026-07-10-returned-live-probe-analy Send connector preflight: `docs/source-discovery/2026-07-10-send-connector-preflight.md` Send sandbox gate: `docs/source-discovery/2026-07-10-send-sandbox-gate.md` Returned send sandbox analysis: `docs/source-discovery/2026-07-10-returned-send-sandbox-analysis.md` +Returned send sandbox analysis v2: `docs/source-discovery/2026-07-10-returned-send-sandbox-analysis-v2.md` ## Source priority @@ -26,7 +27,7 @@ Returned send sandbox analysis: `docs/source-discovery/2026-07-10-returned-send- | `isphere_search_contacts` | bare sender/receiver JIDs extracted from normalized log-backed messages loaded from configured PacketReader file or directory source | validated copied `MsgLib.db` tables: `TD_Roster`, `TD_CustomEffigy`, `tblRecent`, `tblChatLevel`, `tblPersonMsg`; decrypted roster/contact stanzas from `Smark.SendReceive`; UIA helper source if display names are still missing | `docs/source-discovery/2026-07-10-msglib-readonly-schema-extraction.md`; `internal/isphere/contacts_test.go`; `internal/tools/isphere_contacts_test.go` | C34 documents optional MsgLib contact display enrichment; R2 adds deterministic exact-match-first ranking, case-insensitive de-duplication across log/MsgLib candidates, and preserves `source`/`raw_ref` | core contact search complete; optional richer fields later | | `isphere_search_groups` | decrypted `PacketReader.ProcessPacket` `type="groupchat"` stanzas and conference/MUC JIDs loaded from configured PacketReader file or directory source | validated copied `MsgLib.db` tables: `tblMsgGroupPersonMsg`, `TD_WorkGroupAuth`, `tblRecent`; UIA helper source if group display names are still missing | `docs/source-discovery/2026-07-10-msglib-readonly-schema-extraction.md`; `internal/isphere/groups_test.go`; `internal/tools/isphere_groups_test.go`; C9 ignored-log scan: PacketReader 86 groupchat/86 conference hits; Smark 24 groupchat/658 conference/631 muc hits | C34 documents optional MsgLib group display enrichment; R2 adds deterministic exact-match-first ranking, case-insensitive de-duplication across log/MsgLib candidates, and preserves `source`/`raw_ref` | core group search complete; optional member/owner hierarchy later | | `isphere_receive_files` | decrypted `PacketReader.ProcessPacket` file-transfer message stanzas via `internal/isphere.ListFilesFromMessages` and `isphere_receive_files` list mode; configured PacketReader file or directory source; `zyl\importal\` cache entries remain unlinked | MsgLib `TD_ReceiveFileRecord` safe metadata through explicit copied-DB path; decrypted `Smark.SendReceive` and `SaveToDB` traces for file-reference reconciliation; future UIA/client connector for download | `docs/source-discovery/2026-07-09-n12-pre-zyl-schema-notes.md#c12-file-transfer-evidence-precheck`; `docs/source-discovery/2026-07-10-file-download-mapping-precheck.md`; `docs/source-discovery/2026-07-10-file-cache-mapping-diagnostic.md` | C22 verifies safe file-list contract args; R3 confirms list metadata is available; R3b diagnostic finds 0 current cache/archive matches, so R4 remains blocked | blocked pending better cache evidence or UI/client download connector | -| `isphere_send_message` | B-route selected: running-client sidecar / in-process connector, preferring `AppContextManager.SendTxtMessageByJid(...)` or `MessageScheduling.SendChatMessage(...)` over the unimplemented `SendP2PMessage(...)` interface path; current MCP tool exposes preview/dry-run only | A-route fallback: constrained UI/RPA wrapper only if B cannot pass runtime probe, entrypoint availability, dynamic observation, and idempotent dry-run gates; network/protocol replay remains deferred | `docs/source-discovery/2026-07-10-send-message-source-precheck.md`; `docs/source-discovery/2026-07-10-send-message-connector-selection.md`; `docs/source-discovery/2026-07-10-send-sidecar-b-first-plan.md`; `docs/source-discovery/2026-07-10-returned-live-probe-analysis.md`; `docs/source-discovery/2026-07-10-send-connector-preflight.md`; `docs/source-discovery/2026-07-10-send-sandbox-gate.md`; `docs/source-discovery/2026-07-10-returned-send-sandbox-analysis.md`; `internal/tools/isphere_send_message_test.go`; `cmd/isphere-capability-smoke/main.go` | R6e adds sandbox-only connector-shell metadata and JSONL-backed idempotency state. Duplicate same-key/same-target/same-content preview calls are detectable; conflicting key reuse is blocked. Production remains blocked because R6d was only partial evidence and no real connector has passed a controlled online sandbox test. | next: R6f fake/sandbox connector contract | +| `isphere_send_message` | B-route selected: running-client sidecar / in-process connector, preferring `AppContextManager.SendTxtMessageByJid(...)` or `MessageScheduling.SendChatMessage(...)` over the unimplemented `SendP2PMessage(...)` interface path; current MCP tool exposes preview/dry-run only | A-route fallback: constrained UI/RPA wrapper only if B cannot pass runtime probe, entrypoint availability, dynamic observation, and idempotent dry-run gates; network/protocol replay remains deferred | `docs/source-discovery/2026-07-10-send-message-source-precheck.md`; `docs/source-discovery/2026-07-10-send-message-connector-selection.md`; `docs/source-discovery/2026-07-10-send-sidecar-b-first-plan.md`; `docs/source-discovery/2026-07-10-returned-live-probe-analysis.md`; `docs/source-discovery/2026-07-10-send-connector-preflight.md`; `docs/source-discovery/2026-07-10-send-sandbox-gate.md`; `docs/source-discovery/2026-07-10-returned-send-sandbox-analysis.md`; `docs/source-discovery/2026-07-10-returned-send-sandbox-analysis-v2.md`; `internal/tools/isphere_send_message_test.go`; `cmd/isphere-capability-smoke/main.go` | R6j adds strict-v2 package hardening; R6k finds no new strict-v2 returned package. Existing `1631.zip` remains `partial_use_only`, `r6d_gate_pass=false`, and `strict_v2_pass=false`. Production remains blocked because no real connector has passed a controlled online sandbox test. | next: R6l send-message production path gate closure | | `isphere_send_file` | B-route selected after send-message probe: managed offline-file path through `OffLineFileSend.sendFile()`, `IMPP.Service*.dll` `IFileTransfer.FileUpload(...)`, and `Chat.sendFileMessage(...)` | A-route fallback: constrained UI/RPA upload/send-file flow; native `TcpFileTransfer.dll` is a later candidate only after managed path is rejected | `docs/source-discovery/2026-07-10-send-message-source-precheck.md`; `docs/source-discovery/2026-07-10-send-message-connector-selection.md`; `docs/source-discovery/2026-07-10-send-sidecar-b-first-plan.md`; `docs/source-discovery/2026-07-10-returned-live-probe-analysis.md`; `docs/source-discovery/2026-07-10-send-connector-preflight.md`; `docs/source-discovery/2026-07-10-send-sandbox-gate.md` | R6a/C31 metadata confirms `FileTransfer.FileUpload`, `FileTransfer.AsynFileUpload`, `OffLineFileSend.sendFile`, and `Chat.sendFileMessage` candidates. File-send remains blocked behind returned message-send sandbox evidence plus later upload/file-message dry-run evidence. | next: wait for R6d, then file-send upload preflight | ## Stage C entry rule @@ -44,4 +45,4 @@ Start Stage C with a narrow log-backed `isphere_receive_messages` source abstrac ## Deferred source work -`MsgLib.db` has a validated copied read-only open path through the bundled 32-bit `System.Data.SQLite.dll` and password `123`. C27 adds `MsgLibReadSidecar` as the bounded x86 .NET reader boundary, C28 adds the Go `internal/msglib` process client, C29 adds bounded `display_entities` extraction, C30 wires it as optional contact/group MCP enrichment, C31 proves real copied-DB MCP enrichment with sanitized output, C32 reuses it for receive-message display fields, C33 proves that receive display path through a real copied-DB MCP smoke without printing entity values, C34 documents the operator setup/verification path, C35 maps MsgLib message tables to receive-message contract fields without reading row values, C36 adds metadata-only `message_sources` readiness, C37 defines the bounded DB-backed receive-source design, C38 implements sidecar/Go-wrapper `list_messages` with sanitized verification, C39 adds a Go adapter from MsgLib list results to the receive-message domain model, C40 adds explicit tool-level `msglib_readonly` source selection, C41 wires env-configured explicit MsgLib receive with optional sanitized smoke, R1 documents source reconciliation keys, and R2 hardens contact/group search ranking and de-duplication. R6e has completed sandbox-only send connector shell and idempotency/audit hardening. The active roadmap is `docs/superpowers/plans/2026-07-10-core-business-capabilities-roadmap.md`; next step is R6f. +`MsgLib.db` has a validated copied read-only open path through the bundled 32-bit `System.Data.SQLite.dll` and password `123`. C27 adds `MsgLibReadSidecar` as the bounded x86 .NET reader boundary, C28 adds the Go `internal/msglib` process client, C29 adds bounded `display_entities` extraction, C30 wires it as optional contact/group MCP enrichment, C31 proves real copied-DB MCP enrichment with sanitized output, C32 reuses it for receive-message display fields, C33 proves that receive display path through a real copied-DB MCP smoke without printing entity values, C34 documents the operator setup/verification path, C35 maps MsgLib message tables to receive-message contract fields without reading row values, C36 adds metadata-only `message_sources` readiness, C37 defines the bounded DB-backed receive-source design, C38 implements sidecar/Go-wrapper `list_messages` with sanitized verification, C39 adds a Go adapter from MsgLib list results to the receive-message domain model, C40 adds explicit tool-level `msglib_readonly` source selection, C41 wires env-configured explicit MsgLib receive with optional sanitized smoke, R1 documents source reconciliation keys, and R2 hardens contact/group search ranking and de-duplication. R6j/R6k confirm the send-message strict-v2 production gate is still not passed. The active continuous execution plan is `docs/superpowers/plans/2026-07-10-r6f-r14-continuous-execution-plan.md`; next step is R6l. diff --git a/docs/superpowers/plans/2026-07-10-r6f-r14-continuous-execution-plan.md b/docs/superpowers/plans/2026-07-10-r6f-r14-continuous-execution-plan.md index 1a5f5cc..8948dad 100644 --- a/docs/superpowers/plans/2026-07-10-r6f-r14-continuous-execution-plan.md +++ b/docs/superpowers/plans/2026-07-10-r6f-r14-continuous-execution-plan.md @@ -419,7 +419,7 @@ git push gitea main - Modify: `docs/current-status-card.md` - Modify: `docs/source-discovery/capability-source-matrix.md` -- [ ] **Step 1: Look for a new returned package** +- [x] **Step 1: Look for a new returned package** ```powershell Get-ChildItem C:\Users\zhaoy\Downloads -Filter *.zip | Sort-Object LastWriteTime -Descending | Select-Object -First 10 FullName,LastWriteTime,Length @@ -427,7 +427,7 @@ Get-ChildItem C:\Users\zhaoy\Downloads -Filter *.zip | Sort-Object LastWriteTime Prefer a zip whose contents include `SANDBOX-SEND-INPUTS.json`, after-recorder output, and return manifest. -- [ ] **Step 2A: If a new candidate exists, validate strict v2** +- [x] **Step 2A: If a new candidate exists, validate strict v2** ```powershell $candidate = Get-ChildItem C:\Users\zhaoy\Downloads -Filter *.zip | Sort-Object LastWriteTime -Descending | Select-Object -First 1 @@ -436,11 +436,11 @@ powershell -NoProfile -ExecutionPolicy Bypass -File scripts\validate-returned-se Expected pass output must include `r6d_gate_pass=true` and `strict_v2_pass=true` before production send can move beyond blocked state. -- [ ] **Step 2B: If no candidate exists, document no-intake state** +- [x] **Step 2B: If no candidate exists, document no-intake state** Create `docs/source-discovery/2026-07-10-returned-send-sandbox-analysis-v2.md` stating no strict-v2 returned package was found, `r6d_gate_pass=false`, and production `isphere_send_message` remains blocked. -- [ ] **Step 3: Verify and commit** +- [x] **Step 3: Verify and commit** ```powershell git diff --check @@ -454,6 +454,14 @@ git push gitea main **Acceptance gate:** The status card explicitly says whether production send is still blocked or evidence-gated for the next round. +**R6k Result:** + +- Scanned `C:\Users\zhaoy\Downloads` for recent zip files. +- No new strict-v2 returned send-sandbox package was found. +- Re-validated `C:\Users\zhaoy\Downloads\1631.zip` with `-ZipPath` and `-StrictV2`; strict-v2 failed as expected. +- Created `docs/source-discovery/2026-07-10-returned-send-sandbox-analysis-v2.md`. +- Decision: `r6d_gate_pass=false`, `strict_v2_pass=false`; default production send remains blocked. + --- ### R6l: Send-message production path gate closure