Release v5.0.0 - #153

Merged

b7n0de merged 54 commits into

mainfrom

fix/non-json-wireform-coverage-20260826

Aug 27, 2026

Commits on Aug 22, 2026

fix(receipts): three gaps from the adversarial probe re-check (2026-08-22)

kraxo
and
claude
committed
d9913a6
feat(cli): --expect-issuer pins the accepted signer on show-eval

kraxo
and
claude
committed
bed147b

Commits on Aug 25, 2026

release-prep v5.0.0: version bump, CHANGELOG, deep-gate pre-registration
kraxo
committed
a7d162a
fix(audit-matrix): a version-scoped gate must fail closed when its scope stops matching
kraxo
committed
ab90699
fix(budget,tests): a tiny integer buys 34 seconds of CPU, and a third state is not a failure
kraxo
committed
388a4d4
fix(renewal): explaining WHY an input was rejected must not itself crash
kraxo
committed
9bc179e
docs(audit): pre-tag deep-gate run record for 5.0.0 — WITHSTANDS on 9bc179e, after four runs
kraxo
committed
b0298a3
merge: die vier Erweiterungen von docs/note-doi-4.0.0 gehen mit in 5.0.0 (U3)
kraxo
committed
1a9a6ce
docs(changelog): 5.0.0 traegt ZWEI MAJOR-Trigger, nicht einen (U5)
kraxo
committed
5e3084e
fix(adapters): promptfoo binds harness_version — the class, not the instance

kraxo
and
claude
committed
529cd20

Commits on Aug 26, 2026

feat(provenance): the absence of a version field stops meaning two things at once

kraxo
and
claude
committed
66e72f4
fix(provenance): the verifier invented findings on fields it was never asked about

kraxo
and
claude
committed
df2b353
fix(provenance): a named set, because a suffix rule judged fields it had no business judging

kraxo
and
claude
committed
6065815
fix(provenance,tests): der Pre-Sweep von Iteration 6 fand drei Dinge, zwei davon in meinem eigenen Text

kraxo
and
claude
committed
d8ec901
fix(wire): ein signierter Beleg hat wieder GENAU EINE akzeptierte Drahtform

kraxo
and
claude
committed
d478882
fix(gate): die Population sah 47 von 57 Flaechen, und drei Gates plus zwei Tests glaubten ihr

kraxo
and
claude
committed
663a615
fix(membership): 27 Mitgliedstests hashten Angreiferdaten — die Klasse, nicht die 27 Zeilen

kraxo
and
claude
committed
fd84e1d
fix(membership): der Guard, dessen Vertrag "wirft nie" lautet, konnte werfen

kraxo
and
claude
committed
8ef363f
test(type-confusion): NON_JSON-Wireform-Deckung — die zwei Kompakt-String-Flaechen hinter der Dekodierung (iter8 Teil 3)
kraxo
committed
f5bb0a7
fix(anchors): frozen/rp_trust-Typ-Konfusion — Nicht-Mapping erreichte ein blankes .get (iter9)
kraxo
committed
f403360
fix(sdjwt-vc,anchors): P0 False-Accept + rp_headers-Wert-TypeError (iter9 Deep-Gate)
kraxo
committed
26a42be
test(anchors): generalisierter Extra-Arg-Typ-Konfusions-Fuzzer (iter9 Gate-Blindheit)
kraxo
committed
4c4d194
fix(anchors): isinstance(Mapping) beweist kein nutzbares .get (iter9 Linse 3a)
kraxo
committed
2da2644
fix(anchors): rfc3161 gleiche isinstance(Mapping)-.get-Luecke (iter9 Linse 3a, Klasse geschlossen)
kraxo
committed
58403ef
fix(merkle): verify_consistency bindet second_size — sn==0 statt fn==0 (iter9 L1)
kraxo
committed
681bfe6
fix(renewal): non-int .time an den Konsumenten fail-closed statt roher Crash (iter9 L2)
kraxo
committed
6aef259
fix(anchors): rfc3161 frozen=None typisiert abweisen (iter9 Selbstfund)
kraxo
committed
ba01b24
test(deepgate): iter9 4. Runde — Regressionen + unabhängiges RFC-Dekompositions-Orakel
kraxo
committed
08ff6ca
fix(type-confusion-gate): reconstruct to close F1/F3/F4/F5 (makellose-500 Spur 1)
kraxo
committed
f723cf0
fix(pre-tag-audit-gate): verdict from a signed, tree-bound receipt, not a prose line (makellose-500 F6)
kraxo
committed
6120ea6
fix(audit-candidate-matrix): ready = internal-PASS + one external audit, fail-closed (makellose-500 F2/F7)
kraxo
committed
00623c0
feat(gate-qualification): 15/15 counter-proof harness (makellose-500 Spur 1)
kraxo
committed
cbbd210
fix(verify-surfaces): close the 3 surviving never-raise findings (makellose-500 Phase 5, iter9 5th round)
kraxo
committed
7581bd7
test(membership-scanner): import-order-robust guard-import check (makellose-500 Phase 5 cascade)
kraxo
committed
befa2ac
fix(spur2): close the four deep-gate lens findings on the makellose-500 candidate
kraxo
committed
38a672a
fix(inspect): measure the inspect binding against 0.3.260, make the skip visible, record fixture provenance
kraxo
committed
0f05619
fix(spur2-regate): close the two class-members the deep-gate re-gate found
kraxo
committed
880ca55

Commits on Aug 27, 2026

fix(spur2-regate3): bind EVERY release-deciding gate wiring to the harness verdict
kraxo
committed
01d5a05
docs(spur2-regate3): pin the import_error/no_input completeness redundancy invariant
kraxo
committed
4acfa1e
fix(spur2-regate4): bind inventories_agree's three conjuncts with minimal isolated seeds
kraxo
committed
fb23d09
fix(spur2-regate5): bind the nested DEPTH-2 traversal (real _field_names path)
kraxo
committed
271fbba
fix(spur2-regate6): bind the REAL _classify routing the round-5 re-gate found unbound
kraxo
committed
c6884d9
fix(spur2-regate7): bind the routing CLASS -- every IN_SCOPE token + the NON_JSON kind routes
kraxo
committed
f76bb32
fix(spur2-regate8): bind the nested-path RecursionError arm + guard the RecursionError CLASS
kraxo
committed
6716914
fix(spur2-regate9): bind the str_matrix matrix-SELECTION assignment through the real router
kraxo
committed
899659e
fix(spur2-regate10): bind the _field_names subscript branch (the round-9 WIDERLEGT)
kraxo
committed
d8c1331
fix(spur2-regate11): close P3-1 — bind verify_receipt's schema check + a pre_tag coverage guard
kraxo
committed
3588224
fix(spur2-regate12): close P3-2 — bind verify_receipt signer-trust + signature checks; form-robust AST guard
kraxo
committed
980fd9c
fix(release-ceremony): bind subject_tree_digest to src/proofbundle, not the full tree (option B, owner-GO)
kraxo
committed
59d5b5a
fix(release-ceremony): option C — subject_tree_digest binds HEAD tree minus audit_artifacts (owner-GO)
kraxo
committed
bc96fa5
fix(release-ceremony): P1-A gate import-robustness + two-half keyless receipt mode
kraxo
committed
2b8a16e
chore(release): v5.0.0 release-prep — scope list, version_pin, deep-gate record
kraxo
committed
4c88ca9
fix(release-prep): revert the version_pin bump (the binding is the fix, not the literal) + ruff E702
kraxo
committed
d23ea50
fix(release-prep): mypy evalclaim narrowing + guard 3 anchor-OTS tests for the anchor-free suites
kraxo
committed
ac1d005