COMPANION-APP-PHASE-6-DERIVED-ARTIFACT-STORAGE-GATE.md symbol-level

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate insert hotspot 💥 blast

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.0. What this gate lifts — and what it deliberately does not insert hotspot 💥 blast

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.0. What this gate lifts — and what it deliberately does not.table insert hotspot 💥 blast

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.10. 7-tier test obligations (Phase 6 derived-artifact storage layer) insert hotspot 💥 blast

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.10. 7-tier test obligations (Phase 6 derived-artifact storage layer).table insert hotspot 💥 blast

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.11. Constraints honored insert hotspot 💥 blast

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.12. Approval table insert hotspot 💥 blast

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.12. Approval table.table insert hotspot 💥 blast

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.1. Adversarial threat model (the storage/write-back surface) insert hotspot 💥 blast

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.1. Adversarial threat model (the storage/write-back surface).table insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.2. Decision D6.1 — Per-tier, per-artifact storage location (binding routing) insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.2. Decision D6.1 — Per-tier, per-artifact storage location (binding routing).Decision — Routing table is binding; privacy-max never resolves to a host-readable or server-held-key location; resoluti insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.2. Decision D6.1 — Per-tier, per-artifact storage location (binding routing).Decision — Routing table is binding; privacy-max never resolves to a host-readable or server-held-key location; resoluti.table insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.2. Decision D6.1 — Per-tier, per-artifact storage location (binding routing).Fail-closed insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.2. Decision D6.1 — Per-tier, per-artifact storage location (binding routing).Verified state insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.3. Decision D6.2 — Provenance schema (required fields, placement, semantics) insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.3. Decision D6.2 — Provenance schema (required fields, placement, semantics).Decision — A single canonical provenance record, validated as a write precondition, stamped by the authority group insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.3. Decision D6.2 — Provenance schema (required fields, placement, semantics).Decision — A single canonical provenance record, validated as a write precondition, stamped by the authority group.table insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.3. Decision D6.2 — Provenance schema (required fields, placement, semantics).Fail-closed insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.3. Decision D6.2 — Provenance schema (required fields, placement, semantics).Verified state insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.4. Decision D6.3 — Write-back authorization (owner/delegate; default-OFF; no downgrade) insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.4. Decision D6.3 — Write-back authorization (owner/delegate; default-OFF; no downgrade).Decision — Every write-back is gated by `enforceConsentPolicy`; the owner's tier governs; delegated writes stay default- insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.4. Decision D6.3 — Write-back authorization (owner/delegate; default-OFF; no downgrade).Fail-closed insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.4. Decision D6.3 — Write-back authorization (owner/delegate; default-OFF; no downgrade).Verified state insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.5. Decision D6.4 — Client-encryption hook interface (privacy-max; fail-closed; no plaintext fallback) insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.5. Decision D6.4 — Client-encryption hook interface (privacy-max; fail-closed; no plaintext fallback).Decision — Define the `ClientEncryptor` hook; privacy-max writes require it; absence/failure fails closed; never a plain insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.5. Decision D6.4 — Client-encryption hook interface (privacy-max; fail-closed; no plaintext fallback).Decision — Define the `ClientEncryptor` hook; privacy-max writes require it; absence/failure fails closed; never a plain.code[text] insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.5. Decision D6.4 — Client-encryption hook interface (privacy-max; fail-closed; no plaintext fallback).Fail-closed insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.5. Decision D6.4 — Client-encryption hook interface (privacy-max; fail-closed; no plaintext fallback).Verified state insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.6. Decision D6.5 — Retention & deletion (inherit source; delete-on-delete; crypto-shred) insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.6. Decision D6.5 — Retention & deletion (inherit source; delete-on-delete; crypto-shred).Decision — Note-scoped artifacts inherit the note 1:1 and are deleted on delete; aggregate artifacts are invalidated/re- insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.6. Decision D6.5 — Retention & deletion (inherit source; delete-on-delete; crypto-shred).Fail-closed insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.6. Decision D6.5 — Retention & deletion (inherit source; delete-on-delete; crypto-shred).Verified state insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.7. Decision D6.6 — Single derived-artifact writer (object-capability enforcement) insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.7. Decision D6.6 — Single derived-artifact writer (object-capability enforcement).Decision — Exactly one `DerivedArtifactWriter` in the authority group; all stores reached only through it; enforced by a insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.7. Decision D6.6 — Single derived-artifact writer (object-capability enforcement).Fail-closed insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.7. Decision D6.6 — Single derived-artifact writer (object-capability enforcement).Verified state insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.8. Decision D6.7 — Provenance integrity & re-enrichment on model upgrade insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.8. Decision D6.7 — Provenance integrity & re-enrichment on model upgrade.Decision — Re-enrichment writes a fresh provenance record; never rewrites history silently; never a lifecycle state insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.8. Decision D6.7 — Provenance integrity & re-enrichment on model upgrade.Fail-closed insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.8. Decision D6.7 — Provenance integrity & re-enrichment on model upgrade.Verified state insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.9. How Phase 6 discharges the prior phases' deferred obligations insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.9. How Phase 6 discharges the prior phases' deferred obligations.table insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.Simple summary insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗

Companion App — Phase 6: Derived-Artifact Storage & Provenance Enforcement Gate.Technical summary insert

1×

aaronrene · Jun 10, 2026

sha256:0

#	Commit	Op	Message	Author	When
1	sha256:0d530f9ef27b	insert	reconcile: import GitHub-direct RBAC/OAuth/companion and ho…	aaronrene	2026-06-10

View symbol detail ↗