aaronrene / knowtation public
patch main #7 / 100
aaronrene · 10 days ago · Aug 27, 2026 · Diff

RHF-b-KN0: add compatibility code paths (complete land slice).

Bridge grant mint session denial, catalog, marker-aware reads, seven-tier tests.

sha256:7ad95f98419ff00e9bed786c80f2a7a376f6c3790ed31e594e604a7bcf4450e0 sha
sha256:48fe16cbb5993927dfc0594e7f56cfe2609049ac340ed9ec3e446f425c1313f1 parent
+37 ~2 symbols
sha256:73a33daf1db9a67c0aa72f3fe141dce99dd7605ceb5ee09398dbb492d4846aa5 snapshot
+37
symbols added
~2
symbols modified
0
dead code introduced
Semantic Changes 39 symbols
~ docs/reviews/2026-08-27-rhf-b-kn0-bv-round1-pass.md .md 9 symbols added
+ Build verification — RHF-b-KN0 round 1 section Build verification — RHF-b-KN0 round 1 L1–47
+ Checklist section Checklist L19–41
+ Evidence section Evidence L34–41
+ table section table L36–40
+ table section table L21–33
+ Findings section Findings L13–19
+ table section table L15–18
+ Scope checked section Scope checked L8–13
+ Verdict rationale section Verdict rationale L41–47
~ lib/agent/delegation-authority-compat.mjs .mjs 14 symbols added
+ computeDelegationAuthorityStateHash function function computeDelegationAuthorityStateHash L60–70
+ delegationAuthorityMarkerBlobKey function function delegationAuthorityMarkerBlobKey L26–28
+ delegationAuthorityMarkerFileName function function delegationAuthorityMarkerFileName L34–36
+ getEnvelopeStoredConsent function function getEnvelopeStoredConsent L348–354
+ getEnvelopeStoredGrant function function getEnvelopeStoredGrant L361–367
+ getEnvelopeStoredIdentity function function getEnvelopeStoredIdentity L335–341
+ isNonEmptyString function function isNonEmptyString L42–44
+ isSha256Prefixed function function isSha256Prefixed L50–52
+ readEnvelopeRaw function async_function readEnvelopeRaw L176–195
+ readMarkerRaw function async_function readMarkerRaw L146–165
+ resolveDelegationAuthorityReadMode function async_function resolveDelegationAuthorityReadMode L282–328
+ resolveDelegationAuthorityReadModeSync function function resolveDelegationAuthorityReadModeSync L221–280
+ validateDelegationAuthorityEnvelope function function validateDelegationAuthorityEnvelope L100–136
+ validateDelegationAuthorityMarker function function validateDelegationAuthorityMarker L77–92
~ lib/agent/trusted-external-provider-catalog.mjs .mjs 3 symbols added
+ getTrustedCatalogIdentity function function getTrustedCatalogIdentity L51–56
+ isReservedCatalogAgentId function function isReservedCatalogAgentId L43–45
+ listTrustedCatalogIdentities function function listTrustedCatalogIdentities L61–63
~ test/rhf-b-kn0-compatibility.test.mjs .mjs 10 symbols added
+ buildEnvelope function function buildEnvelope L106–122
+ delegationProposal function function delegationProposal L141–150
+ enableGate function function enableGate L59–63
+ legacyBridgeGrantMintWouldAcceptSession function function legacyBridgeGrantMintWouldAcceptSession L83–93
+ legacySessionToken function function legacySessionToken L69–71
+ mkDataDir function function mkDataDir L55–57
+ mockReq function function mockReq L99–104
+ serviceToken function function serviceToken L73–75
+ sessionToken function function sessionToken L65–67
+ writeMarkerAndEnvelope function function writeMarkerAndEnvelope L124–139
~ hub/bridge/delegation-blob-store.mjs .mjs 1 symbol modified
~ hydrateDelegationStoresFromBlob
~ hub/bridge/delegation-routes.mjs .mjs 1 symbol added, 1 symbol modified
+ humanSessionTokenFromReq function function humanSessionTokenFromReq L65–74
~ registerBridgeDelegationRoutes
Older RHF-b-KN0: delegation compatibility hardening (cherry-pick to main). sha256:48fe16cbb5993927dfc0594e7f56cfe2609049ac340ed9ec3e446f425c1313f1 All commits Newer test: agent identity list finds fixture after KN0 catalog prepend. sha256:118a888c120a64b124cfc642684a9c7f0b0c45204d467cf1262aaa334e2bcce2

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:7ad95f98419ff00e9bed786c80f2a7a376f6c3790ed31e594e604a7bcf4450e0 --body "your comment"