Files
ratatoskr/.corviduo-canonicals.toml
T
vh b798068932 pin: re-pin to Worldtree's FROZEN v1 surface (OpenAPI 2.2.0 + SSE schema)
v1 coverage-audit remediation P-1: vendor the authoritative machine-
readable artifacts and pin them for drift-checking, advancing the spec
pin from v0.35.16 (f1b59f8) to v1.0.0b2 (5810a26).

- Vendor docs/conversation-api-openapi.json (OpenAPI 2.2.0, 40 path-
  groups) + docs/conversation-api-sse-events.schema.json (11 events).
- Pin all three Conversation-API artifacts in .corviduo-canonicals.toml:
  OpenAPI + SSE schema as strict drift gates (canonical_drift.py), the
  prose markdown as tolerate_drift reference. Drift check green (10/10).
- pyproject: worldtree-spec-rev -> 5810a26, worldtree-version -> v1.0.0b2
  (was stale at v0.29.0), pinned-on -> 2026-06-30.
- SPEC-PIN.md: current-pin table + history row + vendored-artifacts list.
- coverage-map.md: P-1 marked remediated; the map now audits a frozen,
  diffable target.

The prose markdown is byte-identical to v0.35.16 (last WT edit
2026-05-31); the b2 surface lives only in the OpenAPI. No client-
facing code change (the b2 409/503 + unified error envelope were
already consumed in v0.18.3/.4) -> pin-only, no version bump.
2026-06-30 15:28:52 -07:00

126 lines
5.0 KiB
TOML

# Self-pin manifest for the corviduo-project-template repository.
#
# This template is the canonical home for cross-cutting Corviduo specs and
# tooling. The pins below declare which artifacts this repository owns as
# canonical (consumer_path == canonical_path; canonical_source == this repo).
#
# Operational effect:
# - `python scripts/canonical_sync.py` here is a no-op (every pin's
# pinned_sha256_16 == sha256_16(canonical), so nothing to write).
# - `python scripts/canonical_drift.py` here passes if every named
# canonical exists and is byte-identical to its pinned hash. Useful as a
# CI gate to catch accidental rewrites of a canonical artifact without a
# companion pin-bump in this manifest.
#
# Operators bootstrapping a new consumer can copy this file as a starting
# template, then adjust each pin's `consumer_path` to wherever they keep
# their downstream copy (often the same path).
#
# Pin-id naming convention: <artifact-slug>-v<major>. Bump major when the
# canonical's shape changes in a way that requires consumer adaptation
# (not on every pin-bump). The pinned_sha256_16 + pinned_at fields track
# point-in-time identity within a major version.
# ---------------------------------------------------------------------------
# Specifications (cross-language; all consumers should pin)
# ---------------------------------------------------------------------------
[[pins]]
id = "contract-format-v2"
canonical_source = "corviduo-project-template"
canonical_path = "docs/contracts/CONTRACT-FORMAT.md"
consumer_path = "docs/contracts/CONTRACT-FORMAT.md"
pinned_sha256_16 = "f2f2f37072ebbc6b"
pinned_at = "2026-05-15T22:00:00+00:00"
[[pins]]
id = "principles-v1"
canonical_source = "corviduo-project-template"
canonical_path = "PRINCIPLES.md"
consumer_path = "PRINCIPLES.md"
pinned_sha256_16 = "c5bd891601438635"
pinned_at = "2026-05-15T22:00:00+00:00"
[[pins]]
id = "methodology-v1"
canonical_source = "corviduo-project-template"
canonical_path = "docs/methodology.md"
consumer_path = "docs/methodology.md"
pinned_sha256_16 = "acb7d7cfb390be20"
pinned_at = "2026-05-17T14:52:08+00:00"
# ---------------------------------------------------------------------------
# Canonical-sync tooling (the meta-recursion: these pin themselves)
# ---------------------------------------------------------------------------
[[pins]]
id = "canonical-sync-v1"
canonical_source = "corviduo-project-template"
canonical_path = "scripts/canonical_sync.py"
consumer_path = "scripts/canonical_sync.py"
pinned_sha256_16 = "d2b2c27b2750c6d5"
pinned_at = "2026-05-17T05:30:00+00:00"
[[pins]]
id = "canonical-drift-v1"
canonical_source = "corviduo-project-template"
canonical_path = "scripts/canonical_drift.py"
consumer_path = "scripts/canonical_drift.py"
pinned_sha256_16 = "71281ac8dad7d6c0"
pinned_at = "2026-05-17T05:30:00+00:00"
# ---------------------------------------------------------------------------
# Contract meta-tooling (Python ≥3.11, stdlib-only; invoke via uv run in
# non-Python projects)
# ---------------------------------------------------------------------------
[[pins]]
id = "contract-parser-v2"
canonical_source = "corviduo-project-template"
canonical_path = "docs/contracts/contract_parser.py"
consumer_path = "docs/contracts/contract_parser.py"
pinned_sha256_16 = "e10a4460ba9fd560"
pinned_at = "2026-06-15T08:53:22+00:00"
[[pins]]
id = "contract-drift-check-v1"
canonical_source = "corviduo-project-template"
canonical_path = "scripts/contract_drift_check.py"
consumer_path = "scripts/contract_drift_check.py"
pinned_sha256_16 = "23271287ac488da4"
pinned_at = "2026-05-17T05:30:00+00:00"
# ---------------------------------------------------------------------------
# Worldtree Conversation-API surface (vendored from ~/development/Worldtree).
# The v1 wire is FROZEN (Worldtree #326 / v1-schema-freeze-manifest.md). The
# machine-readable OpenAPI + SSE schema are the authoritative drift GATES; the
# prose markdown is the human reference and is allowed to lag (tolerate_drift).
# These are what ratatoskr's v1 coverage map (docs/coverage-map.md) audits
# against. Pin target: Worldtree 5810a26 (v1.0.0b2).
# ---------------------------------------------------------------------------
[[pins]]
id = "worldtree-conversation-api-openapi-v2"
canonical_source = "Worldtree"
canonical_path = "docs/conversation-api-openapi.json"
consumer_path = "docs/conversation-api-openapi.json"
pinned_sha256_16 = "dbdf4e24c8b06c92"
pinned_at = "2026-06-30T22:25:56+00:00"
[[pins]]
id = "worldtree-conversation-api-sse-events-v1"
canonical_source = "Worldtree"
canonical_path = "docs/conversation-api-sse-events.schema.json"
consumer_path = "docs/conversation-api-sse-events.schema.json"
pinned_sha256_16 = "9deeebf404d72f9a"
pinned_at = "2026-06-30T22:25:56+00:00"
[[pins]]
id = "worldtree-conversation-api-spec-v1"
canonical_source = "Worldtree"
canonical_path = "docs/conversation-api-spec.md"
consumer_path = "docs/conversation-api-spec.md"
pinned_sha256_16 = "2d111a3b8322b7d1"
pinned_at = "2026-06-30T22:25:56+00:00"
tolerate_drift = true # prose reference; OpenAPI+SSE are the gates