[K2A] Persist K1 Program history in SQLite #14

Merged

adrian.tkacz merged 9 commits from issue-5-k2a-sqlite into develop

2026-09-25 18:44:39 +00:00

kilo commented

2026-09-24 20:26:43 +00:00

Member

Implements Creatidy/creatidy-kernel#5 and keeps the issue open for owner integration.

Persists final K1 Program truth with explicit versioned codecs, append-only decision history, atomic command dedupe/projection updates, and restart-rebuildable projections without replaying history through the current Program.apply().
Preserves ProgramSpec history, approved/effective input provenance, Attempts, TrustedSatisfaction, WorkUnit/Attempt cancellations, conclusions, actors/authority, and ordering.
Rehydrates only inside the adapter using K1 validation; no public arbitrary restore or state-forcing API is added.
Uses one validated native local Linux data directory; opened-path fdinfo.mnt_id checks bind the main DB, WAL/SHM/journal sidecars, and backup artifacts to the actual filesystem. Hidden/split/file-only mounts, OverlayFS, tmpfs/ramfs, volatile storage, network filesystems, and checkpoint-disabled F2FS are rejected.
Uses a private-cache SQLite connection with retained locking_mode=EXCLUSIVE, actual runtime/capability/pragma evidence, and a process/thread ownership guard. Online backups fsync files/directories around atomic publication; amendment inputs follow K1 canonical ordering.
No unconditional SQLite version floor and no K2B/#13, external Operation/outbox, Runtime/Workspace, Forgejo runtime, or K4 semantics.

Validation for HEAD f588de5bcc0d2e8f1b7ae50618cafd8dc7d6c25d: make check passed (142 tests, lint, basedpyright, import contract, secret scan, diff check); make package-check passed; Forgejo CI run #1937 is successful. An independent Local GPT-6 Astra max review returned APPROVE for this exact HEAD with no blocking findings. The completed review ledger and optional nonblocking test suggestions are recorded on Issue #5. This PR is open, targets develop, and has not been merged.

Implements Creatidy/creatidy-kernel#5 and keeps the issue open for owner integration. - Persists final K1 Program truth with explicit versioned codecs, append-only decision history, atomic command dedupe/projection updates, and restart-rebuildable projections without replaying history through the current `Program.apply()`. - Preserves ProgramSpec history, approved/effective input provenance, Attempts, TrustedSatisfaction, WorkUnit/Attempt cancellations, conclusions, actors/authority, and ordering. - Rehydrates only inside the adapter using K1 validation; no public arbitrary restore or state-forcing API is added. - Uses one validated native local Linux data directory; opened-path `fdinfo.mnt_id` checks bind the main DB, WAL/SHM/journal sidecars, and backup artifacts to the actual filesystem. Hidden/split/file-only mounts, OverlayFS, tmpfs/ramfs, volatile storage, network filesystems, and checkpoint-disabled F2FS are rejected. - Uses a private-cache SQLite connection with retained `locking_mode=EXCLUSIVE`, actual runtime/capability/pragma evidence, and a process/thread ownership guard. Online backups fsync files/directories around atomic publication; amendment inputs follow K1 canonical ordering. - No unconditional SQLite version floor and no K2B/#13, external Operation/outbox, Runtime/Workspace, Forgejo runtime, or K4 semantics. Validation for HEAD `f588de5bcc0d2e8f1b7ae50618cafd8dc7d6c25d`: `make check` passed (142 tests, lint, basedpyright, import contract, secret scan, diff check); `make package-check` passed; Forgejo CI run #1937 is successful. An independent Local GPT-6 Astra max review returned `APPROVE` for this exact HEAD with no blocking findings. The completed review ledger and optional nonblocking test suggestions are recorded on Issue #5. This PR is open, targets `develop`, and has not been merged.

kilo added 1 commit

2026-09-24 20:26:43 +00:00