[Kernel][G06] Retain admitted knowledge snapshot and harness-evidence provenance #55

Open
opened 2026-10-04 22:27:40 +00:00 by kilo · 3 comments
Member

Priority: P3

Type: optional integration.

Current Scope And Supersession

Published under the owner's 2026-10-27 bounded architecture/backlog mandate #103. PR #104 is merged at ace7175e087cd70e207594f5631c8f4f70fabfd4; pending/prepared wording at that historical cut is not current integration status. This active content supersedes conflicting historical descriptive scope, priorities and dependencies, including dated comments, without changing their evidence or review counters. The complete pre-update body is preserved unchanged under ## Historical Scope And Evidence below. Prepared A is registered #105 and B is registered #106. Publication does not select implementation or establish overall alignment acceptance.

P3 means optional capability expansion with a useful independent result under the integrated P0-P3 Priority Contract; delivered provenance is not demoted or redelivered. Lower number is earlier, not a budget or deadline. This is the single active priority. Eligibility/evidence precede priority; ranking never bypasses prerequisites, owner decisions, STOP_REVISE or exact invalid/wontfix/duplicate exclusions. Ranked-before-unranked, explicit dependency ordering, oldest registration/tie by ID and existing /loop authority remain unchanged.

Goal

Receive selected versioned MI/harness knowledge as attributed context without duplicating catalogue/ranking or creating authority.

Why

PR #101 already delivers utilized-reference provenance and must not be redelivered as missing work.

Scope

Preserve codec-v3 utilized reference and local-only labels; optional direct content/sidecar/cut interpretation and harness-interface evidence through #105's knowledge seam, only for supported producer semantics. MI #19 / SR #176 remain accepted explanation-only installed work.

Current producer correction: SR newer develop 4a182affa4775a4a38b47860ad7622a099c56c4a, #222/PR #223, integrates default-off D-082 opt-in MI admission. D-082 policy is not wholly unaccepted. This does not establish real-source positive adoption, all-scope source association or CK direct-content acceptance and does not expand this issue. The historical alignment cut's broader-policy caveat must not be read as denying that integrated bounded opt-in policy.

Acceptance Criteria

  1. Retain original utilization reference/codec1/2/3 bytes and unknown/unsupported/malformed behavior; absent reference is not missing mandatory selection authority or a reason to reroute.
  2. Optional selected source content binds exact producer/version/cut/revision/evaluation/provenance, rights, integrity and declared freshness/withdrawal. Unaccepted broader policy refuses, never invents a freshness renewal, calibration, profile or active source association.
  3. Prove direct harness evidence does not grant work authority, infer runtime support or rank models; requested/resolved/observed execution facts remain separate from published compatibility claims.
  4. Exercise supported/missing/outdated/withdrawn/permission-limited/unsupported sources and source drift with preserved historical evidence and no default network retrieval or private-data upload.
  5. Installed optional-consumer tests and migration docs distinguish retained reference, retrieved content, synthetic producer fixtures and separately authorized live reception. No mandatory MI service.

Dependencies

#105 for new generic reader composition; exact existing MI publication/utilization contract and SR utilization only when that lane is used. No #52/#106/basic-coordination prerequisite in either direction. Owner-controlled expansion of sharing/active adoption remains a separate decision.

Constraints

ADR 0012 and ADR 0011 apply. Preserve inward dependencies (adapters -> ports -> core) and the self-contained public core; no private repository or live-service dependency for core/offline tests. No new coding agent, tracker, catalogue, gateway or generic workflow DSL. No credential/runtime-state copying. Preserve old bytes/IDs/unknowns and #53 CLOSED / NOT IMPLEMENTED, PR #85 CLOSED / UNMERGED; its strict-expiry negative and review history are not an accepted adapter or pass. Synthetic offline tests plus the installed path and independent exact-subject review are required. Live inference/effects/releases require separate authority; this publication grants no accounts, live spending, private data access, merge, release or deployment. Preserve PR #100 as a negative receipt, not full route acceptance, and PR #101 as provenance-only, not full knowledge-content acceptance. Historical evidence and all review counters remain immutable.

Historical Scope And Evidence

Goal

Owner: Kernel consumer. Preserve references to actually used MI knowledge/provenance supplied through Router decisions, and separately support justified direct harness-interface evidence without becoming an intelligence ranking/collection product. Source: shared architecture v1.0, sections 1-8, 9.2-9.4, 10-18 via #46 brief.

Why

The accepted result must explain which knowledge informed routing or harness compatibility without fabricating a snapshot identity. MI normally supplies Router, not a mandatory per-inference Kernel service; unavailable MI alone should not terminate an already authorized Attempt.

Current Evidence

Kernel eb4f4a2956 has ContextPackage manifests and canonical decision provenance in Allocation but no MI publication consumer. #7 excludes full context/telemetry; #11 recommendation-only. MI develop fb7299810fdc4612d4e0559465faef571662c6ef integrates #9/PR #10 evidence/knowledge/effective projection proof, not a publication wire schema. Actual producer MI #13 defines future publication/conformance and #14 defines mapping ownership; Router #176 is consumer work, not implemented integration.

Scope

Consume producer-approved publication references and associated completeness/version/provenance/unknown semantics through the Router public result. Persist utilized knowledge at preparation and retain it across restart/candidate/export. If directly reading MI for harness API evidence, keep assertion strength/version/time/licensing distinct from local observed capability and authority. Do not invent shared schema before producer-consumer agreement.

Acceptance Criteria

  1. Producer-shaped tests trace task requirement -> Router decision -> admitted MI publication reference -> immutable Attempt/candidate/outcome evidence; missing reference remains explicitly unknown, not fabricated.
  2. Unsupported version, incomplete/corrupt update, stale/conflicting/withdrawn/future evidence are distinguished using producer semantics; refresh failure cannot silently renew freshness or convert missing prices to zero.
  3. Restart uses original references and preserves old evidence; MI outage does not silently reselect/change active route or stop an already authorized Attempt. Critical withdrawal uses explicit accepted policy, not guessed behavior.
  4. Direct harness evidence records advertised/observed/selectable/enforceable distinctions and actual tool/version; published support cannot grant local execution/permission or prove physical identity.
  5. Migration keeps old decision/context/Attempt bytes and unknown references honestly labelled; local export preserves references with license/distribution restrictions and no secrets. Compatibility/negative conformance, diagnostics/docs, gates and exact-HEAD review.

Reuse

Retain ContextPackage/Allocation/provenance and content-addressed artifacts; adopt MI #13 publication and Router #176 consumer contract only after exact revision/files/rights/semantic/negative/security/dependency/maintenance proof. Reuse MI temporal distinctions, not its proof Python layout as a permanent wire API. No crawler, score, ontology or direct benchmark-to-model choice.

Dependencies And Priority

Contract integration after MI #13 publication and Router #176 admitted-result provenance, alongside Kernel #51 requirements/#52 route and #47 harness evidence. #14 coordinates mapping ownership. This registered consumer issue does not duplicate MI production or Router consumption; prioritize before claiming explainable end-to-end route evidence.

Constraints And Permissions

No private balances/quota collection, local ranking, authority from snapshots, mandatory remote MI lookup, automatic publication or state sharing. Offline contract proof needs no inference; live producer/service access and direct harness probes need separately scoped access/inference where applicable. Contested freshness/withdrawal policy needs the relevant owner.

Non-Goals

No MI publication, Router catalog migration or ranking implementation inside Kernel; no live inference authority.

Priority: P3 Type: optional integration. ## Current Scope And Supersession Published under the owner's 2026-10-27 bounded architecture/backlog mandate #103. PR #104 is merged at `ace7175e087cd70e207594f5631c8f4f70fabfd4`; pending/prepared wording at that historical cut is not current integration status. This active content supersedes conflicting historical descriptive scope, priorities and dependencies, including dated comments, without changing their evidence or review counters. The complete pre-update body is preserved unchanged under `## Historical Scope And Evidence` below. Prepared A is registered #105 and B is registered #106. Publication does not select implementation or establish overall alignment acceptance. P3 means optional capability expansion with a useful independent result under the integrated P0-P3 Priority Contract; delivered provenance is not demoted or redelivered. Lower number is earlier, not a budget or deadline. This is the single active priority. Eligibility/evidence precede priority; ranking never bypasses prerequisites, owner decisions, STOP_REVISE or exact invalid/wontfix/duplicate exclusions. Ranked-before-unranked, explicit dependency ordering, oldest registration/tie by ID and existing /loop authority remain unchanged. ## Goal Receive selected versioned MI/harness knowledge as attributed context without duplicating catalogue/ranking or creating authority. ## Why PR #101 already delivers utilized-reference provenance and must not be redelivered as missing work. ## Scope Preserve codec-v3 utilized reference and local-only labels; optional direct content/sidecar/cut interpretation and harness-interface evidence through #105's knowledge seam, only for supported producer semantics. MI #19 / SR #176 remain accepted explanation-only installed work. Current producer correction: SR newer develop `4a182affa4775a4a38b47860ad7622a099c56c4a`, #222/PR #223, integrates default-off D-082 opt-in MI admission. D-082 policy is not wholly unaccepted. This does not establish real-source positive adoption, all-scope source association or CK direct-content acceptance and does not expand this issue. The historical alignment cut's broader-policy caveat must not be read as denying that integrated bounded opt-in policy. ## Acceptance Criteria 1. Retain original utilization reference/codec1/2/3 bytes and unknown/unsupported/malformed behavior; absent reference is not missing mandatory selection authority or a reason to reroute. 2. Optional selected source content binds exact producer/version/cut/revision/evaluation/provenance, rights, integrity and declared freshness/withdrawal. Unaccepted broader policy refuses, never invents a freshness renewal, calibration, profile or active source association. 3. Prove direct harness evidence does not grant work authority, infer runtime support or rank models; requested/resolved/observed execution facts remain separate from published compatibility claims. 4. Exercise supported/missing/outdated/withdrawn/permission-limited/unsupported sources and source drift with preserved historical evidence and no default network retrieval or private-data upload. 5. Installed optional-consumer tests and migration docs distinguish retained reference, retrieved content, synthetic producer fixtures and separately authorized live reception. No mandatory MI service. ## Dependencies #105 for new generic reader composition; exact existing MI publication/utilization contract and SR utilization only when that lane is used. No #52/#106/basic-coordination prerequisite in either direction. Owner-controlled expansion of sharing/active adoption remains a separate decision. ## Constraints ADR 0012 and ADR 0011 apply. Preserve inward dependencies (`adapters -> ports -> core`) and the self-contained public core; no private repository or live-service dependency for core/offline tests. No new coding agent, tracker, catalogue, gateway or generic workflow DSL. No credential/runtime-state copying. Preserve old bytes/IDs/unknowns and #53 CLOSED / NOT IMPLEMENTED, PR #85 CLOSED / UNMERGED; its strict-expiry negative and review history are not an accepted adapter or pass. Synthetic offline tests plus the installed path and independent exact-subject review are required. Live inference/effects/releases require separate authority; this publication grants no accounts, live spending, private data access, merge, release or deployment. Preserve PR #100 as a negative receipt, not full route acceptance, and PR #101 as provenance-only, not full knowledge-content acceptance. Historical evidence and all review counters remain immutable. ## Links - Mandate #103: https://forgejo.creatidy.com/Creatidy/creatidy-kernel/issues/103 - Integrated PR #104: https://forgejo.creatidy.com/Creatidy/creatidy-kernel/pulls/104 (merge `ace7175e087cd70e207594f5631c8f4f70fabfd4`). - ADR 0012: https://forgejo.creatidy.com/Creatidy/creatidy-kernel/src/commit/ace7175e087cd70e207594f5631c8f4f70fabfd4/docs/adr/0012-unified-work-coordination-and-drivers.md - ADR 0011: https://forgejo.creatidy.com/Creatidy/creatidy-kernel/src/commit/ace7175e087cd70e207594f5631c8f4f70fabfd4/docs/adr/0011-task-level-authority-and-trusted-development.md - Target: https://forgejo.creatidy.com/Creatidy/creatidy-kernel/src/commit/ace7175e087cd70e207594f5631c8f4f70fabfd4/docs/architecture/target.md - Migration: https://forgejo.creatidy.com/Creatidy/creatidy-kernel/src/commit/ace7175e087cd70e207594f5631c8f4f70fabfd4/docs/architecture/migration.md - Exact payload, shared constraints and Priority Contract: https://forgejo.creatidy.com/Creatidy/creatidy-kernel/src/commit/ace7175e087cd70e207594f5631c8f4f70fabfd4/docs/architecture/backlog-alignment.md - PR #101 provenance-only delivery: https://forgejo.creatidy.com/Creatidy/creatidy-kernel/pulls/101 ; integrated evidence/review counters: https://forgejo.creatidy.com/Creatidy/creatidy-kernel/issues/55#issuecomment-19020 - MI publication #13: https://forgejo.creatidy.com/Creatidy/model-intelligence/issues/13 - MI installed utilization #19: https://forgejo.creatidy.com/Creatidy/model-intelligence/issues/19 - SR utilization #176: https://forgejo.creatidy.com/BioMedical-IT/scarcity-router/issues/176 - Independent knowledge drivers #105: https://forgejo.creatidy.com/Creatidy/creatidy-kernel/issues/105 - SR D-082 opt-in admission #222: https://forgejo.creatidy.com/BioMedical-IT/scarcity-router/issues/222 - SR integrated PR #223: https://forgejo.creatidy.com/BioMedical-IT/scarcity-router/pulls/223 ; producer cut: https://forgejo.creatidy.com/BioMedical-IT/scarcity-router/src/commit/4a182affa4775a4a38b47860ad7622a099c56c4a ## Historical Scope And Evidence ## Goal Owner: Kernel consumer. Preserve references to actually used MI knowledge/provenance supplied through Router decisions, and separately support justified direct harness-interface evidence without becoming an intelligence ranking/collection product. Source: shared architecture v1.0, sections 1-8, 9.2-9.4, 10-18 via #46 brief. ## Why The accepted result must explain which knowledge informed routing or harness compatibility without fabricating a snapshot identity. MI normally supplies Router, not a mandatory per-inference Kernel service; unavailable MI alone should not terminate an already authorized Attempt. ## Current Evidence Kernel eb4f4a2956712bfaf39a3271e1523e7f77a91e26 has ContextPackage manifests and canonical decision provenance in Allocation but no MI publication consumer. #7 excludes full context/telemetry; #11 recommendation-only. MI develop fb7299810fdc4612d4e0559465faef571662c6ef integrates #9/PR #10 evidence/knowledge/effective projection proof, not a publication wire schema. Actual producer MI #13 defines future publication/conformance and #14 defines mapping ownership; Router #176 is consumer work, not implemented integration. ## Scope Consume producer-approved publication references and associated completeness/version/provenance/unknown semantics through the Router public result. Persist utilized knowledge at preparation and retain it across restart/candidate/export. If directly reading MI for harness API evidence, keep assertion strength/version/time/licensing distinct from local observed capability and authority. Do not invent shared schema before producer-consumer agreement. ## Acceptance Criteria 1. Producer-shaped tests trace task requirement -> Router decision -> admitted MI publication reference -> immutable Attempt/candidate/outcome evidence; missing reference remains explicitly unknown, not fabricated. 2. Unsupported version, incomplete/corrupt update, stale/conflicting/withdrawn/future evidence are distinguished using producer semantics; refresh failure cannot silently renew freshness or convert missing prices to zero. 3. Restart uses original references and preserves old evidence; MI outage does not silently reselect/change active route or stop an already authorized Attempt. Critical withdrawal uses explicit accepted policy, not guessed behavior. 4. Direct harness evidence records advertised/observed/selectable/enforceable distinctions and actual tool/version; published support cannot grant local execution/permission or prove physical identity. 5. Migration keeps old decision/context/Attempt bytes and unknown references honestly labelled; local export preserves references with license/distribution restrictions and no secrets. Compatibility/negative conformance, diagnostics/docs, gates and exact-HEAD review. ## Reuse Retain ContextPackage/Allocation/provenance and content-addressed artifacts; adopt MI #13 publication and Router #176 consumer contract only after exact revision/files/rights/semantic/negative/security/dependency/maintenance proof. Reuse MI temporal distinctions, not its proof Python layout as a permanent wire API. No crawler, score, ontology or direct benchmark-to-model choice. ## Dependencies And Priority Contract integration after MI #13 publication and Router #176 admitted-result provenance, alongside Kernel #51 requirements/#52 route and #47 harness evidence. #14 coordinates mapping ownership. This registered consumer issue does not duplicate MI production or Router consumption; prioritize before claiming explainable end-to-end route evidence. ## Constraints And Permissions No private balances/quota collection, local ranking, authority from snapshots, mandatory remote MI lookup, automatic publication or state sharing. Offline contract proof needs no inference; live producer/service access and direct harness probes need separately scoped access/inference where applicable. Contested freshness/withdrawal policy needs the relevant owner. ## Links - Parent: https://forgejo.creatidy.com/Creatidy/creatidy-kernel/issues/46 - MI publication producer: https://forgejo.creatidy.com/Creatidy/model-intelligence/issues/13 - Mapping boundary: https://forgejo.creatidy.com/Creatidy/model-intelligence/issues/14 - Router consumer: https://forgejo.creatidy.com/BioMedical-IT/scarcity-router/issues/176 - Kernel route: https://forgejo.creatidy.com/Creatidy/creatidy-kernel/issues/52 ## Non-Goals No MI publication, Router catalog migration or ranking implementation inside Kernel; no live inference authority.
Author
Member

Producer semantics clarification fetched from actual MI #13 comment Creatidy/model-intelligence#13 (comment): conformance must freeze the evidence cut and evaluation semantics, not a guessed current-view digest. Existing knowledge(evidence, at) is not historical knowledge reconstruction; effective_at does not itself filter stale observations; fresh_until=None is not proved freshness. Preserve exact utilized reference/input cut and unknown freshness in Kernel without changing MI proof semantics, inventing global TTL or querying today's mutable evidence during replay. Publication completeness and licensed-source production remain MI #13/#15, admission/freshness policy Router #176, Kernel retention this issue. Optional operational sharing MI #17 is not a prerequisite for local execution or authorized active Attempt recovery.

Producer semantics clarification fetched from actual MI #13 comment https://forgejo.creatidy.com/Creatidy/model-intelligence/issues/13#issuecomment-13850: conformance must freeze the evidence cut and evaluation semantics, not a guessed current-view digest. Existing knowledge(evidence, at) is not historical knowledge reconstruction; effective_at does not itself filter stale observations; fresh_until=None is not proved freshness. Preserve exact utilized reference/input cut and unknown freshness in Kernel without changing MI proof semantics, inventing global TTL or querying today's mutable evidence during replay. Publication completeness and licensed-source production remain MI #13/#15, admission/freshness policy Router #176, Kernel retention this issue. Optional operational sharing MI #17 is not a prerequisite for local execution or authorized active Attempt recovery.
Author
Member

Selected under the resumed /loop after fresh queue/producer verification. Bounded offline utilized-reference consumer proposed in PR #101 (Refs #55; keep this issue open).

Router #176 is accepted with its actual consumer merged at 4162f6fa… consuming the MI publication d658916…; Router's own issue names Kernel #55 as the separate downstream utilized-reference consumer. This delivery retains and validates the exact mi_utilization reference (model_intelligence / urn:mi:utilization:sha256:<64hex> / mi.utilization-working/1) from the public selection envelope, binds it immutably to the Attempt allocation (codec v3; v1/v2 bytes unchanged), distinguishes corrupt grammar (refusal) from unsupported producer versions (explicit retention), exports explicit not_retained/utilized/unsupported_version states with provenance-only/local-only labels, and negative-tests that the reference grants no runtime authority. Restart stability is asserted end to end through the reference composition, including router-outage and changed-decision recovery.

Remaining open scope for this issue: direct MI harness-interface evidence reads (the AC4 conditional clause), any utilization sidecar/cut decoding, freshness/withdrawal semantics beyond the reference grammar, and live producer access. Full route retention (#52) stays separately gated by the recorded Kilo/Router main-path incompatibility.

Selected under the resumed `/loop` after fresh queue/producer verification. Bounded offline utilized-reference consumer proposed in PR #101 (Refs #55; keep this issue open). Router #176 is accepted with its actual consumer merged at `4162f6fa…` consuming the MI publication `d658916…`; Router's own issue names Kernel #55 as the separate downstream utilized-reference consumer. This delivery retains and validates the exact `mi_utilization` reference (`model_intelligence` / `urn:mi:utilization:sha256:<64hex>` / `mi.utilization-working/1`) from the public selection envelope, binds it immutably to the Attempt allocation (codec v3; v1/v2 bytes unchanged), distinguishes corrupt grammar (refusal) from unsupported producer versions (explicit retention), exports explicit `not_retained`/`utilized`/`unsupported_version` states with provenance-only/local-only labels, and negative-tests that the reference grants no runtime authority. Restart stability is asserted end to end through the reference composition, including router-outage and changed-decision recovery. Remaining open scope for this issue: direct MI harness-interface evidence reads (the AC4 conditional clause), any utilization sidecar/cut decoding, freshness/withdrawal semantics beyond the reference grammar, and live producer access. Full route retention (#52) stays separately gated by the recorded Kilo/Router main-path incompatibility.
Author
Member

Bounded utilized-reference consumer integrated in PR #101 (Refs #55; issue deliberately stays open). Supported normal merge produced 038da8be9c4d07e3ccc92c107862125f979a5c47 with exact parents base f4d86ea0a8e1b048d186fae01d49bb2283fc99d6 and approved head fdc2aa98a7922d3c8610eac1dc3edfb17c601f8b; develop advanced from the approved base, the approved head is its ancestor, and the integrated tree is byte-identical to the reviewed head. CI succeeded on the exact head (#3238, 2m26s).

Review ledger for this delivery: ordinal 1 infrastructure failure (subagent usage limit, no verdict), ordinal 2 COMMENT infrastructure (full independent source verification, zero findings; gates not executed because the reviewer's improvised command variants did not match the exact-string allowlist), ordinal 3 fresh APPROVE with empty findings — independently executed make check (1503 passed/85 skipped/106 subtests) and make package-check, plus producer-contract verification at Router 4162f6f and MI d658916 including Apache-2.0 license checks.

Delivered: mi_utilization reference validation with corrupt-grammar refusal and explicit unsupported_version retention; allocation codec v3 immutable Attempt-bound retention (v1/v2 bytes unchanged); explicit not_retained/utilized/unsupported_version export states with provenance-only/local-only labels; provenance-only no-authorory negative tests; end-to-end restart stability through the reference composition including router-outage and changed-decision recovery.

Remaining open scope on this issue: direct MI harness-interface evidence reads (AC4 conditional clause), utilization sidecar/cut decoding, contested freshness/withdrawal policy (owner-gated per Constraints), and any live producer access.

Bounded utilized-reference consumer integrated in PR #101 (Refs #55; issue deliberately stays open). Supported normal merge produced `038da8be9c4d07e3ccc92c107862125f979a5c47` with exact parents base `f4d86ea0a8e1b048d186fae01d49bb2283fc99d6` and approved head `fdc2aa98a7922d3c8610eac1dc3edfb17c601f8b`; develop advanced from the approved base, the approved head is its ancestor, and the integrated tree is byte-identical to the reviewed head. CI succeeded on the exact head (#3238, 2m26s). Review ledger for this delivery: ordinal 1 infrastructure failure (subagent usage limit, no verdict), ordinal 2 COMMENT infrastructure (full independent source verification, zero findings; gates not executed because the reviewer's improvised command variants did not match the exact-string allowlist), ordinal 3 fresh APPROVE with empty findings — independently executed `make check` (1503 passed/85 skipped/106 subtests) and `make package-check`, plus producer-contract verification at Router `4162f6f` and MI `d658916` including Apache-2.0 license checks. Delivered: `mi_utilization` reference validation with corrupt-grammar refusal and explicit `unsupported_version` retention; allocation codec v3 immutable Attempt-bound retention (v1/v2 bytes unchanged); explicit `not_retained`/`utilized`/`unsupported_version` export states with provenance-only/local-only labels; provenance-only no-authorory negative tests; end-to-end restart stability through the reference composition including router-outage and changed-decision recovery. Remaining open scope on this issue: direct MI harness-interface evidence reads (AC4 conditional clause), utilization sidecar/cut decoding, contested freshness/withdrawal policy (owner-gated per Constraints), and any live producer access.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Reference
Creatidy/creatidy-kernel#55
No description provided.