Opt-in verified non-paid admission and truthful source/call facts (#184) #201

Merged

kilo merged 3 commits from issue-184-strict-no-payg into develop

2026-10-08 17:24:19 +00:00

kilo commented

2026-10-08 16:22:05 +00:00

Member

Scope

Refs #184. Implements owner-approved Option1 / D-076: administrator opt-in strict no-PAYG, retaining admitted strictness through dispatch and sequential continuations while applying all current stronger restrictions. Shared competitive/exact admission and current source/control checks refuse absent, incomplete, stale, expired or mismatched complete-path evidence. No client/configuration/worker flag can attest a positive. Current production adapters remain strict-ineligible; legacy/default support and D-063 are preserved.

Trusted local versioned call receipts separate configured rate/output/pool facts, reported/estimated/missing visible usage and actual local reservations from provider reservation, billing, settlement, hidden helpers and task totals. Kernel owns whole-task budgets/authority. Original suspended control scope cannot be replaced by evidence for a different turn. No frozen public/worker/usage/audit fields or operations change; explicit grant migration and additive typed refusal vocabulary are documented.

Current Validation

Base/merge-base 5c48d51f1eb1f11424a5100eb2ccf20a6cba4581; HEAD 51782a8d61017763d45749de5abf6ff5db7b3547.

Sanitized offline uv sync --only-dev, make check (2774 tests, 17 skips, 612.206s, zero type diagnostics), explicit uv run basedpyright zero diagnostics and full/staged whitespace PASS. Full recorder contains complete source patch, exact commands/objects/results and exit0; extracted normalized patch byte-equals frozen complete Git diff and reverse-apply check passed. Focused lifecycle/strict tests:81 PASS. Prior validation/review history and counters retained, normal commits only.

Positive actual HTTP producer/parser reception is fixed inspected synthetic scope, not production subscription/billing proof. Competitive/exact strict-downgrade, revoked authority, source/control/expiry drift, benign refresh, sequential continuation and truthful failed/resumed receipts have deterministic regressions.

Gates

security_critical: complete fresh ordinary technical/UX review followed by independent gpt-daybreak-blue-latest direct official Codex review required at exact unchanged objects. Production/source/live evidence, Kernel aggregation and #199/D-063 retirement remain separately gated. No live provider/inference/billing/overflow/reset probe, deployment, release/main or external-repository mutation. No zero charges, provider settlement or whole-task financial guarantee claimed.

## Scope Refs #184. Implements owner-approved Option1 / D-076: administrator opt-in strict no-PAYG, retaining admitted strictness through dispatch and sequential continuations while applying all current stronger restrictions. Shared competitive/exact admission and current source/control checks refuse absent, incomplete, stale, expired or mismatched complete-path evidence. No client/configuration/worker flag can attest a positive. Current production adapters remain strict-ineligible; legacy/default support and D-063 are preserved. Trusted local versioned call receipts separate configured rate/output/pool facts, reported/estimated/missing visible usage and actual local reservations from provider reservation, billing, settlement, hidden helpers and task totals. Kernel owns whole-task budgets/authority. Original suspended control scope cannot be replaced by evidence for a different turn. No frozen public/worker/usage/audit fields or operations change; explicit grant migration and additive typed refusal vocabulary are documented. ## Current Validation Base/merge-base `5c48d51f1eb1f11424a5100eb2ccf20a6cba4581`; HEAD `51782a8d61017763d45749de5abf6ff5db7b3547`. Sanitized offline `uv sync --only-dev`, `make check` (2774 tests, 17 skips, 612.206s, zero type diagnostics), explicit `uv run basedpyright` zero diagnostics and full/staged whitespace PASS. Full recorder contains complete source patch, exact commands/objects/results and exit0; extracted normalized patch byte-equals frozen complete Git diff and reverse-apply check passed. Focused lifecycle/strict tests:81 PASS. Prior validation/review history and counters retained, normal commits only. Positive actual HTTP producer/parser reception is fixed inspected synthetic scope, not production subscription/billing proof. Competitive/exact strict-downgrade, revoked authority, source/control/expiry drift, benign refresh, sequential continuation and truthful failed/resumed receipts have deterministic regressions. ## Gates security_critical: complete fresh ordinary technical/UX review followed by independent `gpt-daybreak-blue-latest` direct official Codex review required at exact unchanged objects. Production/source/live evidence, Kernel aggregation and #199/D-063 retirement remain separately gated. No live provider/inference/billing/overflow/reset probe, deployment, release/main or external-repository mutation. No zero charges, provider settlement or whole-task financial guarantee claimed.

kilo added 1 commit

2026-10-08 16:22:05 +00:00