feat: integrate protocol corpus and offline Wallet Kernel spending controls - #4

Merged

Aznatkoiny merged 167 commits into

mainfrom

codex/agent-spend-control-implementation

Aug 2, 2026

Commits on Jul 11, 2026

Initial commit: Skill Asset Protocol corpus as of 2026-07-11

Aznatkoiny
and
claude
committed
8ad9a1c
Add reframe + Pi-Wielder spike design doc

Aznatkoiny
and
claude
committed
1c85de7
Add pi-wielder spike: one wallet, two asset classes, e2e green

Aznatkoiny
and
claude
committed
d1e68b9
Reframe corpus: compensation/attribution layer as terminal product

Aznatkoiny
and
claude
committed
73cb5ca
Add AGENTS.md + Codex handoff for premise-review follow-ups

Aznatkoiny
and
claude
committed
24e3544

Commits on Jul 12, 2026

Fix CMA latency spike escaping
Aznatkoiny
committed
a02b303
Add resumable Phase 0 provenance demo
Aznatkoiny
committed
3236e64
Record first real-network run results (Base Sepolia)

Aznatkoiny
and
claude
committed
69e7c6c
Add offline clone economics spike
Aznatkoiny
committed
8223808
Model free reauthor fork economics
Aznatkoiny
committed
5d5ca22
Fix CMA latency measurement semantics
Aznatkoiny
committed
45797ae
Verify metadata before resuming Phase 0
Aznatkoiny
committed
7b225b5
Phase A: live measurements for KC2/KC4 + review findings

Aznatkoiny
and
claude
committed
a462ade
Pre-publication hygiene from open-source audit

Aznatkoiny
and
claude
committed
a123bab

Commits on Jul 13, 2026

Add campaign kit: LinkedIn/X/HN copy + 2-week calendar, compliance-swept

Aznatkoiny
and
claude
committed
ae09fd6
Fix pi extension: provider requires apiKey field; payment is the credential

Aznatkoiny
and
claude
committed
057e865
Fix pi extension: model entries need reasoning/input/cost fields

Aznatkoiny
and
claude
committed
8488abc
Gateway speaks SSE: fix 'Stream ended without finish_reason' in pi

Aznatkoiny
and
claude
committed
54eb8d9
Gateway translates pi's real OpenAI shapes: array content + tool calls

Aznatkoiny
and
claude
committed
be31ce9

Commits on Jul 15, 2026

Registry-not-marketplace: protocol distribution strategy, fact-checked

Aznatkoiny
and
claude
committed
015f232
PRD: feed measured Phase-A/spike numbers back into the canonical doc

Aznatkoiny
and
claude
committed
b6d4861
Launch-week housekeeping: KC7 instantiated, slip recorded, handoff refreshed

Aznatkoiny
and
claude
committed
ee9a01b
Measure x402 overhead distribution (n=48): p50 731ms / p95 1206ms

Aznatkoiny
and
claude
committed
3506eeb
Day-2 campaign revamp: repo flipped public, numbers refreshed, calendar re-anchored

Aznatkoiny
and
claude
committed
56228b0

Commits on Jul 17, 2026

docs: design adversarial review remediation
Aznatkoiny
committed
bad032b
chore: ignore local worktrees
Aznatkoiny
committed
e5a8f91

Commits on Jul 18, 2026

docs: plan adversarial remediation execution
Aznatkoiny
committed
754c951
test: guard quarantined launch claims
Aznatkoiny
committed
bf5a0db
docs: quarantine unreproducible overhead summary
Aznatkoiny
committed
610658f
docs: quarantine invalid clone campaign claims
Aznatkoiny
committed
73234f9
docs: correct x402 and measurement claims
Aznatkoiny
committed
590fc98
docs: bound hosted Skill extraction claims
Aznatkoiny
committed
616917c
fix: invalidate clone conclusions on failed target
Aznatkoiny
committed
7b28193
test: preserve retained clone run evidence
Aznatkoiny
committed
95a3dda
feat: preregister larger clone fixture set
Aznatkoiny
committed
5725077
docs: preregister clone high-N sweep
Aznatkoiny
committed
30efdea
docs: add unapproved clone sweep budget contract
Aznatkoiny
committed
75e818f
fix: harden clone validity and retained evidence checks
Aznatkoiny
committed
ef0ae80
feat: add gated clone high-N sweep
Aznatkoiny
committed
bf98732
feat: write reproducible clone evidence bundles
Aznatkoiny
committed
e43ff43
feat: add hash-locked legacy evidence importer
Aznatkoiny
committed
f23c3ba
fix: close live clone sweep authorization bypasses
Aznatkoiny
committed
ab49b0d
docs: preserve invalid clone run as reproducible evidence
Aznatkoiny
committed
5fbe776
docs: gate clone high-N provider spend
Aznatkoiny
committed
a9e5428
fix: harden clone evidence bundles
Aznatkoiny
committed
be67140
fix: close clone evidence text channels
Aznatkoiny
committed
d139c92
fix: bind live evidence to execution state
Aznatkoiny
committed
b639ee4
fix: bind clone evidence to reproducible claims
Aznatkoiny
committed
315824b
fix: harden clone evidence trust boundaries
Aznatkoiny
committed
9adea45
docs: regenerate invalid clone evidence bundle
Aznatkoiny
committed
9812dea
feat: estimate gas for remaining Phase 0 writes
Aznatkoiny
committed
54afaa1
feat: journal pending Aeneid transactions
Aznatkoiny
committed
8f06463
fix: reconcile Phase 0 transactions and WIP fees
Aznatkoiny
committed
04d2d36
fix: pin stage-specific Phase 0 metadata
Aznatkoiny
committed
c92f835
docs: define Phase 0 wallet-attested proof boundary
Aznatkoiny
committed
3afa41f
feat: add atomic USDC boundary
Aznatkoiny
committed
0f46860
feat: conserve weighted atomic allocations
Aznatkoiny
committed
03d5451
feat: allocate atomic royalties through ancestry
Aznatkoiny
committed
e7a778f
feat: partition external and internal gross amounts
Aznatkoiny
committed
dcab2cb
test: freeze internal allocation matrix
Aznatkoiny
committed
c514cb9
refactor: keep atomic kernel arithmetic explicit
Aznatkoiny
committed
34eb707
docs: mark atomic accounting migration boundary
Aznatkoiny
committed
f545746
feat: add authoritative Invocation journal
Aznatkoiny
committed
de1e4b1
spike: define internal Invocation award schemas
Aznatkoiny
committed
97428f9
fix: harden Invocation journal durability
Aznatkoiny
committed
461c16c
spike: reserve employer Invocation budgets atomically
Aznatkoiny
committed
573d9fd
feat: model explicit registration attestation levels
Aznatkoiny
committed
6f56b30
feat: bind x402 payment lifecycle
Aznatkoiny
committed
6d5aa21
fix: preserve unresolved x402 settlements
Aznatkoiny
committed
c1247a2
feat: verify repository-control attestations offline
Aznatkoiny
committed
9d920e0
fix: fail closed on ambiguous settlement evidence
Aznatkoiny
committed
6eacc73
spike: execute budget-backed internal Invocations
Aznatkoiny
committed
5eb1699
fix: keep local attestation journal ignored
Aznatkoiny
committed
b8444aa
fix: bind attestation config checks to file descriptors
Aznatkoiny
committed
d394ce1
feat: persist append-only registration attestations
Aznatkoiny
committed
32af805
fix: sequence cancelled Invocation receipts
Aznatkoiny
committed
8ca7c3b
feat: make Collar invocation-authoritative
Aznatkoiny
committed
2363050
spike: sign internal award receipts and statements
Aznatkoiny
committed
91bf2ac
fix: preserve attestation lock and log ownership
Aznatkoiny
committed
7d6cb45
docs: report internal Invocation award spike
Aznatkoiny
committed
e66a1ac
fix: snapshot verifier inputs before attestation replay
Aznatkoiny
committed
e97b891
fix: bind credentials and receipt journals
Aznatkoiny
committed
f155480
feat: expose honest Phase 0 attestation status
Aznatkoiny
committed
3c7d617
test: harden statement determinism and tamper coverage
Aznatkoiny
committed
3753baa
fix: serialize refunds and sanitize provider failures
Aznatkoiny
committed
4aee3c7
fix: close cross-process lifecycle races
Aznatkoiny
committed
d035c3e
feat: make Wielder ledger a trusted receipt view
Aznatkoiny
committed
11fae53
fix: sanitize unhandled Collar failures
Aznatkoiny
committed
eed439f
docs: define Collar journal authority
Aznatkoiny
committed
ffe1710
feat: allocate internal failure COGS in shared kernel
Aznatkoiny
committed
a83294b
fix: make signed attestations replay-safe
Aznatkoiny
committed
884c20f
fix: isolate offline Git attestation verification
Aznatkoiny
committed
fa441f2
fix: harden attestation replay validation
Aznatkoiny
committed
42f814e
fix: close Collar adversarial review gaps
Aznatkoiny
committed
af2f455
fix: close internal award lifecycle trust gaps
Aznatkoiny
committed
9d0ccd9
fix: require fresh evidence after attestation revocation
Aznatkoiny
committed
0e79d45
fix: harden internal award trust and arrears
Aznatkoiny
committed
87cf025
fix: harden tracked attestation seed
Aznatkoiny
committed
57224c6
feat: enforce Wielder payment policy
Aznatkoiny
committed
0c8fbe9
feat: gate x402 signatures and settlement
Aznatkoiny
committed
b0c07ed
docs: define one-process Wielder limits
Aznatkoiny
committed
c2c5c61
fix: enforce forge keys and expose conflicts
Aznatkoiny
committed
0c97965
fix: reject inherited forge signer trust
Aznatkoiny
committed
8b25d61
fix: enforce internal award period trust
Aznatkoiny
committed
4c5ef77
fix: reject inherited credential signer keys
Aznatkoiny
committed
32294f1
fix: harden attestation trust and status
Aznatkoiny
committed
a5824f2
fix: harden Wielder payment policy correctness
Aznatkoiny
committed
80a608d
fix: harden attestation output and commit OIDs
Aznatkoiny
committed
868026c
fix: complete internal award acceptance contract
Aznatkoiny
committed
ff5050b
fix: close Wielder acceptance gaps
Aznatkoiny
committed
1ec9a7b
fix: close attestation CLI and trust gaps
Aznatkoiny
committed
11a4cb7
fix: snapshot internal award trust inputs
Aznatkoiny
committed
e6a48cf
fix: preserve terminal authorization replay
Aznatkoiny
committed
39b2e31
fix: close attestation acceptance blockers
Aznatkoiny
committed
ef42617
fix: prevent Wielder reservation reentrancy
Aznatkoiny
committed
51abab0
docs: clarify Wielder header binding
Aznatkoiny
committed
4811bbe
feat: quote hosted Skill execution costs
Aznatkoiny
committed
bcd70ec
feat: detect direct Skill serialization
Aznatkoiny
committed
385eca8
spike: rank registry entries by independent settled use
Aznatkoiny
committed
3810ef5
docs: define settlement-verifiable registry metrics
Aznatkoiny
committed
a7f2368
docs: capture narrow Base Sepolia transaction evidence
Aznatkoiny
committed
00bb247
fix: reject cross-Skill registry duplicates
Aznatkoiny
committed
8103fff
fix: align public demo with verified accounting
Aznatkoiny
committed
17ec3c3
feat: bind execution quote to x402 payment
Aznatkoiny
committed
dfce384
feat: settle hosted Skill COGS before royalties
Aznatkoiny
committed
d2feed7
docs: label hosted Skill execution economics
Aznatkoiny
committed
ede1d0e
fix: harden public demo validation boundaries
Aznatkoiny
committed
913ce0c
fix: recover settled execution across catalog drift
Aznatkoiny
committed
6ba76e0
docs: satisfy clone claim quarantine gate
Aznatkoiny
committed
f651f7d
fix: count vesting-pending awards toward period cap
Aznatkoiny
committed
d669c6d
fix: bound Phase 0 metadata responses
Aznatkoiny
committed
0b9ff17
fix: harden registry and public demo boundaries
Aznatkoiny
committed
0779fa1
fix: bound Pi payment runtime I/O
Aznatkoiny
committed
25c4af3
docs: fix authorship overclaim verification
Aznatkoiny
committed
eb227dc
docs: make Collar secret scan fail closed
Aznatkoiny
committed
2dbcb9c
docs: distinguish complete private keys in scan
Aznatkoiny
committed
5ca44b8
fix: bound clone provider transport
Aznatkoiny
committed
412f012
fix: require bounded x402 challenge streams
Aznatkoiny
committed
cfac5b4
fix: lock clone provider security ceilings
Aznatkoiny
committed
e2c92ac
fix: close final Pi runtime trust boundaries
Aznatkoiny
committed
ee19624
fix: close Pi payment replay and request gaps
Aznatkoiny
committed
64f5699
fix: bind payment validity before settlement
Aznatkoiny
committed
4230ac4
fix: require live settlement for live providers
Aznatkoiny
committed
fa9078f
docs: record adversarial readiness ledger
Aznatkoiny
committed
e7ddbeb
docs: propose protected corpus alignment after readiness
Aznatkoiny
committed
165cc56

Commits on Jul 19, 2026

Merge adversarial security remediation
Aznatkoiny
authored
6f70060

Commits on Jul 31, 2026

docs: design agent spend control plane
Aznatkoiny
committed
07c3549

Commits on Aug 1, 2026

docs: plan agent spend control plane
Aznatkoiny
committed
0457931
docs: harden agent spend control plan
Aznatkoiny
committed
0bd9d75
build: pin wallet kernel runtime
Aznatkoiny
committed
9dc190f
fix: harden canonical copy boundaries
Aznatkoiny
committed
ed2f964
feat: add trusted authority path guard
Aznatkoiny
committed
0be3c20
fix: fail closed on trusted publish mismatch
Aznatkoiny
committed
1c1a179
feat: secure wallet kernel storage paths
Aznatkoiny
committed
d0f77d4
fix: harden secure storage authority
Aznatkoiny
committed
1e8f577
fix: detach secure validator views
Aznatkoiny
committed
ebcf6d8
feat: add wallet kernel authority lock
Aznatkoiny
committed
adf1bd7
fix: harden authority lock transitions
Aznatkoiny
committed
ae9bce5
fix: preserve authority lock error boundary
Aznatkoiny
committed
f27cd13
feat: add durable wallet kernel store
Aznatkoiny
committed
176fa23
fix: preserve SQLite WAL locking protocol
Aznatkoiny
committed
76e98a0
fix: close wallet kernel authority escapes
Aznatkoiny
committed
e1dfb31
feat: add versioned agent spend policy
Aznatkoiny
committed
7602383
merge: reconcile GitHub website history
Aznatkoiny
committed
d55220b

Commits on Aug 2, 2026

feat: add offline wallet kernel spending controls
Aznatkoiny
committed
80672cd
fix: make wallet approvals deliberate and replay-safe
Aznatkoiny
committed
a6620a6
fix: pin resolvable setup-node action
Aznatkoiny
committed
106822f