Skip to content

Redact local paths from public evidence - #5

Merged
BorisGuo6 merged 1 commit into
mainfrom
agent/redact-public-evidence-paths
Aug 16, 2026
Merged

Redact local paths from public evidence#5
BorisGuo6 merged 1 commit into
mainfrom
agent/redact-public-evidence-paths

Conversation

@BorisGuo6

Copy link
Copy Markdown
Contributor

What changed

  • replace 57 local user-home prefixes in 17 committed public evidence logs with <USER_HOME>
  • add a regression test covering the public report and validation-evidence log trees

Why

The logs are small, intentional acceptance evidence, but the absolute workstation paths exposed real local account names that are not part of the public evidence contract.

Validation

  • scanned all 19 committed logs: no passwords, tokens, private keys, signed URLs, email addresses, or restricted mount paths detected
  • exact redaction scope: 57 replacements across 17 files
  • the new test rejects future /home/<user> and /Users/<user> paths in public evidence logs
  • no simulator behavior, acceptance result, or numeric evidence was changed

Repo-docs sync gate

Answer-only: this redaction does not change the compiler, platform, evidence semantics, or paths documented in repo-docs/; no guide patch is required.

@BorisGuo6
BorisGuo6 merged commit b909fb1 into main Aug 16, 2026
4 checks passed
@BorisGuo6
BorisGuo6 deleted the agent/redact-public-evidence-paths branch August 16, 2026 12:56
huyuxinn added a commit that referenced this pull request Aug 16, 2026
呼应 main 的 redact-public-evidence-paths(PR #5)政策,并修掉
"绝对路径在别人机器上是死链接"的消费正确性问题:

- lib/ledger.py 新增 to_portable_uri/resolve_uri(锚 ASSET_PIPELINE_ROOT
  环境变量,缺省 ACTIVE_ROOT,与 runtime_config 语义一致);
  validate_ledger(check_files) 经 resolve_uri 解析相对 uri
- 写入方(import_materialize/backfill_upstream/writeback_verification)
  一律写 ACTIVE_ROOT 相对 posix 路径;读取方(usd_enrich/rescale_backfill)
  经 resolve_uri(usd_enrich 在边界处转绝对路径交给编译器)
- 存量一次性迁移 scripts/ledger/relativize_paths.py:87 份账本重写
  (80 份 /home 前缀剥除 + 7 份旧纪元 "../" CWD 相对 uri 归一),
  isaac/sweep 证据搬入 results/(gitignore 本地保留),0 失败;
  账本内 /home|/Users 字符串清零,卫生测试固化
  (test_ledger_path_hygiene.py,与源码卫生测试同族)
- s10.2 判据升级为内容判定(选中 model 实测含 red):08-03 写死的
  "必须选 301_cup" 在原生资产获得模型级实测颜色后成为陈旧金标
  ——039_mug m10 实测红 40.9% 主导,按类目精确匹配胜出是正确行为

验证(全部真实运行):272 测试 + 仓库级 104 测试全绿;全库审计
asset_library 64/65 clean(余 1 为 08-13 已标记的 /tmp webcache 旧账)
+ upstream 16/16;Isaac can 案经相对 uri 全链复跑,指标与前日逐位一致;
s12 外部专属 5/5;s10 全过。

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MWzzZx8VvE8dNYDEfFjQSg
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant