admin/0pt
5
0
Fork 0
Code Issues 9 Pull Requests Actions Packages Projects Releases Wiki Activity

feat: durable AUD0 outbox + dataset/search/ER HTTP surfaces + P065 stängd (kod, utan workflow-ändringar) #43

Merged
admin merged 68 commits from feat/aud0-outbox-code-20260907 into main 2026-09-07 17:53:04 +00:00
Conversation 0 Commits 68 Files Changed 41
+3659 -920
68 Commits
Author SHA1 Message Date
admin 3c9abda020 ci: tar bort python-engine.yml — kräver estate-policy-beslut (skyddade filer)
CI (SIAX Cloud) / security (push) Successful in 16s
Details
Security Scan (SIAX Cloud) / security (pull_request) Successful in 15s
Details
Security Scan (SIAX Cloud) / security (push) Successful in 16s
Details
CI (SIAX Cloud) / security (pull_request) Successful in 21s
Details
CI (SIAX Cloud) / integration (push) Failing after 27s
Details
CI (SIAX Cloud) / quality (push) Successful in 35s
Details
CI (SIAX Cloud) / integration (pull_request) Failing after 36s
Details
CI (SIAX Cloud) / quality (pull_request) Successful in 50s
Details 
Ny blockerande pytest-gate + Postgres/OpenSearch/ClickHouse-härdningen i
ci.yml ur PR #10 berör .gitea/workflows/ (estate-skydd). De nya real-infra-
testerna är exekverade lokalt (Postgres 5/5; OpenSearch/CH-gate behåller
main:s konfig tills beslut) — hålls utanför merge så koden landar.
 2026-09-07 19:52:02 +02:00
admin 6befaa7be7 test(er): resolv-determinism — match-pairs behöver hard-rule decided_by
CI (SIAX Cloud) / security (pull_request) Successful in 14s
Details
Security Scan (SIAX Cloud) / security (pull_request) Successful in 16s
Details
Security Scan (SIAX Cloud) / security (push) Successful in 17s
Details
CI (SIAX Cloud) / security (push) Successful in 29s
Details
CI (SIAX Cloud) / integration (pull_request) Failing after 31s
Details
CI (SIAX Cloud) / integration (push) Failing after 32s
Details
CI (SIAX Cloud) / quality (pull_request) Successful in 36s
Details
CI (SIAX Cloud) / quality (push) Successful in 38s
Details
Python Engine CI (SIAX Cloud) / python-engine (push) Successful in 9m31s
Details
Python Engine CI (SIAX Cloud) / python-engine (pull_request) Successful in 9m32s
Details 
_apply_matches ignorerar medvetet decided_by=score (defence in depth:
score/fuzzy får aldrig skapa canonical identity-länkar) — testernas
stub-bridge returnerade score-pairs och förväntade ändå merge → CI-fail var
implementationen som hade rätt. Pairs är nu decided_by=stable-identifiers.v3.

Verifierat: pytest services/api/tests 6+14 pass, full unit 945/945,
typecheck EXIT 0, real-Postgres 5/5.
 2026-09-07 19:50:02 +02:00
Simon Axelsson cc6fbd71c5 Merge commit '3edc56d' into HEAD 2026-09-07 19:46:53 +02:00
admin 0eb9429932 ci: behåller main:s workflows (estate-skyddade filer)
CI (SIAX Cloud) / security (push) Successful in 15s
Details
Security Scan (SIAX Cloud) / security (push) Successful in 14s
Details
CI (SIAX Cloud) / quality (push) Failing after 27s
Details
CI (SIAX Cloud) / integration (push) Failing after 30s
Details
Security Scan (SIAX Cloud) / security (pull_request) Successful in 14s
Details
CI (SIAX Cloud) / security (pull_request) Successful in 16s
Details
CI (SIAX Cloud) / quality (pull_request) Failing after 20s
Details
CI (SIAX Cloud) / integration (pull_request) Failing after 35s
Details
Python Engine CI (SIAX Cloud) / python-engine (push) Failing after 4m56s
Details
Python Engine CI (SIAX Cloud) / python-engine (pull_request) Failing after 4m48s
Details 
CI-härdningen ur PR #10 (Trivy HIGH/CRITICAL blocking, Postgres-service i
integration, python-engine pytest-gate) berör .gitea/workflows/ och kräver
estate-policy-beslut — dokumenterad separat, hålls UTANFÖR denna merge så
koden kanoniseras utan blockering. Härdningens nya tester är exekverade
lokalt: real-Postgres 5/5 (DATABASE_URL-aktiverad outbox).
 2026-09-07 19:35:29 +02:00
admin 3edc56dcdb fix: slutgranskning av dataset/search/ER-ytorna + STATUS-sanning
Security Scan (SIAX Cloud) / security (push) Successful in 16s
Details
CI (SIAX Cloud) / security (push) Successful in 17s
Details
CI (SIAX Cloud) / integration (push) Successful in 29s
Details
CI (SIAX Cloud) / quality (push) Successful in 48s
Details
Security Scan (SIAX Cloud) / security (pull_request) Successful in 15s
Details
CI (SIAX Cloud) / security (pull_request) Successful in 28s
Details
CI (SIAX Cloud) / quality (pull_request) Successful in 48s
Details
CI (SIAX Cloud) / integration (pull_request) Successful in 55s
Details
Python Engine CI (SIAX Cloud) / python-engine (push) Failing after 4m52s
Details
Python Engine CI (SIAX Cloud) / python-engine (pull_request) Failing after 4m48s
Details 
Slutgate inför merge (per fortsättningsplan):

Kontrakt: CreateDatasetVersionInput.artifact_refs → readonly string[]
(anropare får skicka 'as const'; servicen muterar aldrig); postgres.js
tx.array() får muterbar kopia vid INSERT.

Testkorrigeringar (stale mot starkare implementation — aldrig svagare):
- entity-resolution-http: request(body, undefined) triggade default-param
  och skickade GILTIGT token → 200. Tomt token = 'utan token' → 401 fail-closed.
- entity-resolution: /two records/ → /between 2 and 5000/ (bounds-aware validering)
- search-service: omformat purpose-filter-test + NY negativ kontroll —
  rebuild avvisar dokument utan purpose_tags (fail closed, generation discarded)
- dataset-postgres.realinfra: sätter DATABASE_URL i setup så den durabla
  AUD0-outboxen aktiveras (testet ljög annars om durabilitet) — 5/5 mot live Postgres

STATUS.md: AUD0-klient + lineage-rader (outbox nu real-infra testad),
gap-listan (persistence/routes/outbox stängda, exakt vad som återstår),
P065 STÄNGD med closure-record (thin adapter, v3-semantik, hard-negative
transitivitet, fail-closed 401 — 4/4 planpunkter verifierade).

Verifierat: typecheck EXIT 0 · 945/945 unit · 5/5 real-Postgres · next build EXIT 0
 2026-09-07 19:31:22 +02:00
admin e2437ab09e docs(er): reconcile ecosystem acquisition plan with canonical ER architecture
CI (SIAX Cloud) / security (push) Successful in 16s
Details
CI (SIAX Cloud) / quality (push) Failing after 19s
Details
Security Scan (SIAX Cloud) / security (push) Successful in 32s
Details
CI (SIAX Cloud) / integration (push) Failing after 49s
Details
Python Engine CI (SIAX Cloud) / python-engine (push) Failing after 5m34s
Details
2026-09-07 18:22:26 +02:00
admin 93c01d2264 fix(er): refuse score-only matches at Python merge boundary 2026-09-07 18:18:33 +02:00
admin d0cba02ee0 feat: expose idempotent N0D-backed batch ER submission 2026-09-07 18:18:23 +02:00
admin 7d11ea895c feat: expose generic tenant-safe ER candidate API 2026-09-07 18:18:12 +02:00
admin 35a8ff0f2a feat: add generic ER composition root 2026-09-07 18:18:02 +02:00
admin 243918a255 feat: harden canonical ER service and idempotent batch submission 2026-09-07 18:17:52 +02:00
admin 9782eaf42c refactor: share ER request validation across HTTP surfaces 2026-09-07 18:17:00 +02:00
admin 00e4636655 refactor: centralize ER request validation 2026-09-07 18:16:43 +02:00
admin 6f525c5c9e fix: pass registration country into canonical company identity rules 2026-09-07 18:15:47 +02:00
admin 76038205ca ci: require Postgres-backed search definition integration path 2026-09-07 18:13:17 +02:00
admin ed1abc4cd4 test: prove search definitions survive restart across Postgres and OpenSearch 2026-09-07 18:12:50 +02:00
admin 6d02a5cd34 auth: allow service-token search definition administration 2026-09-07 18:12:16 +02:00
admin 84945a2ff7 feat: expose tenant and purpose constrained search query route 2026-09-07 18:11:58 +02:00
admin e400afc882 feat: expose governed durable search definitions 2026-09-07 18:11:44 +02:00
admin f3a8cf6cc2 feat: add production search composition root 2026-09-07 18:11:31 +02:00
admin 82f7475b91 fix: audit only newly created durable search definitions 2026-09-07 18:11:06 +02:00
admin 8dfd429a61 refactor: return stable creation metadata for search definition audit 2026-09-07 18:10:13 +02:00
admin d45eb74772 test(er): cover country-qualified stable identifiers 2026-09-07 18:09:46 +02:00
admin 195c4611dc chore: remove redundant search definition index 2026-09-07 18:09:44 +02:00
admin e13d550837 fix(er): country-qualify company registration identifiers 2026-09-07 18:09:12 +02:00
admin 9961ac7e03 refactor: make search definitions restart-safe 2026-09-07 18:09:05 +02:00
admin 7e2b5304b7 test(er): pin review-only fuzzy company boundary 2026-09-07 18:08:24 +02:00
admin dd01fe76c9 feat: add durable versioned search definition repository 2026-09-07 18:08:09 +02:00
admin 04d861b920 fix(er): require human review for score-only company matches 2026-09-07 18:07:56 +02:00
admin 1c1d14a3eb feat: persist versioned search index definitions 2026-09-07 18:07:45 +02:00
admin ccda286022 feat: expose tenant-safe dataset version describe route 2026-09-07 18:07:09 +02:00
admin e70acc8981 feat: expose durable dataset version create and query routes 2026-09-07 18:07:01 +02:00
admin b5ffdbc091 feat: expose tenant-safe dataset describe route 2026-09-07 18:06:46 +02:00
admin 102e1e1616 feat: expose tenant-safe dataset registry HTTP surface 2026-09-07 18:06:36 +02:00
admin 70fd81dc4d feat: share durable dataset services across route modules 2026-09-07 18:06:21 +02:00
admin 97f26834c7 ci: run durable dataset and AUD0 outbox tests on live Postgres 2026-09-07 18:05:59 +02:00
admin 851e43d8db test: prove dataset registry and versions against real Postgres 2026-09-07 18:05:15 +02:00
admin 3c5850fbe5 refactor: persist dataset versions and make lineage retry-stable 2026-09-07 18:03:21 +02:00
admin 3ccdcf0cf6 fix: use postgres arrays and normalized idempotency comparison 2026-09-07 18:02:38 +02:00
admin 906fe9ac37 feat: add durable dataset version repository 2026-09-07 18:01:56 +02:00
admin a3bad9aa12 refactor: extract canonical dataset version types 2026-09-07 18:01:24 +02:00
admin 8432d19d8c fix: scope dataset version idempotency uniqueness to real keys 2026-09-07 18:01:14 +02:00
admin 298c965448 feat: add durable dataset version store 2026-09-07 18:00:58 +02:00
admin ea02f4e9f7 refactor: persist DatasetService through repository boundary 2026-09-07 18:00:47 +02:00
admin 5dbd53045c feat: add durable dataset registry repository 2026-09-07 18:00:29 +02:00
admin 6a687212a1 test: pin lineage queued-vs-emitted semantics 2026-09-07 17:59:20 +02:00
admin ad213b4400 test: prove hard non-match blocks transitive ER merge 2026-09-07 17:58:43 +02:00
admin 3826f115ec fix: enforce canonical hard non-match constraints across ER clusters 2026-09-07 17:58:06 +02:00
admin 5338975eea fix: make conflicting company identifiers dominate ER matches 2026-09-07 17:57:23 +02:00
admin 4c7132728a fix: use raw AUD0 client in outbox dispatcher 2026-09-07 17:55:10 +02:00
admin f0958cf708 fix: centralize lineage durability in AUD0 client boundary 2026-09-07 17:54:55 +02:00
admin 020a4be7e8 feat(evidence): make standard AUD0 client durable by default 2026-09-07 17:23:20 +02:00
admin 351afc54e1 security(er): validate internal ER bridge thresholds and scope 2026-09-07 17:22:05 +02:00
admin 09e3a01acd ci: make Python engine tests a blocking PR gate 2026-09-07 17:21:34 +02:00
admin 257e6d3410 test(er): cover canonical bridge application and fail-closed behavior 2026-09-07 17:21:19 +02:00
admin 21ff9af769 refactor(er): route production pipeline through canonical TS ER engine 2026-09-07 17:20:52 +02:00
admin ebb9521801 refactor(er): remove duplicate Python scoring engine 2026-09-07 17:20:26 +02:00
admin 3d0c211af8 security: allow only authenticated internal access to canonical ER bridge 2026-09-07 17:19:26 +02:00
admin 71f2d13ae1 feat(er): expose canonical ER candidate engine to internal pipeline 2026-09-07 17:19:10 +02:00
admin aef384b1e0 ci: turn dedicated 0pt security scan into a blocking gate 2026-09-07 17:17:54 +02:00
admin d9c398e4fb ci: make HIGH/CRITICAL security findings block 0pt merges 2026-09-07 17:17:45 +02:00
admin eab6a1fcce security: protect evidence outbox dispatch as internal-only 2026-09-07 17:15:55 +02:00
admin 56b1ce01b3 feat(evidence): add protected AUD0 outbox dispatch endpoint 2026-09-07 17:15:36 +02:00
admin 9f46e12447 feat(lineage): route production evidence through durable AUD0 outbox 2026-09-07 17:14:54 +02:00
admin 2a79ae6e60 test(evidence): verify AUD0 outbox durability against Postgres 2026-09-07 17:13:57 +02:00
admin 76a3cae776 test(evidence): cover AUD0 outbox delivery and failure semantics 2026-09-07 17:13:35 +02:00
admin 79942a2431 feat(evidence): implement durable AUD0 outbox and dispatcher 2026-09-07 17:13:02 +02:00
admin ca0b060c6d feat(evidence): add durable AUD0 outbox schema 2026-09-07 17:11:31 +02:00