Repository navigation
Link handler and HTTP observations to scoped workflow task identity - #282
Conversation
|
|
Owner review at exactd2ca37e63eb9ab75131071af81854059ff2f66c1/treeb2ab8d386346818c02dd7692928c0c32019c8622, base62bfe195: all20 exact-head source checks are terminal SUCCESS, including CI42097400335, six supported Python versions, integration/target qualification, Sonar, CodeQL and public boundary. Fifty-eight local source tests, touched-file Ruff, mypy42 SDK files and diff/credential-pattern checks pass. Base62bfe195 actual-main qualification and exact branch cleanup are complete. Reviewed the scoped allowlisted task snapshot, concurrent context isolation and finally-reset behavior, separate bounded request-path identities, conflict retention and absence of any last-task fallback after scope exit. Request bodies/private claim tokens and Client/Worker behavior are unchanged. The README explicitly retains missing private/SQL/API/hydration/publication proof; observed identity alone is not phase acceptance. Publication followers checked: no workflow_run publisher or tag/manual publish event, test-only paths exclude docs deployment, and the accepted stable-tag guard is unchanged. Proceeding through normal exact-head owner integration, then actual-main verification and exact branch cleanup, without bypass. No historical/frozen/artifact or #184 operating admission follows from these source checks. |
|
#282 actual-main follow-through is complete. Merge 323357e has reviewed tree b2ab8d386346818c02dd7692928c0c32019c8622, ordered parents[62bfe19,d2ca37e6]. All18 actual-main checks and all four workflows pass: CI42099515183, Sonar42099515144, CodeQL42099515798 and public-boundary42099515405. Fresh five-page live hashes/byte counts match restored published2.14.1 artifact13380779871; all five docs-writer status counts are zero. Test-only paths selected no docs/publication workflow. The exact merged remote d2ca37e was deleted/readback404, its clean isolated worktree/local branch removed, and shared main is clean at323357ef. Scoped task/HTTP identities are source observation, not private claim, full hydration, SQL/API/clone or publication evidence; #123 remains open. The next pure normalized-row projection proposal is draft#283, with100 snapshot plus58 observer controls and strict type checks passing locally. It performs no query/driver/credential/transport action; sdk-python owns its checks/corrections and remaining collector preparation, with Server reviewing the bounded SQL/type/timezone additions. All historical and #184 operating/policy gates and failed-evidence cutoffs remain unchanged. |



Handler milestones previously lacked the task/run/attempt that entered the workflow interceptor, and HTTP records retained only the route kind. The observer now scopes an allowlisted task identity to that interceptor and attaches it to handler notes and existing HTTP calls within the scope. A separate bounded request-path task identity keeps mismatches visible. Scope exit/error/cancellation restores the previous context; later calls cannot inherit the last attempt.
The recorder reads no request body or private claim token, changes no Client/Worker behavior and adds no probe or timeout extension. Concurrent async tasks retain separate identities. A request outside interceptor scope can still have a path task ID while its attempt remains unknown; the two evidence sources are not silently merged. These links do not prove durable claim, successful hydration/decode/replay or publication. The reconstruction README preserves those limits and the remaining SQL/API/private comparator requirements.
Validation: 58 focused source tests pass, covering scoped handler/HTTP identities, preserved conflicts, concurrent tasks, error/cancellation reset, no post-scope carry, bounded/malformed/encoded paths and prior client/thread/stream/redaction controls. Ruff on both changed Python files, mypy42 SDK source files, diff and credential-pattern checks pass. Normal source CI follows; no historical/frozen/artifact or operating acceptance is implied.
Part of #123. Base62bfe195 is the normally merged HTTP-instance observer source; actual-main follow-through is tracked separately. No SDK product, workflow or #184 operating/policy gate changes.