Skip to content

feat: add blast-radius safety cases - #95

Merged
hannsxpeter merged 1 commit into
mainfrom
codex/blast-radius-safety-case
Aug 19, 2026
Merged

feat: add blast-radius safety cases#95
hannsxpeter merged 1 commit into
mainfrom
codex/blast-radius-safety-case

Conversation

@hannsxpeter

Copy link
Copy Markdown
Owner

Summary

  • add the shared Stage 2 blast-radius safety-case protocol and wide-change review policy
  • bind executed review evidence to canonical verification digests and hash-chained gate events
  • add six executable hidden-boundary fixtures, public documentation, canonical artifacts, and the 6.2.0 release candidate

Validation

  • npm run release:check
  • npm run release:prepublication:check
  • Stage 1 specification review: PASS
  • two independent fresh-context Stage 2 reviews plus reconciliation: PASS
  • scoped hardening review: PASS with zero findings

Release

After merge, tag v6.2.0 on the exact merged main commit. The tag-triggered publish workflow will publish both godpowers and @godpowers/mcp with npm provenance.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 9e442eecdf

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread lib/evidence.js
Comment on lines +524 to +529
const chain = events.verifyChain(file);
for (const event of events.readRun(projectRoot, runId)) {
if (!/^gate\.(?:pass|fail)$/.test(event.name)) continue;
const attrs = event.attrs && typeof event.attrs === 'object' ? event.attrs : {};
if (attrs.verificationRecordId !== recordId) continue;
matches.push({ event, runId, chainValid: chain.valid === true });

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Serialize gate events before validating the chain

When parallel build slices run verification concurrently, events.emit can let multiple processes read the same previous line before appending, producing sibling events with the same prev hash. This new resolver then assigns the validity of the entire run chain to every matching record, so one collision makes otherwise successful evidence return invalid-event-chain; because subsequent events remain in that poisoned run, all later level 4 or 5 evidence can be rejected and Stage 2 remains blocked. Serialize gate-event appends, or otherwise make concurrent hash-chain writes atomic, before requiring chainValid here.

Useful? React with 👍 / 👎.

@hannsxpeter
hannsxpeter merged commit 010f02d into main Aug 19, 2026
4 checks passed
@hannsxpeter
hannsxpeter deleted the codex/blast-radius-safety-case branch August 19, 2026 10:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant