Remove inert Relay consent provenance#465
Conversation
Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 7c6477bac6
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| OR NOT (v_terminal -> 'provenance') ?& ARRAY[ | ||
| 'acquired_at', 'source_observed_at', 'source_revision', | ||
| 'acquisition_class', 'integration', 'consent' | ||
| 'acquisition_class', 'integration' | ||
| ]::text[] |
There was a problem hiding this comment.
When the PostgreSQL state plane is installed or revalidated, this SQL edit changes the attested terminal-payload constraint/function body, but the hard-coded catalog fingerprints and capability helper fingerprint at the top of migration.rs were left at the old values. As a result a clean re-bootstrap creates the reduced shape and then owner_capability_matches calls capability_valid_v1(), which compares the live catalog against the stale constraint/function MD5s and returns CapabilityDrift; existing deployments that run the replacement function hit the same runtime readiness failure. Regenerate/bump the state-plane attestation constants together with this shape change.
Useful? React with 👍 / 👎.
Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>
Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>
This reverts commit ca2c60c. Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>
Signed-off-by: Jeremi Joslin <jeremi@joslin.fr>
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 15363d26d6
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
|
|
||
| ## Unreleased | ||
|
|
||
| - BREAKING: Remove the inert six-field `provenance.consent` member from the |
There was a problem hiding this comment.
This commit does not contain any Signed-off-by: trailer, and the DCO workflow scans every PR commit for that trailer before allowing CI to pass, so this PR remains unmergeable until the commit is recreated or amended with a valid sign-off.
AGENTS.md reference: AGENTS.md:L70-L70
Useful? React with 👍 / 👎.
1 participant
What changed
provenance.consentfield from Relay terminal batch payloads, configuration, OpenAPI, and documentation.Why
The field looked like a consent control but did not drive authorization or policy. Keeping it created a misleading security surface and extra compatibility burden.
Implementer impact
The Relay contract is smaller and more honest. Operators have one explicit transition procedure rather than a compatibility shim that would preserve ambiguous state.
Validation
cargo fmt --checkcargo test --locked -p registry-relayjust openapi-contract origin/maingit diff --checkand range diff checkCargo.lockis unchanged.Closes #362.