SeymourBETA

Aggiornamento 2.194

31/07/2026

v2.194.0.0BETAMINOR

Seymour31 lug 2026

P2-B L1: opt-in LLM contract + Core pipeline fixes (G1/G2/G3) + Ability_Command RT0 + WRITER_MAP reconciled

LLM contract (P2-B L1, FFXProjectEditor/Core/LLM/, 7 files): typed PatchProposal (never free executable bytes; target {file, offset, length, bytes}), PatchOperationKind (profile 1 = ByteReplace only; Insert/Delete/Grow require flag + independent evidence), LlmGuard (rules are 100% compiled code — prompt injection never changes the contract; ProvenRecipes catalog starts with ppp-sclmove-t3), LlmSessionSettings (opt-in default-off, persistable WITHOUT key), LlmCredential (memory-only, Dispose() zeroes), LlmRedactor (central redaction: sk-*/Bearer/api-key masked + truncated preview), LlmRequestEnvelope (RequiresRemoteConfirmation for non-loopback hosts), PatchProposalReview (human approval with expiry — anti auto-apply), LlmGuardResult/LlmFailure (13 typed rejection reasons, redacted messages). 23 new tests (guard 13, redactor 6, review 4) — opt-in off, unknown recipe, Insert/Delete without flag, limits exceeded, hash mismatch, path traversal, broken base64, preview/session-key absence in messages. Zero network, zero writes, zero new packages.
Core pipeline fixes (Batch B): G1 — OperationExecutorV2 called StageAsync with an EMPTY edits dictionary (plan did not carry edits): FileOperation.Edits added and populated by EditSession.Build; G2 — PredictedAfterHash="pending-stage" made hash verify always fail: real verify now compares staged vs before (an edit must change bytes) and treats "pending-stage" only as "unknown"; G3 — executor rewritten as 2-pass all-or-nothing: Stage+Verify ALL operations before Backup+Promote of any (previously promoted op-by-op with no rollback). 4 new tests (OperationExecutorV2Tests).
Ability_Command RT0 (P1 B1): round-trip byte-identity on command.bin/item.bin (0x60 extra) and monmagic2.bin (0x5C no extra) — the monmagic drift documented in the 2026-06-05 audit is SUPERSEDED (preserved-text-pool writer); AbilityCommandAdapter registered in WriterAdapterCatalog; 11 tests.
WRITER_MAP reconciled: 8 ATEL family writers (reactive sensor, round boss, omnis, mortibody, mortiorchis, flux native, anima OD, indirect dispatch) PrecisaTestar → WriterValidado with real RT0 gates; phase rotation marked Class B (growth).
P2/P2-B plan materialized: 5 design docs (P2_CENSO_ATEL, P2_IR_SEMANTICA, P2_RECEITAS_ATEL, P2B_CONTRATO_LLM, P2_INTEGRACAO_PIPELINE — all 2026-07-31) + P1 backlog with parity matrix vs Spira Modifier 0.73.
Baseline: 164/164 PASS (137 → 164). Build fix on swarm-owned file: ShopTableKind internal→public + ShopTable_File (CS0051/CS0103). ffx-reconstructed available for validation in upcoming batches. ### REVISION

v2.193.0.1

Torna agli aggiornamenti

SeymourBETA

Aggiornamento 2.194

31/07/2026

v2.194.0.0BETAMINOR

Seymour31 lug 2026

P2-B L1: opt-in LLM contract + Core pipeline fixes (G1/G2/G3) + Ability_Command RT0 + WRITER_MAP reconciled

LLM contract (P2-B L1, FFXProjectEditor/Core/LLM/, 7 files): typed PatchProposal (never free executable bytes; target {file, offset, length, bytes}), PatchOperationKind (profile 1 = ByteReplace only; Insert/Delete/Grow require flag + independent evidence), LlmGuard (rules are 100% compiled code — prompt injection never changes the contract; ProvenRecipes catalog starts with ppp-sclmove-t3), LlmSessionSettings (opt-in default-off, persistable WITHOUT key), LlmCredential (memory-only, Dispose() zeroes), LlmRedactor (central redaction: sk-*/Bearer/api-key masked + truncated preview), LlmRequestEnvelope (RequiresRemoteConfirmation for non-loopback hosts), PatchProposalReview (human approval with expiry — anti auto-apply), LlmGuardResult/LlmFailure (13 typed rejection reasons, redacted messages). 23 new tests (guard 13, redactor 6, review 4) — opt-in off, unknown recipe, Insert/Delete without flag, limits exceeded, hash mismatch, path traversal, broken base64, preview/session-key absence in messages. Zero network, zero writes, zero new packages.
Core pipeline fixes (Batch B): G1 — OperationExecutorV2 called StageAsync with an EMPTY edits dictionary (plan did not carry edits): FileOperation.Edits added and populated by EditSession.Build; G2 — PredictedAfterHash="pending-stage" made hash verify always fail: real verify now compares staged vs before (an edit must change bytes) and treats "pending-stage" only as "unknown"; G3 — executor rewritten as 2-pass all-or-nothing: Stage+Verify ALL operations before Backup+Promote of any (previously promoted op-by-op with no rollback). 4 new tests (OperationExecutorV2Tests).
Ability_Command RT0 (P1 B1): round-trip byte-identity on command.bin/item.bin (0x60 extra) and monmagic2.bin (0x5C no extra) — the monmagic drift documented in the 2026-06-05 audit is SUPERSEDED (preserved-text-pool writer); AbilityCommandAdapter registered in WriterAdapterCatalog; 11 tests.
WRITER_MAP reconciled: 8 ATEL family writers (reactive sensor, round boss, omnis, mortibody, mortiorchis, flux native, anima OD, indirect dispatch) PrecisaTestar → WriterValidado with real RT0 gates; phase rotation marked Class B (growth).
P2/P2-B plan materialized: 5 design docs (P2_CENSO_ATEL, P2_IR_SEMANTICA, P2_RECEITAS_ATEL, P2B_CONTRATO_LLM, P2_INTEGRACAO_PIPELINE — all 2026-07-31) + P1 backlog with parity matrix vs Spira Modifier 0.73.
Baseline: 164/164 PASS (137 → 164). Build fix on swarm-owned file: ShopTableKind internal→public + ShopTable_File (CS0051/CS0103). ffx-reconstructed available for validation in upcoming batches. ### REVISION

v2.193.0.1