Transaction Science
1f31cf0342
sec: drop hpke-rs 0.2 from joule-code's test graph; h2 0.4.20 in smart-byte ...
What #443 left that has a fix on its own line:
- joule-code-collab's MLS keying test moves to openmls 0.9.1, matching
joule-moq-mls. The old openmls 0.6 dev-dependencies were the only path to
hpke-rs 0.2.0 and hpke-rs-rust-crypto 0.2.0 (RUSTSEC-2026-0069 to 0072),
so both leave the lockfile. export_secret now takes the crypto provider.
- smart-byte-rs: h2 0.4.14 -> 0.4.20 (RUSTSEC-2026-0258).
After this, every advisory left in the workspaces needs a major-version
move or an upstream release: zip < 9, pyo3 0.28, h2 0.3 (via hf-hub),
hickory-proto 0.25 (via libp2p-mdns), quick-xml 0.37/0.39 (via
open-payments-iso20022 and plist), libcrux-kem 0.0.9 (via
hpke-rs-libcrux 0.7), rkyv 0.7 and rsa (no fix).
Co-Authored-By: Claude Opus 5.5 <[email protected] >
2026-10-24 19:55:37 -04:00
joule-code: stand up the Joule Code standard (v0.1.0 draft)
2026-06-02 14:07:00 -04:00
joule-code: add generic FnStage to the cascade (L1/L2/L3 binding)
2026-06-03 12:50:43 -04:00
sec: drop hpke-rs 0.2 from joule-code's test graph; h2 0.4.20 in smart-byte
2026-10-24 19:55:37 -04:00
joule-code-conformance: the header undersold the harness by a whole suite
2026-10-20 13:51:38 -04:00
joule-code-identity: a Roster — resolve did:key → {label, kind} for audit
2026-06-11 19:27:37 -04:00
jcp: a ModelIn caveat says which model a grant authorizes, and the frame names the model it runs
2026-10-17 04:21:21 -04:00
joule-code-joulecontract: an obligation nothing checked is not discharged
2026-10-17 16:08:58 -04:00
specs: a vendor counter is a hardware reading only while it is demonstrably live
2026-10-01 01:10:36 -04:00
joule-code-release: the whole chain end to end, as one runnable artifact
2026-06-11 00:32:56 -04:00
joule-code-remediate: formal_fix prints each proof figure with its grade, not as "measured"
2026-10-14 20:01:38 -04:00
family: the methodology layer, made auditable — spec, review, vericoding
2026-06-10 17:45:47 -04:00
tooling: meter-cmd (energy bracket) + gen-fixture (review fixtures)
2026-06-12 07:04:06 -04:00
joule-code: stand up the Joule Code standard (v0.1.0 draft)
2026-06-02 14:07:00 -04:00
family: the methodology layer, made auditable — spec, review, vericoding
2026-06-10 17:45:47 -04:00
Merge T1 #401 (MOQT drafts -18 and -16, interoperability) into train/live-room
2026-10-22 03:46:09 -04:00
joule-moq-ingest: a grant whose ai attribute is not a model digest is grant_invalid (live-rooms §4.4)
2026-10-21 07:24:54 -04:00
joule-moq-interop: local.sh waits for its relay to exit
2026-10-21 13:02:45 -04:00
joule-moq-mls, joule-moq-web, joule-moq-room: clippy notes on the new code
2026-10-20 08:57:05 -04:00
co-performance: the commitment's magic is WPK1, not WPC1 (taken by ad-presentation)
2026-10-22 04:11:30 -04:00
Merge pull request 'joule-moq-room: its lockfile follows wai-quantum 0.6.14 (repository checks red on main since #427 )' ( #447 ) from sec/rust-advisories-2026-10 into main
2026-10-22 14:33:49 -04:00
co-performance: the commitment's magic is WPK1, not WPC1 (taken by ad-presentation)
2026-10-22 04:11:30 -04:00
jwp: a zstd payload over the cap is rejected, not truncated
2026-10-17 04:36:53 -04:00
lockstep-quic: correct the root cause — macOS launch context, not a quinn bug
2026-06-27 07:12:43 -04:00
1f31cf0342