Skip to content

feat: land D136-D142 redesign surfaces and consolidated client SDKs#475

Merged
creatornader merged 9 commits into
mainfrom
claude/atrib-redesign-analysis-4g0r9v
Jul 8, 2026
Merged

feat: land D136-D142 redesign surfaces and consolidated client SDKs#475
creatornader merged 9 commits into
mainfrom
claude/atrib-redesign-analysis-4g0r9v

Conversation

@creatornader

@creatornader creatornader commented Jul 8, 2026

Copy link
Copy Markdown
Owner

Summary

Integration PR for the 2026-07 redesign upgrade path and the consolidated client SDKs. Everything is additive; no signed byte of any existing record, log entry, or checkpoint changes.

  • D136: consolidated client SDKs. @atrib/sdk (attest/recall verbs, daemon-first with in-process fallback, no new signing implementation) and the Python atrib distribution (first non-TypeScript implementation of the record and SDK layers), both held byte-identical through the shared conformance corpora and a cross-implementation determinism harness.
  • D137: universal evidence envelope as the single attachment model for external evidence; spec section, conformance corpus, @atrib/verify module, and eight profile documents.
  • D138: anchor plurality as the default trust posture; anchor interface spec sections, anchoring-claim builder and non-blocking fan-out in @atrib/mcp, anchor_plurality verifier annotation, corpus.
  • D139: session_checkpoint event type, extension-URI staged with byte 0x08 reserved; producer emission, verification, corpus, spec section.
  • D140: delegation certificates (principal keys certify ephemeral run keys); issuance and verifier walk, corpus, spec section.
  • D141: dev.atrib/attribution MCP extension v0.1; publishable extension document, producer/client/shim implementation behind opt-in flags, corpus.
  • D142: orchestration-topology baton-pass and join record conventions; atrib skill section and the continuation-packet evidence profile (ninth registry entry).
  • Orchestration cost policy and pinned mechanical agent types in CLAUDE.md / .claude/agents/.
  • Private-wordlist gate in check-doc-sync.mjs (pattern file lives outside the repo; CI skips silently).
  • Changesets for the five changed protocol packages (@atrib/mcp, @atrib/verify, @atrib/emit, @atrib/agent, @atrib/mcp-wrap, all minor). @atrib/sdk stays in the changesets ignore list pending its manual first publish.
  • release-pypi.yml (dispatch-only, OIDC trusted publishing) for the Python distribution.

Verification

  • Suites at head: @atrib/mcp 695, @atrib/verify 609, @atrib/agent 195, @atrib/emit 107, @atrib/mcp-wrap 55, @atrib/sdk 142 (+1 skip). Full workspace build green (30 packages).
  • pnpm doc-sync 9/9; conformance corpus drift check and the Python SDK conformance + cross-impl determinism workflows green on the branch.
  • Release preflight (check-release-publish-readiness.mjs) green.

Release sequence after merge

  1. release.yml opens the Version Packages PR from the changesets; merge it to publish the protocol packages via OIDC.
  2. @atrib/sdk manual first publish plus trusted-publisher setup, then the ignore-list close-out.
  3. PyPI via the pending publisher (workflow release-pypi.yml, environment pypi) and a workflow dispatch from main.

Review notes

Rebase-merge intended (the repo blocks merge commits, and one 200-file squash would bury the narrative): nine curated, self-contained commits, each authored by the maintainer. Delete the branch after merge.

main advanced during this work (the Cloudflare x402 paid-agent proof landed separately as c51a8880); this branch is rebased on top of it and the final commit restores that proof and every reference to it, so the merge is purely additive over current main.

Commit sequence

  1. feat: add redesign spec sections, corpora, and decisions (D136-D142)
  2. feat: add producer and verifier surfaces for D137-D142
  3. feat: add @atrib/sdk and Python atrib client SDKs (D136)
  4. docs: add orchestration cost policy and pinned mechanical agents
  5. chore: add vocabulary wordlist gate and scanner allowlists
  6. feat: extend client-sdk integration example, classify demo surface
  7. ci: add PyPI publishing workflow, align Python SDK checks
  8. chore: add changesets for the five changed protocol packages
  9. chore: preserve concurrent Cloudflare x402 proof from main

Clean-room redesign upgrade path: universal evidence envelope (D137),
anchor plurality (D138), session_checkpoint extension-first (D139),
delegation certificates (D140), the dev.atrib/attribution MCP
extension v0.1 (D141), consolidated client SDK decisions (D136), and
the baton-pass/join conventions with the continuation-packet profile
(D142). Spec sections, conformance corpora, and their generators land
in the same change per the section 5.5.7 registration rule.
All opt-in with byte-identical behavior unconfigured: anchors module
and fan-out, session checkpoints, delegation issuance and walk,
extension negotiation and receipts, evidence-envelope validation, the
anchor_plurality annotation, and the continuation-packet profile
registry entry. Profile documents and the atrib skill section ride
with the surfaces they document.
attest/recall verbs, daemon-first with in-process fallback, no new
signing implementation; the Python distribution is the first
non-TypeScript record-layer implementation, held byte-identical
through the shared corpora and a cross-implementation determinism
harness. @atrib/sdk stays in the changesets ignore list pending its
manual first publish.
Tier-by-task-class routing rules with a delegation floor, executor
boundary, and right-sized dispatch, plus the mechanical-builder and
mechanical-sweeper agent definitions the policy pins. Narrow the
.claude gitignore so the agent definitions are tracked.
check-doc-sync gains an optional wordlist check (pattern file outside
the repo; CI skips silently). Scanner configs gain allowlists for
conformance-corpus generators and ADR-draft illustrative values. The
website relay points at the private supplement for embargo timing.
@creatornader
creatornader force-pushed the claude/atrib-redesign-analysis-4g0r9v branch 2 times, most recently from f67ccb6 to 08aa641 Compare July 8, 2026 09:47
The runnable client-sdk example covers attest/recall, anchor-set
config, envelope production, and receipt consumption, pinned hermetic
(daemon mode off) so example runs never write to the public log. The
D117 demo-record manifest classifies it offline-local.
Minor bumps for @atrib/mcp, @atrib/verify, @atrib/emit, @atrib/agent,
and @atrib/mcp-wrap covering the D137-D142 additive opt-in surfaces.
The redesign branch was rebuilt from a snapshot that predated the
separately-merged Cloudflare x402 paid-agent proof (main commit
c51a888), so the rebuild silently reverted that proof's files and its
references in CLAUDE.md, README.md, the payments-integration concept
doc, the integration READMEs, package.json, and the demo-record
surface manifest. Restore all of it and keep the redesign additions on
top: the proof packet, example, test, and every doc reference now
coexist with the D136-D142 work.
@creatornader
creatornader force-pushed the claude/atrib-redesign-analysis-4g0r9v branch from 08aa641 to 9a2285b Compare July 8, 2026 10:12
@creatornader
creatornader merged commit 9a2285b into main Jul 8, 2026
17 checks passed
@creatornader
creatornader deleted the claude/atrib-redesign-analysis-4g0r9v branch July 8, 2026 10:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant