feat: land D136-D142 redesign surfaces and consolidated client SDKs#475
Merged
Conversation
Clean-room redesign upgrade path: universal evidence envelope (D137), anchor plurality (D138), session_checkpoint extension-first (D139), delegation certificates (D140), the dev.atrib/attribution MCP extension v0.1 (D141), consolidated client SDK decisions (D136), and the baton-pass/join conventions with the continuation-packet profile (D142). Spec sections, conformance corpora, and their generators land in the same change per the section 5.5.7 registration rule.
All opt-in with byte-identical behavior unconfigured: anchors module and fan-out, session checkpoints, delegation issuance and walk, extension negotiation and receipts, evidence-envelope validation, the anchor_plurality annotation, and the continuation-packet profile registry entry. Profile documents and the atrib skill section ride with the surfaces they document.
attest/recall verbs, daemon-first with in-process fallback, no new signing implementation; the Python distribution is the first non-TypeScript record-layer implementation, held byte-identical through the shared corpora and a cross-implementation determinism harness. @atrib/sdk stays in the changesets ignore list pending its manual first publish.
Tier-by-task-class routing rules with a delegation floor, executor boundary, and right-sized dispatch, plus the mechanical-builder and mechanical-sweeper agent definitions the policy pins. Narrow the .claude gitignore so the agent definitions are tracked.
check-doc-sync gains an optional wordlist check (pattern file outside the repo; CI skips silently). Scanner configs gain allowlists for conformance-corpus generators and ADR-draft illustrative values. The website relay points at the private supplement for embargo timing.
creatornader
force-pushed
the
claude/atrib-redesign-analysis-4g0r9v
branch
2 times, most recently
from
July 8, 2026 09:47
f67ccb6 to
08aa641
Compare
The runnable client-sdk example covers attest/recall, anchor-set config, envelope production, and receipt consumption, pinned hermetic (daemon mode off) so example runs never write to the public log. The D117 demo-record manifest classifies it offline-local.
Minor bumps for @atrib/mcp, @atrib/verify, @atrib/emit, @atrib/agent, and @atrib/mcp-wrap covering the D137-D142 additive opt-in surfaces.
The redesign branch was rebuilt from a snapshot that predated the separately-merged Cloudflare x402 paid-agent proof (main commit c51a888), so the rebuild silently reverted that proof's files and its references in CLAUDE.md, README.md, the payments-integration concept doc, the integration READMEs, package.json, and the demo-record surface manifest. Restore all of it and keep the redesign additions on top: the proof packet, example, test, and every doc reference now coexist with the D136-D142 work.
creatornader
force-pushed
the
claude/atrib-redesign-analysis-4g0r9v
branch
from
July 8, 2026 10:12
08aa641 to
9a2285b
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Integration PR for the 2026-07 redesign upgrade path and the consolidated client SDKs. Everything is additive; no signed byte of any existing record, log entry, or checkpoint changes.
@atrib/sdk(attest/recall verbs, daemon-first with in-process fallback, no new signing implementation) and the Pythonatribdistribution (first non-TypeScript implementation of the record and SDK layers), both held byte-identical through the shared conformance corpora and a cross-implementation determinism harness.@atrib/verifymodule, and eight profile documents.@atrib/mcp,anchor_pluralityverifier annotation, corpus.session_checkpointevent type, extension-URI staged with byte 0x08 reserved; producer emission, verification, corpus, spec section.dev.atrib/attributionMCP extension v0.1; publishable extension document, producer/client/shim implementation behind opt-in flags, corpus.continuation-packetevidence profile (ninth registry entry).CLAUDE.md/.claude/agents/.check-doc-sync.mjs(pattern file lives outside the repo; CI skips silently).@atrib/mcp,@atrib/verify,@atrib/emit,@atrib/agent,@atrib/mcp-wrap, all minor).@atrib/sdkstays in the changesets ignore list pending its manual first publish.release-pypi.yml(dispatch-only, OIDC trusted publishing) for the Python distribution.Verification
@atrib/mcp695,@atrib/verify609,@atrib/agent195,@atrib/emit107,@atrib/mcp-wrap55,@atrib/sdk142 (+1 skip). Full workspace build green (30 packages).pnpm doc-sync9/9; conformance corpus drift check and the Python SDK conformance + cross-impl determinism workflows green on the branch.check-release-publish-readiness.mjs) green.Release sequence after merge
release.ymlopens the Version Packages PR from the changesets; merge it to publish the protocol packages via OIDC.@atrib/sdkmanual first publish plus trusted-publisher setup, then the ignore-list close-out.release-pypi.yml, environmentpypi) and a workflow dispatch from main.Review notes
Rebase-merge intended (the repo blocks merge commits, and one 200-file squash would bury the narrative): nine curated, self-contained commits, each authored by the maintainer. Delete the branch after merge.
mainadvanced during this work (the Cloudflare x402 paid-agent proof landed separately asc51a8880); this branch is rebased on top of it and the final commit restores that proof and every reference to it, so the merge is purely additive over current main.Commit sequence
feat: add redesign spec sections, corpora, and decisions (D136-D142)feat: add producer and verifier surfaces for D137-D142feat: add @atrib/sdk and Python atrib client SDKs (D136)docs: add orchestration cost policy and pinned mechanical agentschore: add vocabulary wordlist gate and scanner allowlistsfeat: extend client-sdk integration example, classify demo surfaceci: add PyPI publishing workflow, align Python SDK checkschore: add changesets for the five changed protocol packageschore: preserve concurrent Cloudflare x402 proof from main