cli, branch HEAD

cli: harden Myc signer readiness

2026-06-24T06:25:53Z

commit 7d09767e52a1000067783ae27e0cf929b74841ca parent 39b618c2b97454c5a66afd9e53ba68b120a8b1dd Author: triesap Date: Wed, 24 Jun 2026 06:25:53 +0000 cli: harden Myc signer readiness - use typed NIP-46 permissions for write readiness - keep unsupported sync profile signing fail-closed - fail managed account status when no actor resolves - cover typed permission and unresolved binding regressions

cli: fix Myc NIP-46 request policy

2026-06-24T06:18:34Z

commit 39b618c2b97454c5a66afd9e53ba68b120a8b1dd parent b4c8b4680f1fabffc58c6629f9dbceb77cf55611 Author: triesap Date: Wed, 24 Jun 2026 06:18:34 +0000 cli: fix Myc NIP-46 request policy - pass CLI Myc timeout into the SDK request policy - reuse the same timeout for relay transport readiness - reject response subscriptions with no relay acceptance - cover timeout and subscription readiness regressions

cli: harden Myc signer readiness

2026-06-24T05:06:08Z

commit b4c8b4680f1fabffc58c6629f9dbceb77cf55611 parent d734e0fb82ddaa87d37d8ba1f1106dfbd761b81d Author: triesap Date: Wed, 24 Jun 2026 05:06:08 +0000 cli: harden Myc signer readiness - match Myc NIP-46 permissions exactly by event kind - keep profile sync writes fail-closed without sign_event:0 - share managed account reference matching across status and signing - cover Myc readiness and binding regressions

cli: enable sdk-backed myc signing

2026-06-24T00:57:25Z

commit d734e0fb82ddaa87d37d8ba1f1106dfbd761b81d parent ce5be2dc7e548e6a44eda80acc19ee1adac29002 Author: triesap Date: Wed, 24 Jun 2026 00:57:25 +0000 cli: enable sdk-backed myc signing - Add CLI signer provider wiring for local key and Myc NIP-46 SDK signing modes. - Route farm and listing writes through configured SDK signer providers without local fallback. - Replace deferred Myc readiness with binding and session validation for config, health, and signer status surfaces. - Cover direct relay and radrootsd proxy Myc listing publishes with deterministic integration tests. - Validate with cargo fmt --all --check, cargo check --all-targets, and cargo test --all-targets.

tests: prove radrootsd proxy publish

2026-06-23T21:21:41Z

commit ce5be2dc7e548e6a44eda80acc19ee1adac29002 parent 9531b64e862e0c632576edeb2866c2d6aedb195e Author: triesap Date: Tue, 23 Jun 2026 21:21:41 +0000 tests: prove radrootsd proxy publish - add one-shot local JSON-RPC proxy server test helper - exercise listing publish without dry-run through radrootsd_proxy - assert SDK daemon idempotency and signed event forwarding - verify the SDK outbox reaches terminal non-pending state

publish-proxy: add cli proxy transport

2026-06-23T10:25:50Z

commit 9531b64e862e0c632576edeb2866c2d6aedb195e parent 30460646c84f3e588ad0e1705ab49ecd04dd2de3 Author: triesap Date: Tue, 23 Jun 2026 10:25:50 +0000 publish-proxy: add cli proxy transport - Replace publish mode config with publish transport and proxy token sources. - Route farm, listing, and sync publish flows through SDK publish transports. - Remove legacy direct listing publish and bridge/deferred proxy paths. - Cover proxy readiness, dry-run listing mutations, and retired surface rejection.

cli: rename market order readiness

2026-06-20T04:20:56Z

commit 30460646c84f3e588ad0e1705ab49ecd04dd2de3 parent 2290e05a0612fb7d844b3dd8f4f9c38494ee0058 Author: triesap Date: Fri, 19 Jun 2026 21:20:56 -0700 cli: rename market order readiness - replace checkout readiness output with order request readiness - rename disabled listing reason codes away from checkout language - update market actions, docs, and tests for agreement-only wording - validate formatting and the CLI Nix test lane

cli: remove stale order payment resources

2026-06-20T03:48:56Z

commit 2290e05a0612fb7d844b3dd8f4f9c38494ee0058 parent ead56d7b356f7e40b2b674714b1eae79e7936bc1 Author: triesap Date: Fri, 19 Jun 2026 20:48:56 -0700 cli: remove stale order payment resources - stop deriving output resources from payment and settlement fields - keep removed order lifecycle commands rejected by existing CLI guards - preserve listing fulfillment terms outside the order lifecycle - validate the CLI test lane for agreement-only command surfaces

cli: align agreement status interop

2026-06-20T02:19:01Z

commit ead56d7b356f7e40b2b674714b1eae79e7936bc1 parent be9f3a03e553d82c05e2941958b9b4201d0841b1 Author: triesap Date: Fri, 19 Jun 2026 19:19:01 -0700 cli: align agreement status interop - remove stale payment display fixture requirements from app order interop - tighten order help, cancel description, and enqueue status copy - keep agreement-only status guards focused on order workflow vocabulary - validate CLI status and interop paths with Nix check and test

cli: prune post-agreement order commands

2026-06-20T02:11:12Z

commit be9f3a03e553d82c05e2941958b9b4201d0841b1 parent c3c01fcaf71db470c54f8b5b1cf732b166259576 Author: triesap Date: Fri, 19 Jun 2026 19:11:12 -0700 cli: prune post-agreement order commands - remove order payment, settlement, receipt, and fulfillment command surfaces - align operation registry, parser tests, and public CLI rejection coverage - slim order status views and SDK migration guards to agreement-only workflow state - update CLI docs and validation copy around active order agreement scope

runtime: guard deferred payment commands

2026-06-19T23:23:06Z

commit c3c01fcaf71db470c54f8b5b1cf732b166259576 parent acff346c503a474f703e1b2c55acd81887892f4f Author: triesap Date: Fri, 19 Jun 2026 16:23:06 -0700 runtime: guard deferred payment commands - freeze payment and settlement operations as pre-runtime deferred stubs - assert they stay local low-risk and outside signer or relay publish requirements - preserve typed not-implemented output before runtime config loading

runtime: clarify order enqueue push output

2026-06-19T23:12:04Z

commit acff346c503a474f703e1b2c55acd81887892f4f parent 40ee2df06fe91816c8ef5a549c6694b44ab41015 Author: triesap Date: Fri, 19 Jun 2026 16:12:04 -0700 runtime: clarify order enqueue push output - include SDK enqueue receipt state in queued order reasons - preserve relay publication evidence and primary sync push action - add sync status inspection as a secondary recovery action - keep submit decision and lifecycle output behavior aligned

runtime: expose SDK order status receipts

2026-06-19T23:02:23Z

commit 40ee2df06fe91816c8ef5a549c6694b44ab41015 parent 91e2ea30aa990841a87341ac61bc5c03621dd167 Author: triesap Date: Fri, 19 Jun 2026 16:02:23 -0700 runtime: expose SDK order status receipts - render SDK order status evidence and eligibility metadata - expose passive payment handoff and next action in status output - keep legacy relay-derived status outside the SDK receipt shape - guard and test the migrated status adapter metadata path

runtime: split order SDK status adapter

2026-06-19T22:55:18Z

commit 91e2ea30aa990841a87341ac61bc5c03621dd167 parent 5d00f20e85338067b55f85d5b20085f8c4675305 Author: triesap Date: Fri, 19 Jun 2026 15:55:18 -0700 runtime: split order SDK status adapter - move SDK status view mapping into an order submodule - keep order status command entrypoint SDK-backed - guard the status adapter against direct relay dependencies - preserve existing order runtime behavior through validation

order: map sdk status agreement ids directly

2026-06-19T08:45:19Z

commit 5d00f20e85338067b55f85d5b20085f8c4675305 parent c10dcef59e91a15fc070de57fae189e3b9018ae3 Author: triesap Date: Fri, 19 Jun 2026 01:45:19 -0700 order: map sdk status agreement ids directly

cli: route order lifecycle through sdk

2026-06-19T06:58:41Z

commit c10dcef59e91a15fc070de57fae189e3b9018ae3 parent db6d423678cad10c2de2323e68a8ce1fbbc36c19 Author: triesap Date: Thu, 18 Jun 2026 23:58:41 -0700 cli: route order lifecycle through sdk - prepare and enqueue revision, cancellation, fulfillment, and receipt writes through SDK order lifecycle APIs - ingest visible lifecycle evidence into the SDK runtime before enqueueing follow-on order writes - render SDK lifecycle receipts through the existing CLI order output surfaces - tighten CLI source guards around migrated lifecycle paths while leaving payment and settlement direct paths deferred

cli: route order decisions through sdk

2026-06-19T05:58:32Z

commit db6d423678cad10c2de2323e68a8ce1fbbc36c19 parent ccd8d8d54a95bd57a77c95775b08d0c6e693e4b4 Author: triesap Date: Thu, 18 Jun 2026 22:58:32 -0700 cli: route order decisions through sdk - ingest seller request evidence before decision enqueue - enqueue accept and decline decisions through the SDK runtime - push the SDK outbox instead of directly building decision events - tighten migrated order decision source-guard requirements

cli: migrate order submit to sdk

2026-06-19T04:25:31Z

commit ccd8d8d54a95bd57a77c95775b08d0c6e693e4b4 parent 62d17daf5d03f46fc6ff8f05d2923ed131cc8607 Author: triesap Date: Thu, 18 Jun 2026 21:25:31 -0700 cli: migrate order submit to sdk

cli: migrate farm publish to sdk

2026-06-19T04:04:36Z

commit 62d17daf5d03f46fc6ff8f05d2923ed131cc8607 parent 9d1b24ff21ade68c4b98a1ad2d7ffaec94e6aea6 Author: triesap Date: Thu, 18 Jun 2026 21:04:36 -0700 cli: migrate farm publish to sdk Route farm publish through the SDK farm runtime for prepare, enqueue, and outbox push. Keep profile publication explicit as non-submitted in this workflow, remove the migrated farm path from the direct-relay allowlist, and guard the SDK-backed path against legacy writer regressions. Update CLI integration coverage for SDK push failure, profile non-submission, and no legacy signed-event local writes on farm publish.

cli: use SDK local-runtime feature

2026-06-19T03:10:43Z

commit 9d1b24ff21ade68c4b98a1ad2d7ffaec94e6aea6 parent fe4abf1baad73a2ee7b2b93fee111e5005518f68 Author: triesap Date: Thu, 18 Jun 2026 20:10:43 -0700 cli: use SDK local-runtime feature

order: quarantine legacy relay status preflight

2026-06-18T01:23:56Z

commit fe4abf1baad73a2ee7b2b93fee111e5005518f68 parent 16ed7c5d89e0f955d08437f45a76bb5cbbdb0c29 Author: triesap Date: Wed, 17 Jun 2026 18:23:56 -0700 order: quarantine legacy relay status preflight - rename the private relay status helper as legacy order preflight behavior - mark direct relay status reductions with a legacy preflight source - keep public order status bounded to the SDK local projection path - update SDK migration guards to require the quarantine marker

cli: harden sdk migration guards

2026-06-18T01:21:09Z

commit 16ed7c5d89e0f955d08437f45a76bb5cbbdb0c29 parent 5a0470046729c7dc62748707f54f89f0c2723878 Author: triesap Date: Wed, 17 Jun 2026 18:21:09 -0700 cli: harden sdk migration guards - add an explicit allowlist for deferred direct-relay consumers - table-drive migrated SDK path guards across listing, sync, order, and store - reject direct relay and legacy replica queue tokens from migrated segments - cover guard behavior with focused tests and full CLI Nix lanes

cli: expose sdk backup restore

2026-06-18T01:16:04Z

commit 5a0470046729c7dc62748707f54f89f0c2723878 parent 51b0873989d32d58e8ae7e94f35915f4a57765f4 Author: triesap Date: Wed, 17 Jun 2026 18:16:04 -0700 cli: expose sdk backup restore - add store backup restore parser and registry metadata - delegate restore execution to SDK without opening destination stores first - gate overwrite restores on approval tokens outside dry-run - cover dry-run, restore, overwrite, and SDK error output in target tests

fmt: satisfy release acceptance formatting

2026-06-17T23:16:46Z

commit 51b0873989d32d58e8ae7e94f35915f4a57765f4 parent 8050a9da1fa7534ecf841af4e2ec75c6ddd0e9c3 Author: triesap Date: Wed, 17 Jun 2026 16:16:46 -0700 fmt: satisfy release acceptance formatting - apply rustfmt to previously touched order and signer paths - format the SDK order-status CLI regression test - clear the release-acceptance formatter gate

sdk: guard CLI architecture boundary

2026-06-17T22:57:53Z

commit 8050a9da1fa7534ecf841af4e2ec75c6ddd0e9c3 parent 0aa0c56d069a20d2911365e91ed1e097da7336ea Author: triesap Date: Wed, 17 Jun 2026 15:57:53 -0700 sdk: guard CLI architecture boundary - move protected store usage to dev-only dependency scope - classify remaining direct rr-rs dependencies with owners - guard migrated paths from direct relay and legacy canonical queues - extend SDK source checks for CLI-specific concepts

store: migrate status and backup to SDK storage

2026-06-17T22:50:01Z

commit 0aa0c56d069a20d2911365e91ed1e097da7336ea parent 3295e3f051cbef9ede766a36cdd6aa423ff68d77 Author: triesap Date: Wed, 17 Jun 2026 15:50:01 -0700 store: migrate status and backup to SDK storage - report SDK event store and outbox as the canonical local store - label the legacy replica as derived migration state in status output - create SDK backup directories with manifest and verification output - update health readiness to use SDK store and signer state

order: migrate status to SDK projection

2026-06-17T22:33:36Z

commit 3295e3f051cbef9ede766a36cdd6aa423ff68d77 parent d6e4a59e0c073a27634b013185bc1e57c4e4d998 Author: triesap Date: Wed, 17 Jun 2026 15:33:36 -0700 order: migrate status to SDK projection - route public order status through the CLI SDK adapter - map SDK order status receipts into the CLI status view - keep relay status private for non-MVP preflight paths - update tests for local projection status semantics

sync: migrate status and push to SDK runtime

2026-06-17T22:17:10Z

commit d6e4a59e0c073a27634b013185bc1e57c4e4d998 parent 371276014e4be8f774661a61bfc4ee37a6c6e59f Author: triesap Date: Wed, 17 Jun 2026 15:17:10 -0700 sync: migrate status and push to SDK runtime - route sync status and canonical sync push through the CLI SDK adapter - render SDK outbox queue, relay, partial, retryable, and empty states - label remaining replica sync state as legacy-derived while preserving sync pull - update service and target tests for SDK-backed sync behavior

listing: migrate publish to SDK runtime

2026-06-17T21:54:04Z

commit 371276014e4be8f774661a61bfc4ee37a6c6e59f parent 0ccd8f54b2faed1e1ba3bff575540051de0b5adb Author: triesap Date: Wed, 17 Jun 2026 14:54:04 -0700 listing: migrate publish to SDK runtime

runtime: add CLI SDK adapter boundary

2026-06-17T21:30:09Z

commit 0ccd8f54b2faed1e1ba3bff575540051de0b5adb parent f5b849afcc287bb09544cf7aecc180ff36efac97 Author: triesap Date: Wed, 17 Jun 2026 14:30:09 -0700 runtime: add CLI SDK adapter boundary - map CLI runtime config to SDK storage, relay policy, and configured relays - materialize local account custody as an SDK-ready local event signer - map SDK errors to CLI envelopes through typed code, class, retry, and recovery metadata - validate with focused adapter/error tests and CLI nix check/test lanes

cli: use SDK CLI runtime feature

2026-06-17T20:31:20Z

commit f5b849afcc287bb09544cf7aecc180ff36efac97 parent 570ca1634bad63d9086edc405596d2e5ae320632 Author: triesap Date: Wed, 17 Jun 2026 13:31:20 -0700 cli: use SDK CLI runtime feature - switch radroots_sdk to the curated cli-runtime feature bundle - update SDK module imports after the root re-export cleanup - align order reducer call sites with typed input structs - adapt local signer status to the boxed signer capability contract

target: align listing publish contracts

2026-06-14T09:40:52Z

commit 570ca1634bad63d9086edc405596d2e5ae320632 parent 4235d0f202e49fee1a71b66cc131803bf1994b4c Author: triesap Date: Sun, 14 Jun 2026 02:40:52 -0700 target: align listing publish contracts - replace deleted trade listing publish helpers with canonical listing validation - migrate order listing address call sites to canonical validated IDs - update local test fixtures that decompose listing addresses - validate with nix run .#check and nix run .#test

sdk: align CLI order event types

2026-06-13T23:10:47Z

commit 4235d0f202e49fee1a71b66cc131803bf1994b4c parent 685211cea4ff63a28f7392b344f890c3eaf8a1f6 Author: triesap Date: Sat, 13 Jun 2026 16:10:47 -0700 sdk: align CLI order event types - parse order event IDs and pubkeys at protocol boundaries - keep CLI order views string-shaped while reducers use typed IDs - update order runtime tests for typed fixture values - validate with nix run .#check and nix run .#test

sdk: point CLI at SDK workspace

2026-06-13T22:09:51Z

commit 685211cea4ff63a28f7392b344f890c3eaf8a1f6 parent 94abe59df22261896c4eea882d405965bd6a77cf Author: triesap Date: Sat, 13 Jun 2026 15:09:51 -0700 sdk: point CLI at SDK workspace - update radroots_sdk to resolve from the SDK repo path - refresh the CLI lockfile for the new SDK crate version - keep existing rr-rs core crate paths unchanged - leave order runtime typed-ID alignment for a dedicated consumer slice

cli: align typed protocol ids

2026-06-13T07:44:17Z

commit 94abe59df22261896c4eea882d405965bd6a77cf parent be7a2541f6391da355a9bc258a8197f192adf54e Author: triesap Date: Sat, 13 Jun 2026 00:44:17 -0700 cli: align typed protocol ids - Refresh the lockfile for the shared SQLite binding graph - Parse rr-rs order and listing protocol IDs at event boundaries - Update local replica tests for the event-head contract - Validate the no-default locked CLI check and test lanes

cli: align order event consumer APIs

2026-06-13T02:28:30Z

commit be7a2541f6391da355a9bc258a8197f192adf54e parent 31be69136f0517c2346f11453a6b2906d31d266b Author: triesap Date: Fri, 12 Jun 2026 19:28:30 -0700 cli: align order event consumer APIs - switch CLI order workflows to canonical rr-rs order event, codec, and reducer names - refresh listing, signer, and validation receipt call sites for the current contracts - update tests and lockfile for the new rr-rs dependency graph - verify with nix check, nix test, no-default cargo checks, and stale-symbol scan

config: harden runtime config names

2026-06-04T21:48:27Z

commit 31be69136f0517c2346f11453a6b2906d31d266b parent 490f4ba67a35c8ff6ea4f0b5b25bc704e5f8c808 Author: triesap Date: Thu, 4 Jun 2026 14:48:27 -0700 config: harden runtime config names - switch runtime env and env-file keys to RADROOTS_CLI names - make CLI TOML strict with relays and signer backend schema - document canonical config and invalid previous names - verify nix run .#fmt, nix run .#check, nix run .#test, and git diff --check

build: remove release builder metadata

2026-06-04T20:16:46Z

commit 490f4ba67a35c8ff6ea4f0b5b25bc704e5f8c808 parent 9787102a278910c2673d41106d8f91ff7479af29 Author: triesap Date: Thu, 4 Jun 2026 13:16:46 -0700 build: remove release builder metadata

docs: clarify release boundary

2026-06-04T19:41:22Z

commit 9787102a278910c2673d41106d8f91ff7479af29 parent 11c7ec774a4b9791fb12db1a2d39d5296c3fdbd4 Author: triesap Date: Thu, 4 Jun 2026 12:41:22 -0700 docs: clarify release boundary - distinguish source authority from official artifacts - preserve repo-local release-candidate validation - keep builder and target policy outside this repo - document standalone build and test expectations

sp1: update verifier lockfile to 6.2.3

2026-06-03T20:49:00Z

commit 11c7ec774a4b9791fb12db1a2d39d5296c3fdbd4 parent 48ddf9d1bb7b70b2b568396f66cefb3e0f1072d1 Author: triesap Date: Wed, 3 Jun 2026 13:49:00 -0700 sp1: update verifier lockfile to 6.2.3

validation: map SP1 setup failure diagnostics

2026-06-03T20:21:09Z

commit 48ddf9d1bb7b70b2b568396f66cefb3e0f1072d1 parent d2d5cdb78ec6e4139ca5b0bb2f103d0831531177 Author: triesap Date: Wed, 3 Jun 2026 13:21:09 -0700 validation: map SP1 setup failure diagnostics - map SP1 setup failures to a non-invalid verifier state - keep verifier setup failures out of invalid proof bucketing - add focused validation receipt coverage for setup failure mapping - keep validation receipt test imports clean across feature modes

validation: report unavailable SP1 verifier

2026-06-03T19:51:33Z

commit d2d5cdb78ec6e4139ca5b0bb2f103d0831531177 parent 07d414a7061ecf9778346f72ccc68f4620ebbb68 Author: triesap Date: Wed, 3 Jun 2026 12:51:33 -0700 validation: report unavailable SP1 verifier - map the shared unavailable-verifier host error to explicit receipt proof state - call the shared inline SP1 verifier API across feature states - keep verifier-unavailable receipts out of invalid-proof bucketing - split validation receipt tests by SP1 verifier feature mode

runtime: split SP1 verification feature

2026-06-03T18:44:35Z

commit 07d414a7061ecf9778346f72ccc68f4620ebbb68 parent a6f2d79a513a649a8acfa0e09dac0f058137aadd Author: triesap Date: Wed, 3 Jun 2026 11:44:35 -0700 runtime: split SP1 verification feature - add a default sp1-verify feature for inline receipt proof verification - keep no-default-features CLI builds independent of the local SP1 toolchain - fail closed when inline SP1 receipt verification is requested without verifier support - retain the existing verifier path for default feature builds

tests: align app order payment fixture

2026-06-03T06:42:22Z

commit a6f2d79a513a649a8acfa0e09dac0f058137aadd parent f2b9d1f2d108c0c7c1682568693aca3dd8bc6f0b Author: triesap Date: Tue, 2 Jun 2026 23:42:22 -0700 tests: align app order payment fixture - Seed app local order records with payment_display state for importer coverage.

build: declare workspace resolver

2026-05-27T05:47:39Z

commit f2b9d1f2d108c0c7c1682568693aca3dd8bc6f0b parent 22408e95e5a01385fe296fb6341e6d8b228f4580 Author: triesap Date: Wed, 27 May 2026 05:47:39 +0000 build: declare workspace resolver - add resolver 2 to the standalone Cargo workspace manifest - satisfy the outer repo identity policy projection for mounted Rust repos - keep the manifest aligned with Rust 1.92 and edition 2024 policy - validate with the nested Nix check and test commands

ops: split operation execution modules

2026-05-26T20:34:21Z

commit 22408e95e5a01385fe296fb6341e6d8b228f4580 parent 5a6fb1f21aba56bc705340c266000f5a484a1b67 Author: triesap Date: Tue, 26 May 2026 20:34:21 +0000 ops: split operation execution modules

runtime: organize store account modules

2026-05-26T20:29:04Z

commit 5a6fb1f21aba56bc705340c266000f5a484a1b67 parent c7063fc3fc3440938bb80c58b34ce8eedaa7b7ee Author: triesap Date: Tue, 26 May 2026 20:29:04 +0000 runtime: organize store account modules

ops: split operation execution modules

2026-05-26T20:24:12Z

commit c7063fc3fc3440938bb80c58b34ce8eedaa7b7ee parent 6922ee248c652334bdd2ec43fe8cc1f2438cfc1f Author: triesap Date: Tue, 26 May 2026 20:24:12 +0000 ops: split operation execution modules

registry: split operation metadata

2026-05-26T20:20:23Z

commit 6922ee248c652334bdd2ec43fe8cc1f2438cfc1f parent b631bd4920080404e45e1336859abf82c2e39898 Author: triesap Date: Tue, 26 May 2026 20:20:23 +0000 registry: split operation metadata

cli: split command parser modules

2026-05-26T20:16:54Z

commit b631bd4920080404e45e1336859abf82c2e39898 parent 3d132a9ae8b0ad07091a12e6c5b3e3d64e2c7644 Author: triesap Date: Tue, 26 May 2026 20:16:54 +0000 cli: split command parser modules

cli: organize command parser modules

2026-05-26T20:06:18Z

commit 3d132a9ae8b0ad07091a12e6c5b3e3d64e2c7644 parent fa2569572700d2430dc55f4ff3459fe5f58327a0 Author: triesap Date: Tue, 26 May 2026 20:06:18 +0000 cli: organize command parser modules

cli: fail closed basket quote readiness

2026-05-26T11:25:06Z

commit fa2569572700d2430dc55f4ff3459fe5f58327a0 parent 78412ac9835332fe05f08638391aa618ce96a815 Author: triesap Date: Tue, 26 May 2026 11:25:06 +0000 cli: fail closed basket quote readiness

cli: enforce verified primary bin gates

2026-05-26T10:27:23Z

commit 78412ac9835332fe05f08638391aa618ce96a815 parent 4ec2fbfd6b8e6e59bb7c39cbfe95423733ad2310 Author: triesap Date: Tue, 26 May 2026 10:27:23 +0000 cli: enforce verified primary bin gates - require protocol-valid readiness for verified primary bins - make basket readiness check replica primary-bin integrity - block stale order submit on invalid verified bin state - cover invalid basket quote and stale submit paths

market: require verified primary bin readiness

2026-05-26T09:28:49Z

commit 4ec2fbfd6b8e6e59bb7c39cbfe95423733ad2310 parent 0b275639a022405ee3a45103ae27701a18259c68 Author: triesap Date: Tue, 26 May 2026 09:28:49 +0000 market: require verified primary bin readiness

market: require primary bin readiness

2026-05-26T08:09:57Z

commit 0b275639a022405ee3a45103ae27701a18259c68 parent 947114ee0542e77ebb07941f5dd1ae03db20146b Author: triesap Date: Tue, 26 May 2026 08:09:57 +0000 market: require primary bin readiness - include primary-bin identity in checkout readiness - disable basket actions when listing bin identity is missing - cover missing and restored bin readiness in market commands - keep order submit as the closed final guardrail

market: expose primary bin id in output

2026-05-26T05:01:35Z

commit 947114ee0542e77ebb07941f5dd1ae03db20146b parent 8101c9ae14012f2b1e22a0d6db25b2302e54385c Author: triesap Date: Tue, 26 May 2026 05:01:35 +0000 market: expose primary bin id in output

order: use observed listing provenance

2026-05-25T20:35:19Z

commit 8101c9ae14012f2b1e22a0d6db25b2302e54385c parent ca48754f8c7775dee8368d245f305ba3f892353a Author: triesap Date: Mon, 25 May 2026 20:35:19 +0000 order: use observed listing provenance - accept observed relay delivery evidence for shared signed listing provenance - ignore target and connected relays when observed relay provenance is unknown - keep pending and failed delivery evidence out of order relay targeting - cover acknowledged-free observed provenance extraction in order tests

order: align app order signed evidence

2026-05-25T19:58:50Z

commit ca48754f8c7775dee8368d245f305ba3f892353a parent 0516f2f7d4a493c73ae339b8a24d9f4a7d5d8fc4 Author: triesap Date: Mon, 25 May 2026 19:58:50 +0000 order: align app order signed evidence - scan acknowledged signed order request records before exposing app local work - mark matching app order evidence as submitted and duplicate-safe - fail closed on conflicting signed request evidence for export and submit - cover submitted and conflict app-order workflows in target cli tests

order: require listing relay provenance

2026-05-25T19:20:38Z

commit 0516f2f7d4a493c73ae339b8a24d9f4a7d5d8fc4 parent ab70f5cc46f6bf3eeef71b948c97fcda8602ad03 Author: triesap Date: Mon, 25 May 2026 19:20:38 +0000 order: require listing relay provenance - capture listing relay provenance in order drafts from market and shared listing evidence - expose listing relay provenance across order views and submit error details - reject order submit before signing when configured relays miss known listing provenance - add focused order provenance tests and provenance-qualified CLI fixtures

order: accept app listing relays

2026-05-25T09:22:46Z

commit ab70f5cc46f6bf3eeef71b948c97fcda8602ad03 parent 78b346f1c5a4b6098163dc2502cb5ec2d9b55d25 Author: triesap Date: Mon, 25 May 2026 09:22:46 +0000 order: accept app listing relays

config: enforce strict relay urls

2026-05-25T07:27:07Z

commit 78b346f1c5a4b6098163dc2502cb5ec2d9b55d25 parent 12abddd84ca25fdc4f78754367196a7741db8697 Author: triesap Date: Mon, 25 May 2026 07:27:07 +0000 config: enforce strict relay urls

local-events: use canonical relay evidence

2026-05-25T07:18:53Z

commit 12abddd84ca25fdc4f78754367196a7741db8697 parent 179724ce5f13a3170e55e78729886ab1edbac67a Author: triesap Date: Mon, 25 May 2026 07:18:53 +0000 local-events: use canonical relay evidence

local-events: use canonical relay fingerprints

2026-05-25T05:24:53Z

commit 179724ce5f13a3170e55e78729886ab1edbac67a parent a27b3a06d0bf350a69b2653fba3aec9818abfed2 Author: triesap Date: Mon, 25 May 2026 05:24:53 +0000 local-events: use canonical relay fingerprints

cli: require saved app order records

2026-05-24T18:31:34Z

commit a27b3a06d0bf350a69b2653fba3aec9818abfed2 parent 06dd38368fab990b701b402eea3d603e2a8dc9f1 Author: triesap Date: Sun, 24 May 2026 18:31:34 +0000 cli: require saved app order records - require app-authored order discovery to use local-saved local-work records - keep buyer order local-work filtering aligned with the shared runtime status contract - preserve existing app-order validation and fail-closed diagnostics - validate with cargo check, focused app-order tests, formatting, and diff hygiene

cli: harden app order validation

2026-05-24T18:24:25Z

commit 06dd38368fab990b701b402eea3d603e2a8dc9f1 parent 9f334e6f420900509ca02d0562925b3277e6d6cb Author: triesap Date: Sun, 24 May 2026 18:24:25 +0000 cli: harden app order validation - route app-order list/export/submit readiness through the shared supported payload validator - fail closed for stale, unsupported, malformed, and conflicting app-order records - cover supported and fail-closed app-order states with deterministic target CLI tests - validate with cargo check, focused app-order tests, nix check, formatting, and diff hygiene

tests: align app order fixture timestamp

2026-05-24T18:14:29Z

commit 9f334e6f420900509ca02d0562925b3277e6d6cb parent e549d4847a791a5c87e9562aedf7d92f4d7bdd87 Author: triesap Date: Sun, 24 May 2026 18:14:29 +0000 tests: align app order fixture timestamp - use the current app order_updated_at string shape in the supported app-order fixture - keep the fixture compatible with the shared local-events app order contract - validate supported and stale app-order CLI fixture paths - leave CLI validation behavior changes for the next RCLD slice

cli: consume app-authored order records

2026-05-24T11:17:44Z

commit e549d4847a791a5c87e9562aedf7d92f4d7bdd87 parent ab7dd72d0872572f32b76d508cc7ba0e0e03bd49 Author: triesap Date: Sun, 24 May 2026 11:17:44 +0000 cli: consume app-authored order records

runtime: use shared local events path contract

2026-05-24T09:53:51Z

commit ab7dd72d0872572f32b76d508cc7ba0e0e03bd49 parent 521c79432c66e79fad640dad9e44f22ba876e00d Author: triesap Date: Sun, 24 May 2026 09:53:51 +0000 runtime: use shared local events path contract

cli: harden app listing export identity

2026-05-23T17:40:38Z

commit 521c79432c66e79fad640dad9e44f22ba876e00d parent dc16f1e8b149012eaaabfec1e758e1e2d849d092 Author: triesap Date: Sat, 23 May 2026 17:40:38 +0000 cli: harden app listing export identity - require canonical record owner pubkeys before app listing export - prevent app body pubkeys or exportable hints from making unresolved records publishable - prefer canonical record owner metadata when exporting app-authored listing drafts - cover body-only and owner-over-body app listing record cases

tests: cover app export currentness edge cases

2026-05-23T10:45:21Z

commit dc16f1e8b149012eaaabfec1e758e1e2d849d092 parent 136b16ec1a1f6c30130fb1e10d913ebf0a4cae58 Author: triesap Date: Sat, 23 May 2026 10:45:21 +0000 tests: cover app export currentness edge cases - add owner-pubkey fallback identity coverage - prove same listing ids remain separate by owner - cover stale export beyond first app-record page - keep dry-run and unresolved-owner coverage intact

listing: make app records newest-first

2026-05-23T10:42:11Z

commit 136b16ec1a1f6c30130fb1e10d913ebf0a4cae58 parent 97f2e0a3711deaccb8e7b316b4982e63d9ed1509 Author: triesap Date: Sat, 23 May 2026 10:42:11 +0000 listing: make app records newest-first - read shared app records from newest change pages - expose app-record list pagination metadata - dedupe fallback listing identity by owner pubkey - cover newer records behind older local work

listing: dedupe current app records

2026-05-23T09:44:11Z

commit 97f2e0a3711deaccb8e7b316b4982e63d9ed1509 parent b191be105621e95818b890cfda12f5e96f1f721b Author: triesap Date: Sat, 23 May 2026 09:44:11 +0000 listing: dedupe current app records - list app-authored records by change sequence and current identity - expose change sequence and superseded counts in app record rows - block stale app record exports with current-record guidance - cover unresolved pubkey records as non-exportable app drafts

cli: normalize app listing export units

2026-05-23T08:37:27Z

commit b191be105621e95818b890cfda12f5e96f1f721b parent d27ff693775d5c52e6c3c5c90480869d417e8b1d Author: triesap Date: Sat, 23 May 2026 08:37:27 +0000 cli: normalize app listing export units - preserves app-authored package labels during listing export - normalizes unsupported app unit fields to canonical CLI draft units - keeps exported drafts on the existing listing validation path - covers the app-style dozen label in target CLI export tests

cli: export app-authored listing records

2026-05-23T08:15:38Z

commit d27ff693775d5c52e6c3c5c90480869d417e8b1d parent 3885ce5f284399bafcd63c5ef53a46698c0aa946 Author: triesap Date: Sat, 23 May 2026 08:15:38 +0000 cli: export app-authored listing records - adds listing app list and export commands for shared app records - materializes app listing payloads as canonical CLI listing drafts - keeps publish routed through existing listing publish files - covers discovery dry-run export and validation with target CLI tests

local_events: add signed publish outbox records

2026-05-23T03:24:48Z

commit 3885ce5f284399bafcd63c5ef53a46698c0aa946 parent f8b493c8c5bbdb66d3c59eaaf13dfb5c83117072 Author: triesap Date: Sat, 23 May 2026 03:24:48 +0000 local_events: add signed publish outbox records - split direct relay signing from signed event publish execution - append pending signed event records before farm and listing relay publish - update signed event outbox state for relay acknowledgements and failures - cover farm acknowledgement and listing failure outbox records in CLI tests

local_events: add cli local work records

2026-05-23T03:12:50Z

commit f8b493c8c5bbdb66d3c59eaaf13dfb5c83117072 parent a7fe9539cc2961bef0b3f592cafd81ad258c1558 Author: triesap Date: Sat, 23 May 2026 03:12:50 +0000 local_events: add cli local work records - add shared local events dependency and runtime append helper - record farm create, update, and rebind writes after durable config saves - record listing create and rebind writes with actor and listing identity - cover dry-run non-mutation and shared local work records in CLI tests

docs: align cli authority docs

2026-05-23T01:51:41Z

commit a7fe9539cc2961bef0b3f592cafd81ad258c1558 parent 9ec7fe450fab67ec50acb27c35e2c3ddf42014c9 Author: triesap Date: Sat, 23 May 2026 01:51:41 +0000 docs: align cli authority docs - mark RSP1 as closed in validation receipt docs - describe manual and planned proof lanes truthfully - replace fake listing and order placeholders in flows - keep examples on current CLI output fields

validation: type worker proof evidence

2026-05-21T07:24:29Z

commit 9ec7fe450fab67ec50acb27c35e2c3ddf42014c9 parent 196ee3e6493f8358da714bd7bf81093c7b03e18a Author: triesap Date: Thu, 21 May 2026 07:24:29 +0000 validation: type worker proof evidence - parse trusted worker result fields into shared proof enums - reject unknown backend, mode, status, role, and proof system values - bind typed worker evidence to receipt and public value identities - cover unknown typed values staying untrusted

validation: trust worker evidence by listing id

2026-05-21T05:27:38Z

commit 196ee3e6493f8358da714bd7bf81093c7b03e18a parent ab3fdc5c4c9f2a94eeb5c4762d3da578d5c2bf7a Author: triesap Date: Thu, 21 May 2026 05:27:38 +0000 validation: trust worker evidence by listing id - surface validation receipt listing ids in machine-readable receipt tags - bind trusted worker listing ids to the receipt listing marker instead of the root event - add distinct listing request decision unit coverage - validate with cargo fmt, focused validation receipt tests, and nix check/test

validation: trust receipt worker evidence

2026-05-21T00:26:54Z

commit ab3fdc5c4c9f2a94eeb5c4762d3da578d5c2bf7a parent 59349f5ebe5a386540c4426bb2946d397c23bba2 Author: triesap Date: Thu, 21 May 2026 00:26:54 +0000 validation: trust receipt worker evidence - add explicit trusted RHI worker pubkey runtime configuration - split trusted worker evidence from informational untrusted evidence output - batch validation receipt list evidence hydration for trusted worker keys - map proof material errors to specific stable CLI reason codes

verify validation receipt proof states

2026-05-20T18:58:29Z

commit 59349f5ebe5a386540c4426bb2946d397c23bba2 parent c2e8ecfffe95ed0ce8c3105a9ec7b517bb2e2e70 Author: triesap Date: Wed, 20 May 2026 18:58:29 +0000 verify validation receipt proof states

build: refresh trade dependency lock

2026-05-20T02:03:19Z

commit c2e8ecfffe95ed0ce8c3105a9ec7b517bb2e2e70 parent 15c708bc49ccf84943384049525427a307beb1f0 Author: triesap Date: Wed, 20 May 2026 02:03:19 +0000 build: refresh trade dependency lock - record the new radroots_trade base64 dependency in Cargo.lock - keep the CLI lock aligned with shared receipt verifier changes - validate the documented Nix check and test lanes - leave the CLI command surface unchanged

cli: report sp1 receipt metadata failures

2026-05-19T23:34:04Z

commit 15c708bc49ccf84943384049525427a307beb1f0 parent c7746c1d9565f9b3bba84afc64b05b644a30a724 Author: triesap Date: Tue, 19 May 2026 23:34:04 +0000 cli: report sp1 receipt metadata failures - map invalid sp1 proof metadata reasons - keep sp1 metadata output non-cryptographic - harden hyf typed-client test timeout - cover receipt reason-code mappings

receipt: report proof state truthfully

2026-05-19T08:32:10Z

commit c7746c1d9565f9b3bba84afc64b05b644a30a724 parent 527cfad5e3756a1adf9133d84103a15a6436cbbc Author: triesap Date: Tue, 19 May 2026 08:32:10 +0000 receipt: report proof state truthfully - distinguish deterministic receipt verification from SP1 metadata checks - avoid claiming CLI-side SP1 cryptographic verification - map proof-material and public-values mismatches to specific reasons - cover proof-state and invalid-reason outputs

docs: align validation receipt proof posture

2026-05-17T18:34:18Z

commit 527cfad5e3756a1adf9133d84103a15a6436cbbc parent d9e323d3adf8c7436baf831b83e4e2121de41b9e Author: triesap Date: Sun, 17 May 2026 18:34:18 +0000 docs: align validation receipt proof posture - distinguish rcvr receipt foundations from rsp1 proof work - document none receipts as deterministic advisory evidence - require real proof material for sp1 receipt success - keep payment commands reserved as not implemented

validation: add receipt inspection commands

2026-05-17T01:19:25Z

commit d9e323d3adf8c7436baf831b83e4e2121de41b9e parent fb4b11e7f00721b20abdce710c217e259317b59f Author: triesap Date: Sun, 17 May 2026 01:19:25 +0000 validation: add receipt inspection commands

cli: report partial relay fetches

2026-05-16T23:25:12Z

commit fb4b11e7f00721b20abdce710c217e259317b59f parent f278d9d9eada740291deac9ad2c9ec5692875db0 Author: triesap Date: Sat, 16 May 2026 23:25:12 +0000 cli: report partial relay fetches

cli: reject terminal order mutations

2026-05-16T22:20:16Z

commit f278d9d9eada740291deac9ad2c9ec5692875db0 parent 57dc0b036cbc00ee814bc57b502ae0d4bd18a9d8 Author: triesap Date: Sat, 16 May 2026 22:20:16 +0000 cli: reject terminal order mutations

order: reject terminal fulfillment updates

2026-05-16T20:22:12Z

commit 57dc0b036cbc00ee814bc57b502ae0d4bd18a9d8 parent 591867151c922971889703e8ca845d24f9bf5c8c Author: triesap Date: Sat, 16 May 2026 20:22:12 +0000 order: reject terminal fulfillment updates - classify terminal fulfillment preflight as validation failure - reject fulfillment updates after completed or disputed receipt state - add a unit regression for completed-order terminal handling - keep order mutation behavior aligned with lifecycle reducer output

docs: align validation receipt authority

2026-05-14T21:40:31Z

commit 591867151c922971889703e8ca845d24f9bf5c8c parent 312012974874021ef4964b45aaf01cebaf4c6040 Author: triesap Date: Thu, 14 May 2026 21:40:31 +0000 docs: align validation receipt authority - document active validation receipt and SP1 proof inspection scope - list the approved validation receipt command vocabulary - keep buyer order receipts distinct from proof receipts - preserve deferred payment and settlement posture

cli: prove sync no-overwrite state

2026-05-13T03:39:55Z

commit 312012974874021ef4964b45aaf01cebaf4c6040 parent 886f6e99494c339e83ce138c43735efc11f876fd Author: triesap Date: Wed, 13 May 2026 03:39:55 +0000 cli: prove sync no-overwrite state - expose sync action reason codes for relay fetch, ingest, and skipped-write outcomes - report duplicate or older relay events as sync_no_overwrite instead of silent skips - preserve newer local listing projections when stale relay events arrive - cover the no-overwrite path in nested sync runtime tests

cli: gate market checkout actions

2026-05-13T03:25:22Z

commit 886f6e99494c339e83ce138c43735efc11f876fd parent f114708403f2bfbb404a6f90b192a7b87eba8be1 Author: triesap Date: Wed, 13 May 2026 03:25:22 +0000 cli: gate market checkout actions - add typed market readiness fields for protocol, marketplace, and checkout state - gate market buyer-intent actions on checkout-enabled listings only - expose checkout-disabled reason codes in search and listing get output - cover enabled and disabled checkout paths in nested CLI tests

cli: harden machine output reasons

2026-05-13T03:06:00Z

commit f114708403f2bfbb404a6f90b192a7b87eba8be1 parent 7b8710675cbbe50f062fe34312bb244ee2fbbb66 Author: triesap Date: Wed, 13 May 2026 03:06:00 +0000 cli: harden machine output reasons - add status, output format, resource, and reason code fields - propagate reason semantics into JSON and NDJSON envelopes - document the machine-output contract for operators - cover success, invalid-input, and deferred-payment states

cli: close account proof vocabulary

2026-05-10T16:15:44Z

commit 7b8710675cbbe50f062fe34312bb244ee2fbbb66 parent af4dd2dac29f2d56bc086f383546b460071b5a7b Author: triesap Date: Sun, 10 May 2026 16:15:44 +0000 cli: close account proof vocabulary - add account resolution to health check output - align listing update approval metadata and docs - document shared account-resolution fields - cover health and approval parity in cli tests

cli: align deferred publish guardrails

2026-05-10T15:03:44Z

commit af4dd2dac29f2d56bc086f383546b460071b5a7b parent 0130077087fd3520e4675033a8fe6dc06819229c Author: triesap Date: Sun, 10 May 2026 15:03:44 +0000 cli: align deferred publish guardrails - make radrootsd publish mode fail closed for active buyer and seller writes - expose account-resolution status and align signer write-kind readiness - add listing.update signer and relay publish preflight parity - update CLI help, docs, and guardrail regression coverage

tests: update operation registry count

2026-05-10T03:31:39Z

commit 0130077087fd3520e4675033a8fe6dc06819229c parent a9e8f8c23e966eff26df269c5b085cc2e585271c Author: triesap Date: Sun, 10 May 2026 03:31:39 +0000 tests: update operation registry count - align registry exact-count assertion - cover order rebind in target operation inventory - keep registry identity checks unchanged - unblock full nested cli test lane

docs: describe bound order actors

2026-05-10T03:29:43Z

commit a9e8f8c23e966eff26df269c5b085cc2e585271c parent b6535389ecf03b7fc273331b325f46ce63e3d952 Author: triesap Date: Sun, 10 May 2026 03:29:43 +0000 docs: describe bound order actors - document draft-bound buyer authority - add order rebind to command surface - explain status and event actor context - align examples with rebind repair flow

order: bind buyer writes to drafts

2026-05-10T03:25:53Z

commit b6535389ecf03b7fc273331b325f46ce63e3d952 parent a8b7622b840d8be34f2a4873ff3ef0bfeefe05e0 Author: triesap Date: Sun, 10 May 2026 03:25:53 +0000 order: bind buyer writes to drafts - prefer draft actor context for status and history - sign buyer-side writes with bound order accounts - reject conflicting buyer account overrides - cover default-drift status and lifecycle paths

order: add explicit draft rebind

2026-05-10T03:13:53Z

commit a8b7622b840d8be34f2a4873ff3ef0bfeefe05e0 parent c4b37da68337ec0701b605d5e6c979bdd8659b1c Author: triesap Date: Sun, 10 May 2026 03:13:53 +0000 order: add explicit draft rebind - add order rebind parser and operation contract - preview and write bound buyer actor changes - mint order ids when buyer pubkeys change - refuse relay-visible published order requests

order: sign with bound buyer account

2026-05-10T03:00:57Z

commit c4b37da68337ec0701b605d5e6c979bdd8659b1c parent 39d3bdc35a8c7a0b750c50fe517a1d12a8919f04 Author: triesap Date: Sun, 10 May 2026 03:00:57 +0000 order: sign with bound buyer account - validate order submit against the draft buyer actor - sign order requests with the bound account id - reject conflicting explicit account overrides - cover submit failures for missing and watch-only buyers