Repository navigation
KN-3: c1-literals reads the transport schemes (#49), with narrow exact-string masks - #1005
Merged
Merged
Conversation
…xact-string masks (KN-3, #49) BUSBAR-1.6.0.md l.98-102 (#49): "Core never knows what `http`, `https` or `grpc` mean — those strings are data passing through it from a plane to a transport." That supersedes the M0 carve-out, which exempted the carrier vocabulary. VOCABULARY now holds http, https, h2, grpc, sse, ws, wss, websocket, tcp, stdio and unix. MASKS (coordinator ruling R1, 2026-10-14) is a list of exact strings removed before the words are read. It is never a word allowlist. Two are identifier URIs that are never dialled: the SVG xmlns and the JSON-Schema $schema. Two are the frozen 1.5.5 env var BUSBAR_UPSTREAM_H2_PRIOR_KNOWLEDGE (v1.5.5:crates/busbar/src/main.rs:3142) and the inline capture of the kernel const holding it. Three are `unix` as time or the OS: unix_ms, unix seconds, on unix. Selftest REDs: a bare "http" literal; a "unix:" socket scheme; a scheme beside a masked identifier URI. GREEN: every masked string in one planted file. qa/c1-literals.toml takes the new header and 34 rows: one per (file, scheme word) the kernel and loader spell today, measured with the masks. They are appended at the end, so the open strike PRs keep their hunks. Each drain strikes its row; the D2/D3 files' rows go with their deletion.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Kernel neutrality, c1 -> 0 including the transport schemes (BUSBAR-1.6.0.md l.98-102, #49). Stacked on #987 (rule 19: stays a draft until #987 lands).
xtask/src/gates/c1_literals.rs: VOCABULARY gains http, https, h2, grpc, sse, ws, wss, websocket, tcp, stdio, unix. This supersedes the M0 carve-out.MASKSis the coordinator's R1 ruling: exact strings, never words. They cover the SVG xmlns, the JSON-Schema $schema, the frozen 1.5.5 env varBUSBAR_UPSTREAM_H2_PRIOR_KNOWLEDGE(v1.5.5 main.rs:3142) plus its const's inline capture, andunix_ms/unix seconds/on unix."http", a"unix:"socket scheme, and a scheme beside a masked URI. GREEN: all masked strings in one planted file.qa/c1-literals.toml: new header and 34 rows appended at the end (measured with the masks), so the open strike PRs (KN-2a: kernel deletes the dead copy of the request-log webhook SSRF guard (c1 observability.rs webhook) #947/KN-2b: the migration's export and hook-transport words are the root legacy table's rows (Law 0) #976/KN-2c/2d: recorder log line is a frozen root legacy row; kernel diagnostics name no sink or auth plugin (Law 0) #987) keep their hunks. Each drain strikes its own row. The rows in D2/D3 files (egress/engine, egress/duplex_ws, egress/fixtures, plane_host/egress_tests, ingress/protocol, router.rs) are struck by their deletion.