Feat/0.3.0 239 save policy strength - #582

Merged

cursor[bot] merged 27 commits into

devfrom

feat/0.3.0-239-save-policy-strength

Sep 17, 2026

Commits on Sep 14, 2026

feat(core): reject the undeclared save-policy fallback as a declaration (#239)
mberrys
committed
967160c
chore(policy): run the save-policy suites in the core gate lane (#239)
mberrys
committed
366a972
feat(core): add save-policy strength comparison and one refusal message (#239)
mberrys
committed
3e21784
feat(core): refuse a weakened save policy at the transaction boundary (#239)
mberrys
committed
d0e23dc
feat(core): enforce the effective save policy on the candidate write path (#239)
mberrys
committed
14f7577
feat(core): refuse candidate saves that would overwrite the trusted source (#239)
mberrys
committed
9a71772
test(core): pin source bytes across success, cancel, and failure (#239)
mberrys
committed
f4fad3b
test(core): pin the received input as a read-only artifact identity (#239)
mberrys
committed
9ae4792
test(core): pin that no non-incremental operation is ever appended (#239)
mberrys
committed
42e8ee1
feat(cli): refuse an in-place redaction of the trusted input (#239)
mberrys
committed
ea83892
chore(qualification): add a signed-fixture generator for the incremental-save proof (#239)
mberrys
committed
17b647b
test(core): add a real signed incremental-save fixture with provenance (#239)
mberrys
committed
6eca835
test(core): prove a signed byte range survives an incremental edit (#239)
mberrys
committed
0f00539
test(core): pin that incremental cost follows changed data (#239)
mberrys
committed
27d369b
test(core): emit the signed incremental artifact for independent validation (#239)
mberrys
committed
d6d568d
feat(cli): honour the declared save policy in add-bleed and rgb-to-cmyk (#239)
mberrys
committed
b3c3fbb
test(cli): pin the corrective-command save-policy refusals (#239)
mberrys
committed
c994755
ci: validate the signed incremental artifact with qpdf and pdfsig (#239)
mberrys
committed
14fe330
test(core): pin that no save path records an approved output (#239)
mberrys
committed
351c2c7
docs: state the true state of editor crash recovery (#239)
mberrys
committed
37984f0
docs: document operation-owned save policy strength and its proofs (#239)
mberrys
committed
56060a9
chore(changelog): record the save-policy strength change (#239)
mberrys
committed
55ec58f
fix(docs): keep the recovery record inside the Loop identity contract (#239)
mberrys
committed
dfbf73e

Commits on Sep 16, 2026

merge(dev): resolve agent-policy.json conflict for #582

cursoragent
and
mberrys
committed
f04e1cc
chore(docs): refresh phase5-widgets inventory after dev merge

cursoragent
and
mberrys
committed
d9543dd
fix(test): unwrap PdfTool envelope in bleed stress preflight

cursoragent
and
mberrys
committed
2046296
docs(changes): note bleed stress envelope test fix in #582 fragment

cursoragent
and
mberrys
committed
3729d73

Navigation Menu

Feat/0.3.0 239 save policy strength - #582

Feat/0.3.0 239 save policy strength#582
cursor[bot] merged 27 commits into
devfrom
feat/0.3.0-239-save-policy-strength

Commits on Sep 14, 2026

feat(core): reject the undeclared save-policy fallback as a declaration (#239)

chore(policy): run the save-policy suites in the core gate lane (#239)

feat(core): add save-policy strength comparison and one refusal message (#239)

feat(core): refuse a weakened save policy at the transaction boundary (#239)

feat(core): enforce the effective save policy on the candidate write path (#239)

feat(core): refuse candidate saves that would overwrite the trusted source (#239)

test(core): pin source bytes across success, cancel, and failure (#239)

test(core): pin the received input as a read-only artifact identity (#239)

test(core): pin that no non-incremental operation is ever appended (#239)

feat(cli): refuse an in-place redaction of the trusted input (#239)

chore(qualification): add a signed-fixture generator for the incremental-save proof (#239)

test(core): add a real signed incremental-save fixture with provenance (#239)

test(core): prove a signed byte range survives an incremental edit (#239)

test(core): pin that incremental cost follows changed data (#239)

test(core): emit the signed incremental artifact for independent validation (#239)

feat(cli): honour the declared save policy in add-bleed and rgb-to-cmyk (#239)

test(cli): pin the corrective-command save-policy refusals (#239)

ci: validate the signed incremental artifact with qpdf and pdfsig (#239)

test(core): pin that no save path records an approved output (#239)

docs: state the true state of editor crash recovery (#239)

docs: document operation-owned save policy strength and its proofs (#239)

chore(changelog): record the save-policy strength change (#239)

fix(docs): keep the recovery record inside the Loop identity contract (#239)

Commits on Sep 16, 2026

merge(dev): resolve agent-policy.json conflict for #582

chore(docs): refresh phase5-widgets inventory after dev merge

fix(test): unwrap PdfTool envelope in bleed stress preflight

docs(changes): note bleed stress envelope test fix in #582 fragment