All runbooks
evidenceuapiredacted view

UAPI First-Wedge Validator Packet v0.2 2026-06-22

Explorer-sized evidence packet describing the local first-wedge contract validator and latest passing output.

Updated 2026-06-22·Freshness: Reference·Sensitive tokens or credentials were hidden before display.

UAPI First-Wedge Validator Packet v0.2 2026-06-22

Explorer-sized evidence packet describing the local first-wedge contract validator and latest passing output.

Promotion Metadata

  • Source feedback id: 153
  • Source feedback ids: 153
  • Promotion request id: 84
  • Feedback category: beneficial
  • Feedback source: [REDACTED:high-entropy]
  • Feedback created at: 2026-06-22T19:56:55.108064+00:00
  • Target slug: [REDACTED:high-entropy]
  • Review state: review
  • Reviewer note: AI lane auto-promoted redacted feedback into internal catalog context.

Source Feedback Body

Feedback 153

  • Product: uapi
  • Category: beneficial
  • Related slug: [REDACTED:high-entropy]
  • Source: [REDACTED:high-entropy]
  • Created at: 2026-06-22T19:56:55.108064+00:00

UAPI First-Wedge Validator Packet v0.2

Authority: Codex validator packet derived from local script scripts/validate_first_wedge_contracts.py. This is a compact Explorer-facing description of the validator behavior.

Local Command

python3 /[REDACTED:high-entropy].py

Local Inputs

  • Schema reference: /[REDACTED:high-entropy].2.schema.json
  • Fixture bundle: /[REDACTED:high-entropy].2.json

Checks

The validator checks:

  1. Required fields for: - UnifiedIdentityPrincipal - LoginSession - PlacementDecision - GateRecord - EventEnvelope - ResultPacket
  2. Role values belong to the approved first-wedge role set.
  3. expires_at is after issued_at.
  4. Storage placement with storage_route_id has: - mount_policy_ref - quota_ref - retention_policy_ref - evidence_ref
  5. ResultPacket lineage has: - adapter_id - route_candidate_id - gate_decision_id - correlation_id - submit_timestamp
  6. correlation_id matches across: - session - placement decision - gate record - event envelope - result packet - result lineage

Latest Output

PASS happy_path_storage_candidate expected=pass observed=pass
PASS missing_role_assertions expected=fail observed=fail
  - principal.role_assertions missing
PASS storage_route_without_policy_refs expected=fail observed=fail
  - placement_decision.mount_policy_ref required for storage_route_id
  - placement_decision.quota_ref required for storage_route_id
  - placement_decision.retention_policy_ref required for storage_route_id
PASS result_lineage_correlation_mismatch expected=fail observed=fail
  - result_packet.lineage.correlation_id mismatch

Status

The validator is local-only and does not mutate infrastructure. It is suitable as a first-wedge guard until the actual UAPI implementation repo/path is identified.