mathiasandClaude Opus 5.5 7afbd60ea2 fix(brain): close round-3 review findings on provenance ...

- B1: search.extractProvenance locates the frontmatter with
  frontmatter.Split (fence at column 0), so an indented "---" inside a
  block scalar no longer hides provenance from brain_query.
- B2: brain_edit refuses to edit without a snapshot, and if the stamp
  cannot be verified restores the note and reports failure; a failed
  restore is reported as exactly that, never as "rolled back".
- B3: internal/provenance gets direct tests for the whole-document
  backstop (a stamp that cannot read back is refused), standalone group
  decoding, duplicates, lone CR, tab continuations and unclosable
  fences. Removing verify or the restore now fails the suite.
- Principals YAML would read as non-strings (true, 123, null, ~) are
  quoted instead of refused. An unclosable fence ("---x") is refused
  rather than demoted into the body. writeHallNote creates the hall
  directory only after the note passes, so a refused write leaves
  nothing behind (brain#21).
- MCP brain_ingest (stub LLM) asserted to stamp the caller.

Refs #145 #144

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-01 23:03:09 +02:00

..

audit_test.go

fix(brain): provenance as a post-condition on every model-reachable write

2026-10-01 22:29:46 +02:00

audit.go

fix(brain): provenance as a post-condition on every model-reachable write

2026-10-01 22:29:46 +02:00

brain_update_test.go

feat(mcp): brain_read + brain_edit, contained to the sync source (brain#4) (#96)

2026-08-18 18:14:05 +00:00

handlers_test.go

fix(watcher): never walk into raw/rejected/ — brain_reject (closes #81)

2026-09-23 06:06:35 +00:00

handlers.go

fix(brain): provenance keeps only provably plain frontmatter; pipeline stamps

2026-10-01 22:55:53 +02:00

integration_test.go

feat(brain): add brain_answer and brain_classify MCP tools

2026-05-12 11:06:17 +02:00

pending_nudge_test.go

feat(brain): surface an aging review queue in brain_context (#82)

2026-08-18 00:37:48 +02:00

pending_nudge.go

feat(brain): surface an aging review queue in brain_context (#82)

2026-08-18 00:37:48 +02:00

provenance_escapes_test.go

fix(brain): close round-3 review findings on provenance

2026-10-01 23:03:09 +02:00

provenance_test.go

fix(brain): provenance as a post-condition on every model-reachable write

2026-10-01 22:29:46 +02:00

server_test.go

fix(watcher): never walk into raw/rejected/ — brain_reject (closes #81)

2026-09-23 06:06:35 +00:00

server.go

feat(brain-mcp): audit-log every tools/call with principal and scope

2026-10-01 20:44:21 +02:00

tools_answer_test.go

fix(brain_answer): reranker is a filter, not a gate — fall back to BM25 when it keeps nothing

2026-06-16 22:53:02 +02:00

tools_answer.go

fix(brain_answer): reranker is a filter, not a gate — fall back to BM25 when it keeps nothing

2026-06-16 22:53:02 +02:00

tools_capture_test.go

chore(lint): adopt the canonical .golangci.yml from infra/ci-templates

2026-09-05 14:42:59 +02:00

tools_capture.go

feat(brain): stamp server-owned write provenance; surface it in brain_query

2026-10-01 20:49:11 +02:00

tools_context_test.go

feat(mcp): wire brain_context tool

2026-05-25 18:53:14 +02:00

tools_context.go

fix(text): truncate on rune boundaries, not byte offsets (#93)

2026-08-18 07:13:15 +02:00

tools_graph.go

feat(mcp): expose brain_graph tool — neighbors, subgraph, path

2026-05-23 15:23:18 +02:00

tools_notes_test.go

fix(brain): provenance as a post-condition on every model-reachable write

2026-10-01 22:29:46 +02:00

tools_notes.go

fix(brain): close round-3 review findings on provenance

2026-10-01 23:03:09 +02:00