From 6b273f8c18ed3d0fda7a605e2fa5ef63ba2b56f8 Mon Sep 17 00:00:00 2001 From: darklordVirtual Date: Wed, 5 Aug 2026 23:23:45 +0200 Subject: [PATCH] chore(pin): move to core-candidate-2026.08.05.3 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The previous pin contains a defect that REMORA's end-to-end vertical test found after .2 was cut: the "spec changed between assess and dispatch" refusal ran AFTER the authorizing transaction, so a call that was never allowed to happen still left a dispatch intent behind. Harmless only because an unclaimed intent provably never ran, which is a thin thing for this product to rely on. Verified before pinning: verify_core_pin.py against the published release (6 artifacts, all hashes match), then the compatibility suite against the wheel installed from those verified assets — 43 passed. --- README.md | 4 ++-- product/core-artifact-lock.json | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index c9e4372..eb47921 100644 --- a/README.md +++ b/README.md @@ -21,8 +21,8 @@ AAE consumes versioned REMORA artifacts. It never installs from `remora.policy`, `remora.enforcement`, `remora.governance`, or `servers.*`. This repository pins a hash-identified REMORA artifact set — -release [`core-candidate-2026.08.05.2`](https://github.com/darklordVirtual/REMORA-research/releases/tag/core-candidate-2026.08.05.2), -built from a clean checkout of commit `716f6bd`: +release [`core-candidate-2026.08.05.3`](https://github.com/darklordVirtual/REMORA-research/releases/tag/core-candidate-2026.08.05.3), +built from a clean checkout of commit `9866436`: | Artifact | Pinned by | |---|---| diff --git a/product/core-artifact-lock.json b/product/core-artifact-lock.json index 3d67cb5..93eb88f 100644 --- a/product/core-artifact-lock.json +++ b/product/core-artifact-lock.json @@ -12,9 +12,9 @@ "postcondition_contract_schema_sha256": "d0070e3f29ff533359e51f6f5cbf357812343ddc60629a3b172e747cbfd45565", "release_repo": "darklordVirtual/REMORA-research", "release_status": "prerelease", - "release_status_reason": "FT-03 signed ToolSpec and FT-04 effect verification are now in the pinned core, so the §12 surface is complete. Still a prerelease: no external review has run against this build and Gate B is not closed. Pinnable, not blessed.", - "release_tag": "core-candidate-2026.08.05.2", - "remora_core_commit": "716f6bd477396f697fa4c4bf2584def710ee3318", + "release_status_reason": "Supersedes core-candidate-2026.08.05.2, which refused a changed ToolSpec only AFTER authorizing \u2014 leaving a dispatch intent behind for a call that was never allowed. Still a prerelease: no external review has run against this build and Gate B is not closed. Pinnable, not blessed.", + "release_tag": "core-candidate-2026.08.05.3", + "remora_core_commit": "9866436c55e18ef336ce2897b7bff94f434ac531", "remora_core_version": "0.10.0", "sdk_public_api_sha256": "bcd004d05dcc2cb1175d4a67c4826be65085ca050aba3169aba97d5a5b6b7744", "stable_namespace": "remora.sdk", @@ -22,6 +22,6 @@ "tool_spec_schema_sha256": "be5a437079e37868f1797a3fccfb2a4502321a04ba5dd316c6f0979154d6892e", "wheel": { "filename": "remora-0.10.0-py3-none-any.whl", - "sha256": "71018cf8ec110db1bfefac66a33e6c92a41b55421dbf69ee7a970749140b3184" + "sha256": "e44bc1ad51db8b79d0f3d3e14daa7fb95dd87edffa8300711b0df4991bc45b7e" } }