Skip to content

Execute admitted data-only operations in Echo#683

Merged
flyingrobots merged 10 commits into
mainfrom
feat/executable-operation-runtime
Jul 19, 2026
Merged

Execute admitted data-only operations in Echo#683
flyingrobots merged 10 commits into
mainfrom
feat/executable-operation-runtime

Conversation

@flyingrobots

@flyingrobots flyingrobots commented Jul 19, 2026

Copy link
Copy Markdown
Owner

Claim

Echo can admit, install, privately evaluate, exactly commit, receipt, persist, and recover one data-only executable operation without obtaining application semantics from a matcher, executor, footprint callback, prebuilt mutation plan, or native application intrinsic.

Architectural boundary

This adds an operation-oriented corridor alongside stable provider v1 compatibility infrastructure:

exact ExecutableOperationPackageV1 bytes
→ Echo-owned package admission under independent policy
→ installed data-only EchoOperationProgramV1
→ exact basis-bearing canonical invocation
→ Echo-owned invocation admission
→ bounded private evaluation
→ exact-basis singleton commit
→ one typed receipt and parent-visible patch
→ execution-kernel WAL retention and callback-free recovery

The first program is a generic anchored typed-node alpha-attachment compare-and-set. It is deliberately not Jedit ReplaceRange, a rope intrinsic, provider v2, a general VM, or the Kitten runtime.

A program digest is subordinate executable evidence only. The admitted package owns the public operation coordinate, semantic closure, schemas, basis contract, budget, authority profile, result and obstruction interpretation, and invocability. A naked program cannot be installed or invoked, and identical program bytes in distinct admitted packages do not collapse their operation identities.

What changed

  • Added canonical package, program, invocation, basis, admission, installation, preparation, result, obstruction, and receipt evidence types.
  • Added fixed interpreter and intrinsic profiles for a tiny data-only program.
  • Added package and invocation admission under separately supplied policy.
  • Added exact parent-basis commitment with no retry, rebase, retargeting, or partial parent mutation.
  • Bound declared and evaluator-recorded actual footprints, delegated and consumed budgets, invocation bytes, installed-operation identity, program identity, patch, result, tick, and terminal posture into typed evidence.
  • Added process-local evaluation authority so a preparation cannot cross runtime ownership by serialization or cloning.
  • Added append-only WAL transaction/record/frontier codes for operation installation and committed execution.
  • Retained complete package-admission policy material and re-ran package admission during fresh-host recovery without application callbacks.
  • Kept noncommit evidence out of the committed operation-tick WAL.
  • Updated architecture and runtime documentation to state current reality and limitations.
  • Fixed pre-push test feature selection so the new feature-gated consumer test runs through the normal hook.

Verification grades

  • Deterministic self-validation: implemented for canonical bytes, identities, profiles, schemas, budgets, footprints, exact basis, receipts, WAL shapes, and recovery.
  • Structurally separate target verifier: not implemented in this slice.
  • Independently implemented semantic conformance oracle: not claimed in this slice.

Evidence

  • cargo xtask pr-preflight --base origin/main: pass, 6 checks.
  • Default warp-core library suite: 670 passed.
  • Feature-enabled warp-core library suite: 684 passed.
  • Executable-operation integration suite: 12 passed.
  • Focused operation unit witnesses: 5 passed.
  • Isolated Edict provider-host consumer: 5 conformance + 23 host + 6 helper + 16 package + 1 resource-sync passed; expected ignored subprocess entrypoints remain ignored.
  • Clippy with warnings and missing docs denied: pass in default and feature-enabled surfaces.
  • Rustfmt, Prettier, markdownlint, dead references, nondeterminism guard, shell syntax, and feature contracts: pass.
  • Normal pre-push hook: pass.

Explicit non-goals and remaining gates

  • No real Edict compiler crossing or Jedit semantic artifact yet.
  • No ReplaceRange, rope law, Jim invocation, TextWindow, Kitten runtime, durable child lane, wormhole, Continuum transport, or settlement work.
  • No general scheduler batch integration; the first commit path proves singleton composition only.
  • No provider-v1 reinterpretation or deletion.
  • The current host/WAL shell remains jointly feature-gated with native_rule_bootstrap; that compile-time coupling must be removed before the Jedit production cutover can delete the legacy feature.

Self-review

The strict review found and corrected four defects before publication: asymmetric public encoder/decoder validation for programs, asymmetric invocation-budget validation, incomplete footprint hashing, and wording that could imply noncommitted outcomes entered the WAL. The initial push then exposed and corrected a feature-selection defect in the pre-push hook. No unresolved self-review findings remain.

Summary by CodeRabbit

  • New Features

    • Added a hook-free executable-operation runtime for admitting packages, evaluating data-only programs, committing patches, and producing typed receipts.
    • Added deterministic installation, recovery, and WAL-backed evidence for executable operations.
    • Exposed APIs for operation packages, invocations, budgets, receipts, obstructions, and execution evidence.
  • Documentation

    • Updated architecture, README, changelog, and WAL documentation to describe the new runtime capabilities and current limitations.
  • Tests

    • Added comprehensive coverage for admission, evaluation, commits, deterministic behavior, WAL validation, and recovery.

@flyingrobots

Copy link
Copy Markdown
Owner Author

Strict self-review result

@codex please confirm the reviewed boundary and the absence of unresolved findings.

Severity Open Resolved before publication
Critical 0 0
High 0 3
Medium 0 2
Low 0 0
Markdown/style 0 0

Resolved findings:

  1. Public program encoding could mint bytes and identity for a zero replacement bound that the decoder refused.
  2. Public invocation encoding could mint bytes and identity for a zero-step budget that the decoder refused.
  3. The footprint digest did not bind every resource axis and lacked robust adjacent-set boundary separation.
  4. Documentation could be read as claiming noncommitted outcomes entered the operation-tick WAL.
  5. The pre-push hook selected the new integration test without its declared Cargo features.

Each correction is in a new commit. The final tree is clean; full PR preflight and the normal pre-push hook pass. No unresolved self-review findings remain.

@coderabbitai

coderabbitai Bot commented Jul 19, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

Warning

Review limit reached

@flyingrobots, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 13 minutes

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: da3c1a00-67a6-4722-a452-d9f7c300e8ce

📥 Commits

Reviewing files that changed from the base of the PR and between 349cf04 and a8d8e11.

⛔ Files ignored due to path filters (6)
  • crates/echo-wesley-gen/assets/v1/edict-provider/package/v1/generated/evidence/provenance.provider-generation.json is excluded by !**/generated/**
  • crates/echo-wesley-gen/assets/v1/edict-provider/package/v1/generated/evidence/review.provider-generation.json is excluded by !**/generated/**
  • schemas/edict-provider/generated/v1/evidence/provenance.provider-generation.json is excluded by !**/generated/**
  • schemas/edict-provider/generated/v1/evidence/review.provider-generation.json is excluded by !**/generated/**
  • schemas/edict-provider/package/v1/generated/evidence/provenance.provider-generation.json is excluded by !**/generated/**
  • schemas/edict-provider/package/v1/generated/evidence/review.provider-generation.json is excluded by !**/generated/**
📒 Files selected for processing (14)
  • CHANGELOG.md
  • README.md
  • crates/echo-wesley-gen/assets/v1/edict-provider/package/v1/provider-manifest.echo.json
  • crates/echo-wesley-gen/assets/v1/repository/Cargo.lock.source
  • crates/echo-wesley-gen/tests/provider_package.rs
  • crates/echo-wesley-gen/tests/provider_package_corpus.rs
  • crates/warp-core/src/echo_operation.rs
  • crates/warp-core/src/trusted_runtime_host.rs
  • crates/warp-core/tests/executable_operation_pipeline_tests.rs
  • crates/warp-core/tests/provider_contract_admission_tests.rs
  • schemas/edict-provider/package/v1/provider-manifest.echo.json
  • scripts/verify-local.sh
  • tests/docs/test_generated_rule_truth.sh
  • tests/hooks/test_verify_local.sh
📝 Walkthrough

Walkthrough

Adds a hook-free executable-operation runtime slice with canonical artifacts, admission, bounded private evaluation, typed commit evidence, WAL persistence and recovery, engine registration, end-to-end tests, feature wiring, and documentation updates.

Changes

Executable Operation Runtime

Layer / File(s) Summary
Artifact and evaluation semantics
crates/warp-core/src/echo_operation.rs, crates/warp-core/src/lib.rs
Defines canonical package and invocation artifacts, identities, admission policies, bounded evaluation, typed obstructions, receipts, commit materialization, and public re-exports.
WAL transaction contracts
crates/warp-core/src/causal_wal.rs, crates/warp-core/src/evidence.rs
Adds executable-operation authorities, transaction and record kinds, frontier types, transaction builders, and strict frame/frontier validation.
Engine, host, and WAL recovery integration
crates/warp-core/src/engine_impl.rs, crates/warp-core/src/trusted_runtime_host.rs
Registers installed operations, commits executable-operation evidence, validates frontier roots, and restores installations, receipts, state deltas, and index roots from WAL.
Pipeline tests and feature wiring
crates/warp-core/tests/executable_operation_pipeline_tests.rs, crates/warp-core/Cargo.toml, scripts/verify-local.sh, .ban-nondeterminism-allowlist
Adds admission, evaluation, determinism, WAL-shape, activation, and filesystem-recovery tests, with required feature selection and a scoped WAL fixture waiver.
Runtime slice documentation
README.md, CHANGELOG.md, docs/architecture/*, docs/topics/*, docs/plans/*
Documents executable-operation admission, evaluation, commit, evidence, recovery behavior, WAL claims, and current implementation boundaries.

Estimated code review effort: 5 (Critical) | ~120 minutes

Sequence Diagram(s)

sequenceDiagram
  participant Caller
  participant TrustedRuntimeHost
  participant echo_operation
  participant Engine
  participant TrustedRuntimeWal

  Caller->>TrustedRuntimeHost: submit package and invocation
  TrustedRuntimeHost->>echo_operation: admit and prepare operation
  echo_operation->>Engine: resolve installed package and basis
  echo_operation-->>TrustedRuntimeHost: prepared patch or typed noncommit evidence
  TrustedRuntimeHost->>TrustedRuntimeWal: record installation or committed tick
  TrustedRuntimeWal-->>TrustedRuntimeHost: recover receipts and installations
Loading

Possibly related PRs

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title matches the main change: adding a data-only executable-operation corridor in Echo.
Docstring Coverage ✅ Passed Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch feat/executable-operation-runtime

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@flyingrobots

Copy link
Copy Markdown
Owner Author

CI correction pushed in 5fcf1d6d2.

The failed documentation truth gate required an obsolete single-pipeline sentence. The README now names three distinct current corridors—Wesley compatibility, Edict provider-v1 compatibility, and the hook-free executable-operation runtime—and the truth test rejects their recombination. It also qualifies deterministic consequences under callback compatibility. The focused truth test, shell syntax, Prettier, markdownlint, dead-reference gate, PR preflight, and normal pre-push hook pass locally.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@scripts/verify-local.sh`:
- Around line 1414-1421: Add the missing
warp-core:installed_contract_registry_tests case to
pre_push_feature_string_for_test_target(), mapping it to the
native_rule_bootstrap feature required by the test. Ensure
warp_core_feature_args_for_test() receives that feature through the existing
shared feature-map flow instead of falling back to an empty string.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: a8b06115-002c-4567-9ddb-997e270e5c0c

📥 Commits

Reviewing files that changed from the base of the PR and between 3e1e47a and 349cf04.

⛔ Files ignored due to path filters (2)
  • Cargo.lock is excluded by !**/*.lock
  • tests/edict-provider-host-v1/Cargo.lock is excluded by !**/*.lock
📒 Files selected for processing (16)
  • .ban-nondeterminism-allowlist
  • CHANGELOG.md
  • README.md
  • crates/warp-core/Cargo.toml
  • crates/warp-core/src/causal_wal.rs
  • crates/warp-core/src/echo_operation.rs
  • crates/warp-core/src/engine_impl.rs
  • crates/warp-core/src/evidence.rs
  • crates/warp-core/src/lib.rs
  • crates/warp-core/src/trusted_runtime_host.rs
  • crates/warp-core/tests/executable_operation_pipeline_tests.rs
  • docs/architecture/application-contract-hosting.md
  • docs/plans/2026-07-18-jim-edict-echo-executable-warp-semantics.md
  • docs/topics/GeneratedRules.md
  • docs/topics/WAL.md
  • scripts/verify-local.sh

Comment thread scripts/verify-local.sh

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 349cf04fa8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread crates/warp-core/src/trusted_runtime_host.rs
Comment thread crates/warp-core/src/echo_operation.rs
Comment thread crates/warp-core/src/trusted_runtime_host.rs Outdated
Comment thread crates/warp-core/src/echo_operation.rs
@flyingrobots

Copy link
Copy Markdown
Owner Author

CI follow-up: commit 25493f538 closes the deterministic provider fixture identity chain exposed by the workspace shard. The new warp-core -> echo-edict-canonical dependency changed the repository source bundle, so the canonical writers refreshed Cargo.lock.source, generation provenance/review, the package manifest/root, and their explicit golden witnesses. Local evidence is green: cargo test --workspace --exclude warp-core, the 11 feature-gated provider admission tests, all three canonical artifact/package/asset checks, pre-commit Clippy/checks, and the normal pre-push gate. No runtime semantics changed in this follow-up.

@flyingrobots
flyingrobots merged commit 5cd5fd0 into main Jul 19, 2026
41 checks passed
@flyingrobots
flyingrobots deleted the feat/executable-operation-runtime branch July 19, 2026 22:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant