Skip to content

feat(workbench): define authenticated HTTP checking policies - #1064

Merged
DamianReeves merged 4 commits into
mainfrom
DamianReeves/http-capability-policies
Oct 18, 2026
Merged

DamianReeves merged 4 commits into
mainfrom
DamianReeves/http-capability-policies

Conversation

@DamianReeves

Copy link
Copy Markdown
Member

Authenticated HTTP execution providers need an exact way to offer and retain checking policies. Host 0.2.0-draft.2 defines that mapping, including closed descriptors, selected Scheme submissions, immutable accepted plans, complete frame budgets and unchanged receipt operations. Frozen strict and native contracts remain byte-identical.

Independent MCK drafts23–25 add 116 fixed cases for opaque boundaries, controlled production-client traces and actual authenticated gateway/provider workers. The shared Rust runner preserves literal JSON on the live transport, rejects forged observations, and independently validates saved reports. The normative HTML pages use the repository template and were rendered offline at narrow/wide widths in both themes.

A scoped schema-fixture helper uses the official validator's validate command for draft25 because JSON Schema CLI16.3.0 crashes in test mode on its provider schema. All positive/negative assertions remain enabled; beads morphir-0r6n tracks retirement of that workaround.

Validation: full Workbench schema gate, 79 new schema assertions, 566 MCK crate tests, 13 CLI checks, Clippy with warnings denied, formatting, TypeScript and fixture-driver tests. The live stdio regression confirms malformed marker objects cannot manufacture a qualified report.

Paired implementation: finos/morphir-moonbit#140. Chromium and packaged Proton on macOS Apple Silicon exercise the actual authenticated HTTP gateway/provider; supported Rust v1 compilation/workspace regression remains separate and executions:false remains unchanged.

Beads: morphir-etg2.16.6. Plans and qualification receipts stay in beads and ignored local artifacts.

Publish an exact authenticated host mapping and independent boundary,
client and actual-provider fixtures. Reuse the shared Rust MCK checker
without changing frozen strict or native contracts.

Keep draft25 schema assertions on the official validator's validate
command while its test mode crashes on the provider projection schema.
@netlify

netlify Bot commented Oct 18, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for angry-raman-7c44f6 canceled.

Name Link
🔨 Latest commit c11c463
🔍 Latest deploy log https://app.netlify.com/projects/angry-raman-7c44f6/deploys/6ad476ed9a970e3fc96ef120

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 18, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-18T07:31:37.305687Z 1202d0a PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1202d0a011

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread crates/morphir-mck/src/workbench/http_policy.rs Outdated
Comment thread crates/morphir-mck/src/workbench/contract.rs
@DamianReeves
DamianReeves merged commit b0ac9d1 into main Oct 18, 2026
17 checks passed
@DamianReeves
DamianReeves deleted the DamianReeves/http-capability-policies branch October 18, 2026 08:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant