[PR] feat(runtime-host): bind Gitoxide file execution to workspace acceptance [maka]

["zhiiw (via GitHub)" <gi...@apache.org>]

zhiiw opened a new pull request, #5463:
URL: https://github.com/apache/maka/pull/5463

   ## Summary
   
   Delivery 2 of 4, stacked on the mutation-authority PR. Review **base...head**, not the cumulative main diff.
   
   **Invariant:** accepted Git content, the operation-bound candidate, and the SQLite acceptance proof identify the same mutation. The user checkout is not the mutation data plane.
   
   ## Ownership and atomic boundaries
   
   - Gitoxide owns verified source import, immutable accepted-tree reads, pure-result candidate publication, and accepted-ref projection.
   - Runtime supplies the exact pure transformation result; the Host verifier binds candidate/base/path/outcome.
   - SQLite atomically commits terminal facts, successor/head and reservation changes. Git ref publication is a separate, idempotent projection, not a second acceptance authority.
   - Missing, corrupt, conflicting or mismatched evidence fails closed. An unknown T1 outcome remains reserved; do not rerun tools or delete history.
   - `readVersion` is introduced with its actual accepted-ref predecessor-validation consumer.
   
   ## Scope and validation
   
   21 files, one extraction commit above delivery 1. No new Session schema, Desktop entry or continuation.
   
   Independent Core/Storage/Runtime/Host builds passed. Windows evidence: Rust **76 passed**; focused Host **45 passed / 6 platform skips**; Runtime/Storage **121 passed**. Three-platform helper workflow consumes the relevant tests. Linux/macOS were not run locally; the full workflow-policy suite still has an unresolved Windows shared-comparison fixture failure. This is not a full-CI or power-loss guarantee.
   
   Contract: `docs/architecture/gitoxide-file-execution-delivery.zh-CN.md`.
   
   ## Stack
   
   Mutation authority → **this PR** → Desktop managed files task entry → candidate recovery/manual continuation.
   
   Keep Draft pending review/CI. After the predecessor merges, rebase/retarget to main and verify the slice again; do not merge the cumulative integration history.
   
   <details>
   <summary>中文说明</summary>
   
   第二片堆叠在 mutation authority 上，审核 base...head 增量。
   
   主要不变量：accepted Git 内容、operation-bound candidate 与 SQLite 接受证明必须指向同一次精确修改。Gitoxide 固化候选内容，SQLite 原子接受，accepted ref 只是幂等投影。用户 checkout 不参与 mutation 写入；证据不完整或冲突时 fail closed，不重跑工具。
   
   本片 21 个文件、一个提交，不带 Desktop/Session schema/continuation。Windows：Rust 76 通过；Host 45 通过、6 平台跳过；Runtime/Storage 121 通过。三平台 CI 已接线，但本轮未本机跑 Linux/macOS，完整 workflow-policy 仍有 Windows fixture 失败，不宣称全绿或断电保证。
   
   前置合并后再变基到 main，继续核对增量。后续是 Desktop 入口和恢复/手动续跑。
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For additional commands, e-mail: commits-help@maka.apache.org

Re: [PR] feat(runtime-host): bind Gitoxide file execution to workspace acceptance [maka]

["zhiiw (via GitHub)" <gi...@apache.org>]

zhiiw closed pull request #5463: feat(runtime-host): bind Gitoxide file execution to workspace acceptance
URL: https://github.com/apache/maka/pull/5463


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For additional commands, e-mail: commits-help@maka.apache.org