Repository navigation
Conversation
Signed-off-by: Srinivasa Consultants <dinakarjs@gmail.com>
Signed-off-by: Srinivasa Consultants <dinakarjs@gmail.com>
Signed-off-by: Srinivasa Consultants <dinakarjs@gmail.com>
This was referenced Oct 21, 2026
Draft
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
A process can lose a witness acknowledgement after the remote side committed. Retrying from an in-memory backlog then risks duplicate submissions and overwritten evidence. This adds an operator-invoked SQLite journal around the existing capture/verifier with transactional one-worker claims, explicit trust-policy identity and exclusive evidence directories.
Failed or interrupted attempts stay unknown/inflight and cannot be automatically resubmitted. Verified status requires the existing cryptographic capture verification to succeed. No registry history changes, scheduled workflow, key discovery or external witness submission.
Validation: full unittest suite 413 passed; seven new tests cover concurrent workers, restart/inflight refusal, lost acknowledgement, failures, evidence preservation, identity and archived real receipt verification including wrong-key rejection. Existing capture suite 21 passed. Ruff and diff checks passed.
Draft boundary: readback reconciliation, key rotation, retention/backups and required-vs-best-effort policy still need maintainer agreement before deployment. Identity is exact bytes plus trust policy, not semantic deduplication across key rotation. Documentation: docs/witness-submission-journal.md. This does not close the existing owner-led witness rollout.