4 commits

Author	SHA1	Message	Date
Shay	b9a6eb9676	fix(kernel): fail-closed bound trace structural validation ... Return PracticeTraceRefusal before dereferencing bindings or operator results when structural type/shape checks fail. Guard seal_bound zip against binding_result_count_mismatch. Add five refusal-without-exception tests for malformed bound inputs.	2026-06-23 00:11:14 -07:00
Shay	484e8ff9fe	docs+kernel: support bound practice episode sealing ... Extends SealedPracticeTrace for externally bound candidate episodes per ADR-0233. Adds candidate_attempt_binding_ids to trace identity, bound trace input/seal entry points, and end-to-end bound episode tests without mutating GeometricSearchRun.candidate_attempts.	2026-06-23 00:04:26 -07:00
Shay	520e2c8237	fix(kernel): validate sealed trace replay record ids	2026-06-22 18:44:59 -07:00
Shay	a1de11e0e3	feat(kernel): implement inert SealedPracticeTrace shell ... Adds immutable practice-trace input, sealed-trace, and trace-refusal records with deterministic identity-chain validation after the Contract/ Proof Replay Adapter, as authorized by ADR-0230.	2026-06-22 18:20:52 -07:00