OverviewFilesCommitsIssuesDocsReleasesPeers

P2P-Hiverelay commits / d873ffc

docs: record bounded Hyperdrive release status
d873ffcd5e8c4ae8606f4a24c5245d23f0c9664f
by bigdestiny2 <33146784+bigdestiny2@users.noreply.github.com> · 2026-07-29T20:28:42.000Z

Changed files (4) +12 -1

CHANGELOG.md +5 -0
……@@ -21,6 +21,11 @@ deployment.**
2121- OutboxLog partitioned-Hypercore journals bind storage admission before append,
2222 settle journal operations before close, and keep the configured aggregate
2323 byte commitment authoritative across restart.
24- App publishing mirrors the live Hyperdrive tree exactly and rotates to a new
25 drive before its signed per-drive budget is exceeded. Relays verify the
26 pinned content hash, durably retain release authority across restart, and
27 reclaim only older releases from the exact app-and-publisher chain while
28 preserving the signed rollback set and existing custody/lease protections.
2429- Service management now persists to `<storage>/services.json`, rolls back API
2530 state on write failure, accepts the shipped `storage-proof` builtin, and
2631 honors an explicit persisted `enabled: false` over package defaults.
docs/LADDER-SHIP-MAP.md +3 -1
……@@ -55,13 +55,14 @@ Marketing one-liner when both are live: **“Fleet v0.25.0 + Blind public-test o
5555| Item | State |
5656|------|--------|
5757| Fleet channel | **canary `v0.25.0-rc.7`** · **stable `v0.24.3`** · held `v0.24.3` |
58| Repair candidate | Post-RC7 tree: full Node unit **3528/3528**, integration **106/106**, lint and workspace audit green; requires a new prerelease identity before deployment |
58| Repair candidate | Post-RC7 tree: full Node unit **3559/3559**, integration **107/107**, lint, workspace audit, public-artifact audit, and npm package dry-runs green; requires a new prerelease identity before deployment |
5959| Scoped live health (2026-07-29) | 9/10 permitted relays reachable; eight are healthy at their assigned target; `utah-8gb` is healthy but drifted at RC4 with its stable updater disabled; Bern is unreachable |
6060| Wake runtime | `notify` loaded 9/9 reachable, but signed live egress **0/9** and exact-lane wake **0/9**; seven stable relays still carry the old false `notify-v1` feature claim |
6161| Agent mailbox | `outboxlog` loaded and signed-advertised on **7/9** reachable permitted relays; absent on canary Utah and drifted Utah-8GB |
6262| Privacy runtime | two signed Tor endpoints, both restricted without a negative proof on their deployed versions; post-RC7 code suppresses that claim until the anonymous rejection probe succeeds |
6363| One-hop forward | advertised on one permitted relay; remains a bounded compatibility route, not split-transport/OHTTP evidence |
6464| Packaging truth | Node/Bare now translate bounded service/Tor env into first-boot defaults; persisted config and `services.json` remain authoritative, while `/api/v1/services` plus the signed capability doc are runtime proof |
65| App release storage | Bounded Hyperdrive publishing is integrated in the repair candidate: exact tree mirroring, signed monotonic releases, budget-triggered drive rotation, pinned-tree verification, and exact app/publisher rollback reclamation; not deployed until the new prerelease ships |
6566| Track B | Blind public-test pilot (syd/dal) — **parallel** version line, not this fleet tag |
6667| Boot-restore | Worktree only — **not on main** until Track C |
6768| Blind packages on main | **Absent** (`blind-daemon` / edge only in vNext worktrees) |
……@@ -81,6 +82,7 @@ Marketing one-liner when both are live: **“Fleet v0.25.0 + Blind public-test o
8182| Memory notify provider | Test/development only; never an advertised production capability | It records attempts but deliberately has `live:false`. |
8283| Legacy one-hop byte bridge | Compatibility path pending replacement, not G2-W | It does not provide OHTTP role separation or BlindForward flow-control semantics. |
8384| Nym full-data-path claims | Parked; bounded control-message candidate only | Coverage/cost do not support a general relay data path today. |
85| Unbounded in-place Hyperdrive release history | Replaced in the repair candidate by signed, budgeted drive rotation and scoped rollback retention | Rewriting one forever-growing drive makes historical release blocks accumulate without an enforceable per-drive ceiling. |
8486
8587Split transport itself is **not redundant**: its vNext wire codecs are useful, but the runtime,
8688`BlindTransportDescriptorV1`, OHTTP ingress/gateway, browser client, padding reconciliation, and
scripts/lib/audit-owned-diff.mjs +2 -0
……@@ -86,7 +86,9 @@ export const AUDIT_OWNED_DIFF_SLICES = Object.freeze([
8686 id: 'hyperdrive-release-lifecycle',
8787 title: 'Bounded Hyperdrive release rotation and scoped reclamation',
8888 files: [
89 'CHANGELOG.md',
8990 'docs/APP-RELEASE-LIFECYCLE.md',
91 'docs/LADDER-SHIP-MAP.md',
9092 'docs/PEAR-INTEGRATION.md',
9193 'packages/core/core/app-registry.js',
9294 'packages/core/core/index.js',
test/unit/audit-owned-diff.test.js +2 -0
……@@ -191,7 +191,9 @@ test('audit-owned diff accepts known audit slice paths', async (t) => {
191191
192192test('audit-owned diff assigns the Hyperdrive release lifecycle surface', (t) => {
193193 const paths = [
194 'CHANGELOG.md',
194195 'docs/APP-RELEASE-LIFECYCLE.md',
196 'docs/LADDER-SHIP-MAP.md',
195197 'docs/PEAR-INTEGRATION.md',
196198 'packages/core/core/app-registry.js',
197199 'packages/core/core/index.js',