Skip to content

docs(security): land secret-types research note - #31

Merged
arena-ai-coding-agent[bot] merged 1 commit into
mainfrom
arena/01a0e132-epistemic-types
Sep 27, 2026
Merged

arena-ai-coding-agent[bot] merged 1 commit into
mainfrom
arena/01a0e132-epistemic-types

Conversation

@arena-ai-coding-agent

Copy link
Copy Markdown
Contributor

Closes #29

Decision

Land the preserved secret-types direction as research documentation within epistemic-types, not as a new repository. The note is rewritten against the current interfaces and sets out the in-repository path to a possible formal model.

What changed

  • Add docs/secret-types.adoc, distinguishing the current epistemic preorder, BeliefModality, proof transport, and Echo resource grades from confidentiality semantics.
  • State explicit non-claims: no secret API, security lattice, declassification, noninterference, linearity, or runtime guarantee is implemented here.
  • Chart staged next work: threat model/specification, smallest Agda interface, positive and negative proof controls, semantic theorem, then any runtime integration.
  • Link from the README and docs index; note it in the changelog.
  • Do not restore the retired AUDIT.adoc.

Proof-scope check

The issue body refers to 23 --safe modules. The current checkout has 17 Agda modules under src/EpistemicTypes/; the recursive proof script checks all 17 with --safe --without-K --no-libraries. The note reports the current count and makes no confidentiality claim based on those proofs.

Validation

  • git diff --check passed.
  • The local environment has neither just nor agda, so I could not run the Agda gates here; please rely on the required CI proof and rejection-control jobs before merge.

Co-authored-by: arena-agent <297053741+arena-agent@users.noreply.github.com>
@coderabbitai

coderabbitai Bot commented Sep 27, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 5d6fbb1f-255f-4dc0-b77c-9dd693c1d8ff

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@arena-ai-coding-agent
arena-ai-coding-agent Bot enabled auto-merge (squash) September 27, 2026 05:24
@arena-ai-coding-agent
arena-ai-coding-agent Bot merged commit c71cc25 into main Sep 27, 2026
26 of 27 checks passed
@arena-ai-coding-agent
arena-ai-coding-agent Bot deleted the arena/01a0e132-epistemic-types branch September 27, 2026 05:25
hyperpolymath added a commit that referenced this pull request Oct 5, 2026
#38)

## What this is

The **cross-reference review of the Secret Types transition** requested
in the
session task: compare the migration note of `hyperpolymath/secret-types`
(PR #4,
commit `d1122d8`, merged 2026-10-04) with this repository's current docs
and
tracked work, record accurate cross-references, and state what has
moved, what
remains owned here, and where follow-up belongs.

**Refs #32. It does not close, transfer, or duplicate #32.** Issue #32
stays in
this repository and stays open as the origin/decision record. `#29` is
untouched
and stays closed. Nothing is moved or deleted; superseded text is
marked, not
rewritten.

## Findings recorded

- **#32 is not obsolete and was not transferred.** The note here said
the issue
"is obsolete as titled" and referred to "the transferred #32". No
transfer
occurred — secret-types PR #4 documents that issue writes returned `403`
— and
nothing in the 2026-10-04 placement decision transfers the *issue*. The
work
  moved; the issue stays.
- **Provenance verified.** The standalone spec's `583017cfd5fa…` blob
resolves
to `583017cfd5fab189ca17128d01c7eddb494d8476` (19,326 bytes) — this
repo's
  `docs/secret-types.adoc` at PR #33 (`d97ecaab`), not the PR #31 draft
  (`cf0a152e…`, 9,436 bytes) and not the PR #37 boundary revision.
- **Closure is not due.** The standalone spec's "Review checklist before
implementation" states it "has not yet been completed item by item", and
  PR #37 carries an unresolved `CHANGES_REQUESTED` finding about the #32
open-state wording. The tracking update is therefore **prepared but not
  posted**, in `docs/secret-types-transition-review-2026-10-05.adoc`.
- **Downstream trackers are stale and owned elsewhere.**
`nextgen-typing`
`docs/TYPE-CONNECTIONS.adoc` has no secret-types row (checked
2026-10-05);
`valence-shell` `docs/THEORY-FEED.adoc` still records the pre-2026-10-04
"mint it or fold it into epistemic-types#32" owner call and grades the
feed
  `?`/`?`; Anytype#15 remains open. Recorded here, not edited there.
- The four "ready-to-post" texts named in secret-types PR #4 were never
  persisted anywhere; that process gap is recorded.

## Changes

- `docs/secret-types.adoc` — corrected #32 status; new "Cross-reference
review —
2026-10-05" section; retained checklist marked with a note (item 5
decided:
  standalone); related-documentation links.
- `docs/secret-types-transition-review-2026-10-05.adoc` — full review
record,
  evidence table, ownership split, and the exact proposed #32 comment
  (prepared, **not** posted).
- `STATE.a2ml`, `META.a2ml` (ADR-007), `0-AI-MANIFEST.a2ml` — removed
the
  "pending transfer of #32" wording.
- `README.adoc`, `docs/README.adoc`, `CHANGELOG.adoc` — pointers and
entry.

## Verification

- Docs-only: no Agda source touched; the CI proof gate (Agda 2.6.4.3,
  `scripts/check.sh`) still runs on this PR.
- Provenance, issue states, PR states, and the downstream files were
checked
against the GitHub API on 2026-10-05; no local Agda/asciidoctor in the
sandbox,
  so rendering and proofs are left to CI (not claimed here).
- The commit is unsigned (`Require-Signed-Commits` covers the default
branch);
  land it with the repo's GitHub **squash** merge, as with PR #37.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: arena-agent <297053741+arena-agent@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Preserved: docs/secret-types.adoc on preserve/secret-types-note-2026-07-13 (decide: land or retire)

1 participant