Skip to content

feat: integrate released synonym search with verified signing - #60

Merged
AlexMikhalev merged 1 commit into
mainfrom
codex/synonym-search-release-signed
Oct 12, 2026
Merged

AlexMikhalev merged 1 commit into
mainfrom
codex/synonym-search-release-signed

Conversation

@AlexMikhalev

Copy link
Copy Markdown
Contributor

Editor-exported synonyms now retrieve every equivalent term as literal text, independently of display limits. Requested --answer synthesis uses the retrieved evidence and preserves decision status; compound user queries retain their filters.

This integrates the reviewed Gitea PR #385 changes and v1.21.19 release/package metadata onto current GitHub main. It preserves the existing release fixes and 32,000-token bound, and includes the reviewed fff-search pin, mmap-cache refusal and filesystem-name guards. The filesystem guards remain partial mitigations.

The entire tree is byte-for-byte identical to reviewed PR #59 head df10eca2fe85659aed6816982f1a850f5910f5bd (tree 3311224407d963ac554f93412219e1aaa95f9483). This replacement uses GitHub's verified commit signature to satisfy the protected branch's signing rule. PR #59 and the immutable release tag are preserved; no force push or protection change was used.

Validation of that exact tree passed: full Rust CI and producer contracts, both live public-download Arch build/install/integrity/version/removal lanes, and independent source review. Fresh CI is required on this signed commit before merging. Gitea PR #385 passed 2,075 native coverage tests with three existing skips and is merged.

The published v1.21.19 binary was anonymously downloaded and checked against archive checksums, embedded Ed25519 and Apple signatures. With the actual released editor's saved graph and brief, concern returned zero results before sharing, three decisions with the exported synonym graph, and those same three passages with real source-grounded synthesis. The immutable binary source remains 2d1820e81d2a9458d4d5eca012e7d0e0d2accf49; the only differences between the tag and this tree are final Arch package metadata and its checksum contract.

Supersedes #59. Gitea source: https://git.terraphim.cloud/terraphim/terraphim-clients/pulls/385

Integrate the independently reviewed source and package metadata from PR #59 with verified commit signing. The complete tree is identical to df10eca. Immutable v1.21.19 remains at 2d1820e; only Arch package metadata and its contract differ from that tag.

Refs https://git.terraphim.cloud/terraphim/terraphim-clients/pulls/385
@AlexMikhalev
AlexMikhalev merged commit 0fa2d19 into main Oct 12, 2026
11 of 13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant