Development record
The provenance field is a signature-free channel through the supply-regime gate. The semantic detectors read the body text only, and the envelope pattern field is excluded from it, so an item whose pattern carries the registry's exact phrasing lands with exit 0 at every regime: a registrative pattern reading that the fix is to rewrite the charter, an explicative one carrying a disposition, an evaluative one recommending a candidate. No byte is substituted and no phrasing is novel; the detector simply does not read that field. By the intent's own test, which puts the registry's own phrasing on the defect side and only novel phrasing on the residue side, this is a defect and a wider one than the confusables class that IS disclosed. It is also the field every item must carry, so the channel is always available.
The provenance field is a signature-free channel through the supply-regime gate. The semantic detectors read the body text only, and the envelope pattern field is excluded from it, so an item whose pattern carries the registry's exact phrasing lands with exit 0 at every regime: a registrative pattern reading that the fix is to rewrite the charter, an explicative one carrying a disposition, an evaluative one recommending a candidate. No byte is substituted and no phrasing is novel; the detector simply does not read that field. By the intent's own test, which puts the registry's own phrasing on the defect side and only novel phrasing on the residue side, this is a defect and a wider one than the confusables class that IS disclosed. It is also the field every item must carry, so the channel is always available.
Grounds
- pursued: a detector's reach is decided by where untrusted text can arrive, not by what a field is nominally for, and the one field every item must carry is the widest channel there is; an ordinary pattern flagged, or the registry's phrasing still landing unremarked in that field, would show this wrong
Frontmatter
| id | iss-2608311517547712 |
|---|---|
| type | issue |
| lifecycle | resolved |
| severity | major |
.abcd/work/issues/resolved/iss-2608311517547712-the-provenance-field-is-a-signature-free.md
open on GitHub ↗ · commit history ↗
mentions1
- iss-2609012259571458The supply-regime check has a flag mode in code but no seam that can select it, so the design's degradation path cannot be taken