Skip to content

feat(signal): add bounded snapshots and guarded probes for SDK 1.1.0 - #2

Merged
acerbetti merged 3 commits into
mainfrom
codex/signal-transparency-sdk
Oct 9, 2026
Merged

acerbetti merged 3 commits into
mainfrom
codex/signal-transparency-sdk

Conversation

@acerbetti

@acerbetti acerbetti commented Oct 8, 2026 •

Copy link
Copy Markdown
Member

Adds optional signal evidence reads and guarded diagnostic patch writes for PatternSpace 2.3. Clients can read received values, app mapping, SDI software evidence and explicitly unknown physical signal fields through device.signalSnapshot; pattern.displayProbe requires a connection-bound host context guard and never falls back to ordinary patch writes.

The change targets SDK 1.1.0 while retaining JSON protocol 1.3. Existing delegate conformers remain source-compatible through unsupported defaults, and missing optional capabilities decode as unsupported. Evidence schema 1 bounds samples and the complete response, rejects invalid capture times and unsupported major schemas, and keeps authorization outside shareable evidence. Both native and URLSession transports support the 256 KiB response limit; server request limits are unchanged.

Validation: fresh swift test passes all 184 tests (63 Core, 106 Server, 15 Client), with no warnings or errors. Coverage includes unchanged delegate fixtures, old host behavior, shared patch validation, guard errors, payload bounds, unsupported schemas and valid 100 KiB snapshots through both transports. Independent spec and quality reviews found no remaining P1/P2 blockers after corrections.

Release validation: a fresh isolated swift build and swift test run passed without warnings or errors. The release changelog is dated October 9, 2026. Merge and publication of SDK 1.1.0 are authorized; app release tagging remains separate.

acerbetti and others added 3 commits October 8, 2026 14:09
Add source-compatible optional diagnostics routes and typed schema-1 evidence, keep authorization separate, and share ordinary patch validation. Retain JSON protocol 1.3 with SDK metadata 1.1.0.

Co-Authored-By: Codex <noreply@openai.com>
Accept complete 256 KiB responses in both client transports, reject invalid capture intervals without fabricating timestamps, and reject unsupported schemas before decoding authorization. Cover both actual transport paths with large-snapshot and future-schema regression tests.

Co-Authored-By: Codex <noreply@openai.com>
Co-Authored-By: Codex <noreply@openai.com>
@acerbetti
acerbetti merged commit 36c6e4f into main Oct 9, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant