Posture Enforcement, High-Performance Public Mirror, and Event-Driven Provenance

Overview

v1.1.3 delivers centralized, posture-aware CLI enrollment and passkey requirements, consensus as an ordinary enrolled application, a high-performance SQLite public mirror store with content-addressed on-disk artifacts, loopback-only in-process Gateway CPU and memory profiling (--pprof-listen), and event-driven model provenance with cached weight identity verification.

All protocol and wire changes are strictly additive and backward compatible with v1.1.2 artifacts.

Highlights

  • Posture-aware CLI enrollment and passkey requirements — All application enrollments now strictly honor the active governance posture through a single canonical constants.Posture definition. Under doctrine and consensus, CLI-authenticated accounts enroll applications directly without requiring a passkey or second step. Under ratify or notary, enrollments suspend for Layer 3 notary approval, emitting clear human approval rationale, Gateway approval URL, and expiry.
  • Consensus as an enrolled application — Consolidated consensus into an ordinary enrolled application. Any third-party app or agent can enroll via the standard platform API, register an Ed25519 signing key (ztd auth enroll app --signing-key <key>), bind to the Gateway consensus role (ztd auth enroll consensus bind), and participate in L2 quorum deliberation over HTTPS without seeded static keys.
  • High-performance SQLite public mirror and content-addressed artifacts — Replaced the monolithic JSON mirror store with an ACID SQLite store (db/public_mirror_schema.sql). Proof artifacts are written once as immutable, content-addressed files under public-mirror/proofs/<sha256> via fs.RuntimeFileService. Publication overhead is now strictly proportional to new data rather than retained history, eliminating quadratic re-verification and high memory consumption during evaluation rollouts.
  • Gateway CPU and memory profiling (--pprof-listen) — Added loopback-only Go profiling (net/http/pprof) support via ztd gw start --pprof-listen 127.0.0.1:6060, capturing live heap, goroutine, mutex, and CPU profiles with strict non-loopback rejection.
  • Event-driven model provenance and weight verification modes — Model provenance tracking transitions to an event-driven pubsub subscriber. Introduced typed ModelWeightVerificationMode (FULL_HASH vs FILE_IDENTITY_UNCHANGED), allowing subsequent evaluation attestation windows to verify unchanged file identity (inode, size, mtime, ctime) without streaming multi-gigabyte model weights through SHA-256 repeatedly.
  • Evaluation Explorer and Console UX improvements — Evaluation Explorer delivers an enhanced live view layout, improved scaling and scrolling behavior, an enriched Models view, and explicit verified status indicators. Console adds posture-aware approval flows and test coverage for enrollment decisions.
  • Code quality and dead code elimination — Cleaned up unused legacy formation implementations, test helpers, unreferenced sentinel errors, and dead code.

Added

  • Protocol — PlatformEnrollmentGovernancePayload.signing_key = 4 and PlatformEnrollmentGovernancePayload.consensus_endpoint_url = 21 (common.proto); ModelWeightVerificationMode enum (FULL_HASH = 1, FILE_IDENTITY_UNCHANGED = 2), ModelWeightAttestation.verification_mode = 4, and ModelWeightAttestation.full_hash_completed_at_unix_ms = 5 (eval.proto).
  • CLI — ztd auth enroll app --signing-key <key> for application public signing key registration; ztd auth enroll consensus bind and ztd auth enroll consensus show for consensus application binding and inspection (internal/cli/cmd/auth/consensus.go); ztd gw start --pprof-listen <addr> for loopback pprof server (internal/services/profiling/profiling.go).
  • Storage — SQLite public mirror store implementation (internal/services/gateway/public_mirror_store.go, schema internal/services/gateway/db/public_mirror_schema.sql) and incremental mirror segment writes.
  • Constants — ErrProfilingListenAddress, ErrPublicFeedMirrorStoreCorrupt, ModelWeightVerificationMode constants.

Changed

  • Posture definition — Centralized posture definitions into constants.Posture in internal/constants/posture.go, providing unified RequiresL2(), RequiresL3(), Description(), and HumanApprovalReason() methods.
  • Consensus engine — Relocated consensus deliberation to an external enrolled application model with dynamic trust bundle exports and HTTPS verification.
  • Public mirror proof ingest — Shifted proof verification from full historical scans to write-time entry validation.
  • Model weight verification — Re-evaluates file identity before full hashing to accelerate provenance attestations.

Removed

  • Legacy formation implementation — Removed obsolete formations engine code and deprecated fixtures.
  • Unreferenced sentinel errors — Pruned unreferenced consensus bootstrap and gateway store error sentinels.
  • Monolithic JSON mirror state — Deleted clonePublicMirrorStoreState and in-memory proof artifact caching.

Fixed

  • App enrollment posture bypass — Fixed mcp agent run requiring unnecessary manual passkey approvals under doctrine.
  • Process matching in gateway start — Anchored process discovery in findOperatorProcessWithExecutor to executable path, preventing false positives from shell wrappers.
  • Live view scrolling — Resolved layout clipping and auto-scroll freezing in Evaluation Explorer live stream.
  • Passkey prompt URL formatting — Fixed approval URL generation to properly include constants.APIPaths.ApprovePagePrefix.

Tests

  • Full platform test suites executed and passing:
    • ./ztd test unit — PASS (127 packages, 12,928 tests, 0 failures).
    • ./ztd test lint and make lint — PASS (0 issues).
    • make console-lint console-test console-embed-check — PASS (8 test files, 49/49 tests).
    • make explorer-lint explorer-test explorer-catalog-check explorer-embed-check — PASS (42 test files, 689/689 tests).
    • npm --prefix ztd-adapter test — PASS (20 test files, 446/446 tests).
    • make website-test — PASS (142/142 tests).
    • make doctrines-validate — PASS (all JSON doctrines valid).
    • make constants-check — PASS (0 drift).
    • make third-party-notices-check — PASS (0 drift).
    • make swagger-generate — PASS (OpenAPI spec up to date).
  • Core platform release smoke gate:
    • ./ztd test release-smoke --root .ztd/operators/release-smoke-v113-20261018T162100Z — PASS (binary SHA-256 fa910f2ba75d95af094d40b50105974e640cae6ed26694520b5ed3a1631ca140, exit 0, 0 failed, 0 skipped).

Documentation

  • CHANGELOG.md — Added 1.1.3 release entry under ## v1.1.x.
  • VERSION — Bumped to v1.1.3. make version-sync synchronized 16 package and protocol doc declarations.
  • Audited and updated document metadata (version: v1.1.3, last_updated: 2026-10-18) on docs/architecture/auth.md, docs/architecture/consensus.md, docs/architecture/public_spectator.md, docs/architecture/model-provenance.md, docs/architecture/evals.md, docs/architecture/governance.md, docs/architecture/gateway.md, docs/devs/codemap.md, docs/devs/devs.md, docs/devs/docs.md, docs/devs/troubleshooting.md, and docs/devs/release_process.md.

Compliance Evidence

Operational evidence bundle generated by ./ztd compliance release-prepare:

  • Scope: gateway-operational-20261018 (window 2026-10-18T15:58:51.087Z to 2026-10-18T15:59:21.087Z, 254 receipts, 137 commitments, 6 source signer keys).
  • Public bundle: release-evidence/v1.1.3/report-bundle/manifest.json.
  • Offline verification: compliance_bundle@2.0.0 valid=true, failures=0, checksum root b0ac11ec1146345c8e67a2a49581b53d724dc3b8ee6b966d064058cda2c57d55.
  • Source revision: 6c12e46f7ea7ccac2e995e7fe8f02738b74142b2.
  • Canonical projections: docs/release_notes/v1.1.x/v1.1.3-compliance-evidence.md and docs/release_notes/v1.1.x/v1.1.3-compliance-evidence.csv.

Deferred