todo2code

Ticket 045: Kanoniczny dziennik zdarzen logs.dsl.txt

• ID: ticket-045
• Owner: unresolved:human
• Status: DONE
• Workflow state: DONE
• Created: 2026-08-05

Goal and scope

Define the canonical, append-only t2c.event-log/v1 contract rendered as logs.dsl.txt. The contract must cover the complete governed change lifecycle: ticket transitions, commits and pushes, PR synchronization, checks, findings, fixes, exact-head reviews, merge, branch deletion, tests, analysis and final governance verdicts.

This is the architecture/integration slice. It specifies the grammar, trust boundary, event taxonomy, ordering and tamper-evident digest chain before a separate runtime ticket connects the contract to src/pipeline/** and GitHub event acquisition.

logs.dsl.txt is a generated run/workflow artifact. It must not be updated by a post-merge repository commit: that would create another event, invalidate the reviewed SHA and cause an audit recursion.

Acceptance criteria

• AC-01: Scope and the artifact-not-commit architecture are approved by a human owner.
• AC-02: docs/EVENT_LOG_DSL.md defines a closed versioned grammar, mandatory provenance, stable event types, deterministic ordering and secret redaction.
• AC-03: The canonical logs.dsl.txt fixture represents ticket, Git, PR, check, diagnostic, review, merge, branch cleanup, test and governance events.
• AC-04: Every event binds a correlation ID, actor, subject, source, timestamp, outcome, evidence digest, previous digest and its own digest.
• AC-05: The contract separates system facts, human decisions and advisory inference; an LLM event can never become trusted approval evidence.
• AC-06: The contract records that a subsequent runtime ticket must depend on ticket-045 and generate the same artifact for successful, degraded and failed executions.

Participants

• Human participant: unresolved; no user-* file was created by this script.
• Agent participant: ai-codex.md

Non-goals

• No changes to src/**, CLI, SDK or workflows in this ticket.
• No background service or runtime dependency.
• No secret values, free-form provider responses or unbounded payloads in the event stream.
• No claim that historical GitHub events can be reconstructed when no trusted webhook/API evidence was retained.

Approval boundary

The user approved continuation and testing on 2026-08-05. This authorizes the two-file integration slice declared in intent.json; protected merge evidence will still require independent exact-head review.

Validation evidence

• Deterministic fixture validation: PASS for 17 ordered events; all required event families and the SHA-256 chain resolve to stream digest sha256:f3f1efe96911b393f0d7035c6f12cf8cc46acbb8e4166ce35f1322d710285d93.
• make governance: PASS with zero errors and warnings.
• make verify: PASS, 383 tests with no failures and one toolchain-dependent skip.
• make docker-smoke: PASS.
• git diff --check: PASS.
• Koru commit-bound review: PASS for exact head 46210e142446099f21cc87cddd81fd8b38eb44bd.
• Validator App review: APPROVED exact head 46210e142446099f21cc87cddd81fd8b38eb44bd using advisory model openrouter/z-ai/glm-5.2; advisory findings: none.
• Protected PR #60 merged as main@a66eb406b89578cca4cf55c79e36303fd9757b10; its implementation branch was deleted, leaving only main remotely.

The contract slice is locally complete. Runtime production, persistence and GitHub event acquisition are deliberately deferred to a dependent ticket and must not be inferred from these results.

This site is open source. Improve this page.