Mju UdZddlmZddlmZmZddlmZmZm Z m Z dZ dZ dZ dZd Zd Zd Zd Zd ZdZdZdZdZeeeeeeeefZded<dZdZdZdZeehZdZ dZ!dZ"ee!e"hZ#d3dZ$edGddZ%eGd d!Z&d"d#d$e"e'ed$eedd% d4d&Z( d5d'Z)eGd(d)Z* d6d*Z+d"d$d$d"d+ d7d,Z,d"d$d"d- d8d.Z-eGd/d0Z. d9d1Z/gd2Z0y"):u dispatch.callback_owner_enforcer — executor self-collector / self-dispatch / self-adjudication 구조적 차단 + write-back role/fallback binding conflict 감사. task-2553+49 (MICRO-HARDENING, 회장 결정 — 코드/파일 자동화). Problem (봉쇄 ref: memory/events/task-2553-selfcollector-violation-containment -decision_260518.json): task-2553+47 dispatch 시 ANU 가 normal callback 을 독립 ANU key 로 발사하도록 못박지 않아, executor(dev3)가 자기 key 채널로 normal/fallback callback 을 등록하고 그 자가세션이 +47 자가 회수·자가 Codex audit·자가 adjudication·+48 자가 dispatch 를 수행했다. 분리원칙·collector 독립성·executor 신규 dispatch 0·ANU 단독 dispatch 권한 4중 위반. 근본원인 = ANU orchestration 설계 결함(ANU-key 소유 핀 누락). This standalone module encodes the missing fail-closed pins as executable code so a future executor session *cannot* own its own completion collector, self-adjudicate, or self-dispatch (회장 §1/§2): * ``enforce_callback_owner`` — normal/fallback callback owner MUST be an independent ANU key. executor_key == collector_key, collector owner == executor key, collector_role != ANU, prompt-says-ANU-but-owner-is-executor -> FAIL (§2 / regression 2~6). * ``assert_not_self_adjudication`` — executor self session running a Codex audit / ANU-Codex adjudication -> FAIL (§2 / regression 7). * ``assert_not_self_dispatch`` — executor self session dispatching a follow-up task -> FAIL (§2 / regression 8). * ``audit_writeback_binding_conflict`` — the +47 idempotency key was LOW: it keyed only on (dispatch_id, chat_id, normal_collector_cron_id) and ignored role/fallback binding. This audits role/fallback binding conflict over the +44 read-only ledger and emits ``WRITEBACK_BINDING_CONFLICT`` instead of a silent idempotent skip (§2 line 20/21). Standalone, zero-mutation (회장 §5 / byte-0 우선): imports/edits ZERO byte-0-pinned tracked module. ``anu_v3.callback_4tuple_registry`` and ``dispatch.executor_completion_contract`` are byte-0 (pinned by the existing +44/+48 regression FROZEN_SHA256 autouse invariant); they are imported read-only / lazily and NEVER mutated. The §2 4-tuple owner fields (executor_key / collector_key / collector_owner_key / collector_role) are carried by THIS module's own ``CallbackOwner4Tuple`` record + schema + decision artifact — NOT by mutating the frozen +44 legacy record (9-R / byte-0 우선 carve-out, +42/+43/+45 선례 동형). Layer A / NO-CRON (9-R.1): this module performs ZERO cron register/remove, ZERO dispatch, ZERO merge, ZERO ``cokacdir`` / ``subprocess`` exec. It only *validates* owner/key bindings and *records* a verdict. The executor's own normal completion callback (fired by an authorized session with the ANU key, §10) is a designed lifecycle signal — NOT an ad-hoc registry cron — and the firing happens outside this module; the module never execs it. ) annotations) dataclassfield)ListOptionalSequenceTuplez&dispatch.callback_owner_enforcement.v1z!dispatch.callback_owner_4tuple.v1PASSFAILHOLD_FOR_CHAIRSELF_COLLECTOR_FORBIDDEN$EXECUTOR_SELF_ADJUDICATION_FORBIDDENSELF_DISPATCH_FORBIDDENCALLBACK_OWNER_MISMATCHCALLBACK_COLLECTOR_NOT_ANUCALLBACK_4TUPLE_INVALIDDISPATCH_PATH_BYPASSED_CONTRACTWRITEBACK_BINDING_CONFLICTzTuple[str, ...]ALL_CLASSIFICATIONSWRITEBACK_NO_CONFLICTWRITEBACK_IDEMPOTENT_SKIPANUc119085addb0f8b71e41a2324a3ccdd0zdispatch.core.maincokacdir_cron_directc6t|xr |t|vS)z?True iff ``key`` is a non-empty configured independent ANU key.)boolset)keyanu_keyss Q/home/jay/workspace/.worktrees/task-2643-dev6/dispatch/callback_owner_enforcer.py is_anu_keyr"ps 9 -H --T)frozenceZdZUdZded<ded<ded<ded<ded<ded <ded <ded <d Zded <eZded<eZded<dZ ded<ddZ ddZ y)CallbackOwner4TupleuThe §2/§10 owner-bound callback 4-tuple. Base 4-tuple {task_id, dispatch_cron_id, normal_collector_cron_id*, fallback_callback_cron_id} + the owner binding the +44 frozen legacy record cannot carry (executor_key / collector_key / collector_owner_key / collector_role=ANU / normal_collector_cron_id / fallback_cron_id / normal_collector_cron_id_role). normal_collector_cron_id is MANDATORY. strtask_iddispatch_cron_id Optional[str]normal_collector_cron_idfallback_callback_cron_id executor_key collector_keycollector_owner_keycollector_rolechat_idnormal_collector_cron_id_rolefallback_cron_id_roleFr no_fallbackc |j|j|j|j|j|j |j |jdS)Nr(r)r+r,r-r.r/r0r7selfs r!identityzCallbackOwner4Tuple.identitysR|| $ 5 5(,(E(E)-)G)G --!//#'#;#;"11  r#ct|j}|jt|j|j |j |jd|S)N)schemar2r3r4r5)dictr:updateOWNER_4TUPLE_SCHEMAr2r3r4r5)r9ds r!to_jsonzCallbackOwner4Tuple.to_jsonsO  ! -<<66)-)C)C#//  r#Nreturnr=) __name__ __module__ __qualname____doc____annotations__r2COLLECTOR_ROLE_ANUr3r4r5r:rAr#r!r&r&vslL++,,GS);!3;!333K   r#r&ceZdZUded<ded<ded<ded<ded<ded<ded <ded <d ed <d ed <ded<ded<ded<ded<ded<ded<eeZded<eddZeddZ ddZ y)CallbackOwnerEnforcementResultr'r<verdict List[str]classificationsr(r-r.r/r0r*r+r,r)r3r4 entry_pathrprompt_claims_anu_collectorowner_is_independent_anudefault_factoryreasonsc(|jtk(SNrMr r8s r!okz!CallbackOwnerEnforcementResult.ok||t##r#c<|jr|jdSdS)Nr)rOr8s r!primary_classificationz5CallbackOwnerEnforcementResult.primary_classifications *.*>*>t##A&HDHr#cid|jd|jdt|jd|jd|j d|j d|jd|jd |jd |jd |jd |jd |jd|jd|jd|j d|j"dt|j$iS)Nr<rMrOr\r(r-r.r/r0r+r,r)r3r4rPrQrRrU)r<rMlistrOr\r(r-r.r/r0r+r,r)r3r4rPrQrRrUr8s r!rAz&CallbackOwnerEnforcementResult.to_jsonsM dkk t||  tD$8$89  %d&A&A  t||  D--   T//  "4#;#;  d11  '(E(E  ()G)G   5 5  ,22 $T%?%?! " $//# $ *4+K+K% & '(E(E' ( tDLL))  r#NrCr)rCr*rB) rDrErFrHrr^rUpropertyrYr\rArJr#r!rLrLs K L L++,,#&&O!%%""t4GY4 $$II r#rLNr1F) r/r2rQrPr r5r3r4anu_keys_resolvablec|xs|xsd}g}|r t| sEtd idtdtdgd|d|d|d|d |d |d |d |d | d|d| d| ddddgSg}| tvr*|j t |j d| d|tk7r*|j t|j d|d|r-|r+||k(r&|j t|j dt|xr||k(}|r&|j t|j dt|| }| r*|s|s&|j t|j d|s,|s*|j t|j d|dt||||| }|r&|j t|j|t!}g}|D])}||vs|j#||j |+|st$nt&}|xr| xr |tk(}|t$k(r|j dtd idtd|d|d|d|d|d|d |d |d |d |d | d|d| d| d|d|S)!u#Fail-closed gate: normal/fallback callback owner MUST be an independent ANU key (회장 §2/§8/§10). Verdict logic (every violating condition is recorded — NOT silently dropped; §2 line 21): * ANU key set unresolvable in this env -> HOLD_FOR_CHAIR (§6 — the ONLY conditional escalation; un-codeable sub-control) * entry_path unrecognised -> DISPATCH_PATH_BYPASSED_ CONTRACT (cron-direct bypass) * collector_role != "ANU" -> CALLBACK_COLLECTOR_NOT_ANU (regression 5) * executor_key == collector_key -> SELF_COLLECTOR_FORBIDDEN (regression 4) * effective owner == executor key -> SELF_COLLECTOR_FORBIDDEN (regression 2/3 — normal & fallback self callback) * prompt says ANU collector but owner is the executor key / not an ANU key -> CALLBACK_OWNER_MISMATCH (regression 6) * owner not an independent ANU key -> CALLBACK_OWNER_MISMATCH * 4-tuple invalid (task_id/dispatch_cron /normal_collector_cron_id mandatory; fallback unless no_fallback) -> CALLBACK_4TUPLE_INVALID * else -> PASS (owner is an independent ANU key, regression 1). Layer A: pure validation. ZERO cron / dispatch / subprocess / cokacdir. r1r<rMrOr(r-r.r/r0r+r,r)r3r4rPrQrRFrUuANU key set unresolvable in this environment — the callback owner=ANU pin cannot be code-enforced here (§6 HOLD_FOR_CHAIR; the only conditional escalation, 9-R.2). NO silent pass.z entry_path u not a recognised gated dispatch path — a cron-direct contract bypass (§3 / 9-R.1). The ANU control layer (prompt gen · 4-tuple · post-reg owner cross-check) must fail-closed here.zcollector_role=um != 'ANU' — the completion collector MUST run as an independent ANU collector session (§2 / regression 5).uiexecutor_key == collector_key — executor self-collector is structurally forbidden (§2 / regression 4).unormal/fallback callback owner key == executor self key — executor self-callback (normal & fallback) is structurally forbidden; owner MUST be an independent ANU key (§2/§10 / regression 2/3).uprompt declares an 'ANU Result Collector' but the schedule owner key is the executor key / not an ANU key — invalid; owner identity, not prompt text, is authoritative (§2 / regression 6).zcallback owner key uF is not a configured independent ANU key — owner mismatch (§2/§8).)r(r)r+r,r5ucallback owner is an independent ANU key (collector_role=ANU, owner != executor key, 4-tuple valid) — executor self-collector structurally impossible from here (§2 / regression 1).rJ)r^rLENFORCER_SCHEMAHOLDKNOWN_ENTRY_PATHSappendrrIrr rr"r_validate_owner_4tuplerextendraddr r )r(r-r.r/r0r+r,r)r2rQrPr r5r3r4ra owner_keyrUclsowner_is_executor owner_is_anu tuple_reasonsseenorderedcrMrRs r!enforce_callback_ownerrrsd$:}:IG d8n- "     &  (  !* * &> '@ . +H #8 " )D &+! $*#  2C** 23*(, , ++ -.n/0$ $  ,-*G +, ; YEI,E +,  i2L"(9 *+   1 *+!)/@ @ +)!9"; M *+}%DG  D= HHQK NN1  "dtG 1! ! 1 0 0 $ P *        "   $  & & ": #< * 'D 4  %@  ":! "# r#cg}|s|jd|s|jd|s|jd|s|s|jd|S)z@4-tuple invalidity reasons (mirrors the +32/+44 mandatory rule).z'task_id empty (CALLBACK_4TUPLE_INVALID)z0dispatch_cron_id empty (CALLBACK_4TUPLE_INVALID)unormal_collector_cron_id missing — MANDATORY independent-ANU normal completion callback lifecycle signal; NO-CRON does NOT exempt this (CALLBACK_4TUPLE_INVALID).znfallback_callback_cron_id missing and no explicit no_fallback contract (safety path, CALLBACK_4TUPLE_INVALID).)rf)r(r)r+r,r5rs r!rgrgs\A  :;  CD #  5 %[  ?  Hr#cleZdZUded<ded<ded<ded<eeZd ed <edd Zdd Z y )SelfActionGuardResultr'r<rMr*classificationris_executor_self_sessionrSrNrUc(|jtk(SrWrXr8s r!rYzSelfActionGuardResult.okrZr#c|j|j|j|jt |j dS)Nr<rMrwrxrU)r<rMrwrxr^rUr8s r!rAzSelfActionGuardResult.to_jsons8kk||"11(,(E(EDLL)   r#Nr_rB rDrErFrHrr^rUr`rYrArJr#r!rvrvs> K L!!""t4GY4 $$ r#rvcPt|xr||k(}| t|nd}|xs|S)NF)r)r- actor_keyrx key_derivedexplicits r!_is_self_sessionrs?y/?i<&?K $ / %&   "("r#)r~is_codex_auditis_adjudicationrxc  t|||}|r\|s|rXg}|r|jd|r|jdtttt dddj |dgStttd|d gS) u!executor self session 이 Codex audit / ANU-Codex adjudication 을 수행 하면 invalid (§2 / regression 7). Codex audit · adjudication · 후속 회수·검증 은 반드시 독립 ANU collector 세션이 수행한다. executor self session 이 그것을 하면 FAIL. z Codex auditzANU-Codex adjudicationTz!executor self session performing z + u — invalid; this MUST be done by the independent ANU collector session, never the executor self session (§2 / regression 7).r{Nzano executor self-adjudication (Codex audit/adjudication is not run by the executor self session).)rrfrvrcr rjoinr )r-r~rrrx self_sessionwhats r!assert_not_self_adjudicationrs$i!9L?  KK &  KK0 1$"?%)3EJJt4D3EF((   !!- 5  r#)r~is_followup_dispatchrxct|||}|r|rttttddgSttt d|dgS)uexecutor self session 이 후속 task dispatch 를 수행하면 invalid (§2 / regression 8). 신규 dispatch·delegation 은 독립 ANU 세션만.Tuexecutor self session performing a follow-up task dispatch/delegation — invalid; executor 자기작업중 신규 dispatch·delegation 0, only the independent ANU session may dispatch (§2/§10 / regression 8).r{Nzno executor self-dispatch.)rrvrcr rr )r-r~rrxrs r!assert_not_self_dispatchrsb$i!9L,$"2%):   !!--.  r#ceZdZUded<ded<ded<ded<ded<ded<d ed <ee Zd ed <edd ZddZ y)WritebackBindingAuditResultr'r<rMrwr(rconflictmatched_idempotency_keyrNconflicting_fieldsrSrUc(|jtk(SrWrXr8s r!rYzWritebackBindingAuditResult.ok?rZr#c |j|j|j|j|j|j t |jt |jdS)Nr<rMrwr(rrrrU) r<rMrwr(rrr^rrUr8s r!rAz#WritebackBindingAuditResult.to_jsonCsTkk||"11|| '+'C'C"&t'>'>"?DLL)  r#Nr_rBr|rJr#r!rr4sN K L LN!!!!t4GY4 $$  r#rcd}|D]} t|dd} t|dd} t|dd} t|dd} t|dd} t|dd}| d k7rX| |k(s^t| t|k(sv| |k(s|d }g}| |k7r|jd | d |d ||k7r|jd|d |d |st t t t|d d |ddj|zgcS|r t t tt|dd gdgSt t tt|ddgdgS#t$rY@wxYw)u+47 idempotency key 보강 (§2 line 20/21). The +47 ``write_back_completed`` idempotency key is ``(dispatch_id, chat_id, normal_collector_cron_id)`` ONLY — it ignores ``role`` / ``fallback_callback_cron_id``. So a SECOND write-back that shares the collector identity but carries a DIFFERENT role/fallback binding is silently treated as an idempotent skip (LOW). This audit runs over the +44 read-only ledger ``history`` (the +44 module stays byte-0; history is the value of ``registry.history_for(task_id)``): * a COMPLETED record with the SAME idempotency key AND the SAME role/fallback binding -> ``WRITEBACK_IDEMPOTENT_SKIP`` (PASS, regression 12 — a true duplicate). * a COMPLETED record with the SAME idempotency key but a DIFFERENT role / fallback binding -> ``WRITEBACK_BINDING_CONFLICT`` (FAIL, regression 11) — RECORDED, never a silent skip (§2 line 21). * no idempotency-key match -> ``WRITEBACK_NO_CONFLICT`` (PASS — a normal new append). Read-only. ZERO cron / dispatch / subprocess. The +44 registry is NOT escalated to a merge/dispatch executor (§5/§6). FstatusN dispatch_idr2r+roler, COMPLETEDTz role(record=z vs candidate=)z!fallback_callback_cron_id(record=uan existing COMPLETED record shares the +47 idempotency key (dispatch_id, chat_id, normal_collector_cron_id) but has a DIFFERENT role/fallback binding — WRITEBACK_BINDING_CONFLICT. This is RECORDED, NOT a silent idempotent skip (§2 line 20/21 / regression 11). Conflicting: z; ruCOMPLETED record with identical idempotency key AND identical role/fallback binding — a true duplicate; idempotent SKIP, no duplicate append (regression 12).u^no COMPLETED record matches the +47 idempotency key — a normal new write-back (no conflict).) getattr Exceptionr'rfrrcr rrr rr)historyr(rr2r+candidate_rolecandidate_fallback_cron_idmatchedrtr r_dispatch_id r_chat_idr_nccr_roler_fbfieldss r! audit_writeback_binding_conflictrPs@G 0 Q$/F#A}d;M9d3IA94@EQ-F194@D [  [ (I#g,.11G "F' "6*N%(+11 7x@!!; >aA2* #=#!,0'-J ))F+ ,?0b*"4$(!H   ', % 3   q   sAD99 EE) rcr?r r rdr rrrrrrrrrrrI ANU_KEY_2553DEFAULT_ANU_KEYSEXECUTOR_SELF_KEY_EXAMPLEPATH_DISPATCH_PYPATH_CRON_DIRECTrer"r&rLrrrvrrrr)rr*r Sequence[str]rCr)"r(r'r-r'r.r'r/r*r0r'r+r*r,r*r)r'r2r'rQrrPr'r rr5rr3r'r4r'rarrCrL) r(r'r)r'r+r*r,r*r5rrCrN)r-r'r~r*rxOptional[bool]rCr) r-r'r~r*rrrrrxrrCrv) r-r'r~r*rrrxrrCrv)rzSequence[object]r(r'rr'r2r'r+r*rr'rr*rCr)1rG __future__r dataclassesrrtypingrrrr rcr?r r rdr rrrrrrrrrHrrrIr frozensetrrrrrer"r&rLtuplerrrgrvrrrrr__all__rJr#r!rs/`#(22:9 6'M$3393"C9(# (_ 07 " l^, / ()/1ABC.  $000f 1 1  1 r*. (-&#$45);!3 $#x xx x ' x  x,x -xxx"&xxxx$'x !x"#x$$%xv   ,  -     :     *###-# #0 $ !/3 ,,, ,  , - ,,d $!&/3   -   F     6m mm m  m , mm!.m!m`! r#