OejUdZddlmZddlmZmZddlmZmZm Z m Z m Z dZ dZ ded<d Zd Zd Zd Zd ZdZdZedGddZddZddZde d ddZgdZy)utask-2693 callback authority 4-source validator (★ 회장 verbatim PR #152 hardening #4). ★ envelope 텍스트는 증거 아님 (회장 verbatim ANCHOR-2). ★ 4-source 모두 일치 시에만 PASS. 하나라도 실패 → fail-closed → HOLD_FOR_CHAIR. Sources (4): 1. envelope owner_key == ANU key (c119085addb0f8b7) — self-key fail-closed 2. actual cron channel owner_key (cokacdir --cron-history 결과) == ANU key 3. envelope 3 SID (chair_facing / collector / delivery) 모두 동일 4. schedule_history `.log` last entry status == 'ok' AND chair_facing_session_id 필드 일치 Usage: validate( envelope=, actual_cron_owner_key=, schedule_history_record=, anu_keys=DEFAULT_ANU_KEYS, ) -> Verdict Verdict.classification ∈ { "AUTHORITATIVE_4SOURCE_OK", "ENVELOPE_OWNER_NOT_ANU", "ACTUAL_CRON_OWNER_NOT_ANU", "ENVELOPE_3SID_MISMATCH", "SCHEDULE_HISTORY_STATUS_FAIL", "SCHEDULE_HISTORY_SID_MISMATCH", "ENVELOPE_ACTUAL_CRON_OWNER_MISMATCH", } ★ 본 validator 는 PR #152 expected_files 내부에서 분류만 수행한다. 분류 결과 hold/merge 결정은 호출 측에서 회장 verbatim 도구를 통해 수행한다. ) annotations) dataclassfield)AnyIterableListOptionalSequencez-utils.callback_authority_4source_validator.v1)c119085addb0f8b7 Sequence[str]DEFAULT_ANU_KEYSAUTHORITATIVE_4SOURCE_OKENVELOPE_OWNER_NOT_ANUACTUAL_CRON_OWNER_NOT_ANUENVELOPE_3SID_MISMATCHSCHEDULE_HISTORY_STATUS_FAILSCHEDULE_HISTORY_SID_MISMATCH#ENVELOPE_ACTUAL_CRON_OWNER_MISMATCHT)frozenceZdZUded<ded<eeZded<dZded <dZded <dZ ded <dZ ded <dZ ded <dZ ded<dZ ded<eddZy)Verdictstrschemaclassification)default_factoryz List[str]reasonsN Optional[str]envelope_owner_keyactual_cron_owner_keychair_facing_session_idcollector_session_iddelivery_session_idschedule_history_statusschedule_history_session_idc(|jtk(SN)rr)selfs -utils/callback_authority_4source_validator.pypassedzVerdict.passedAs""&>>>)returnbool)__name__ __module__ __qualname____annotations__rlistrrrr r!r"r#r$propertyr)r*r(rr4s{ Kt4GY4(, ,+/=/-1]1*.-.)---1]1155 ??r*rcZt|tsy|jt|vS)NF) isinstancerstripset)keyanu_keyss r(_is_anur:Fs$ c3  99;#h- ''r*ct|tsy|j|}t|tr |j r|j SdSr&)r5dictgetrr6)dr8vs r(_get_strr@Ls> a  c A"1c*qwwy1779BdBr*N)schedule_history_recordr9c $g}t|d}t|d}t|d}t|d}t|tr |jr|jnd} t|d} t|d} t || |||| | } t ||s+|j d|d ttt|fi| St | |s+|j d | d ttt|fi| S|| k7r.|j d|d | d ttt|fi| S|||g} t| rtt| dk7r0|j d|d|d|ttt|fi| S| dk7r+|j d| dttt |fi| S| 2| |k7r-|j d| d|ttt"|fi| S|j dttt$|fi| S)ur4-source 검증. envelope: ANU normal callback envelope (schemas/anu_normal_callback_envelope_v1.json). 필수 필드: owner_key, chair_facing_session_id, collector_session_id, delivery_session_id. actual_cron_owner_key: cokacdir --cron-history 결과로 관측된 실제 cron channel owner_key (해당 SID 채널에 실제 등록된 key — envelope 텍스트와 무관한 actual evidence). schedule_history_record: schedule_history `.log` 최근 1줄 JSON dict. 필수 필드: status (ok/cancelled/error), chair_facing_session_id (옵션). owner_keyr r!r"Nstatus)rrr r!r"r#r$zenvelope.owner_key=uX ∉ anu_keys — self-key 또는 누락 (★ envelope 텍스트만 보고 PASS 금지).zactual_cron_owner_key=um ∉ anu_keys — cokacdir --cron-history 채널 owner 가 ANU 가 아님 (self-key 등록 또는 미등록).z != actual_cron_owner_key=u/ — envelope-actual 양방향 owner 불일치.zenvelope 3 SID mismatch: chair=z collector=z delivery=okzschedule_history.status=u7 != 'ok' — cron 실행이 정상 완료되지 않음.z)schedule_history.chair_facing_session_id=z% != envelope.chair_facing_session_id=u4-source 모두 일치: envelope.owner_key=ANU + actual_cron.owner_key=ANU + envelope 3 SID 동일 + schedule_history.status=ok (+ SID 일치).)r@r5rr6r<r:appendrVALIDATOR_SCHEMArrralllenr7rrrr)enveloperrAr9r env_owner chair_sid collector_sid delivery_sid actual_owner sh_statussh_sid common_fieldssidss r(validaterUSs(G;/I#<=IX'=>MH&;?TVY4Z_t_z_z_|(..0CGL0(;I -/H IF$* )*( )$*M 9h '!)/> > ')?ZMZZ < *$\$45j j ')BG]}]]L !).HHXY9 9 ')LggYfgg }l 3D t9CI!+-i]+mEVW$' ) ')?ZMZZD&ym3j k ')Ew`R_``f 17zB009} > ')FaS`aa NN M #%=w X- XXr*) rHr rrrrrrrrrU)r8z Optional[Any]r9z Iterable[str]r+r,)r>rr8rr+r) rKrrrrArr9r r+r)__doc__ __future__r dataclassesrrtypingrrrr r rHr r0rrrrrrrrr:r@rU__all__r3r*r(r[s@#(::B"7-76171= ?&K# $???"( C$(. [Y[Y)[Y! [Y  [Y  [Y| r*