cb444c4f8a
[autodev] LESSONS: mid-session rewinds are session boundaries
...
Captures the pattern observed this cycle: when /autodev rewinds from
Step 11 (Run Tests) back to Step 7 (Implement) due to a gate fail,
the rewind itself eats real context (task spec drafting + state
update + dependencies survey). Continuing into the destination
step's batch loop in the same conversation risks context truncation
mid-batch. Treat the rewind as a session boundary; let a fresh
/autodev invocation start the implement loop cleanly.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-18 20:50:09 +03:00
c56d4584e6
[AZ-436] [AZ-437] [AZ-438] [AZ-439] Add NFT-SEC-01..05 security scenarios
...
Batch 87: 6 NFT-SEC blackbox scenarios + 5 helper evaluators + 75 unit
tests + cumulative review batches 85-87.
* AZ-436 NFT-SEC-01: cache-poisoning safety budget (AC-NEW-9); aggregate
false_trust_count ≤ N×1e-6; zero-tolerance default. Canonical-only by
default; E2E_NFT_SEC_01_RELEASE_GATE=1 unlocks full matrix.
* AZ-437 NFT-SEC-02 + NFT-SEC-05: shared egress-observation evaluator
(AC-NEW-10); SEC-02 = 0 packets to non-e2e-net over 5min replay;
SEC-05 = DNS-blackhole sidecar healthy + lookup fails + UDP-53 silent.
* AZ-438 NFT-SEC-03: AP-only signing rejection (AC-NEW-11); 3 sub-cases
(unsigned/wrong-key/replayed) each reject ≤500ms + no position drift.
* AZ-439 NFT-SEC-04: probe (always-run) = no-crash + deterministic
decode outcome; ASan-fuzz (release-gate) = 0 findings ≥4h; AC-3
corpus floor informational only per spec.
Verdict per-batch: PASS_WITH_WARNINGS (5 Low). Cumulative review for
batches 85-87 (K=3 window) also PASS_WITH_WARNINGS with 5 cross-batch
findings — recommends hygiene PBIs for write_csv_evidence duplication
(13 helpers) and _resolve_fixture_path duplication (13 scenarios), plus
new tickets for AZ-595 fixture builder + DNS-blackhole sidecar service.
Also adds _docs/LESSONS.md documenting the Jira transition-ID lesson
(always call getTransitionsForJiraIssue first, never memorize numeric
IDs across sessions).
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-17 17:33:22 +03:00
Oleksandr Bezdieniezhnykh