2 Commits

Author	SHA1	Message	Date
Oleksandr Bezdieniezhnykh	e2bebefdfc	[AZ-507] [AZ-323] [AZ-324] C10 Manifest build + verify + AZ-270 hygiene ... AZ-507: codify cross-component import rule. Added _types/inference_errors.py shim re-exporting EngineBuildError + CalibrationCacheError from c7_inference; narrowed C10 EngineCompiler's except Exception to the two typed errors so unknown exceptions propagate (AC-3). Rewrote module-layout.md "Imports from" sections for 9 components + added Rule 9; appended an architecture.md ADR-009 note explaining why components must go through _types/*. AZ-323: ManifestBuilder + Ed25519ManifestSigner. Canonical JSON via orjson OPT_SORT_KEYS+OPT_INDENT_2, atomic-write Manifest.json + sha sidecar + .sig via AZ-280, operator-key fingerprint allowlist gate (C10-ST-01), ADR-010 takeoff_origin + flight_id baked into Manifest AND manifest_hash so re-planned routes change the cache identity (AC-15/AC-16). 20 unit tests cover all 16 ACs. AZ-324: ManifestVerifierImpl. Fail-closed Steps A-D: Manifest.json sidecar self-hash, Ed25519 trust-key set, schema parse with absolute/.. path rejection + takeoff_origin in-bbox check, stream SHA-256 per artifact with multi-failure accumulation. Operator mode re-derives tiles_coverage_sha256 from C6; airborne mode trusts the signed aggregate. 19 unit tests cover all 17 ACs. Composition root: c10_factory.build_manifest_builder + build_manifest_verifier + c6_tile_metadata_store_to_tiles_query adapter (the one place that legitimately imports both C6 and C10 without violating the AZ-270 lint). Dependency: pinned cryptography>=43.0,<46.0 in pyproject.toml. Tests: 1300 passed, 80 skipped (env-only), ruff clean for all AZ-323/324 files. AZ-306 (FAISS) intentionally deferred to batch 35 — needs C++ pybind11 toolchain not present in this environment. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-05-13 02:37:14 +03:00
Oleksandr Bezdieniezhnykh	b12db61444	[AZ-263] Bootstrap: repo skeleton + Docker + CI + Alembic + Tier-1 tests ... Implements the AZ-263 / E-BOOT initial structure task: - Python src/-layout package `gps_denied_onboard/` with per-component interface stubs (14 components), type-only DTOs under `_types/`, shared helpers under `helpers/` (R14 LightGlue ownership), structured JSON logging, runtime composition root with env-var fail-fast gate, healthcheck module shared by Docker and CI smoke. - CMake top-level + `cmake/{build_options,dependencies,strategies}.cmake` with the BUILD_* per-binary flags (ADR-002) and pinned external git refs for OKVIS2 / VINS-Mono / GTSAM / FAISS / OpenCV >=4.12.0. - Three Dockerfiles (companion-tier1, operator-tooling, mock-suite-sat-service) + two compose files (dev + Tier-1 test). - Four GitHub Actions workflows: ci.yml (lint/unit/integration/dual binary build/SBOM diff/security), ci-tier2.yml (self-hosted Jetson AC-bound NFTs), release.yml, cve-rescan.yml. - Two CI gate scripts: `ci/sbom_diff.py` (deployment SBOM subset + R02 exclusion), `ci/opencv_pin_gate.py` (>=4.12.0 enforcement, D-CROSS-CVE-1). - Alembic-driven Postgres 16 initial migration `0001_initial.py` mirroring satellite-provider tiles + flights + sector_classifications + manifests + engine_cache_entries (data_model.md s 2). - Tier-1 test scaffolding: 95 passing unit tests covering every AC, per-component smoke tests, structured logging JSON output check, env-var gate check, healthcheck import check. Two CI-gated tests (cmake configure, actionlint) skip locally with explicit reasons. - Batch report + code review report under `_docs/03_implementation/`. Verdict: PASS_WITH_WARNINGS (two Low findings, both informational). Co-authored-by: Cursor <cursoragent@cursor.com>	2026-05-11 01:00:28 +03:00