feat(cockpit): preserve trust metadata in snapshots #156

Merged

pdurlej merged 1 commit from codex/cockpit-trust-metadata into main

2026-06-03 19:42:22 +02:00

codex commented

2026-06-03 10:35:02 +02:00

Collaborator

Fixes #83.

Canary status: missing — request review before merge if this is treated as cockpit contract-sensitive.

Summary

Adds optional trust metadata to operational snapshot items: actor, source channel, evidence class, operator approval, confidence, and opaque source ref.
Preserves that metadata through submitOperationalSnapshot instead of stripping nested item fields.
Shows compact safe trust badges in Cockpit Lite while deliberately not rendering raw trust.sourceRef.
Documents the trust block in the operational cockpit contract and JSON schema.

Scope

Operational Cockpit v0 contract/API/UI only. No storage migration: snapshots are already JSON payloads in the existing operational snapshot table.

Non-goals

No production deploy or runtime producer changes.
No raw Signal/path/source ref display in the default UI.
No new trust authority or approval workflow.
No database migration, token change, or Infisical change.

Spec sources read

#83
docs/operational-cockpit-contract.md
docs/contracts/operational-snapshot.v0.schema.json
packages/api/src/routers/agent.ts
apps/web/src/views/settings/OperationalCockpitSettings.tsx

Tests / smoke

pnpm --filter @kan/api test -- src/routers/agent.test.ts -t "preserves operational snapshot trust metadata"
pnpm --filter @kan/api test -- src/routers/agent.test.ts
pnpm --filter @kan/api typecheck
pnpm exec prettier --check packages/api/src/routers/agent.ts packages/api/src/routers/agent.test.ts apps/web/src/views/settings/OperationalCockpitSettings.tsx docs/contracts/operational-snapshot.v0.schema.json docs/operational-cockpit-contract.md

Known existing debt:

pnpm exec eslint src/views/settings/OperationalCockpitSettings.tsx

remains red on pre-existing typed-router/project-service lint debt in that file. This PR adds to the file but does not broaden the underlying generated API inference issue.

Rollback

Revert this commit. Existing snapshots without trust remain valid; future submitted trust blocks would again be stripped from nested items.

Owner gates

None for merge. Production deploy remains a separate owner-gated action.

Fixes #83. Canary status: missing — request review before merge if this is treated as cockpit contract-sensitive. ## Summary - Adds optional `trust` metadata to operational snapshot items: actor, source channel, evidence class, operator approval, confidence, and opaque source ref. - Preserves that metadata through `submitOperationalSnapshot` instead of stripping nested item fields. - Shows compact safe trust badges in Cockpit Lite while deliberately not rendering raw `trust.sourceRef`. - Documents the trust block in the operational cockpit contract and JSON schema. ## Scope Operational Cockpit v0 contract/API/UI only. No storage migration: snapshots are already JSON payloads in the existing operational snapshot table. ## Non-goals - No production deploy or runtime producer changes. - No raw Signal/path/source ref display in the default UI. - No new trust authority or approval workflow. - No database migration, token change, or Infisical change. ## Spec sources read - #83 - `docs/operational-cockpit-contract.md` - `docs/contracts/operational-snapshot.v0.schema.json` - `packages/api/src/routers/agent.ts` - `apps/web/src/views/settings/OperationalCockpitSettings.tsx` ## Tests / smoke ```bash pnpm --filter @kan/api test -- src/routers/agent.test.ts -t "preserves operational snapshot trust metadata" pnpm --filter @kan/api test -- src/routers/agent.test.ts pnpm --filter @kan/api typecheck pnpm exec prettier --check packages/api/src/routers/agent.ts packages/api/src/routers/agent.test.ts apps/web/src/views/settings/OperationalCockpitSettings.tsx docs/contracts/operational-snapshot.v0.schema.json docs/operational-cockpit-contract.md ``` Known existing debt: ```bash pnpm exec eslint src/views/settings/OperationalCockpitSettings.tsx ``` remains red on pre-existing typed-router/project-service lint debt in that file. This PR adds to the file but does not broaden the underlying generated API inference issue. ## Rollback Revert this commit. Existing snapshots without `trust` remain valid; future submitted `trust` blocks would again be stripped from nested items. ## Owner gates None for merge. Production deploy remains a separate owner-gated action.

Rows
Columns