Repository navigation
T68 — Carry the handle jti into the audit record #2576
Description
Task
| slice | size | difficulty | model | who | estimated lines |
|---|---|---|---|---|---|
| Round-two conditions closed | M | routine | standard | an agent | 210 (110 code, 100 tests) |
A refused store member (
store_handle_invalid) and a redeemed one both write an audit record that carries the handle'sjti.
Covers:
- BEP-067
Layers:
- audit:
- crates/bep/src/audit.rs:
DecisionandRecordgainjti: String, empty when the handle does not parse - crates/bep/src/redeemer.rs:
facts()carrieshandle::Read::jtiinto the verdict (Gatehouse §6.10 line 842) - crates/bep/src/forward.rs:
Verdict::AdmitandVerdict::Refusecarry thejti, andrecordandaudit_refusalwrite it into theDecision(stale layers amended 2026-10-26 by the epic owner's rule) - crates/bep/src/control.rs: its
Decisionliteral sets an emptyjti - crates/bep/src/proxy.rs: its
Decisionliteral sets an emptyjti - crates/minimal/src/cmd/box_audit.rs:
min box auditshows thejti, and the test helper'sDecisionsets it cargo nextest run -p bep a_store_handle_audit_record_carries_its_jti
- crates/bep/src/audit.rs:
Waits on:
Plan block
### T68 — Carry the handle jti into the audit record
slice: S10
kind: task
covers: BEP-067
size: M
est: 110 code, 100 tests
executor: agent
difficulty: routine
model: standard
diagnostics: `min box audit <box>` shows the handle's `jti` on each store-handle record, empty when the handle does not parse
observability: the audit record carries `jti`
layers:
- audit:
- crates/bep/src/audit.rs: `Decision` and `Record` gain `jti: String`, empty when the handle does not parse
- crates/bep/src/redeemer.rs: `facts()` carries `handle::Read::jti` into the verdict (Gatehouse §6.10 line 842)
- crates/bep/src/forward.rs: `Verdict::Admit` and `Verdict::Refuse` carry the `jti`, and `record` and `audit_refusal` write it into the `Decision` (stale layers amended 2026-10-26 by the epic owner's rule)
- crates/bep/src/control.rs: its `Decision` literal sets an empty `jti`
- crates/bep/src/proxy.rs: its `Decision` literal sets an empty `jti`
- crates/minimal/src/cmd/box_audit.rs: `min box audit` shows the `jti`, and the test helper's `Decision` sets it
test: cargo nextest run -p bep a_store_handle_audit_record_carries_its_jti
produces: none
consumes: none
proof: A refused store member (`store_handle_invalid`) and a redeemed one both write an audit record that carries the handle's `jti`.
depends on:
- blocked by #2540
Generated by Claude Code
Reacted by minimal-foundry
Activity
minimal-foundry commentedon Oct 25, 2026
Done. #2596 merged.
branch
agent/2576-carry-the-handle-jti-into-the-audit-record· epic #1501 · PR #2596f08da0277db25b7e327ad0e4Updated 2026-10-26T08:30:06.067Z.
norrietaylor commentedon Oct 25, 2026
/implement
norrietaylor commentedon Oct 26, 2026
The epic owner added this residual to the plan on 2026-10-26 as
T68(slice S10). Its body is now the rendered task. The residual text it replaces is kept below.Residual text
Residual from T60 #2568, arch C1 (ruling), epic #1501.
Gatehouse §6.10 line 842 makes the handle's
jtithe audit correlation id.Recordincrates/bep/src/audit.rshas nojtifield, andfacts()incrates/bep/src/redeemer.rskeepsread.identifierand dropsread.jti. #2568 is the first change that lets a store member reach that audit.What closes this
Recordgainsjti: String, empty when the handle does not parse.redeemer.rsfills it fromhandle::Read::jtithroughFacts.store_handle_invalid) and a redeemed one both audit the handle'sjti.Generated by Claude Code
[-]Carry the handle jti into the BEP audit record (Gatehouse §6.10 line 842)[/-][+]T68 — Carry the handle jti into the audit record[/+]