ace-assign 0.61.0 → 0.61.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 494e61c0842f8930425d12aeee6c0b51b46ce491e829c19401df1296e440ca09
-  data.tar.gz: 614e997a57ea09e7ff83d30ad372514dc0c0abceac7a809cdcb4aea1b630005a
+  metadata.gz: d55939eec104b31f029b0e8a703977c5b06afc67a82ddbc1b6274c9fa471bd21
+  data.tar.gz: e9f910d2474dbbdee91b75760c25711f32169c0a8e8ea476ef01ec1dd9ac8526
 SHA512:
-  metadata.gz: a83405e18f47bdf33cf83619a88b790ad6ed27ff933f8816530931a2eb571c744f8eeca5c25aded6c0c2dacdda5429aec87372aadae63b0393a17a2797d149ea
-  data.tar.gz: c6dba5cc8f2925af84265864bbf4b54e3102f27d0707ee936d0440ec3df28e3acbf67cc7040a103c808461d33cfd77c8dd43f5092bbec6ce0fa362b1920cfc52
+  metadata.gz: 86d8c02efe5e126b34d683eba6c81dc1e49367e2f847c08f3cad560bde57cfebae491745346b3cfd852fccbf067e7581f01c6175068a88e7d41df24b363cab35
+  data.tar.gz: 27c7e06bfc8e553615416ea1ec36f3bc7d4a818bf7e5c844d16fb130ef6384e8132af30e5271f529679c69714e6b222620b4bb8a8e40f2c20755735df855aa22

data/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.61.1] - 2026-10-02
+
+### Fixed
+- Historical evidence reads (`--historical-head`) validate acceptance from the append-only journal without re-hashing receipt artifacts, so campaigns that resolve findings mid-campaign (archiving and annotating the referenced files) can still finish; current-head reads keep full artifact re-verification.
+
+
 ## [0.61.0] - 2026-10-02
 
 ### Added

data/lib/ace/assign/molecules/receipt_verifier.rb

@@ -64,9 +64,15 @@ module Ace
           receipt
         end
         # Recheck the source artifacts/checks of an already accepted receipt.
-        def verify_accepted_evidence!(data, live_head:, repo_root:)
+        # Historical reads (recorded at a past head) validate acceptance from
+        # the append-only journal without re-hashing artifacts: the review
+        # lifecycle legitimately archives and annotates finding files after
+        # collection, and `.ace-local` working files are disposable, so their
+        # current existence proves nothing about an accepted past receipt.
+        # Current-head reads keep full artifact re-verification.
+        def verify_accepted_evidence!(data, live_head:, repo_root:, historical: false)
           verify_head(data, live_head)
-          verify_artifacts(data, repo_root)
+          verify_artifacts(data, repo_root) unless historical
           verify_checks(data)
           verify_review(data)
         end

data/lib/ace/assign/organisms/attempt_coordinator.rb

@@ -485,7 +485,8 @@ input:#{Regexp.escape(request.fetch("input_digest"))} outcome:(\S+)( no-effect:(
           unless data["verdict"] == "succeeded" && data["head"] == evidence_head && attempt.candidate_head == evidence_head
             raise AttemptErrors::ReceiptRejected, "Accepted execution evidence is stale or unsuccessful"
           end
-          @verifier.verify_accepted_evidence!(data, live_head: evidence_head, repo_root: @repo_root)
+          @verifier.verify_accepted_evidence!(data, live_head: evidence_head, repo_root: @repo_root,
+            historical: !historical_head.nil?)
           {"attempt_id" => attempt_id, "receipt_digest" => receipt_digest, "head" => evidence_head, "kind" => kind,
            "historical" => !historical_head.nil?,
            "operation" => data["operation"], "checks" => data["checks"], "producer" => data["producer"], "review" => data["review"],

data/lib/ace/assign/version.rb

@@ -2,6 +2,6 @@
 
 module Ace
   module Assign
-    VERSION = "0.61.0"
+    VERSION = "0.61.1"
   end
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: ace-assign
 version: !ruby/object:Gem::Version
-  version: 0.61.0
+  version: 0.61.1
 platform: ruby
 authors:
 - Michal Czyz
 bindir: exe
 cert_chain: []
-date: 2026-10-02 00:00:00.000000000 Z
+date: 2026-10-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ace-support-cli