- CHANGELOG: tines-core 1.0.0 and the hosts' 0.4.0 are separate,
unreleased sections. Every core API break is listed (the nine
pub(crate) items, the private modules and the frame_sender path, the
local constants per decision K, non_exhaustive types, store_mut). The
new names (WallClockStore, Node::set_wall_clock, peer_time_estimate,
flush, IdentityChanged) are called out. The host section covers
tines::trust, the config changes, decision J, snapshots, and the
review fixes.
- THREAT_MODEL: F6, F8, F9 and F13 are fixed with their commits. F18 is
partly fixed: the store side and the flush on first trusted time are
done, but timed and shutdown flushes are still open. F19 now records
decision J and the plausibility bounds, and what remains. §9, §10 and
§11 are updated to match.
- README: Dest and sig in the observation table; flush and is_empty in
the store table; only the public wire constants are listed; a new
"Trusted time" section with the config keys and the systemd ordering;
the MSRV and fuzz CI jobs; frame_sender's new path.
- AGENTS: 1.0 is implemented but not yet published. The constants list
shows the pub(crate) split, PEER_IDLE_MS, MIN_MTU's role and where
MAX_FRAGMENTS lives. Notes the hidden conformance module.
- tines-bt README: frame_sender's path, and its own MAX_PEERS.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- F: Store::flush(now) with a no-op default; Node::flush(now) replaces
Node::store_mut. The caller's now anchors ages (fixes LogStore's stale
clock marker, F18).
- G: age_ms is documented as a lower bound. Robots are assumed to have a
trusted wall clock (RTC or GPS); LogStore adds power-off time on open
from a wall-clock flush marker. Unknown downtime expires held addressed
messages and floors held broadcasts' age at unknown_downtime_age_ms.
Hosts set observed_at.
- AGENTS.md: specs and plans change only to record decisions Kyle has
discussed and agreed.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- README: custody chain and receipts replace epidemic forwarding; Ack
frame; running on a robot (host crates, current limits); security;
crate layout, constants and reading list.
- AGENTS.md: current spec list, receipt constraints and review focus
7-8, first_seq rule, constants, host crates and the ros2 gate.
- THREAT_MODEL.md: re-checked at 89041ea. F1, F2, F5, F17 fixed; F3
(single configured peer) and F4 partly fixed; new F18 (no scheduled
flush, stale clock marker).
- CHANGELOG: Unreleased section for the fleet milestone and fixes.
- tines-bt README: single-peer limit; manual BLE check not yet recorded.
- tines service rustdoc: oversized-frame behaviour, JSON tagging, clock.
- 1.0 spec: approved (2026-10-20), including §10 and the adversarial
fuzz mode.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
README: protocol, fragmentation, poll and addressed-delivery diagrams;
observation fields and identity; transport, belief and trim guidance;
simulator example; constants table.
AGENTS.md: drop the completed plan's task-by-task workflow and Task 14
notes, point at both specs, use scripts/ci.sh as the gate, and update
the identity-hash constraint to include `to`.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
kyleandClaude Opus 5.5