Skip to content

P10.3/P10.4: GE Edition1 SHA-bound Discovery SCL field evidence gate - #515

Merged
masarray merged 7 commits into
fix/512-goose-event-header-alignmentfrom
test/p10-4-ge-ed1-field-evidence
Oct 11, 2026
Merged

masarray merged 7 commits into
fix/512-goose-event-header-alignmentfrom
test/p10-4-ge-ed1-field-evidence

Conversation

@masarray

Copy link
Copy Markdown
Owner

P10.3 / P10.4 — GE Edition 1 field evidence, fail-closed (DRAFT)

Base exact validated P10.2 ARSAS 2369c286da6d14dda2470a2854daf2d46d588dfe on staging PR #512. Exact engine lock 00ad2819b99ffe6b3f885e59aa24a6afb2b4d8e1 unchanged. No runtime MMS/GOOSE/report/control changes.

P10.3

Staging 2369c286... already passed 16/16 post fast-forward CI on Actions run family #381057..., including Build ARSAS #38105708427 portable EXE/installer. Reuse this verified existing candidate; no duplicate builds or return to old main.

P10.4 delivered as field-proof tooling — not fabricated live acceptance

  • scripts/verify-p10-ge-field-scl.py: offline, bounded, DTD-rejecting SHA-pinned comparison of independently trusted BCU_GE.iid with ARSAS Discovery-export SCL. Exact BCUGE / F650 / raw domain BCUGEF650, AP/IP, 8 DataSets and 124 ordered FCDA membership identities, source vs export LN/RCB/GOOSE inspection.
  • Explicitly separate structure from physical report-only traffic (67 points, 6 concrete RCBs), name-list 6400 completeness, BRCB/GI/BufOvfl/EntryID continuity, GOOSE address parity. Structural green never sets r10PromotionAllowed true.
  • scripts/test-verify-p10-ge-field-scl.py: 16 synthetic positive and negative fixture tests (changed trusted SHA, endpoint, wire domain, LDevice inst, FCDA ordering, missing source node, ambiguous AP, malicious DTD, source/live LN delta, RCB semantic review). Runs once in existing canonical Build ARSAS Python test phase; zero new artifact uploads.
  • docs/P10_GE_ED1_FIELD_ACCEPTANCE.md: operator workflow, separately recorded SHA256 trusted IID at intake, Save → Open SCL and field evidence requirements.

Explicit blocker: physical relay is not accessible from this GitHub-only session

No fresh on-device MMS association to 192.16.1.33:102 and no actual original BCU_GE.iid bytes were provided in the current conversation/project. Physical validation remains PENDING. Avoid contaminating permanently accepted R10 historical evidence with synthetic counts. Do not merge to main or release.

Acceptance gates before merging this PR to staging

Canonical Windows build + offline fixture regression green; no report/control/discovery runtime code drift. After tool is ready, operator attaches real trusted source, exported SCL, both ingress diagnostics, and PCAP/RCB continuity evidence. If any fail, fix root cause in a separate target PR, never silently weaken checks.

@masarray
masarray merged commit 280f294 into fix/512-goose-event-header-alignment Oct 11, 2026
19 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant