Implement APS render fix and TSJS resilience - #1002

Draft

aram356 wants to merge 647 commits into

mainfrom

spec/aps-tsjs-resilience-design

This pull request is big! We're only showing the most recent 250 commits

Commits on Aug 6, 2026

Remove unused auction test import
ChristianPavilonis
committed
6efc1ac

Commits on Aug 7, 2026

Merge branch 'rc/july' of github.com:IABTechLab/trusted-server into rc/july
ChristianPavilonis
committed
b7b1441
Establish TSJS runtime ownership and release identity
aram356
committed
4f0fb43
Add runtime and navigation session ownership
aram356
committed
7450c0d
Harden Task 9 ownership boundaries
aram356
committed
fa08031
Add bounded external readiness adapters
aram356
committed
6669800
Harden adapter queue admission and abort handshake
aram356
committed
46d9697
Mint a per-auction token for browser-visible auction metadata
prk-Jr
committed
a1b9046
Address review on GPT diagnostics evidence and export surface
prk-Jr
committed
4a2cfb6
Merge branch 'main' into feat/gpt-diagnostics-delivery-attribution
prk-Jr
committed
5b28f80
Implement the slot registry and physical GPT cycle model
aram356
committed
b3d4ece
Merge #997 feat/gpt-diagnostics-delivery-attribution into rc/july
prk-Jr
committed
d68ce6c
Fix Prittier lint check
prk-Jr
committed
8fb9e1a
Harden slot ownership and GPT recovery transactions
aram356
committed
e928eaa
Fix GPT cycle queue admission races
aram356
committed
0807e61
Harden GPT admission and recovery invariants
aram356
committed
cbae1a2
Harden hostile GPT state transitions
aram356
committed
85403cd
Contain poisoned batch iterators
aram356
committed
1538666
Add bounded renderer reservation service
aram356
committed
5695728
Harden renderer reservation failure handling
aram356
committed
cb991f3
Harden reservation owner publication and cleanup
aram356
committed
dbf11bd
Bind reservation owners to fresh generations
aram356
committed
3ba7fde
Implement render attempt lifecycle
aram356
committed
0231bdf
Harden render lifecycle transactions
aram356
committed
b817f68
Bind render construction authority
aram356
committed
a895d59
Bind claims to exact render attempts
aram356
committed
fad69a0
Add renderer nonce registry
aram356
committed
749ef99
Add owned browser message channels
aram356
committed
759235f
Implement direct APS renderer flow
aram356
committed
a4810c1
feat(tsjs): implement direct ADM rendering
aram356
committed
a515040
fix(aps): align proxy and projection contracts
aram356
committed
081cc72
ci(tsjs): enforce bundle budgets
aram356
committed
c60eaf9
docs: make resilience plan execution atomic
aram356
committed
4b93ea4
docs: clarify resilience contract guardrails
aram356
committed
e059f99
Implement bounded cache rendering
aram356
committed
1c68d9f
Cover cache reservation authority
aram356
committed
6d9241e
Refine the resilience implementation plan
aram356
committed
799aa6e
Complete the resilience plan review gates
aram356
committed
06314ee
Add the Universal Creative bridge dispatcher
aram356
committed
b781a1b
Harden cache rendering boundaries
aram356
committed
f35248f
Implement the Universal Creative bridge lifecycle
aram356
committed
d8a5340
Harden the serialized PUC owner contract
aram356
committed
e2157b0
Merge branch 'main' into rc/july
aram356
authored
45bdee9
Harden PUC owner event boundaries
aram356
committed
2c61ff6
Harden Universal Creative race boundaries
aram356
committed
067ed54
Cover APS buffered terminal ordering
aram356
committed
7c0544d
Implement navigation-owned auction batches
aram356
committed
6404b0b
Validate the hard-cutover request API
aram356
committed
9d47aa3
Harden auction settlement and slot snapshots
aram356
committed
c6de718
Wire the test-only direct auction API
aram356
committed
9b766c3
Publish the hard-cutover TSJS types
aram356
committed
e5a1341
Harden direct auction identity boundaries
aram356
committed
55a2931
Account for the direct auction request envelope
aram356
committed
03f3725
Serialize direct auction bodies without publisher hooks
aram356
committed
fce5781
Prepare the real TSJS performance marks
aram356
committed
691fdd0
Exercise performance marks through browser composition
aram356
committed
0919e65
Guard collapsed GPT creative shell resizing
aram356
committed
4f6a875
Reject anchored GPT creative shells
aram356
committed
451221e
Measure auction projection bytes from own data
aram356
committed
eb9e27f
Prepare the transactional GPT integration
aram356
committed
859b6aa
Share the layered GPT script guard
aram356
committed
8a0812e
Wire attributable GPT empty fallback
aram356
committed
a971842
Measure canonical auction projection bytes
aram356
committed
3b5cf81
Harden GPT slot reconciliation races
aram356
committed
3ba8b30
Bound shared auction registration graphs
aram356
committed
ed44185
Retain failed GPT reconciliation identities
aram356
committed
4459017
Harden Task 15 validation intrinsics
aram356
committed
c597c37
Classify shared DAG budget overflow
aram356
committed
4f242d3
Publish GPT winners transactionally
aram356
committed
679671f
Revalidate GPT winner publication ownership
aram356
committed
d8f98b0
Latch GPT publication to physical slot
aram356
committed
615352f
Harden exact-key validation helpers
aram356
committed
f3984e5
Remove ambient validation predicates
aram356
committed
87144b6
Stamp the external Prebid artifact
aram356
committed
3e02edc
Harden external Prebid artifact binding
aram356
committed
b9abc2e
Retire artifacts with GPT slot ownership
aram356
committed
fa5eccc
Prepare the transactional Prebid module
aram356
committed
f7e2dc0
Publish Prebid bids transactionally
aram356
committed
a1f0f00
Observe publisher GPT calls transactionally
aram356
committed
32c8b8a
Scope Prebid queries to event callbacks
aram356
committed
7afa7b9
Tombstone unselected Prebid groups
aram356
committed
fd09a6f
Admit Trusted Server bids through Prebid
aram356
committed
665539e
Coordinate Prebid winner selection
aram356
committed
a7139e2
Fail closed during Prebid winner selection
aram356
committed
54ea2ef
Complete GPT handoff startup integration
aram356
committed
9489499
Verify Prebid admission against the real artifact
aram356
committed
acbc221
Fix Prebid contract test command
aram356
committed
5da081a
Pin the Prebid response query contract
aram356
committed
936bf5c
Activate Prebid listeners transactionally
aram356
committed
ec6eb5b
Release Prebid bidder registrations explicitly
aram356
committed
494e183
Bridge Prebid startup into runtime ownership
aram356
committed
ce459b7

Commits on Aug 8, 2026

Arm Prebid selection before bidder startup
aram356
committed
6c182bc
Wire Prebid publication into browser composition
aram356
committed
9153a68
Establish creative integration ownership
aram356
committed
e1aa8b7
Own the creative guard lifecycle
aram356
committed
f71f480
Allow clean creative guard reactivation
aram356
committed
14572b2
Harden GPT publisher handoff ownership
aram356
committed
26025df
Complete browser integration lifecycle wiring
aram356
committed
cc47b15
Add bounded kernel diagnostics transport
aram356
committed
e82f3e7
Close GPT cleanup race windows
aram356
committed
e49b061
Add bounded render trace diagnostics
aram356
committed
226a08f
Fix render trace isolation test typing
aram356
committed
21f5004
Publish terminal render diagnostics
aram356
committed
f4814a5
Wire private runtime diagnostics
aram356
committed
2184738
Bound GPT diagnostics notifications
aram356
committed
4da3000
Harden publisher GPT call provenance
aram356
committed
40c4696
Format GPT diagnostics notifications
aram356
committed
fac4c50
Add bounded GPT diagnostics fact capture
aram356
committed
899e08e
Commit publisher GPT intent transactionally
aram356
committed
f602d6b
Name and complete ts_console request gates
aram356
committed
b555d42
Rebuild bounded GPT diagnostics
aram356
committed
03d8561
Move diagnostics session state to the server
aram356
committed
8176584
Complete runtime render trace diagnostics
aram356
committed
f91f9d8
Prepare remaining integration lifecycles
aram356
committed
328f5cd
Compose remaining integration runtimes
aram356
committed
079f07f
Build the Prebid refresh policy boundary
aram356
committed
cd13e23
Prune render trace state with navigation ownership
aram356
committed
548045d
Satisfy strict consent timer initialization
aram356
committed
8d3bb4d
Use string-form Cargo aliases so nested worktrees do not break them (#1004)
aram356
committed
4dbdd9c
Compose the Prebid refresh policy
aram356
committed
38897a3
Harden synthetic Prebid refresh routing
aram356
committed
fc27df9
Test synthetic Prebid refresh boundaries
aram356
committed
6e0c068
Format Prebid refresh composition
aram356
committed
be5a7a2
Require CORS for cache creative fetches
aram356
committed
753933e
Enforce Axum APS proxy transport deadlines
aram356
committed
1c2a454
Test APS deadline at the transport boundary
aram356
committed
f1a8ad8
Settle failed Prebid publications
aram356
committed
e9358f5
Test hostile Prebid failure settlement
aram356
committed
517c78f
Route GPT diagnostics through the kernel bus
aram356
committed
faec1fc
Document TSJS manifest errors
aram356
committed
55341cf
Format resilient TSJS modules
aram356
committed
624f270
Fix duplicate Prebid artifact equality
aram356
committed
45de84d
Harden creative boot and click ownership
aram356
committed
5c124c5
Isolate creative lifecycle ownership
aram356
committed
eec0b99
Restore Testlight queue push parity
aram356
committed
5f7d37a
Harden GPT diagnostics fact ownership
aram356
committed
11aefe9
Cancel owned GPT diagnostics frames
aram356
committed
6f26c2f
Clean diagnostics directives through server transport
aram356
committed
7469a51
Enrich render trace from safe GPT facts
aram356
committed
e2b2900
Latch first GPT render trace terminal fact
aram356
committed
3ba07ff
Close the maximal runtime ownership gate
aram356
committed
0e30fd3
Wire GPT facts into render diagnostics
aram356
committed
14ae7ae
Test GPT fact identity and timing
aram356
committed
747a630
Format GPT diagnostics resilience changes
aram356
committed
a1692a0
Preserve publisher beacon replacements
aram356
committed
b79b4fc
Reconcile GPT-first render trace terminals
aram356
committed
86f8aa7
Isolate Lockr cleanup failures
aram356
committed
1b12556
Keep render trace counts aligned with current slots
aram356
committed
ccdea45
Capture GPT subscriber membership at commit
aram356
committed
372a570
Exercise maximal runtime failure isolation
aram356
committed
8cf810c
Switch production to the resilient TSJS runtime
aram356
committed
6eb445c
Test hard-cutover browser lifecycle races
aram356
committed
ad9d90e
Fix hard-cutover browser boot races
aram356
committed
9f3278d
test(tsjs): add protected real-GAM attestation
aram356
committed
8486a47
Finalize APS TSJS load-time architecture
aram356
committed
618417c
refactor(tsjs): enforce hard cutover
aram356
committed
60d9d91
Harden TSJS cutover boundaries
aram356
committed
902e115

Commits on Aug 9, 2026

docs(tsjs): make diagnostics ingress core-only
aram356
committed
d3ad7f1
Align the APS TSJS implementation plan
aram356
committed
90d1201

Commits on Aug 10, 2026

Merge remote-tracking branch 'origin/main' into rc/july
ChristianPavilonis
committed
92db6e1

Commits on Aug 11, 2026

Make diagnostics ingress core-only
aram356
committed
4f3cb30
Prepare the remaining integration modules
aram356
committed
f84142f

Commits on Aug 12, 2026

docs: define role-correct TSJS bundle budgets
aram356
committed
74ba187
Align the plan with role-correct TSJS gates
aram356
committed
6c5affe
Split TSJS around the protected first display
aram356
committed
e12d224
Merge current main into the TSJS cutover
aram356
committed
0565c73
Merge rc/july into the TSJS hard cutover
aram356
committed
d270c4b
Freeze role-correct TSJS transfer budgets
aram356
committed
1116f0d
Merge origin/main into rc/july
aram356
committed
dc7bfab
Merge origin/main into rc/july
aram356
committed
270040d
Remove merge-duplicated code left by the main merges
aram356
committed
d27994b
Remove renamed duplicates of tests main already carries
aram356
committed
4409f7b
Fix remaining merge artifacts caught by typechecking
aram356
committed
848aa48
Route branded render operations through render.v1
aram356
committed
63bc1a1
Recapture budgets after render boundary repair
aram356
committed
3746e11
Add dormant phase-aware TSJS fixture controller
aram356
committed
a86069f
Merge current main into the TSJS cutover
aram356
committed
be5bab2
Merge current rc/july into the TSJS cutover
aram356
committed
4e2c307
Recapture budgets after latest base integration
aram356
committed
48d5fb4
Gate TSJS first-display performance before cutover
aram356
committed
a7a9bab
Fix TSJS performance evidence harness
aram356
committed
62421ee
Calibrate the real TSJS first-display gate
aram356
committed
ee0b959
Stabilize the TSJS performance evidence gate
aram356
committed
19db1a1
Pair TSJS retained-heap evidence
aram356
committed
46ad672
Make TSJS capture verification phase-aware
aram356
committed
7f99593
Align APS proxy artifact gate with cutover routes
aram356
committed
7387728
Switch production to the resilient TSJS runtime
aram356
committed
65f4852
Enforce hard-cutover surface absence
aram356
committed
aa2807d
Enable post-switch TSJS evidence dispatch
aram356
committed
36b4431
Attest the APS TSJS cutover workflows
aram356
committed
576e4d4
Fix content-addressed TSJS integration probes
aram356
committed
4e4019c
fix(tsjs): complete creative runtime cutover
aram356
committed
55c4ed8
docs(tsjs): fix post-switch evidence commands
aram356
committed
dae5ebd
Merge current main into the TSJS cutover
aram356
committed
9e5f77c
Harden protected APS cutover evidence
aram356
committed
0944e6f
Fix Fastly cutover version lookup
aram356
committed
79ed600
Retarget APS TSJS plan to main
aram356
committed
b76297c
Harden TSJS security test harnesses
aram356
committed
7b978d7

Commits on Aug 13, 2026

fix(aps): remediate proxy and TSJS review findings
aram356
committed
5d4e4d7
test(tsjs): freeze reproducible bundle evidence
aram356
committed
582b3cf
fix(tsjs): respect runtime dependency boundaries
aram356
committed
de7e838
test(tsjs): refresh clean bundle provenance
aram356
committed
8ef8a40
fix(tsjs): declare messaging protocol before use
aram356
committed
1e78334
test(tsjs): bind evidence to messaging fix
aram356
committed
0180953
style(tsjs): format PUC and GPT sources
aram356
committed
91b3533
test(tsjs): bind evidence to formatting fix
aram356
committed
e1aa5a0
fix(ci): preserve failed TSJS performance evidence
aram356
committed
5b12c16
docs(tsjs): specify lean first-display takeover
aram356
committed
b64b363
docs(tsjs): close takeover architecture gaps
aram356
committed
8787fbe
docs(tsjs): finalize first-display takeover contract
aram356
committed
b0bc79b
docs(tsjs): base cutover decisions on main
aram356
committed
0b7debb

Commits on Aug 14, 2026

Align the TSJS implementation plan with current main
aram356
committed
b15e7f0
Integrate current main into the TSJS cutover
aram356
committed
b724bd4
Classify TSJS concepts against current main
aram356
committed
0897149
Harden TSJS audit gates
aram356
committed
937074b
Reject printf assignment in plan audit
aram356
committed
37dcb57
Reject all retired references in shell plans
aram356
committed
2268be6
Upgrade the package and TypeScript toolchain
aram356
committed
7bce443
Reconcile APS contract and cache boundary plan
aram356
committed
940efd1
Make frozen TSJS transfer captures report only
aram356
committed
35f00e7
Fix auction attribution and restore GPT cache bridge
aram356
committed
35ef0b8
Define closed first-display contracts
aram356
committed
9f0913a
Add dormant first-display artifact transport
aram356
committed
79a46a3
Make first-display artifacts executable
aram356
committed
289dd9a
Implement initial Didomi and Testlight slices
aram356
committed
9711975
Mark the exact first-display request action
aram356
committed
35c802b
Define atomic first-display handoff
aram356
committed
b45423e
Make first-display slices own their behavior
aram356
committed
746ec97
Implement initial route guard slices
aram356
committed
fd0d974
Implement initial context and consent slices
aram356
committed
cb3e4c2
Define the initial creative guard policy
aram356
committed
f4ee5ac
Define the initial APS protocol
aram356
committed
af15f2e
Define the initial GPT protocol
aram356
committed
911a089
Define the initial Prebid protocol
aram356
committed
ae3f31c
Format first-display implementation
aram356
committed
b235d94
Require exact initial protocol coverage
aram356
committed
bb6725b
Return exact initial protocol receipts
aram356
committed
f02f3d1
Derive the first-display batch from projection
aram356
committed
89727d7
Implement the provisional GPT batch adapter
aram356
committed
0de6eff
Connect the projected first-display driver
aram356
committed
378dbb0
Share the exact PUC owner program
aram356
committed
a9a0c52
Implement the bounded first-display render bridge
aram356
committed
d5d48fc
Transfer exact first-display ownership
aram356
committed
2db1aee
Adopt first-display ownership synchronously
aram356
committed
cfb4681
Load the persistent runtime after protected paint
aram356
committed
cf4997f
Complete exact first-display state adoption
aram356
committed
cafdde5
Enforce first-display release size admission
aram356
committed
8311bd7
Move APS PUC ownership into its initial slice
aram356
committed
4fdff3a
Gate first-display transfer against fresh main
aram356
committed
3dbd979

Commits on Aug 15, 2026

Complete APS TSJS hard cutover
aram356
committed
212040b