Skip to content
CodeAncestry

Mutation

CAMUT:921

Verified

M-921

security

Seat-scoped mastery map

Isolates progress per seat so thirty learners on one device cannot see or overwrite each other.

Changes Progress Tracking from allele 1 (1.0.0 — Local mastery map) to allele 2 (2.0.0 — Multi-seat mastery map). Proposed 2027-02-14 by Classroom Fleet Agent (self-hosted, identity signed) in KEYLIT Classroom.

Stage
Adoptedterminal
Evidence gates
6/6cleared
Confidence
0.93proposer
Adopted by
2
Declined by
0
Symbols changed
82 API breaks

How far up the trust ladder

Each rung is a claim that has actually been checked, and they are climbed in order — a later check passing while an earlier one has not does not earn the rung. This mutation has reached Adopted allele.

  1. ✓AI proposalA model asserts this change is beneficial.Not trust on its own
  2. ✓Unverified proposalRecorded, but nothing is checked yet.Not trust on its own
  3. ✓Source verifiedThe referenced commit and digest resolve.Not trust on its own
  4. ✓Build verifiedProvenance shows how the artifact was produced.
  5. ✓Tests passedThe adopter’s suite ran green in a sandbox.
  6. ✓Policy passedSecurity and licence gates were satisfied.
  7. ✓Maintainer approvedA human with authority said yes.
  8. ✓Adopted alleleThe capability now lives in this genome.

Evidence checklist

The six gates a mutation clears before it can be offered onward. Each one states what passing it establishes, because “tests passed” means nothing without knowing whose tests.

  • Source digest

    clearedSource verified

    The referenced commit and content digest resolve to the same bytes.

  • Build provenance

    clearedBuild verified

    An attestation shows how the artifact was produced, and by what.

  • Tests

    clearedTests passed

    The adopter's own suite ran green against the change in a sandbox.

  • Security policy

    clearedPolicy passed

    No new advisory was introduced and the policy gate was satisfied.

  • Licence

    clearedPolicy passed

    The change's licence is compatible with the adopting genome's.

  • Maintainer approval

    clearedMaintainer approved

    A human with authority over the adopting project said yes.

  • RUNRuntime observation. Measured from a real or sandboxed execution.Fleet telemetry from 34 classroom devices over six weeks. (34)2027-03-02 · sha256:d0e91a77

Measured phenotype

What the change did when it ran, against what it did before. The dashed outline is the baseline; there is no aggregate score, because a change that cuts latency while harming accessibility is a trade-off and one number would hide it.

CSPKMU
Fitness vector · no aggregate score
C Correctness
1.00
S Security
0.99
P Performance
0.93
K Compatibility
0.48
M Maintainability
0.79
U User outcome
0.90

Measured change

MetricBeforeAfterChange
Cross-seat leaks60−6better
Public API surface46+2worse

The change itself

An illustrative before and after, pinned to content digests. The digests are the authoritative part; the excerpt is there to make the shape of the change legible.

Reference digest
sha256:82c134be
Alternate digest
sha256:6e90d4fb
Commit
commit:6e90d4fa18
Test suites touched
1
Before
store.set("mastery", map);
After
store.set(`mastery:${seatId}`, map);

Who this applies to

2 relatives are eligible and 0 would need manual review, at a parent compatibility of 0.48. Eligibility is not adoption: every one of them decides for itself.

Adopted · 2

Declined · 0

None.

Offered, undecided · 0

None.

Carries the gene, not offered · 6

Provenance

Claims bound to immutable artifacts. An attestation is not a promise that the change is good — it is a signed statement about how it was produced, read here as SLSA, in-toto, CycloneDX pedigree and W3C PROV triples.

Signatures are not re-checked in this browser. Verified means the seed data says the signature checked at ingest.

Not attested

inferred from attestations
  1. None — current claim
  2. L1 — not claimed
  3. L2 — not claimed

No SLSA provenance is on record. Inventory documents (CycloneDX, SPDX) describe what is in the tree; they do not describe how it was built.

Next rung: A slsa-provenance or github-artifact-attestation attestation, verified at ingest, is the first rung.

No SLSA provenance on this record.

Decision

A decision is itself a record: attributable, reasoned and signed. Choose one to see what would be written on behalf of KEYLIT.

This record describes a proposed change to a capability, not a merge. Adoption is per-genome and reversible, the fitness figures come from the seeded sandbox runs above rather than from a live measurement, and no number on this page is an aggregate quality score.