Pull request #97 · stacks/drone

Summary

Adds configured modeled cargo delivery to our owned vehicle runtime. Native cargo:mission <request> admits explicit load/CG, receiver, release height, alternate landing and declared power/reserve before allocation. Actual raw sensors, estimator, controls, authority, watchdog and parcel dynamics determine release, captured receiver custody and carrier completion.

configuration -> owned graph admission -> loaded quad route
  -> captured release/receipt -> return or explicit alternate
  -> actual terminal state, custody and neutral board report

Ten release/receipt-phase faults preserve uncertainty and actual host-loss behavior. Primary/backup links are scoped to one vehicle. README, API, roadmap, sidebar and the new cargo guide distinguish modeled delivery from the earlier load bench and pending physical/operational work. Refs #25; it remains open for distinct-vehicle fleet handover, electrical/measured endurance, durable reconciliation and physical/operational qualification.

Evidence

Before: configured mission and phase cases were rejected; qualifier overflow fixtures reached their 5 s guard. After: 167 focused tests passed with 6,711 assertions across 17 files; process/cleanup regressions passed 18 tests with 77 assertions across two files. Real stdout/stderr overflow and malformed UTF8 children are rejected and reaped.
Runtime/app/view types, native Buddy Pickier lint, roadmap/parity checks, docs and CLI build passed locally.
31 actual copied standalone cases passed outside the checkout, including four explicit configurations. All original 17 summaries remain byte-identical to the retained coordinator checkpoint. CI repeats the copied campaign with bounded concurrent capture.
Exact native docs build: 94 pages, 7,084 local links and 94 assets, no missing targets. Browser verified 320 px homepage/guide/load-bench layouts, mobile sidebar navigation, corrected copy and VELOCITY follow -> HOLD Target stale, with no console errors.
Independent Spec and Standards reviews passed on all 38 combined changed files. Exact-source release CI passed all five jobs: 2,076 native tests passed, 41 skipped, zero failed, 504,977 assertions across 234 files; 13 Python bridge tests and all 31 copied cargo cases also passed. Original workflow ZIP and the cargo artifact were each retained once; artifact report hashes, exits, custody outcomes and inhibited board outputs were verified. Full local suite was not launched below the host's 4 GB available-space floor.
Published to origin/main as Chris by normal fast-forward at f22ca67, with no coauthors. Post-main CI is running.

Merge Danger

Door: two-way. Application/runtime library and documentation changes; no migration or physical actuator endpoint.

Blast Radius: runtime. Shared loaded-quad, authority kill timing, mission alternates, scoped links and optional strict UTF8 host capture affect simulated/runtime and CLI behavior. Original no-load and cargo projections are retained. Physical control remains inhibited; receiver identity is not authenticated and energy is a declared ceiling, not measured endurance.