Harden SBOM retries and align hub evidence
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Build and Publish Container Image / build-and-push (push) Successful in 21s

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a028de-e2c8-7732-8521-46a7fc5db82f
This commit is contained in:
tegwick 2026-08-22 22:51:13 +02:00
parent 0f573c4378
commit 3b3e1a1ff0
17 changed files with 941 additions and 140 deletions

View file

@ -29,6 +29,9 @@ data:
CUSTODIAN_REPO_ROOT: /var/custodian
ACTIVITY_CORE_ROOT: /etc/activity-core
OPS_INVENTORY_PATH: /etc/activity-core/ops/service-inventory.yml
# Canonical hub-core runtime port; the Service name remains core-hub-api
# during the CORE-WP-0010 stabilization/rollback window.
HUB_CORE_BASE_URL: http://core-hub-api.core-hub.svc.cluster.local:8010
INTER_HUB_URL: ""
OPS_HUB_WIDGET_MAPPING: ""
PROMETHEUS_BIND_ADDR: 0.0.0.0:9090
@ -68,8 +71,10 @@ data:
# Daily SBOM Catch-up
Ranked, bounded SBOM catch-up. Each fire processes at most three
repositories through sbom-nexus and deliberately contains no task rule.
Ranked, bounded SBOM catch-up. Each fire records one read-only selection,
then processes that fixed set of at most three repositories in a dedicated
heartbeat-enabled activity. Ambiguous writes fail visibly; stable operation
identity is sent to sbom-nexus. This definition contains no task rule.
```instruction
id: daily-sbom-catchup-report
@ -646,9 +651,8 @@ data:
- https
allow_network: true
evidence_sinks:
- type: state-hub-progress
- type: hub-core-interaction-event
event_type: ops_inventory_probe
author: activity-core
bind_to: context.ops_inventory_probe
---
@ -656,7 +660,9 @@ data:
Disabled Railiance projection of the Custodian-owned definition in
`/home/worsch/the-custodian/activity-definitions/ops-service-inventory-probes.md`.
Keep disabled until ops-hub Inter-Hub evidence intake is active.
Keep disabled until the operator selects the desired probe cadence. Evidence
uses hub-core `port.events.interaction`; no widget mapping or runtime secret
is required.
fi-daily-research-brief.md: |
---
id: fi-daily-research-brief