Harden SBOM retries and align hub evidence
Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028de-e2c8-7732-8521-46a7fc5db82f
This commit is contained in:
parent
0f573c4378
commit
3b3e1a1ff0
17 changed files with 941 additions and 140 deletions
|
|
@ -29,6 +29,9 @@ data:
|
|||
CUSTODIAN_REPO_ROOT: /var/custodian
|
||||
ACTIVITY_CORE_ROOT: /etc/activity-core
|
||||
OPS_INVENTORY_PATH: /etc/activity-core/ops/service-inventory.yml
|
||||
# Canonical hub-core runtime port; the Service name remains core-hub-api
|
||||
# during the CORE-WP-0010 stabilization/rollback window.
|
||||
HUB_CORE_BASE_URL: http://core-hub-api.core-hub.svc.cluster.local:8010
|
||||
INTER_HUB_URL: ""
|
||||
OPS_HUB_WIDGET_MAPPING: ""
|
||||
PROMETHEUS_BIND_ADDR: 0.0.0.0:9090
|
||||
|
|
@ -68,8 +71,10 @@ data:
|
|||
|
||||
# Daily SBOM Catch-up
|
||||
|
||||
Ranked, bounded SBOM catch-up. Each fire processes at most three
|
||||
repositories through sbom-nexus and deliberately contains no task rule.
|
||||
Ranked, bounded SBOM catch-up. Each fire records one read-only selection,
|
||||
then processes that fixed set of at most three repositories in a dedicated
|
||||
heartbeat-enabled activity. Ambiguous writes fail visibly; stable operation
|
||||
identity is sent to sbom-nexus. This definition contains no task rule.
|
||||
|
||||
```instruction
|
||||
id: daily-sbom-catchup-report
|
||||
|
|
@ -646,9 +651,8 @@ data:
|
|||
- https
|
||||
allow_network: true
|
||||
evidence_sinks:
|
||||
- type: state-hub-progress
|
||||
- type: hub-core-interaction-event
|
||||
event_type: ops_inventory_probe
|
||||
author: activity-core
|
||||
bind_to: context.ops_inventory_probe
|
||||
---
|
||||
|
||||
|
|
@ -656,7 +660,9 @@ data:
|
|||
|
||||
Disabled Railiance projection of the Custodian-owned definition in
|
||||
`/home/worsch/the-custodian/activity-definitions/ops-service-inventory-probes.md`.
|
||||
Keep disabled until ops-hub Inter-Hub evidence intake is active.
|
||||
Keep disabled until the operator selects the desired probe cadence. Evidence
|
||||
uses hub-core `port.events.interaction`; no widget mapping or runtime secret
|
||||
is required.
|
||||
fi-daily-research-brief.md: |
|
||||
---
|
||||
id: fi-daily-research-brief
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue