Compare commits

...

2 commits

Author SHA1 Message Date
3e94cfd43a docs: record Binky OpenBao runtime repair
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a06bfe-2a55-7ed3-bacd-879977b099bf
2026-09-04 17:47:42 +02:00
2c7c8a6477 docs: close controlled SBOM source rollout
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a06bfe-2a55-7ed3-bacd-879977b099bf
2026-09-04 15:08:20 +02:00
3 changed files with 39 additions and 12 deletions

View file

@ -37,11 +37,12 @@
| workplan | ACTIVITY-WP-0031 | active | — | workplans/ACTIVITY-WP-0031-production-execution-reliability-cleanup.md |
| workplan | ACTIVITY-WP-0032 | active | — | workplans/ACTIVITY-WP-0032-glas-profile-execution-contract.md |
| workplan | ACTIVITY-WP-0033 | finished | — | workplans/ACTIVITY-WP-0033-sbom-catchup-retry-boundary.md |
| workplan | ACTIVITY-WP-0034 | active | — | workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md |
| workplan | ACTIVITY-WP-0034 | finished | — | workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md |
| workplan | ACTIVITY-WP-0035 | active | — | workplans/ACTIVITY-WP-0035-intent-boundary-guardrails.md |
| workplan | ACTIVITY-WP-0036 | active | — | workplans/ACTIVITY-WP-0036-queue-identity-and-lease-integrity.md |
| workplan | ADHOC-2026-06-01 | finished | — | workplans/ADHOC-2026-06-01.md |
| workplan | ADHOC-2026-08-20 | finished | — | workplans/ADHOC-2026-08-20.md |
| workplan | ACTIVITY-WP-0037 | active | — | workplans/ACTIVITY-WP-0037-repository-grant-close-reconciliation.md |
| workplan | ACTIVITY-WP-ADHOC-2026-06-01 | finished | — | workplans/ADHOC-2026-06-01.md |
| workplan | ACTIVITY-WP-ADHOC-2026-08-20 | finished | — | workplans/ADHOC-2026-08-20.md |
| workplan | ACTIVITY-WP-ADHOC-2026-08-23 | finished | — | workplans/ADHOC-2026-08-23.md |
| workplan | custodian-WP-0001 | done | — | workplans/custodian-WP-0001-temporal-backbone.md |
| workplan | custodian-WP-0002 | done | — | workplans/custodian-WP-0002-triggers-ops.md |
@ -208,7 +209,7 @@
| task | ACTIVITY-WP-0033-T02 | done | — | workplans/ACTIVITY-WP-0033-sbom-catchup-retry-boundary.md |
| task | ACTIVITY-WP-0033-T03 | done | — | workplans/ACTIVITY-WP-0033-sbom-catchup-retry-boundary.md |
| task | ACTIVITY-WP-0034-T01 | done | — | workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md |
| task | ACTIVITY-WP-0034-T02 | progress | — | workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md |
| task | ACTIVITY-WP-0034-T02 | done | — | workplans/ACTIVITY-WP-0034-sbom-controlled-source-reference.md |
| task | ACTIVITY-WP-0035-T01 | done | — | workplans/ACTIVITY-WP-0035-intent-boundary-guardrails.md |
| task | ACTIVITY-WP-0035-T02 | done | — | workplans/ACTIVITY-WP-0035-intent-boundary-guardrails.md |
| task | ACTIVITY-WP-0035-T03 | done | — | workplans/ACTIVITY-WP-0035-intent-boundary-guardrails.md |
@ -221,10 +222,14 @@
| task | ACTIVITY-WP-0036-T02 | done | — | workplans/ACTIVITY-WP-0036-queue-identity-and-lease-integrity.md |
| task | ACTIVITY-WP-0036-T03 | done | — | workplans/ACTIVITY-WP-0036-queue-identity-and-lease-integrity.md |
| task | ACTIVITY-WP-0036-T04 | progress | — | workplans/ACTIVITY-WP-0036-queue-identity-and-lease-integrity.md |
| task | ADHOC-2026-06-01-T01 | done | — | workplans/ADHOC-2026-06-01.md |
| task | ADHOC-2026-06-01-T02 | done | — | workplans/ADHOC-2026-06-01.md |
| task | ADHOC-2026-06-01-T03 | done | — | workplans/ADHOC-2026-06-01.md |
| task | ADHOC-2026-08-20-T01 | done | — | workplans/ADHOC-2026-08-20.md |
| task | ACTIVITY-WP-0037-T01 | done | — | workplans/ACTIVITY-WP-0037-repository-grant-close-reconciliation.md |
| task | ACTIVITY-WP-0037-T02 | done | — | workplans/ACTIVITY-WP-0037-repository-grant-close-reconciliation.md |
| task | ACTIVITY-WP-0037-T03 | done | — | workplans/ACTIVITY-WP-0037-repository-grant-close-reconciliation.md |
| task | ACTIVITY-WP-0037-T04 | wait | — | workplans/ACTIVITY-WP-0037-repository-grant-close-reconciliation.md |
| task | ACTIVITY-WP-ADHOC-2026-06-01-T01 | done | — | workplans/ADHOC-2026-06-01.md |
| task | ACTIVITY-WP-ADHOC-2026-06-01-T02 | done | — | workplans/ADHOC-2026-06-01.md |
| task | ACTIVITY-WP-ADHOC-2026-06-01-T03 | done | — | workplans/ADHOC-2026-06-01.md |
| task | ACTIVITY-WP-ADHOC-2026-08-20-T01 | done | — | workplans/ADHOC-2026-08-20.md |
| task | ACTIVITY-WP-ADHOC-2026-08-23-T01 | done | — | workplans/ADHOC-2026-08-23.md |
| task | T01 | done | — | workplans/custodian-WP-0001-temporal-backbone.md |
| task | T02 | done | — | workplans/custodian-WP-0001-temporal-backbone.md |

View file

@ -8,7 +8,7 @@ status: active
owner: codex
topic_slug: activity-core
created: "2026-08-20"
updated: "2026-08-21"
updated: "2026-09-04"
related:
- ACTIVITY-WP-0021
- ACTIVITY-WP-0022
@ -180,6 +180,17 @@ duplicate registrar IDs, and railiance-master for the unclaimed retention
closeout. The expired retention one-shot is disabled; its existing open ops run
remains operator-visible and cannot authorize destructive cleanup.
Progress 2026-09-04: the Binky mail lane was already provisioned; its runtime
discovery was broken. OpenBao was healthy, OpenBao v2.5.4 existed at
`/home/tegwick/.local/bin/bao`, and the mode-0600 AppRole files existed under
`~/.local/rein-aharness/approle-binky-mail`, but the rein claim-loop omitted
both locations. `rein-aharness` commit `aedfadd` now supplies the non-secret
OpenBao/AppRole defaults and includes `~/.local/bin` in `PATH`. The corrected
unit is live and healthy. A value-free smoke proved `read` on the exact Binky
IMAP path, `deny` on a sibling path, and presence of both required IMAP fields;
the rein suite passed 224 tests with one skip. T05 remains `wait` only for its
other named external metadata/retention handoffs.
## Acceptance
- [x] Weekly SBOM fan-out is disabled in source and production

View file

@ -4,11 +4,11 @@ type: workplan
title: "Freeze controlled SBOM source references across retries"
domain: infotech
repo: activity-core
status: active
status: finished
owner: codex
topic_slug: infotech
created: "2026-08-22"
updated: "2026-08-23"
updated: "2026-09-04"
quality_dor: DoR-Ok
quality_dor_at: "2026-08-22"
quality_dor_by: codex
@ -43,7 +43,7 @@ tests for normalization, POST payload, retry identity, and terminal reasons.
```task
id: ACTIVITY-WP-0034-T02
status: progress
status: done
priority: high
state_hub_task_id: "036de401-18de-5a94-8f0d-18d60b64c56a"
```
@ -77,3 +77,14 @@ An in-worker, read-only report probe against the live selection returned
references. The existing schedule was not manually fired. Verification before
deploy: 61 focused tests and 435 repository tests passed, with one live
integration test skipped.
Closed 2026-09-04 from natural schedule evidence. The first unassisted weekday
fire at 2026-08-24 07:15 UTC selected exactly three repositories, retained three
`forgejo-archive-v1` references with full revisions, updated `clay-borg`, and
recorded bounded `no-manifest` outcomes for `citation-work` and `config-atlas`.
State Hub progress `f62eaadd-d10c-4a21-8547-293569ed5637` and activity-core run
`4c4594ad-366b-5720-b3f9-44fb300fda70` carry the result. Subsequent weekday
runs continued exposing exactly three new oldest repositories per fire and
reported unavailable sources explicitly as `no-checkout`; `never_count`
therefore progressed from 91 after the controlled fire to 64 on 2026-09-04
without widening the schedule or substituting a target during a run.