From 97d935eb08099082e65db2932021c1e4716b0e67 Mon Sep 17 00:00:00 2001 From: tegwick Date: Sat, 31 Oct 2026 03:23:26 +0100 Subject: [PATCH] Accept native original-date correction and verify productive source-date manifest Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a18e2d-f513-7742-b8e7-12af0b744ff3 --- ...cohort-date-manifest-proof-2026-10-31.json | 23 +++++++ .../backup-capacity-review-2026-10-30.md | 12 ++-- ...rror-worker-operating-review-2026-10-30.md | 7 +- ...ate-independent-postflight-2026-10-31.json | 50 +++++++++++++++ .../source-date-receipt-2026-10-31.json | 64 +++++++++++++++++++ .../source-date-release-review-2026-10-31.md | 41 ++++++++++-- ...0012-durable-recovery-service-readiness.md | 8 +++ ...-WP-0014-cohort-transfer-bubble-offramp.md | 22 ++++++- 8 files changed, 211 insertions(+), 16 deletions(-) create mode 100644 docs/release/accepted-cohort-date-manifest-proof-2026-10-31.json create mode 100644 docs/release/source-date-independent-postflight-2026-10-31.json create mode 100644 docs/release/source-date-receipt-2026-10-31.json diff --git a/docs/release/accepted-cohort-date-manifest-proof-2026-10-31.json b/docs/release/accepted-cohort-date-manifest-proof-2026-10-31.json new file mode 100644 index 0000000..5f5127b --- /dev/null +++ b/docs/release/accepted-cohort-date-manifest-proof-2026-10-31.json @@ -0,0 +1,23 @@ +{ + "schema": "coulomb.productive-source-date-manifest-proof.v1", + "status": "accepted_cohort_original_dates_verified", + "observed_at": "2026-10-31T02:18:53.693583+00:00", + "proposal_digest": "sha256:47829c7ac2e6fd2c81fde1c914aec7c6e433098fa66985db6cfb9b34069942dc", + "native_application_read_only": true, + "source_capture_hashes": { + "spaces": "ae20b0cfd1705f486c0b67ef48ac84b396f953cbcef09f9a8f07d07a66f1bf71", + "articles": "b00f84adb5de60c724b004e3f05d64f44c8f4ca4bd0f5fef826c4e323841e87a" + }, + "plan_sha256": "d33611924069a5c1cfd24af9574af9a1330c9a69acb7d05ed69d89d9fed5b704", + "private_manifest_sha256": "69cf6f061770ddf1bd0a73f6013362879eafdd26361af0a45dbe7bd99b67c1d3", + "private_manifest_bytes": 14485, + "source_article_pages_verified": 36, + "unique_source_article_ids_verified": 36, + "local_pages_preserved": 3, + "index_date_verified": true, + "sql_space_date_verified": true, + "all_non_index_page_bytes_preserved": true, + "production_writes": false, + "private_identifiers_or_dates_printed": false, + "remaining_source_exceptions_resolved": false +} diff --git a/docs/release/backup-capacity-review-2026-10-30.md b/docs/release/backup-capacity-review-2026-10-30.md index 054a750..f8146c4 100644 --- a/docs/release/backup-capacity-review-2026-10-30.md +++ b/docs/release/backup-capacity-review-2026-10-30.md @@ -64,16 +64,16 @@ read back unchanged: paired worker43e119ac and snapshot helperf9860429. ## Delivery order and remaining return -October31 update: storage release5fd7ccd8 is founder-executed and verified. The -pending native date capsule47829c7a now pins installed paired worker43e119ac and -refreshed snapshot helper4ff81b79. Keep those pins stable until the date attempt -is settled, or explicitly rebase/review that proposal before operating delivery. +October31 update: storage release5fd7ccd8 and date correction47829c7a are both +founder-executed and independently verified. Installed paired worker43e119ac and +refreshed snapshot helper4ff81b79 are unchanged. The date hold is cleared; +operating delivery still needs its separate exact review and capacity admission. The candidate mirror worker's local-state native provider/readback proof is in mirror-worker-native-2026-10-31.json; it does not admit or install this node profile. The historical storage proposal3389 expected installed paired-worker hash43e119ac -and was superseded by the verified release5fd7ccd8. The date hold above is the -current delivery boundary. This capacity candidate has not replaced installed +and was superseded by the verified release5fd7ccd8. Separate operating review is +the current delivery boundary. This capacity candidate has not replaced installed workers or activated timers. The later operating delivery must include backup_capacity.py beside both writers, diff --git a/docs/release/mirror-worker-operating-review-2026-10-30.md b/docs/release/mirror-worker-operating-review-2026-10-30.md index f0c9d29..41aa46b 100644 --- a/docs/release/mirror-worker-operating-review-2026-10-30.md +++ b/docs/release/mirror-worker-operating-review-2026-10-30.md @@ -125,6 +125,7 @@ open. The guard is not a filesystem quota or a provider-expiry executor. Existing custody/schedule approvals remain valid. This preparation changes no grant, credential, provider object, installed helper, active timer or production -application. Storage release5fd7ccd8 is now verified. The pending separate date -capsule47829c7a pins the current installed helpers, so defer operating helper -replacement until that attempt is settled, or explicitly rebase/review its capsule. +application. Storage release5fd7ccd8 and separate date correction47829c7a are now +verified. That date hold is cleared. Exact operating delivery remains separately +reviewed against the current helper pins, with owner capacity/retention and +received-alert returns still required before recurring activation. diff --git a/docs/release/source-date-independent-postflight-2026-10-31.json b/docs/release/source-date-independent-postflight-2026-10-31.json new file mode 100644 index 0000000..2eb5289 --- /dev/null +++ b/docs/release/source-date-independent-postflight-2026-10-31.json @@ -0,0 +1,50 @@ +{ + "schema": "coulomb.native-date-independent-postflight.v1", + "observed_at": "2026-10-31T02:15:48.608526+00:00", + "status": "original_date_correction_verified", + "proposal_digest": "sha256:47829c7ac2e6fd2c81fde1c914aec7c6e433098fa66985db6cfb9b34069942dc", + "phase": "completed", + "correction_status": "completed", + "application_resumed": true, + "deployment_uid_matches": true, + "helm_revision": 18, + "image": "forgejo.coulomb.social/coulomb/coulomb-social@sha256:512819463a1902b43a615beee14be7bf97e6a05e016385082b9380692ad1a8cd", + "sole_ready_pvc_writer": true, + "helper_absent": true, + "helper_uid": "60c3b803-69d3-45da-9b09-19a6c0b274da", + "current_complete_store_matches_exact_expected": true, + "fingerprint": { + "tables_sha256": "f18e8acc3b2cba1443f566bb5b39f3063085932f7f13b01878104ffe22671f30", + "files_sha256": "ed535246f4e8f46fcd7ce01f936127996aff873c6936b297f7272194b594aeda", + "tables": 13, + "rows": 114, + "files": 86 + }, + "durable_journal_completed_and_bound": true, + "installed_helper_pins_unchanged": true, + "backup_timers_inactive": true, + "native_read_only_verification": true, + "private_identifiers_or_index_bytes_printed": false, + "selected_sql_date_matches_source": true, + "index_date_matches_source": true, + "index_other_bytes_preserved": true, + "index_sha256": "742efb0bd2869e4446771d00195e8751aab49d8ba15e878e564016bd007d9967", + "view_access_postflight": { + "actual_owner_pages_rendered": 40, + "unsaved_outsider_page_denials": 40, + "production_identity_or_grant_created": false, + "global_slug_constraint": true, + "tenant_slug_constraint": true, + "migration_0003_applied": true + }, + "public_http": [ + { + "path": "/healthz", + "status": 200 + }, + { + "path": "/", + "status": 200 + } + ] +} diff --git a/docs/release/source-date-receipt-2026-10-31.json b/docs/release/source-date-receipt-2026-10-31.json new file mode 100644 index 0000000..d5f6753 --- /dev/null +++ b/docs/release/source-date-receipt-2026-10-31.json @@ -0,0 +1,64 @@ +{ + "application_resumed": true, + "backup": { + "age_recipient": "age1qm30jk8q0cezey652dk2dhcr3d9vs528v6lg8mavl6d4q3e3vgnqmrmyy3", + "application": "coulomb-social", + "application_restore_verified": false, + "captured_at": "2026-10-31T02:07:21Z", + "ciphertext_bytes": 2181848, + "ciphertext_sha256": "ac9fe6711c967a1c79caeca961c24ebf0ce795fb98e018852da00a1795341709", + "completed_at": "2026-10-31T02:08:22.801658+00:00", + "content_sha256": "631e2ebc3e7b114f83945d889b133fef2491030509dfb11024a24c485fe80ec8", + "database_sha256": "6968b759e476b65c1911107315fec269d11dd489af995d6a9d4b4da8b18b25f2", + "destination": "s3://railiance-platform-pg-backup/platform-pg/application-archives/coulomb-social/2026/10/31/20261031T020721Z-4aa7a5d4146abf20f0b23e66.tar.age", + "encrypted_bytes": 2181848, + "encrypted_sha256": "ac9fe6711c967a1c79caeca961c24ebf0ce795fb98e018852da00a1795341709", + "image": "forgejo.coulomb.social/coulomb/coulomb-social@sha256:512819463a1902b43a615beee14be7bf97e6a05e016385082b9380692ad1a8cd", + "immutable_create": true, + "local_archive": "20261031T020721Z-4aa7a5d4146abf20f0b23e66.tar.age", + "object_key": "platform-pg/application-archives/coulomb-social/2026/10/31/20261031T020721Z-4aa7a5d4146abf20f0b23e66.tar.age", + "pause_and_capture_seconds": 54.52, + "remote_retrieval_verified": true, + "schema": "platform.application-primary-archive.v1", + "status": "offsite_fetched_verified", + "version_id": "1793412500034233" + }, + "correction_status": "completed", + "expected_after": { + "files": 86, + "files_sha256": "ed535246f4e8f46fcd7ce01f936127996aff873c6936b297f7272194b594aeda", + "rows": 114, + "tables": 13, + "tables_sha256": "f18e8acc3b2cba1443f566bb5b39f3063085932f7f13b01878104ffe22671f30" + }, + "expected_final": { + "files": 86, + "files_sha256": "ed535246f4e8f46fcd7ce01f936127996aff873c6936b297f7272194b594aeda", + "rows": 114, + "tables": 13, + "tables_sha256": "f18e8acc3b2cba1443f566bb5b39f3063085932f7f13b01878104ffe22671f30" + }, + "helper_spec_sha256": "1bed907a1cf9fe4d84276502c84e0602c34852213f500ce45837b7e19843e3c5", + "helper_uid": "60c3b803-69d3-45da-9b09-19a6c0b274da", + "operation": { + "all_source_files_compared": 86, + "all_source_tables_compared": 13, + "backup_metadata_validated": true, + "backup_provider_readback_performed_here": false, + "external_writer_fence_verified_here": false, + "fingerprint": { + "files": 86, + "files_sha256": "ed535246f4e8f46fcd7ce01f936127996aff873c6936b297f7272194b594aeda", + "rows": 114, + "tables": 13, + "tables_sha256": "f18e8acc3b2cba1443f566bb5b39f3063085932f7f13b01878104ffe22671f30" + }, + "status": "completed", + "whole_store_postflight": true + }, + "phase": "completed", + "pid": 2951460, + "proposal_digest": "sha256:47829c7ac2e6fd2c81fde1c914aec7c6e433098fa66985db6cfb9b34069942dc", + "schema": "coulomb.supervised-date-attempt.v1", + "updated_at": "2026-10-31T02:10:42.645872+00:00" +} diff --git a/docs/release/source-date-release-review-2026-10-31.md b/docs/release/source-date-release-review-2026-10-31.md index 2281321..816a92b 100644 --- a/docs/release/source-date-release-review-2026-10-31.md +++ b/docs/release/source-date-release-review-2026-10-31.md @@ -1,8 +1,41 @@ # Accepted-cohort original-date correction — exact attended proposal -Prepared and native-read-only checked; not executed or admitted. Storage release -5fd7ccd8 completed at Helm revision18 and is independently verified. This is a -separate correction, under pending decision `5eec458c-0f43-483d-a13c-a9d739ea6b08`. +Founder-executed and independently verified on2026-10-31. Storage release5fd7ccd8 +remains at Helm revision18. This separate correction is accepted under resolved +decision `5eec458c-0f43-483d-a13c-a9d739ea6b08`. + +## Verified execution return — do not replay + +The durable root receipt completed at02:10:42Z with `phase: completed`, +`correction_status: completed` and `application_resumed: true`. Its fresh +pre-correction paired point is primary version1793412500034233, captured02:07:21Z +on the current image with immutable provider readback. The controller's completed +path establishes the native writer fence, exact helper admission/UID, whole-store +postflight, helper deletion and application resume. The helper's component-level +`backup_provider_readback_performed_here:false` and +`external_writer_fence_verified_here:false` correctly reserve those external checks +to the supervisor; they are not failed checks. + +Independent read-only native postflight checks the frozen root capsule/journal, +current revision18/image51281946, sole Ready PVC writer and absent helper UID. +All13tables/114rows/86files match the exact derived final fingerprint. The +selected SQL date and index date match the original source; removing exactly the +inserted metadata line reproduces every original index byte.40owner-page renders, +40unsaved-outsider denials and public health/landing checks pass. Installation +pins are unchanged and backup timers remain inactive. + +A separate productive per-source-ID manifest verifies36original article dates +and their exact page bytes, all3local pages, plus SQL/index dates, against the +same hash-bound retained source. The14,485byte private manifest is retained under +protected local recovery custody; its public proof contains only hashes/counts. +This closes the selected accepted-cohort correction and date-manifest return. +Remaining tree/source exceptions and transfer/user verdicts keep WP-0014-T04 open. + +Evidence: `source-date-receipt-2026-10-31.json`, +`source-date-independent-postflight-2026-10-31.json` and +`accepted-cohort-date-manifest-proof-2026-10-31.json`. Preparation artifacts below +remain historical and are not rewritten to imply prior admission. The founder +command below has completed and must not be replayed. Exact date proposal: `sha256:47829c7ac2e6fd2c81fde1c914aec7c6e433098fa66985db6cfb9b34069942dc`. @@ -88,7 +121,7 @@ Successful completion needs `phase: completed`, `correction_status: completed`, the resumed application and independent native postflight. A settled absent or rolled-back correction does not satisfy the original-date task. -## Founder terminal command +## Founder terminal command (completed; do not replay) From the workstation terminal where the storage release finished, run: diff --git a/workplans/CSOC-WP-0012-durable-recovery-service-readiness.md b/workplans/CSOC-WP-0012-durable-recovery-service-readiness.md index 11f1bcb..e852d24 100644 --- a/workplans/CSOC-WP-0012-durable-recovery-service-readiness.md +++ b/workplans/CSOC-WP-0012-durable-recovery-service-readiness.md @@ -324,6 +324,14 @@ Node service execution/received alerts and remaining operating/service-contract returns remain open. Defer installed helper replacement while pending date capsule47829c7a still pins the current installation. +2026-10-31 date-dependency return: founder correction47829c7a is independently +verified complete/resumed, with all13tables/114rows/86files matching its exact +derived result and current helper pins unchanged. Its installation hold is cleared. +Operating delivery/admission, received alerts, retention/capacity/disposition and +service-contract returns remain separate; no timer activation is inferred. The +new root date journal now exists and remains included in the already tracked +operator offboarding/expiry obligation. No journal or historical pair was deleted. + ## Completion Finish when every task above has its stated evidence and acceptance, or hand off any newly discovered residual to a live work record first. Cross-owner dependencies remain their existing canonical records. diff --git a/workplans/CSOC-WP-0014-cohort-transfer-bubble-offramp.md b/workplans/CSOC-WP-0014-cohort-transfer-bubble-offramp.md index 5c689cf..e1c5dff 100644 --- a/workplans/CSOC-WP-0014-cohort-transfer-bubble-offramp.md +++ b/workplans/CSOC-WP-0014-cohort-transfer-bubble-offramp.md @@ -22,6 +22,8 @@ Residual acceptance from CSOC-WP-0008, split at the user's request. Existing imp id: CSOC-WP-0014-T01 status: progress priority: high +needs_human: true +intervention_note: "Renew the locally expired Bubble browser session with scripts/capture-auth-state.sh, then return saved; remaining source references/bodies require authenticated continuation. Existing capture is terminal, not a running job." state_hub_task_id: "0002882d-f156-5a5d-b524-d04793f4684d" ``` @@ -114,9 +116,8 @@ until an explicit cohort/apex decision; Bubble retirement requires all retained id: CSOC-WP-0014-T04 status: progress priority: high -needs_human: true -decision_id: "5eec458c-0f43-483d-a13c-a9d739ea6b08" -intervention_note: "Storage release is verified. Native date capsule47829c7a and current-pair13table/86file normal/crash recovery rehearsals pass; founder command is in docs/release/source-date-release-review-2026-10-31.md. No date correction executed yet. Remaining source-date exceptions stay open independently." +needs_human: false +intervention_note: "Founder date correction47829c7a and accepted-cohort per-source-ID manifest are independently verified. Do not rerun the date command. Task remains open for remaining tree/source-date exceptions and productive verification, dependent on source continuation under T01." state_hub_task_id: "3018caa3-0f7b-5cc4-85e9-4dc4f41be9f7" ``` @@ -246,6 +247,21 @@ docs/release/source-date-release-review-2026-10-31.md. No date changes, new live capture, writer fence or live helper occurred during preparation. Further tree/ source-date exceptions and per-source productive verification remain in this task. +2026-10-31 native execution accepted: founder proposal47829c7a completed02:10:42Z +with correction_status completed and application resumed. Independent native +postflight validates the frozen capsule/journal, current exact13table/114row/86file +expected fingerprint, original selected SQL/index dates, every other original +index byte, absent helper and sole Ready writer.40owner-page/outsider checks and +public health pass. A private per-source-ID productive manifest verifies all36 +source article dates/bytes and preserves3local pages; public hash/count proof is +docs/release/accepted-cohort-date-manifest-proof-2026-10-31.json. Root receipt and +postflight are in docs/release/source-date-{receipt,independent-postflight}-2026-10-31.json. +Decision5eec458c-0f43-483d-a13c-a9d739ea6b08 is resolved from actual founder +execution. Accepted-cohort correction is complete; remaining tree/source-date +exceptions and their productive verification keep T04 progress. T01 needs renewed +Bubble access; no broad import, source exception resolution or transfer acceptance +is inferred. The old date command must not be replayed. + ## Completion Finish when every task above has its stated evidence and acceptance, or hand off any newly discovered residual to a live work record first. Cross-owner dependencies remain their existing canonical records.