Record verified historical backup custody repair and operator handoff
Some checks failed
Use-case regression gate / usecase-regressions (push) Failing after 6m44s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a18e2d-f513-7742-b8e7-12af0b744ff3
This commit is contained in:
tegwick 2026-10-31 17:43:38 +01:00
parent e75d3b0f6a
commit b800daedbc
6 changed files with 416 additions and 21 deletions

View file

@ -0,0 +1,280 @@
{
"schema": "coulomb.completed-evidence-custody-independent-return.v1",
"verified_at": "2026-10-31T16:37:46.139987+00:00",
"proposal_digest": "sha256:fa2763d1dcbe92fe638a29c9a7a7d51c03d30849c4232f2d43f81ef705bae611",
"receipt_sha256": "b79b26b1572faff0e2f2257e39e438bc065a4d2c71f92d879749e0e8b4b03493",
"receipt": {
"bytes_modified": false,
"capture_executed": false,
"changes": [
{
"after": {
"bytes": 4096,
"device": 2049,
"gid": 0,
"hash_kind": "directory-entry-names",
"inode": 543834,
"kind": "directory",
"mode": "0o700",
"mtime_ns": 1793430825511133103,
"nlink": 4,
"relative_path": "releases",
"sha256": "3190439b978096a16c28aa0dd6b372735594808217b59a01dadbbe744d4110c8",
"uid": 0
},
"before": {
"bytes": 4096,
"device": 2049,
"gid": 0,
"hash_kind": "directory-entry-names",
"inode": 543834,
"kind": "directory",
"mode": "0o755",
"mtime_ns": 1793430825511133103,
"nlink": 4,
"relative_path": "releases",
"sha256": "3190439b978096a16c28aa0dd6b372735594808217b59a01dadbbe744d4110c8",
"uid": 0
},
"path": "releases"
},
{
"after": {
"bytes": 4096,
"device": 2049,
"gid": 0,
"hash_kind": "directory-entry-names",
"inode": 549330,
"kind": "directory",
"mode": "0o700",
"mtime_ns": 1793430825511133103,
"nlink": 3,
"relative_path": "releases/9f1daf6c5fb56b2b4fc9817f28f5ad090c884b0295f7d6f4469e42d48fa8d59f/capsule/charts",
"sha256": "6b8295661773cb5820c305091679383b09fb0d7dcdde4412eeae48bfabab28b5",
"uid": 0
},
"before": {
"bytes": 4096,
"device": 2049,
"gid": 0,
"hash_kind": "directory-entry-names",
"inode": 549330,
"kind": "directory",
"mode": "0o755",
"mtime_ns": 1793430825511133103,
"nlink": 3,
"relative_path": "releases/9f1daf6c5fb56b2b4fc9817f28f5ad090c884b0295f7d6f4469e42d48fa8d59f/capsule/charts",
"sha256": "6b8295661773cb5820c305091679383b09fb0d7dcdde4412eeae48bfabab28b5",
"uid": 0
},
"path": "releases/9f1daf6c5fb56b2b4fc9817f28f5ad090c884b0295f7d6f4469e42d48fa8d59f/capsule/charts"
},
{
"after": {
"bytes": 4096,
"device": 2049,
"gid": 0,
"hash_kind": "directory-entry-names",
"inode": 549341,
"kind": "directory",
"mode": "0o700",
"mtime_ns": 1793430825512133101,
"nlink": 3,
"relative_path": "releases/9f1daf6c5fb56b2b4fc9817f28f5ad090c884b0295f7d6f4469e42d48fa8d59f/capsule/release",
"sha256": "25a35515bc386a0c0a1a91b5fa3c966fffad64e2ce1d8bde35959bc164b11d79",
"uid": 0
},
"before": {
"bytes": 4096,
"device": 2049,
"gid": 0,
"hash_kind": "directory-entry-names",
"inode": 549341,
"kind": "directory",
"mode": "0o755",
"mtime_ns": 1793430825512133101,
"nlink": 3,
"relative_path": "releases/9f1daf6c5fb56b2b4fc9817f28f5ad090c884b0295f7d6f4469e42d48fa8d59f/capsule/release",
"sha256": "25a35515bc386a0c0a1a91b5fa3c966fffad64e2ce1d8bde35959bc164b11d79",
"uid": 0
},
"path": "releases/9f1daf6c5fb56b2b4fc9817f28f5ad090c884b0295f7d6f4469e42d48fa8d59f/capsule/release"
},
{
"after": {
"bytes": 4096,
"device": 2049,
"gid": 0,
"hash_kind": "directory-entry-names",
"inode": 549219,
"kind": "directory",
"mode": "0o700",
"mtime_ns": 1793406468579820277,
"nlink": 3,
"relative_path": "releases/5fd7ccd8f68057346367d81efb82b48280a16dd31d87683a5bd83e60e3d1837e/capsule/charts",
"sha256": "6b8295661773cb5820c305091679383b09fb0d7dcdde4412eeae48bfabab28b5",
"uid": 0
},
"before": {
"bytes": 4096,
"device": 2049,
"gid": 0,
"hash_kind": "directory-entry-names",
"inode": 549219,
"kind": "directory",
"mode": "0o755",
"mtime_ns": 1793406468579820277,
"nlink": 3,
"relative_path": "releases/5fd7ccd8f68057346367d81efb82b48280a16dd31d87683a5bd83e60e3d1837e/capsule/charts",
"sha256": "6b8295661773cb5820c305091679383b09fb0d7dcdde4412eeae48bfabab28b5",
"uid": 0
},
"path": "releases/5fd7ccd8f68057346367d81efb82b48280a16dd31d87683a5bd83e60e3d1837e/capsule/charts"
},
{
"after": {
"bytes": 4096,
"device": 2049,
"gid": 0,
"hash_kind": "directory-entry-names",
"inode": 549263,
"kind": "directory",
"mode": "0o700",
"mtime_ns": 1793412565567095985,
"nlink": 2,
"relative_path": "date-operations/47829c7ac2e6fd2c81fde1c914aec7c6e433098fa66985db6cfb9b34069942dc/private",
"sha256": "384eaf76c1a05ea25236c7a0d7bee390638b68fc89186604def37028364992fb",
"uid": 0
},
"before": {
"bytes": 4096,
"device": 2049,
"gid": 10001,
"hash_kind": "directory-entry-names",
"inode": 549263,
"kind": "directory",
"mode": "0o700",
"mtime_ns": 1793412565567095985,
"nlink": 2,
"relative_path": "date-operations/47829c7ac2e6fd2c81fde1c914aec7c6e433098fa66985db6cfb9b34069942dc/private",
"sha256": "384eaf76c1a05ea25236c7a0d7bee390638b68fc89186604def37028364992fb",
"uid": 10001
},
"path": "date-operations/47829c7ac2e6fd2c81fde1c914aec7c6e433098fa66985db6cfb9b34069942dc/private"
},
{
"after": {
"bytes": 455,
"device": 2049,
"gid": 0,
"hash_kind": "file-bytes",
"inode": 549311,
"kind": "regular",
"mode": "0o600",
"mtime_ns": 1793412565564096058,
"nlink": 1,
"relative_path": "date-operations/47829c7ac2e6fd2c81fde1c914aec7c6e433098fa66985db6cfb9b34069942dc/private/result.json",
"sha256": "859e5a80442ad77b5eff61b68e5062a167d51f5db1b6c2d1ee064db977beb022",
"uid": 0
},
"before": {
"bytes": 455,
"device": 2049,
"gid": 10001,
"hash_kind": "file-bytes",
"inode": 549311,
"kind": "regular",
"mode": "0o600",
"mtime_ns": 1793412565564096058,
"nlink": 1,
"relative_path": "date-operations/47829c7ac2e6fd2c81fde1c914aec7c6e433098fa66985db6cfb9b34069942dc/private/result.json",
"sha256": "859e5a80442ad77b5eff61b68e5062a167d51f5db1b6c2d1ee064db977beb022",
"uid": 10001
},
"path": "date-operations/47829c7ac2e6fd2c81fde1c914aec7c6e433098fa66985db6cfb9b34069942dc/private/result.json"
},
{
"after": {
"bytes": 12930,
"device": 2049,
"gid": 0,
"hash_kind": "file-bytes",
"inode": 549315,
"kind": "regular",
"mode": "0o600",
"mtime_ns": 1793412565062108322,
"nlink": 1,
"relative_path": "date-operations/47829c7ac2e6fd2c81fde1c914aec7c6e433098fa66985db6cfb9b34069942dc/private/journal.json",
"sha256": "fef62ad9317066d5d82eccbea0317eceb2f883e07f50935104e47113855fe0dd",
"uid": 0
},
"before": {
"bytes": 12930,
"device": 2049,
"gid": 10001,
"hash_kind": "file-bytes",
"inode": 549315,
"kind": "regular",
"mode": "0o600",
"mtime_ns": 1793412565062108322,
"nlink": 1,
"relative_path": "date-operations/47829c7ac2e6fd2c81fde1c914aec7c6e433098fa66985db6cfb9b34069942dc/private/journal.json",
"sha256": "fef62ad9317066d5d82eccbea0317eceb2f883e07f50935104e47113855fe0dd",
"uid": 10001
},
"path": "date-operations/47829c7ac2e6fd2c81fde1c914aec7c6e433098fa66985db6cfb9b34069942dc/private/journal.json"
},
{
"after": {
"bytes": 0,
"device": 2049,
"gid": 0,
"hash_kind": "file-bytes",
"inode": 549310,
"kind": "regular",
"mode": "0o600",
"mtime_ns": 1793412563167160722,
"nlink": 1,
"relative_path": "date-operations/47829c7ac2e6fd2c81fde1c914aec7c6e433098fa66985db6cfb9b34069942dc/private/execute.lock",
"sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
"uid": 0
},
"before": {
"bytes": 0,
"device": 2049,
"gid": 10001,
"hash_kind": "file-bytes",
"inode": 549310,
"kind": "regular",
"mode": "0o600",
"mtime_ns": 1793412563167160722,
"nlink": 1,
"relative_path": "date-operations/47829c7ac2e6fd2c81fde1c914aec7c6e433098fa66985db6cfb9b34069942dc/private/execute.lock",
"sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
"uid": 10001
},
"path": "date-operations/47829c7ac2e6fd2c81fde1c914aec7c6e433098fa66985db6cfb9b34069942dc/private/execute.lock"
}
],
"data_deleted": false,
"paths_moved": false,
"postflight": {
"historical_operations_still_terminal": true,
"state_bytes": 11259904,
"whole_state_custody_guard_passed": true
},
"proposal_digest": "sha256:fa2763d1dcbe92fe638a29c9a7a7d51c03d30849c4232f2d43f81ef705bae611",
"schema": "coulomb.completed-evidence-custody.v1",
"started_at": "2026-10-31T16:36:38.149305+00:00",
"status": "completed_evidence_private_root_custody_verified",
"timers_activated": false,
"updated_at": "2026-10-31T16:36:38.939513+00:00",
"verified_entries": 8
},
"native_entries_verified": 8,
"all_historical_hashes_inodes_paths_mtimes_preserved": true,
"whole_state_custody_guard_passed": true,
"state_bytes": 11259904,
"verification_read_only": true,
"verifier_source_sha256": "27fb56bb621ab9141f6b7ae205790e8a7eeb1618e2628940b3b6bc5525b4393d"
}

View file

@ -1,11 +1,19 @@
# Completed backup evidence custody repair
This is the exact proposed repair for the eight historical metadata exceptions
recorded in CSOC-WP-0012-T04. Native preflight passes. **Nothing has been changed.**
recorded in CSOC-WP-0012-T04. **Founder execution and independent postflight are
complete, under T15. Do not rerun the seal command.**
Proposal:
`sha256:fa2763d1dcbe92fe638a29c9a7a7d51c03d30849c4232f2d43f81ef705bae611`.
State Hub decision `3ec2f98e-9db3-47d9-bc1a-0387f980b81c` is resolved from the
founder's actual execution at16:36:38Z. Independent read-only verification at
16:37:46Z confirms all eight intended deltas and unchanged hashes, paths, inodes
and mtimes. The whole-state custody guard passes at11,259,904bytes. Evidence:
`backup-completed-evidence-custody-return-2026-10-31.json`.
`operator-handoff-check-2026-10-31.json` retains the earlier pre-execution check.
## Exact change
Within `/var/lib/coulomb-social-backup/`, change:
@ -33,9 +41,9 @@ The strict backup capacity guard is unchanged. Successful execution also runs it
existing state-usage/custody check over the entire state tree. This is neither a
blanket chmod/chown nor an exception that omits historical data from accounting.
## Founder terminal command
## Historical founder terminal command — completed
Run this from the workstation after reviewing the scope above:
Retained for provenance; do not run again:
```bash
python3 /home/worsch/coulomb-social/scripts/seal-backup-evidence.py \
@ -48,9 +56,9 @@ At the prompt, enter:
SEAL sha256:fa2763d1dcbe92fe638a29c9a7a7d51c03d30849c4232f2d43f81ef705bae611
```
Expected status: `completed_evidence_private_root_custody_verified`, eight entries
verified and `postflight.whole_state_custody_guard_passed: true`. Paste the result
back for independent readback. The private durable receipt is:
Recorded status: `completed_evidence_private_root_custody_verified`, eight entries
verified and `postflight.whole_state_custody_guard_passed: true`. Independent
readback is complete. The private durable receipt is:
`/var/lib/coulomb-social-backup-custody/fa2763d1dcbe92fe638a29c9a7a7d51c03d30849c4232f2d43f81ef705bae611/receipt.json`.
@ -106,12 +114,12 @@ Nineteen dedicated cases exercise real metadata/lock IO, preserved bytes/paths,
explicit/partial rollback, interference refusal, source/digest boundaries,
nonterminal refusal, and native receipt/process/helper/mount/cluster/timer guards.
This resolves only the current custody mismatch after attended success. T04 still
The verified attended execution resolves the historical custody mismatch. T04 still
owns retention/capacity admission and historical-copy disposition. Preventing
future release/date producers from reintroducing these metadata mismatches is also
live T04 work before recurring service acceptance: nested release directory
creation currently uses default intermediate modes, and date helper journals
retain the execution UID after completion. Do not silently change frozen capsules.
required before recurring service acceptance. That source correction is now
completed under T13/RAPPS-WP-0015-T06; it does not repair the historical entries
listed here or change frozen capsules.
T07 still needs the existing route execution; T08 then needs inactive installation
and independent readback. No native backup-operation or migration acceptance is
inferred from this repair.

View file

@ -3,7 +3,9 @@
The final wrapper is prepared for CSOC-WP-0012-T08. It installs the previously
sealed22-member archive into its exact19 target paths, using the existing
transaction library. It neither captures data nor starts/enables a service or
timer. Current native preflight **refuses**; do not execute this packet yet.
timer. The earlier custody refusal was resolved by verified T15 execution at
16:36:38Z. T07's route return and a fresh installer preflight remain required;
do not execute this packet yet.
Proposal:
`sha256:8f442bf0ebed8bbf3b7f227b52081df52613f3f5f6874c4a59511cfc2ba06d42`.
@ -105,7 +107,7 @@ corrected. The sender preparer's embedded remote Python AST is unchanged, and
the send-free return-mail rehearsal passed again. Historical evidence keeps its
original source hashes; the new validation binds the current formatted sources.
T08 remains progress until actual installation and independent inactive-state
T08 remains wait until actual installation and independent inactive-state
readback. T09 still needs native service/failure/retry/stale/producer-death proof;
T10 still needs activation and observation after its existing prerequisites.
No full service acceptance, mail delivery or migration verdict follows from

View file

@ -0,0 +1,55 @@
{
"schema": "coulomb.operator-handoff-check.v1",
"recorded_at": "2026-10-31T16:35:39.718467+00:00",
"custody_preflight": {
"status": "completed_evidence_seal_preflight_verified",
"proposal_digest": "sha256:fa2763d1dcbe92fe638a29c9a7a7d51c03d30849c4232f2d43f81ef705bae611",
"entries": 8,
"modified": false,
"historical_operations_terminal": true
},
"route_preflight": {
"schema": "rapp-telemetry.backup-route-execution.v1",
"execution_digest": "sha256:4d8481061dc9ce6835169defc96887945052332a0db8d4234ae84032d63cc328",
"proposal_digest": "sha256:4bcad54f7b8e1e77b94112e452cbb58eaf8e882dc10305129c5f9ca69f014a66",
"status": "preflight_verified",
"timers_activated": false,
"notification_sent_by_helper": false,
"production_data_restored": false
},
"native_receipts_present": {
"custody": false,
"route": false,
"inactive_installation": false
},
"owner_tasks": {
"RPF-WP-0068-T03": "wait",
"RPF-WP-0068-T04": "todo",
"NK-reset-role-transition": "wait",
"CSOC-WP-0012-T07": "wait",
"CSOC-WP-0012-T08": "wait"
},
"decision_queue": [
{
"id": "3ec2f98e-9db3-47d9-bc1a-0387f980b81c",
"title": "Seal eight completed backup-evidence entries (fa2763d1)",
"status": "escalated",
"decision_type": "pending",
"decided_by": null,
"escalation_note": "Auto-escalated per constitution \u00a74: this pending decision touches financial or legal territory and requires explicit human approval before action."
},
{
"id": "5fa7234f-2a41-4eed-b4fc-9384f493572b",
"title": "Deploy recurring Coulomb backup alert route (4d848106)",
"status": "escalated",
"decision_type": "pending",
"decided_by": null,
"escalation_note": "Auto-escalated per constitution \u00a74: this pending decision touches financial or legal territory and requires explicit human approval before action."
}
],
"new_approval_recorded": false,
"operator_execution_performed": false,
"message_sent": false,
"timers_activated": false,
"existing_destinations_and_schedule_preserved": true
}