From bcdb02323c36b9fc63f37e22e4f13ee0faf07faa Mon Sep 17 00:00:00 2001 From: tegwick Date: Sun, 27 Sep 2026 17:04:49 +0200 Subject: [PATCH] Record release transport and sampled health observer progress Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e241-8285-7a63-8c0c-51c9cb824dc3 --- docs/ActivityCoreLoop.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/docs/ActivityCoreLoop.md b/docs/ActivityCoreLoop.md index 6c03c6f..8e03789 100644 --- a/docs/ActivityCoreLoop.md +++ b/docs/ActivityCoreLoop.md @@ -113,3 +113,14 @@ It is not connected to production credentials or scheduling. Authenticated Git/ArgoCD transport, admitted identity, real receipt issuers/continuous observer and transport-level rollback proof remain required. This source-only change does not reset the production observation window. + + +The fixed Git/ArgoCD transport adapter and persistent health observer are now +implemented and tested with disposable real Git repositories and simulated +Kubernetes responses. Real Git rollback, lost-response recovery, concurrent-writer +refusal and wrong-cluster refusal pass. Health attestation requires a full 24 hours +of actual samples, no more than 90 seconds apart; gaps and clock regressions reset +or invalidate the interval. It cannot infer that history from the rollout timestamp. +Production credential admission, real invariant probes/signing issuers, Temporal +registration and authenticated Kubernetes failure tests remain open. See the +[broker implementation](../../activity-core/docs/release-broker.md) for that boundary.