tegwick
4580e838cc
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ed7-828d-7ca0-a8d4-0c3e5a0c4102
38 lines
2.4 KiB
Markdown
38 lines
2.4 KiB
Markdown
# Private State Hub inbox snapshot pilot — 2026-09-05
|
|
|
|
T08 receiving-readiness proof is complete. Hub Core exposes the authenticated,
|
|
GET-only `/ports/projections/statehub-inbox` for the literal `state-hub` inbox.
|
|
It is private, default-disabled in the chart, and enabled in the current private
|
|
production package. State Hub remains the writer; no production reader switched.
|
|
|
|
A consistent source transaction captured 20 historical rows (including archived
|
|
rows and thread closure) at 08:38:37.982640 UTC. Import preserved identities,
|
|
timestamps and flags; validation, apply, identical replay/no-op and target hash
|
|
all agree. The visible inbox contains 19 rows. Six read cases match ordered IDs
|
|
and normalized whole-record hashes, covering unread/sender filters and limits.
|
|
The live source inbox also matched the frozen oracle at verification time.
|
|
Bodies and credentials are excluded from this evidence.
|
|
|
|
Missing/bad authentication returns 401; POST returns 405. Scoped NetworkPolicy
|
|
admission now permits State Hub API pods to reach the authenticated boundary.
|
|
The prior prefix-only probe overlooked existing `/ports/messaging/messages`,
|
|
`/ports/events/progress` and named projection ports. Those native envelopes do
|
|
not by themselves establish State Hub history/read/archive compatibility.
|
|
|
|
Image source is `hub-core@6fb5ce2`; package enablement is
|
|
`rapp-core-hub@6972db5`. Exact digest and content hashes are in the adjacent JSON.
|
|
Helm revision 25 installed the image with the pilot disabled; revision 26 enabled
|
|
it after import. Rollback to configuration 25 produced revision 27, readiness
|
|
200 and pilot 404. Roll-forward to revision 28 passed the same parity cases and
|
|
`make verify-live`. No State Hub image or writer configuration changed.
|
|
|
|
Validation: 116 owner tests, 11 packaging tests, Helm lint and server dry-run
|
|
passed. Family validation passed 14 declarations with zero errors and one
|
|
pre-existing reef-railiance warning. The rmgr wrapper lacked jsonschema; the
|
|
same family validator succeeded with the State Hub virtualenv interpreter.
|
|
|
|
Residual **HUB-WP-0011**, tracked by **STATE-WP-0079-T09**, owns ongoing monotonic
|
|
freshness/staleness, caller-specific credentials, canonical/alias scope and a
|
|
reviewed production reader switch. The operator-authenticated frozen pilot must
|
|
not be presented as a fresh inbox. B2/B3 migration and message-writer cutover
|
|
remain open; this proof does not retire those families.
|