diff --git a/docs/evidence/2026-10-11-infd-purpose-actuator-owner-review/initial-synthetic-sidecar-probe.json b/docs/evidence/2026-10-11-infd-purpose-actuator-owner-review/initial-synthetic-sidecar-probe.json new file mode 100644 index 0000000..6d90092 --- /dev/null +++ b/docs/evidence/2026-10-11-infd-purpose-actuator-owner-review/initial-synthetic-sidecar-probe.json @@ -0,0 +1,7 @@ +{ + "synthetic_only": true, + "native_database_opened": false, + "schema": 5, + "wal_after_read_bytes": 0, + "shm_after_read_bytes": 32768 +} diff --git a/docs/evidence/2026-10-11-infd-purpose-actuator-owner-review/live-wal-semantic-probe.json b/docs/evidence/2026-10-11-infd-purpose-actuator-owner-review/live-wal-semantic-probe.json new file mode 100644 index 0000000..b9f5c78 --- /dev/null +++ b/docs/evidence/2026-10-11-infd-purpose-actuator-owner-review/live-wal-semantic-probe.json @@ -0,0 +1,8 @@ +{ + "synthetic_only": true, + "native_database_opened": false, + "committed_wal_bytes": 8272, + "wal_aware_count": 1, + "incorrect_immutable_live_count": 0, + "immutable_live_read_loses_committed_record": true +} diff --git a/docs/evidence/2026-10-11-infd-purpose-actuator-owner-review/rescue-independent-probes.json b/docs/evidence/2026-10-11-infd-purpose-actuator-owner-review/rescue-independent-probes.json new file mode 100644 index 0000000..bd50c27 --- /dev/null +++ b/docs/evidence/2026-10-11-infd-purpose-actuator-owner-review/rescue-independent-probes.json @@ -0,0 +1,16 @@ +{ + "synthetic_ordinary_files_and_mock_connections_only": true, + "native_action": false, + "extra_refusals": { + "hardlinked_main": { + "rejected_before_sqlite": true + }, + "symlinked_wal": { + "rejected_before_sqlite": true + }, + "unsafe_shm_mode": { + "rejected_before_sqlite": true + } + }, + "crashed_rescue_replay_refused_original_bytes_unchanged": true +} diff --git a/docs/evidence/2026-10-11-infd-purpose-actuator-owner-review/snapshot-rescue-r2-final-packet-ack.json b/docs/evidence/2026-10-11-infd-purpose-actuator-owner-review/snapshot-rescue-r2-final-packet-ack.json new file mode 100644 index 0000000..50de4c7 --- /dev/null +++ b/docs/evidence/2026-10-11-infd-purpose-actuator-owner-review/snapshot-rescue-r2-final-packet-ack.json @@ -0,0 +1,45 @@ +{ + "review_id": "RPF-REVIEW-20261011-INFD-SNAPSHOT-RESCUE-R2-FINAL-ACK", + "work_record": "RPF-IN-0007", + "role": "railiance-platform technical owner only", + "status": "exact-refined-packet-acknowledgment", + "manifest_sha256": "d05d6e3b15df9acf1d7aef0ba2ec82a5a00d979ab1f324e981025cffe2cc753d", + "paths": 134, + "prior_source_manifest_sha256": "0867e27a6754dddff3eedbb333ab4ca4faa98ee31d383ebe940b8e054c6cabf7", + "prior_platform_review_manifest_sha256": "4687a64f0490b66abefbeb475fb18551a88571d6bb2f5e6a4a5e3688d49c289c", + "memo_sha256": "391330d062ede170a546415886d18b4895ba24d313a0dd50dcc1591c1aa3c2fa", + "bound_document_count": 20, + "bound_document_bytes": 173469, + "unchanged_execution_bundle_sha256": "49c9cb70f36f6ceb7b0d22400b2ec9232a5e1a8a00d17e92b92fe367c98effb5", + "unchanged_execution_plan_sha256": "9ce5728a561e6d38f8497201baa2b840d11444a0af8ad6234dfc37428113f258", + "verification": { + "all134_hashes_match": true, + "archived_original66_exact_bytes": true, + "all20_document_digests_match": true, + "executable_paths_unchanged": true, + "only_changed_existing_paths": [ + "lifecycle-commands.json", + "memo.json", + "proposal.json", + "recovery-intake-rejection-fixture.json", + "revision-command.json", + "validation.json" + ] + }, + "single_semantic_delta": "Historical f2fad helper manifest is labeled original_execution_helper_manifest_sha256 with explicit historical context; current rescue bytes remain bound to unchanged49c9 bundle/9ce5 plan. No executable, authority, snapshot identity, custody, rollback, deadline, image or scanner change.", + "agreement": "Previous exact source technical agreement remains valid for this narrow provenance-label amendment and dependent packet hashes. No new work record, human approval or recovery success inferred.", + "remaining_gates": [ + "Commit exact reviewed owner source and verify final source/four render blobs.", + "Fresh actual source memo2/new reviewID/version1 founder disposition and current fixed-origin source outcome readback before phase; original version1 approval not reused.", + "Original COMPLETE backup/UNCERTAIN copy/journal remain unchanged; new named rescue attempt only after exact approval/fresh custody checks. No same-phase retries/deletions." + ], + "limits": { + "native_action": false, + "native_database_open": false, + "native_copy_retry_cleanup": false, + "owner_head_mutation": false, + "founder_approval": false, + "T04_complete": false, + "other_owner_role": false + } +} diff --git a/docs/evidence/2026-10-11-infd-purpose-actuator-owner-review/snapshot-rescue-r2-review.json b/docs/evidence/2026-10-11-infd-purpose-actuator-owner-review/snapshot-rescue-r2-review.json new file mode 100644 index 0000000..970ca70 --- /dev/null +++ b/docs/evidence/2026-10-11-infd-purpose-actuator-owner-review/snapshot-rescue-r2-review.json @@ -0,0 +1,62 @@ +{ + "review_id": "RPF-REVIEW-20261011-INFD-SNAPSHOT-RESCUE-R2", + "work_record": "RPF-IN-0007", + "role": "railiance-platform technical owner only", + "status": "technical-agreement-on-prepared-rescue-source", + "manifest_sha256": "0867e27a6754dddff3eedbb333ab4ca4faa98ee31d383ebe940b8e054c6cabf7", + "paths": 66, + "all_manifest_hashes_match": true, + "source_memo_version": 2, + "memo_sha256": "cac3fede955c6024d2566f443d04d259cefb7a0ef2368e7f05c174fa4b029cf3", + "executor_bundle_sha256": "49c9cb70f36f6ceb7b0d22400b2ec9232a5e1a8a00d17e92b92fe367c98effb5", + "executor_plan_sha256": "9ce5728a561e6d38f8497201baa2b840d11444a0af8ad6234dfc37428113f258", + "bound_document_count": 20, + "bound_document_bytes": 173153, + "bound_digests_valid": true, + "verification": { + "executor_test_methods": 21, + "mocked_reader_test_methods": 5, + "extra_private_file_refusals_before_sqlite": [ + "hardlinked_main", + "symlinked_wal", + "unsafe_shm_mode" + ], + "crashed_rescue_replay_refused_original_bytes_unchanged": true + }, + "original_frozen_identity": { + "journal_sha256": "d187b02d98d6e97429fe20b4fbe1d309a6c6c4b55232b4ae13ac39873039f1c1", + "snapshot_bytes": 19537920, + "snapshot_sha256": "8756cf825df9e7b5b74bb4a0106a5027f5cff2c59ff45d7b48eed8522a7d33f3", + "original_source": "bc6494cd1b290783ef3aef0763bf28d1deabf4b0", + "original_backup_state": "COMPLETE", + "original_copy_state": "UNCERTAIN" + }, + "agreed_boundaries": [ + "Explicit close on success/refusal; live and writable offline pre/post reads remain WAL-aware mode=ro/query_only. Immutable only independently established frozen closed-main with recorded digest/size/private single-link identity, zero/absent WAL and unchanged main/sidecars before/after; stale private SHM retained.", + "Original journal and sanitized original backup receipt exact hashes/identity/phase states/attempts linked before and after each phase; never rewrite COMPLETE/UNCERTAIN history.", + "New drill-copy-rescue-r1 and separate nonce/lock/journal, absent destination/restore volume, original Pod UID/old image/source pin and unchanged Deployment/CM/PVC seals; no new drill backup, old phase retry or sidecar deletion.", + "Offline verification explicitly consumes COMPLETE rescue result; remaining ordered new-journal phases retain protected clone pre/admin/post proof, fresh cutover snapshot and current-DB-preserving Deployment-only release/recovery.", + "Source memo version2 is revised via expected_version1, not registered as new version1; its new review memo independently starts version1, so nested confirmed founder disposition must target that NEW review ID/version1. Root must authenticate source outcome query version2; original version1 approval is not recovery permission.", + "Existing image763c/config6c/schema5/PVC/audience/credentials/policy/sync scope and known fixable MEDIUM/T05 disclosure retained; native_provider=false synthetic checks remain distinct from actual native provider completion." + ], + "remaining_gates": [ + "Root applies/commits exact prepared source then pins final owner revision/four Git blobs; current owner HEAD remains unchanged during review.", + "New exact founder acceptance of source memo2/new reviewID/current bound packet with fresh actual fixed-origin readback before every phase; pending templates/source review are not authority.", + "Fresh actual snapshot/sidecar/custody/source/health checks and durable new RUNNING intent precede any copy; failures preserve partial evidence and forbid same-phase retry.", + "All-phase deadline remainsOct12; beyond expiry fresh decision required. Actual protected copy/offline native-data drill/rollout/provider acceptance remain unexecuted." + ], + "primary_semantics_sources": [ + "https://www.sqlite.org/uri.html", + "https://docs.python.org/3/library/sqlite3.html#how-to-use-the-connection-context-manager" + ], + "limits": { + "native_database_open": false, + "native_copy_backup_restore": false, + "native_retry_or_cleanup": false, + "owner_head_mutation": false, + "founder_approval": false, + "recovered_native_success": false, + "T04_complete": false, + "other_owner_role": false + } +} diff --git a/intakes/RPF-IN-0007-infd-purpose-actuator-review.md b/intakes/RPF-IN-0007-infd-purpose-actuator-review.md index 1aa7f9b..ce532d5 100644 --- a/intakes/RPF-IN-0007-infd-purpose-actuator-review.md +++ b/intakes/RPF-IN-0007-infd-purpose-actuator-review.md @@ -25,3 +25,11 @@ Absorbed into technical review `RPF-REVIEW-20261011-INFD-ACTUATOR-R1-CONDITIONAL ## Final exact helper review Final technical agreement `RPF-REVIEW-20261011-INFD-ACTUATOR-R1-FINAL` covers helper manifest `f2fad6c251fbb4420e07c1329802f521b513bbf66e51f64c5d673ef04f16284c`,23paths, execution bundle `27d6d6d3133c963da1dde92d498d636617387c16e850a17c598148abc35c775d`. Sixteen synthetic tests independently pass; additional recovery probes reject wrong operation/source/UID/prune/resource scope and confirm unhealthy-candidate recovery request without Pod/exec. Original conditional evidence remains. Final founder packet must hash-bind this executor/four render inputs and explicitly disclose the all-phase deadline before submission; source agreement is not approval or native custody/provider evidence. + +## Snapshot failure source review work + +Same Platform owner preparation trial, following successful native backup and retained UNCERTAIN drill-copy reported by the coordinator. Completed independent source-mechanism check reproduces WAL0/SHM32768 on a synthetic Store backup after the initial checker. No native database was opened or copied, no retry/cleanup/source HEAD change occurred. The exact recovery-source technical review entry follows this owner work record when maker source is frozen; original failed journal and approval remain evidence, not backfilled success. Fresh exact supervisor disposition on the recovery delta is required before any action. + +## Completed existing-snapshot rescue source review + +Same Platform role final technical agreement `RPF-REVIEW-20261011-INFD-SNAPSHOT-RESCUE-R2` covers exact66-path stage `0867e27a6754dddff3eedbb333ab4ca4faa98ee31d383ebe940b8e054c6cabf7`. Twenty-one executor and five mocked reader tests independently pass; additional ordinary-file/mock and journal crash probes refuse unsafe custody/replay without altering the original. This work note precedes its formal entry. Fresh exact source-version2 founder disposition, newly committed source and authenticated fixed-origin readback are required before any recovery phase. Original COMPLETE backup/UNCERTAIN copy and approval remain historical unchanged; no native recovery, copy or deletion occurred in this review.