fix(consistency): preserve immutable historical binding rows
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1468b-63fa-7710-85dc-8f2e16b3ebfa
This commit is contained in:
tegwick 2026-10-17 03:56:25 +02:00
parent 4c03c9d2c6
commit bb525bc304
4 changed files with 34 additions and 6 deletions

View file

@ -9,7 +9,7 @@ RAILIANCE_STATE_HUB_RELEASE ?= state-hub
RAILIANCE_STATE_HUB_NAMESPACE ?= state-hub
RAILIANCE_STATE_HUB_CHART ?= deploy/railiance/apps/charts/state-hub
RAILIANCE_STATE_HUB_VALUES ?= deploy/railiance/apps/helm/state-hub-values.yaml
RAILIANCE_STATE_HUB_IMAGE_TAG ?= main-51bc70d@sha256:c802690ee1811b3d77df4077936f9cdced1385514e8673fcbc9232b84d645015
RAILIANCE_STATE_HUB_IMAGE_TAG ?= main-c103cbf@sha256:4cc4ce17bbcdb1b66132d07c5b7b741f46df83124ef1c8403ffabdafba6993d1
RAILIANCE_STATE_HUB_PLATFORM_DIR ?= deploy/railiance/platform
RAILIANCE_STATE_HUB_APP_MANIFESTS ?= deploy/railiance/apps/manifests
# Codex/WSL non-login shells may not source ~/.profile; keep uv discoverable.

View file

@ -3,4 +3,4 @@ name: state-hub
description: State Hub API service for private Railiance operation
type: application
version: 0.1.0
appVersion: "main-51bc70d"
appVersion: "main-c103cbf"

View file

@ -6,7 +6,7 @@ namespace:
image:
repository: forgejo.coulomb.social/coulomb/state-hub
tag: "main-51bc70d@sha256:c802690ee1811b3d77df4077936f9cdced1385514e8673fcbc9232b84d645015"
tag: "main-c103cbf@sha256:4cc4ce17bbcdb1b66132d07c5b7b741f46df83124ef1c8403ffabdafba6993d1"
ingress:
enabled: false

View file

@ -325,11 +325,11 @@ ordinary earlier fixes cannot partially execute before a later frozen refusal.
```task
id: STATE-WP-0095-T10
status: wait
status: done
priority: high
depends_on: [STATE-WP-0095-T09]
needs_human: true
intervention_note: "New API runtime requires its own exact image, reviewed preflight and scoped rollout approval; prior revision-4 approval does not cover it."
needs_human: false
intervention_note: "Exact revision 2 approved and verified; no pending rollout intervention."
state_hub_task_id: "88585c69-d9b9-5e1f-a256-6416ff71e824"
```
@ -392,3 +392,31 @@ scanning; probe behavior, exact image, recovery and acceptance scope remain
unchanged. The same decision df703266-6719-4c04-ae1b-ba9afd3bca1c remains open
and pending. This source-only amendment grants no runtime authority or new
image/code change; T07/T10 remain wait and T09 remains done.
T10 verified receiving return, 2026-10-17: the founder approved and the owner
executed exact revision 2 of STATE-WP-0095-T10-frozen-bindings-guard-r1,
sha256:5d0ddebc21bcb035809cc8b57f4c2e1ba8ed09204be5b965460e178a90913f1e,
under decision df703266-6719-4c04-ae1b-ba9afd3bca1c. Helm revision 77 delivered
runtime source c103cbf3c8bed5dba87a03e320595ddded9301a3 and image
main-c103cbf@sha256:4cc4ce17bbcdb1b66132d07c5b7b741f46df83124ef1c8403ffabdafba6993d1.
API/MCP are Ready on expected schema c4d5e6f7a8b9. Eight actual native cases
passed with zero probe commits. All three parent and 15 task CURRENT full-row
hashes remained unchanged after delivery/probes and the actual normal Cluster
pipeline (20 ordinary bindings, three frozen bindings omitted by the verified
loaded checker). All three archived sources remained byte-identical. Exact
owned Job/pod success was observed, then their absence and removal of owned
chart staging were verified; no recovery was needed.
The verified return is the Custodian dated 2026-10-17
guard-successor-execution-r2/verified-receiving-return.json,
sha256:09958bd69367cc6903e2a21a56eb81b6a8a46c2a1907afc93f787cd63732e92a.
The original three-parent hash failures remain the founder-accepted historical
exception: unavailable original preimages were not guessed/restored, and failed
outcomes were not backfilled. The 15 original task rows and archived bytes stay
preserved. Earlier pending review notes are retained as proposal history; T10
is now done and needs_human false. T07 and this parent remain open until the
actual RMGR-WP-0019-T06 owner closure is published and returned. No native
security-target gate or broader autonomy is established by this infrastructure
return. Source appVersion and both maintained image pins now declare this same
verified image; the approved frozen rollout archive remains unchanged.