From bb525bc304cbd79b8a8a1540aa28bf073a4e2c32 Mon Sep 17 00:00:00 2001 From: tegwick Date: Sat, 17 Oct 2026 03:56:25 +0200 Subject: [PATCH] fix(consistency): preserve immutable historical binding rows Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1468b-63fa-7710-85dc-8f2e16b3ebfa --- Makefile | 2 +- .../apps/charts/state-hub/Chart.yaml | 2 +- .../railiance/apps/helm/state-hub-values.yaml | 2 +- ...ATE-WP-0095-historical-source-receiving.md | 34 +++++++++++++++++-- 4 files changed, 34 insertions(+), 6 deletions(-) diff --git a/Makefile b/Makefile index cec684e..7925592 100644 --- a/Makefile +++ b/Makefile @@ -9,7 +9,7 @@ RAILIANCE_STATE_HUB_RELEASE ?= state-hub RAILIANCE_STATE_HUB_NAMESPACE ?= state-hub RAILIANCE_STATE_HUB_CHART ?= deploy/railiance/apps/charts/state-hub RAILIANCE_STATE_HUB_VALUES ?= deploy/railiance/apps/helm/state-hub-values.yaml -RAILIANCE_STATE_HUB_IMAGE_TAG ?= main-51bc70d@sha256:c802690ee1811b3d77df4077936f9cdced1385514e8673fcbc9232b84d645015 +RAILIANCE_STATE_HUB_IMAGE_TAG ?= main-c103cbf@sha256:4cc4ce17bbcdb1b66132d07c5b7b741f46df83124ef1c8403ffabdafba6993d1 RAILIANCE_STATE_HUB_PLATFORM_DIR ?= deploy/railiance/platform RAILIANCE_STATE_HUB_APP_MANIFESTS ?= deploy/railiance/apps/manifests # Codex/WSL non-login shells may not source ~/.profile; keep uv discoverable. diff --git a/deploy/railiance/apps/charts/state-hub/Chart.yaml b/deploy/railiance/apps/charts/state-hub/Chart.yaml index 1cb3040..6e4ddce 100644 --- a/deploy/railiance/apps/charts/state-hub/Chart.yaml +++ b/deploy/railiance/apps/charts/state-hub/Chart.yaml @@ -3,4 +3,4 @@ name: state-hub description: State Hub API service for private Railiance operation type: application version: 0.1.0 -appVersion: "main-51bc70d" +appVersion: "main-c103cbf" diff --git a/deploy/railiance/apps/helm/state-hub-values.yaml b/deploy/railiance/apps/helm/state-hub-values.yaml index 02a4bd6..99adb99 100644 --- a/deploy/railiance/apps/helm/state-hub-values.yaml +++ b/deploy/railiance/apps/helm/state-hub-values.yaml @@ -6,7 +6,7 @@ namespace: image: repository: forgejo.coulomb.social/coulomb/state-hub - tag: "main-51bc70d@sha256:c802690ee1811b3d77df4077936f9cdced1385514e8673fcbc9232b84d645015" + tag: "main-c103cbf@sha256:4cc4ce17bbcdb1b66132d07c5b7b741f46df83124ef1c8403ffabdafba6993d1" ingress: enabled: false diff --git a/workplans/STATE-WP-0095-historical-source-receiving.md b/workplans/STATE-WP-0095-historical-source-receiving.md index 29f999a..2788e09 100644 --- a/workplans/STATE-WP-0095-historical-source-receiving.md +++ b/workplans/STATE-WP-0095-historical-source-receiving.md @@ -325,11 +325,11 @@ ordinary earlier fixes cannot partially execute before a later frozen refusal. ```task id: STATE-WP-0095-T10 -status: wait +status: done priority: high depends_on: [STATE-WP-0095-T09] -needs_human: true -intervention_note: "New API runtime requires its own exact image, reviewed preflight and scoped rollout approval; prior revision-4 approval does not cover it." +needs_human: false +intervention_note: "Exact revision 2 approved and verified; no pending rollout intervention." state_hub_task_id: "88585c69-d9b9-5e1f-a256-6416ff71e824" ``` @@ -392,3 +392,31 @@ scanning; probe behavior, exact image, recovery and acceptance scope remain unchanged. The same decision df703266-6719-4c04-ae1b-ba9afd3bca1c remains open and pending. This source-only amendment grants no runtime authority or new image/code change; T07/T10 remain wait and T09 remains done. + + +T10 verified receiving return, 2026-10-17: the founder approved and the owner +executed exact revision 2 of STATE-WP-0095-T10-frozen-bindings-guard-r1, +sha256:5d0ddebc21bcb035809cc8b57f4c2e1ba8ed09204be5b965460e178a90913f1e, +under decision df703266-6719-4c04-ae1b-ba9afd3bca1c. Helm revision 77 delivered +runtime source c103cbf3c8bed5dba87a03e320595ddded9301a3 and image +main-c103cbf@sha256:4cc4ce17bbcdb1b66132d07c5b7b741f46df83124ef1c8403ffabdafba6993d1. +API/MCP are Ready on expected schema c4d5e6f7a8b9. Eight actual native cases +passed with zero probe commits. All three parent and 15 task CURRENT full-row +hashes remained unchanged after delivery/probes and the actual normal Cluster +pipeline (20 ordinary bindings, three frozen bindings omitted by the verified +loaded checker). All three archived sources remained byte-identical. Exact +owned Job/pod success was observed, then their absence and removal of owned +chart staging were verified; no recovery was needed. + +The verified return is the Custodian dated 2026-10-17 + guard-successor-execution-r2/verified-receiving-return.json, +sha256:09958bd69367cc6903e2a21a56eb81b6a8a46c2a1907afc93f787cd63732e92a. +The original three-parent hash failures remain the founder-accepted historical +exception: unavailable original preimages were not guessed/restored, and failed +outcomes were not backfilled. The 15 original task rows and archived bytes stay +preserved. Earlier pending review notes are retained as proposal history; T10 +is now done and needs_human false. T07 and this parent remain open until the +actual RMGR-WP-0019-T06 owner closure is published and returned. No native +security-target gate or broader autonomy is established by this infrastructure +return. Source appVersion and both maintained image pins now declare this same +verified image; the approved frozen rollout archive remains unchanged.