Record verified native offline startup and precise KEY39 approval scope
This commit is contained in:
codex
parent
c034f59bef
commit
16ab1bb490
11 changed files with 531 additions and 43 deletions
|
|
@ -882,7 +882,7 @@
|
|||
{
|
||||
"proposal_id": "REINAH-WP-0008-T07-install-f599-r1",
|
||||
"disposition": "accepted_revised",
|
||||
"outcome": "failed",
|
||||
"outcome": "succeeded",
|
||||
"proposal_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/FINAL-PROPOSAL.md",
|
||||
"original_revision": 1,
|
||||
"original_digest_sha256": "408d779a19e0e83b3be9a80ad624c1f7b7be906d22c0a8efe6e629185cc0cd0a",
|
||||
|
|
@ -891,7 +891,7 @@
|
|||
"current_digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30",
|
||||
"target": "railiance01/92.205.62.239 account tegwick UID/GID1000; exact protected runtimes store and new f599 immutable digest directory",
|
||||
"expected_result": "Exact dormant artifact append with full extracted/installed/post-rehearsal f599 digest equality; three credential-free empty-egress launcher checks pass; positively quiesced owned processes and staging gone. No provider, owner/catalog/profile/queue changes or native security-gate closure.",
|
||||
"verification_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r2/installed-partial-verification.json",
|
||||
"verification_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/verified-native-result.json",
|
||||
"planned_execution_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r2/execution-receipt.json",
|
||||
"rollback_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/FINAL-PROPOSAL.md",
|
||||
"cost_estimate_eur": null,
|
||||
|
|
@ -899,11 +899,11 @@
|
|||
"cost_estimate": "Zero provider requests and no new paid resource; infrastructure/energy/operator EUR cost unknown, explicitly supervised.",
|
||||
"risk_estimate": "Shared single-node CPU/IO interruption and recovery EUR loss unknown; exact fresh headroom, private process supervision and conditional staging cleanup required. Installed digest retained inactive on partial failure.",
|
||||
"supervisor": "Bernd Worsch",
|
||||
"approval_ref": "b6abb6ab-b182-4b4f-9f84-79ddc5ad91f3",
|
||||
"approved_revision": 2,
|
||||
"approved_digest_sha256": "44b17589c323e1a966caf6c1b1def123092ee289b929c8ea014bc84109103b1d",
|
||||
"executed_revision": 2,
|
||||
"executed_digest_sha256": "44b17589c323e1a966caf6c1b1def123092ee289b929c8ea014bc84109103b1d",
|
||||
"approval_ref": "bec667cc-15ea-4f87-ae16-111f08562e48",
|
||||
"approved_revision": 3,
|
||||
"approved_digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30",
|
||||
"executed_revision": 3,
|
||||
"executed_digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30",
|
||||
"refinement_or_rescue": true,
|
||||
"promotion_evidence": false,
|
||||
"reason": "R1 held after root found descendant cleanup gap; founder approved exact R2 and it was executed once. R2 was partial/failed and requires review of separately prepared R3. No approval or success inferred for R3.",
|
||||
|
|
@ -931,33 +931,35 @@
|
|||
"revision": 3,
|
||||
"digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30",
|
||||
"manifest_sha256": "19d3a74b124a9a7236bd4b8f6fe45656b4651d875017486f0dfa515f3f81d806",
|
||||
"outcome": "not_executed",
|
||||
"outcome": "succeeded",
|
||||
"disposition": "accepted_revised",
|
||||
"root_review": "source_review_and_five_focused_root_checks_passed",
|
||||
"approval_ref": "bec667cc-15ea-4f87-ae16-111f08562e48",
|
||||
"approved_at": "2026-10-17T10:57:39.975862+00:00",
|
||||
"preflight": "refused_cpu_headroom_0.99248; zero native mutation"
|
||||
"preflight": "refused_cpu_headroom_0.99248; zero native mutation",
|
||||
"executed_digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30",
|
||||
"execution_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/execution-receipt.json",
|
||||
"verification_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/verified-native-result.json",
|
||||
"refinement_or_rescue": true
|
||||
}
|
||||
],
|
||||
"pending_decision_ref": null,
|
||||
"approved_at": "2026-10-17T08:34:32.549418+00:00",
|
||||
"approval_record_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r2/approval-decision.json",
|
||||
"supervisor_disposition": "Founder approved exact R3; fresh read-only preflight refused CPU headroom before any remote write/launch. Completed R2 failed outcome and its approval/execution remain the scored trial state; latest R3 approval is retained separately. No authority promotion or automatic retry.",
|
||||
"execution_started_at": "2026-10-17T08:35:10.440830+00:00",
|
||||
"execution_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r2/execution-receipt.json",
|
||||
"execution_phase": "completed_failed_partial_install_independently_verified",
|
||||
"approved_digest": "44b17589c323e1a966caf6c1b1def123092ee289b929c8ea014bc84109103b1d",
|
||||
"executed_digest": "44b17589c323e1a966caf6c1b1def123092ee289b929c8ea014bc84109103b1d",
|
||||
"verified_outcome": "R2 installed exact inactive f599; independent readback verified full digest and owned staging absence. Three-launcher proof failed with phase_receipt_unavailable/leader_left_descendants. R2 watchdog receipt reports positive process quiescence; erased process trace prevents independent retrospective process classification. Native launcher acceptance remains unverified. No automatic retry.",
|
||||
"failure_receipt_sha256": "sha256:59969ad9992ac289a553e1076209ba0d04b6fa7cd171bfad83dcc1f96d80a1c6",
|
||||
"failure_cause_limit": "R2 source zombie-classification bug reproduced locally; native trace removed, so causal attribution of this native failure remains unproven.",
|
||||
"approved_at": "2026-10-17T10:57:39.975862+00:00",
|
||||
"approval_record_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/approval-decision.json",
|
||||
"supervisor_disposition": "Founder approved exact R3 after failed R2; first read-only CPU refusal preserved. After major publication checks completed, one fresh preflight passed and exact R3 controller invoked once. Successful refined verification earns no unchanged original-success credit and no authority promotion.",
|
||||
"execution_started_at": "2026-10-17T11:38:08.445321+00:00",
|
||||
"execution_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/execution-receipt.json",
|
||||
"execution_phase": "completed_refined_native_offline_startup_verified",
|
||||
"approved_digest": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30",
|
||||
"executed_digest": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30",
|
||||
"verified_outcome": "Exact R3 invoked once after fresh guards passed. All three original offline empty-egress launchers exit0; complete f599 before/post digests match; actual3deadadoptedzombies reaped and watchdog reports quiescence. Durable0600 public checkpoint matches exact local precleanup reconstruction; independent native readback verifies installed full f599 and owned stage absence. No reinstall/model/provider/credential/profile/catalog/queue change or native target gate closure. R2 remains failed in its immutable receipt and same-trial execution history.",
|
||||
"pending_revision": {
|
||||
"revision": 3,
|
||||
"digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30",
|
||||
"manifest_sha256": "19d3a74b124a9a7236bd4b8f6fe45656b4651d875017486f0dfa515f3f81d806",
|
||||
"proposal_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/FINAL-PROPOSAL.md",
|
||||
"disposition": "accepted_revised",
|
||||
"outcome": "not_executed",
|
||||
"outcome": "succeeded",
|
||||
"target": "railiance01/tegwick existing inactive f599; new exact verification staging and durable public precleanup receipt",
|
||||
"expected_result": "All three unchanged empty-egress offline launcher commands exit zero, full f599 digest before/after, durable public receipt before positive-quiescence conditional cleanup. No installation, model call, credential/profile/queue change or gate closure.",
|
||||
"verification_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/FINAL-PROPOSAL.md",
|
||||
|
|
@ -968,7 +970,8 @@
|
|||
"root_review_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/root-review.json",
|
||||
"decision_ref": "bec667cc-15ea-4f87-ae16-111f08562e48",
|
||||
"approval_ref": "bec667cc-15ea-4f87-ae16-111f08562e48",
|
||||
"approved_at": "2026-10-17T10:57:39.975862+00:00"
|
||||
"approved_at": "2026-10-17T10:57:39.975862+00:00",
|
||||
"executed_digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30"
|
||||
},
|
||||
"execution_attempts": [
|
||||
{
|
||||
|
|
@ -981,17 +984,35 @@
|
|||
"execution_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r2/execution-receipt.json",
|
||||
"verification_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r2/installed-partial-verification.json",
|
||||
"verified_outcome": "R2 installed exact inactive f599; independent readback verified full digest and owned staging absence. Three-launcher proof failed with phase_receipt_unavailable/leader_left_descendants. R2 watchdog receipt reports positive process quiescence; erased process trace prevents independent retrospective process classification. Native launcher acceptance remains unverified. No automatic retry.",
|
||||
"failure_receipt_sha256": "sha256:59969ad9992ac289a553e1076209ba0d04b6fa7cd171bfad83dcc1f96d80a1c6"
|
||||
"failure_receipt_sha256": "sha256:59969ad9992ac289a553e1076209ba0d04b6fa7cd171bfad83dcc1f96d80a1c6",
|
||||
"execution_started_at": "2026-10-17T08:35:10.440830+00:00",
|
||||
"failure_cause_limit": "R2 source zombie-classification bug reproduced locally; native trace removed, so causal attribution of this native failure remains unproven."
|
||||
},
|
||||
{
|
||||
"revision": 3,
|
||||
"approved_digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30",
|
||||
"executed_digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30",
|
||||
"approval_ref": "bec667cc-15ea-4f87-ae16-111f08562e48",
|
||||
"execution_started_at": "2026-10-17T11:38:08.445321+00:00",
|
||||
"execution_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/execution-receipt.json",
|
||||
"outcome": "succeeded",
|
||||
"refinement_or_rescue": true,
|
||||
"preflight_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/approved-followthrough-preflight.json",
|
||||
"first_read_only_cpu_refusal_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/approved-preflight.json",
|
||||
"verified_at": "2026-10-17T11:39:57.322656+00:00",
|
||||
"verification_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/verified-native-result.json",
|
||||
"execution_receipt_sha256": "sha256:3f70eedcff7ff4b191bac030ce5a8b0f8e68688960b4fe35ef1745ebc8f3a6eb",
|
||||
"native_checkpoint_sha256": "sha256:8e6468c2cbb89f1a6feb038d2f53e888d14b1bf4c64f93386e39802cf7916282"
|
||||
}
|
||||
],
|
||||
"next_execution": {
|
||||
"revision": 3,
|
||||
"digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30",
|
||||
"status": "approved_read_only_preflight_refused_cpu_headroom",
|
||||
"status": "completed_once_no_automatic_replay",
|
||||
"execution_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/execution-receipt.json",
|
||||
"approval_ref": "bec667cc-15ea-4f87-ae16-111f08562e48",
|
||||
"approval_record_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/approval-decision.json",
|
||||
"preflight_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/approved-preflight.json",
|
||||
"preflight_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/approved-followthrough-preflight.json",
|
||||
"native_mutations": 0,
|
||||
"launcher_calls": 0,
|
||||
"automatic_polling_or_retry": false
|
||||
|
|
@ -1005,7 +1026,14 @@
|
|||
"status": "resolved",
|
||||
"decided_by": "Bernd Worsch",
|
||||
"scope": "Founder actual conversation reply: Approve exact revision 3. Approval is bound only to stable proposal REINAH-WP-0008-T07-install-f599-r1 revision3 SHA256 7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30, verification-only of installed inactive f599, unchanged three empty-egress launcher commands, repaired dead-zombie handling, exclusive durable public precleanup receipt, fresh exact guards and reviewed conditional cleanup. Unknown infrastructure/operator EUR cost and interruption/recovery loss EUR explicitly accepted only for this supervised action. No reinstall/model/credential/profile/catalog/queue changes or autopilot grant. R2 failed partial outcome retained in the same trial."
|
||||
}
|
||||
},
|
||||
"prior_failure_receipt_sha256": "sha256:59969ad9992ac289a553e1076209ba0d04b6fa7cd171bfad83dcc1f96d80a1c6",
|
||||
"prior_failure_cause_limit": "R2 source zombie-classification bug reproduced locally; native trace removed, so causal attribution of this native failure remains unproven.",
|
||||
"verified_at": "2026-10-17T11:39:57.322656+00:00",
|
||||
"actual_infrastructure_and_operator_cost_eur": null,
|
||||
"actual_cost_note": "Zero model/provider calls/new paid resources. Infrastructure/operator EUR cost unmeasured and remains unknown.",
|
||||
"execution_receipt_sha256": "sha256:3f70eedcff7ff4b191bac030ce5a8b0f8e68688960b4fe35ef1745ebc8f3a6eb",
|
||||
"native_checkpoint_sha256": "sha256:8e6468c2cbb89f1a6feb038d2f53e888d14b1bf4c64f93386e39802cf7916282"
|
||||
}
|
||||
],
|
||||
"trials": [
|
||||
|
|
|
|||
|
|
@ -0,0 +1,30 @@
|
|||
[
|
||||
{
|
||||
"id": "165e29df-5a58-4314-9ec7-f8420eff72f1",
|
||||
"created_at": "2026-10-17T11:32:33.188005Z",
|
||||
"event_type": "note",
|
||||
"summary": "Published one KEY-WP-0039 T02 Custodian coordinator finalization-review paragraph in exact owner commit40de616e078906e04c692edf7cb7a8bfbc07b5ea. All3taskblocks/frontmatter/UUIDs/dependencies unchanged: T01done,T02wait,T03done; parentactive. Existing source acceptance/registration go/standing attended rule preserved; existing KEY38 then coding-client admission/readiness then attended negative/revoke/cleanup sequence retained, no native acceptance inferred. Required consistency passed; restored generated brief writeback. Normal rmgr sync refused unrelated grandfathered ADHOC-2026-09-27-T02 UUID; no historical identity mutation. Canonical primary railiance01 receiver applied exact published commit with acknowledge_retirements=false; forge, task bindings and clean owner index/worktree independently verified. No credential/native/registration action. Evidence docs/changes/netkingdom-target-2026-10-17/key39-finalization-owner-followthrough-r1/.",
|
||||
"author": "codex"
|
||||
},
|
||||
{
|
||||
"id": "2f769541-08ed-471c-8ebf-767ae3be7322",
|
||||
"created_at": "2026-10-17T06:13:28.564115Z",
|
||||
"event_type": "note",
|
||||
"summary": "Orchestrated precondition work for KEY-WP-0039 (2026-10-17). Source only: ops-warden original-intent interface (a45cf47); railiance-platform owner returns (0a9617a); ops-mason attended checklist (20b92e2); net-kingdom NK-WP-0048 split T24-T31: six adapter candidates, restart fixtures, T15 reconcile source and the 1.2 descriptor composer, 98 tests passing. Remaining gates are owner decisions and reviews and founder-attended native runs. KEY-WP-0039-T02 stays wait.",
|
||||
"author": "claude-code"
|
||||
},
|
||||
{
|
||||
"id": "dae4fa30-0e5d-4570-b914-0d7fc5a4af7c",
|
||||
"created_at": "2026-10-17T02:25:21.598000Z",
|
||||
"event_type": "note",
|
||||
"summary": "KEY-WP-0039 checked 2026-10-17: source complete (T01/T03 done; runner 17/17 tests pass). T02 is live execution only and stays wait: KEY-WP-0038-T02/T03 wait on NK-WP-0048-T06 (13 deps), plus owner returns in docs/proposals/2026-10-11-key39-next-execution-prerequisites.json and a founder attended native go. No live or credential action taken.",
|
||||
"author": "claude-code"
|
||||
},
|
||||
{
|
||||
"id": "d8b71df0-5002-4ded-b688-5973d33e752b",
|
||||
"created_at": "2026-10-10T11:20:52.589984Z",
|
||||
"event_type": "note",
|
||||
"summary": "KEY-WP-0039-T01 done (railiance-platform agreed the case list). Probe packet docs/openbao-negative-probe-clients.yaml and attended script scripts/openbao_negative_probe.py with 7 tests (bae9f85). Corrections sent back: the expired case needs an otherwise-valid expiry client, and the claim probes pin the audience. T02 waits on re-agreement and an attended registry session.",
|
||||
"author": "claude-code"
|
||||
}
|
||||
]
|
||||
|
|
@ -0,0 +1,9 @@
|
|||
{
|
||||
"id": "caafe4be-4f68-47b4-9567-316d47b94992",
|
||||
"title": "Live registration go for the secrets-engine-openbao client",
|
||||
"description": "KEY-WP-0037-T03. The custody boundary is approved (632a8893). Registration still needs an exact reviewed revision, image digest, a config preservation test, synthetic issuance and denial verification, and this separate live go. Resolving this decision is that live go. Opening it does not change a deployment, register the client, or generate a secret.",
|
||||
"rationale": "Live go: register secrets-engine-openbao on the deployed image 6f79a2af via the NK-WP-0046 exact-match helper.",
|
||||
"decision_type": "made",
|
||||
"status": "resolved",
|
||||
"decided_at": "2026-10-07T00:14:08.780439Z"
|
||||
}
|
||||
|
|
@ -0,0 +1,282 @@
|
|||
{
|
||||
"cleanup_status": "removed_after_durable_receipt_and_quiescence",
|
||||
"credential_reads": false,
|
||||
"destination": "/home/tegwick/.helixforge-factory/runtimes/f59959b605a51abd2901becde14e7abd852c2bd3f848004b51d250d1cb81af6d",
|
||||
"durable_public_receipt": "/home/tegwick/.helixforge-factory/runtime-verify-f599-r3-20261017.receipt.json",
|
||||
"durable_receipt_before_cleanup": true,
|
||||
"install_calls": 0,
|
||||
"installed_complete_digest_verified": true,
|
||||
"launcher_status": [
|
||||
{
|
||||
"exit_code": 0,
|
||||
"name": "rein-aharness",
|
||||
"status": "completed"
|
||||
},
|
||||
{
|
||||
"exit_code": 0,
|
||||
"name": "glas-harness",
|
||||
"status": "completed"
|
||||
},
|
||||
{
|
||||
"exit_code": 0,
|
||||
"name": "claude",
|
||||
"status": "completed"
|
||||
}
|
||||
],
|
||||
"model_calls": 0,
|
||||
"native_receipt_scope": "immutable precleanup checkpoint; final cleanup outcome in local execution receipt",
|
||||
"owned_staging_removed": true,
|
||||
"owner_configuration_read": false,
|
||||
"phase": "offline_rehearsal",
|
||||
"post_rehearsal_complete_digest_verified": true,
|
||||
"process_supervision": {
|
||||
"jobs": [
|
||||
{
|
||||
"label": "node-read",
|
||||
"leader": {
|
||||
"pgrp": 4142322,
|
||||
"pid": 4142322,
|
||||
"ppid": 4142302,
|
||||
"sid": 4142322,
|
||||
"start": 23500648,
|
||||
"state": "R",
|
||||
"uid": 1000
|
||||
},
|
||||
"returncode": 0,
|
||||
"status": "completed"
|
||||
},
|
||||
{
|
||||
"label": "rehearsal-phase",
|
||||
"leader": {
|
||||
"pgrp": 4142383,
|
||||
"pid": 4142383,
|
||||
"ppid": 4142302,
|
||||
"sid": 4142383,
|
||||
"start": 23500825,
|
||||
"state": "R",
|
||||
"uid": 1000
|
||||
},
|
||||
"returncode": 0,
|
||||
"status": "completed"
|
||||
},
|
||||
{
|
||||
"label": "rein-aharness",
|
||||
"leader": {
|
||||
"pgrp": 4142384,
|
||||
"pid": 4142384,
|
||||
"ppid": 4142302,
|
||||
"sid": 4142384,
|
||||
"start": 23500840,
|
||||
"state": "R",
|
||||
"uid": 1000
|
||||
},
|
||||
"returncode": 0,
|
||||
"status": "completed"
|
||||
},
|
||||
{
|
||||
"label": "glas-harness",
|
||||
"leader": {
|
||||
"pgrp": 4142389,
|
||||
"pid": 4142389,
|
||||
"ppid": 4142302,
|
||||
"sid": 4142389,
|
||||
"start": 23500901,
|
||||
"state": "R",
|
||||
"uid": 1000
|
||||
},
|
||||
"returncode": 0,
|
||||
"status": "completed"
|
||||
},
|
||||
{
|
||||
"label": "claude",
|
||||
"leader": {
|
||||
"pgrp": 4142396,
|
||||
"pid": 4142396,
|
||||
"ppid": 4142302,
|
||||
"sid": 4142396,
|
||||
"start": 23500936,
|
||||
"state": "R",
|
||||
"uid": 1000
|
||||
},
|
||||
"returncode": 0,
|
||||
"status": "completed"
|
||||
}
|
||||
],
|
||||
"leftover_at_failure": [],
|
||||
"no_live_or_waitable_descendants": true,
|
||||
"private_values_emitted": false,
|
||||
"quiescent": true,
|
||||
"reaped_orphan_zombies": [
|
||||
{
|
||||
"exit_code": 0,
|
||||
"facts": {
|
||||
"pgrp": 4142384,
|
||||
"pid": 4142385,
|
||||
"ppid": 4142302,
|
||||
"sid": 4142384,
|
||||
"start": 23500841,
|
||||
"state": "Z",
|
||||
"uid": 1000
|
||||
}
|
||||
},
|
||||
{
|
||||
"exit_code": 0,
|
||||
"facts": {
|
||||
"pgrp": 4142389,
|
||||
"pid": 4142390,
|
||||
"ppid": 4142302,
|
||||
"sid": 4142389,
|
||||
"start": 23500902,
|
||||
"state": "Z",
|
||||
"uid": 1000
|
||||
}
|
||||
},
|
||||
{
|
||||
"exit_code": 0,
|
||||
"facts": {
|
||||
"pgrp": 4142396,
|
||||
"pid": 4142397,
|
||||
"ppid": 4142302,
|
||||
"sid": 4142396,
|
||||
"start": 23500936,
|
||||
"state": "Z",
|
||||
"uid": 1000
|
||||
}
|
||||
}
|
||||
],
|
||||
"reason": "shutdown",
|
||||
"stderr_suppressed": true
|
||||
},
|
||||
"proposal_id": "REINAH-WP-0008-T07-install-f599-r1",
|
||||
"public_job_journal": {
|
||||
"jobs": [
|
||||
{
|
||||
"label": "node-read",
|
||||
"leader": {
|
||||
"pgrp": 4142322,
|
||||
"pid": 4142322,
|
||||
"ppid": 4142302,
|
||||
"sid": 4142322,
|
||||
"start": 23500648,
|
||||
"state": "R",
|
||||
"uid": 1000
|
||||
},
|
||||
"returncode": 0,
|
||||
"status": "completed"
|
||||
},
|
||||
{
|
||||
"label": "rehearsal-phase",
|
||||
"leader": {
|
||||
"pgrp": 4142383,
|
||||
"pid": 4142383,
|
||||
"ppid": 4142302,
|
||||
"sid": 4142383,
|
||||
"start": 23500825,
|
||||
"state": "R",
|
||||
"uid": 1000
|
||||
},
|
||||
"returncode": 0,
|
||||
"status": "completed"
|
||||
},
|
||||
{
|
||||
"label": "rein-aharness",
|
||||
"leader": {
|
||||
"pgrp": 4142384,
|
||||
"pid": 4142384,
|
||||
"ppid": 4142302,
|
||||
"sid": 4142384,
|
||||
"start": 23500840,
|
||||
"state": "R",
|
||||
"uid": 1000
|
||||
},
|
||||
"returncode": 0,
|
||||
"status": "completed"
|
||||
},
|
||||
{
|
||||
"label": "glas-harness",
|
||||
"leader": {
|
||||
"pgrp": 4142389,
|
||||
"pid": 4142389,
|
||||
"ppid": 4142302,
|
||||
"sid": 4142389,
|
||||
"start": 23500901,
|
||||
"state": "R",
|
||||
"uid": 1000
|
||||
},
|
||||
"returncode": 0,
|
||||
"status": "completed"
|
||||
},
|
||||
{
|
||||
"label": "claude",
|
||||
"leader": {
|
||||
"pgrp": 4142396,
|
||||
"pid": 4142396,
|
||||
"ppid": 4142302,
|
||||
"sid": 4142396,
|
||||
"start": 23500936,
|
||||
"state": "R",
|
||||
"uid": 1000
|
||||
},
|
||||
"returncode": 0,
|
||||
"status": "completed"
|
||||
}
|
||||
],
|
||||
"reaped_orphan_zombies": [
|
||||
{
|
||||
"exit_code": 0,
|
||||
"facts": {
|
||||
"pgrp": 4142384,
|
||||
"pid": 4142385,
|
||||
"ppid": 4142302,
|
||||
"sid": 4142384,
|
||||
"start": 23500841,
|
||||
"state": "Z",
|
||||
"uid": 1000
|
||||
}
|
||||
},
|
||||
{
|
||||
"exit_code": 0,
|
||||
"facts": {
|
||||
"pgrp": 4142389,
|
||||
"pid": 4142390,
|
||||
"ppid": 4142302,
|
||||
"sid": 4142389,
|
||||
"start": 23500902,
|
||||
"state": "Z",
|
||||
"uid": 1000
|
||||
}
|
||||
},
|
||||
{
|
||||
"exit_code": 0,
|
||||
"facts": {
|
||||
"pgrp": 4142396,
|
||||
"pid": 4142397,
|
||||
"ppid": 4142302,
|
||||
"sid": 4142396,
|
||||
"start": 23500936,
|
||||
"state": "Z",
|
||||
"uid": 1000
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"rehearsal": {
|
||||
"credential_reads": false,
|
||||
"model_calls": 0,
|
||||
"owner_configuration_read": false,
|
||||
"status": "rehearsed",
|
||||
"steps": {
|
||||
"claude": 0,
|
||||
"glas-harness": 0,
|
||||
"rein-aharness": 0
|
||||
}
|
||||
},
|
||||
"renewal_or_catalog_or_queue_mutation": false,
|
||||
"revision": 3,
|
||||
"status": "installed_runtime_offline_rehearsal_verified",
|
||||
"ssh_exit_code": 0,
|
||||
"staging_identity": {
|
||||
"inode": 4723175,
|
||||
"device": 2049
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1 @@
|
|||
{"installed_runtime_complete_digest_verified": true, "next_exact_command": "python3 -I -B /home/worsch/the-custodian/docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/execute-verify.py --apply", "observed_at": "2026-10-17T11:37:36.626473+00:00", "private_configuration_reads": false, "proposal_id": "REINAH-WP-0008-T07-install-f599-r1", "provider_calls": 0, "remote_mutations": 0, "revision": 3, "status": "read_only_dry_run_passed", "target": {"account": "tegwick", "bwrap_die_with_parent_supported": true, "bwrap_version": "bubblewrap 0.9.0", "checks": {"account": true, "bwrap_parent_death_contract": true, "cpu_headroom": true, "disk_headroom": true, "durable_receipt_absent": true, "exact_installed_runtime": true, "exact_ready_node": true, "load_headroom": true, "memory_headroom": true, "protected_store": true, "staging_absent": true, "supervision_primitives": true}, "cpu_busy_fraction": 0.6632653061224489, "cpu_count": 4, "cpu_sample_seconds": 1, "destination": {"device": 2049, "directory": true, "gid": 1000, "inode": 4743998, "mode": "0o755", "symlink": false, "uid": 1000}, "disk_free_bytes": 123061723136, "durable_receipt": null, "gid": 1000, "installed_complete_digest": "f59959b605a51abd2901becde14e7abd852c2bd3f848004b51d250d1cb81af6d", "load_average": [4.9775390625, 4.1982421875, 3.49267578125], "memory_available_bytes": 7441522688, "node_addresses": [{"address": "92.205.62.239", "type": "InternalIP"}, {"address": "2a00:1169:111:6d70::", "type": "InternalIP"}, {"address": "239.62.205.92.host.secureserver.net", "type": "Hostname"}], "node_ready": true, "pidfd_available": true, "primary_manual_contract_excerpt": ")\\&.\n.RE\n.PP\n\\fB\\-\\-die\\-with\\-parent\\fR\n.RS 4\nEnsures child process (COMMAND) dies when bwrap\\*(Aqs parent dies\\&. Kills (SIGKILL) all bwrap sandbox processes in sequence from parent to child including COMMAND process when bwrap or bwrap\\*(Aqs parent dies\\&. See prctl, PR_SET_PDEATHSIG\\&.\n.RE\n.PP\n\\fB\\-\\-as\\-pid\\-1\\fR\n.RS 4\nDo not create a process with PID=1 in the sandbox to reap child processes\\&.\n.RE\n.PP\n\\fB\\-\\-cap\\-add \\fR\\fBCAP\\fR\n.RS 4\nAdd ", "stage": null, "store": {"device": 2049, "directory": true, "gid": 1000, "inode": 4751222, "mode": "0o700", "symlink": false, "uid": 1000}, "subreaper_get_supported": true, "uid": 1000}}
|
||||
|
|
@ -0,0 +1,22 @@
|
|||
{
|
||||
"agent_id": "custodian-codex",
|
||||
"scope": "CUST-WP-0071 and CUST-WP-0073 preparation and founder-authorized Railiance changes",
|
||||
"mode": "supervised",
|
||||
"counts": {
|
||||
"unscored": 12,
|
||||
"total": 23,
|
||||
"outcome_failed": 3,
|
||||
"refinement_or_rescue": 12,
|
||||
"outcome_succeeded": 18,
|
||||
"accepted_unchanged": 8,
|
||||
"adjudicated": 11,
|
||||
"verified_executions": 10,
|
||||
"unchanged_successes": 4,
|
||||
"outcome_not_executed": 2,
|
||||
"accepted_revised": 3
|
||||
},
|
||||
"unchanged_acceptance_rate": 0.7272727272727273,
|
||||
"unchanged_execution_success_rate": 0.4,
|
||||
"authority_granted": false,
|
||||
"note": "Descriptive evidence only; null rates mean no eligible sample. Never promotes an agent."
|
||||
}
|
||||
|
|
@ -0,0 +1,14 @@
|
|||
{
|
||||
"status": "verified_read_only",
|
||||
"full_native_runtime_digest_verified": true,
|
||||
"native_checkpoint_sha256": "sha256:8e6468c2cbb89f1a6feb038d2f53e888d14b1bf4c64f93386e39802cf7916282",
|
||||
"native_checkpoint_matches_exact_precleanup_local_reconstruction": true,
|
||||
"checkpoint_mode": "0600",
|
||||
"checkpoint_reports_positive_quiescence": true,
|
||||
"native_owned_stage_absent": true,
|
||||
"all_three_launcher_exits_zero": true,
|
||||
"native_process_classification": "three dead adopted zombies reported reaped; no independent retrospective process-tree claim",
|
||||
"runtime_activated": false,
|
||||
"model_calls": 0,
|
||||
"remote_mutations": 0
|
||||
}
|
||||
|
|
@ -0,0 +1,49 @@
|
|||
"""Read only: independently compare retained native public checkpoint and digest."""
|
||||
import hashlib
|
||||
import json
|
||||
from pathlib import Path
|
||||
import shlex
|
||||
import subprocess
|
||||
|
||||
HERE = Path(__file__).resolve().parent
|
||||
ACTION = HERE.parent / 'native-runtime-install-r3'
|
||||
DIGEST = 'f59959b605a51abd2901becde14e7abd852c2bd3f848004b51d250d1cb81af6d'
|
||||
local = json.loads((ACTION / 'execution-receipt.json').read_text())
|
||||
assert local['status'] == 'installed_runtime_offline_rehearsal_verified'
|
||||
expected = dict(local)
|
||||
for name in ('ssh_exit_code', 'staging_identity'):
|
||||
expected.pop(name)
|
||||
expected['owned_staging_removed'] = False
|
||||
expected['cleanup_status'] = 'pending'
|
||||
expected_bytes = (json.dumps(expected, sort_keys=True) + '\n').encode()
|
||||
expected_checkpoint_sha = hashlib.sha256(expected_bytes).hexdigest()
|
||||
reader = (ACTION / 'runtime.py').read_text()
|
||||
assert hashlib.sha256(reader.encode()).hexdigest() == '19b5fb687288bbc836978b0251599dc1e4d1593e8b5efee85a6abb6a7f388412'
|
||||
code = r'''import hashlib,json,os,stat,sys
|
||||
from pathlib import Path
|
||||
digest='f59959b605a51abd2901becde14e7abd852c2bd3f848004b51d250d1cb81af6d'
|
||||
stage=Path('/home/tegwick/.helixforge-factory/runtime-verify-f599-r3-20261017')
|
||||
checkpoint=Path(str(stage)+'.receipt.json')
|
||||
s=checkpoint.lstat()
|
||||
assert stat.S_ISREG(s.st_mode) and s.st_uid==1000 and s.st_gid==1000 and stat.S_IMODE(s.st_mode)==0o600 and s.st_nlink==1 and s.st_size<=65536
|
||||
raw=checkpoint.read_bytes();j=json.loads(raw)
|
||||
assert hashlib.sha256(raw).hexdigest()==sys.argv[2]
|
||||
assert j['revision']==3 and j['status']=='installed_runtime_offline_rehearsal_verified'
|
||||
assert j['cleanup_status']=='pending' and j['owned_staging_removed'] is False and j['durable_receipt_before_cleanup'] is True
|
||||
assert j['process_supervision']['quiescent'] is True and j['process_supervision']['no_live_or_waitable_descendants'] is True
|
||||
assert j['rehearsal']['steps']=={'rein-aharness':0,'glas-harness':0,'claude':0}
|
||||
assert not stage.exists() and not stage.is_symlink()
|
||||
scope={};exec(compile(sys.argv[1],'approved_public_digest_reader','exec'),scope)
|
||||
store=Path('/home/tegwick/.helixforge-factory/runtimes');s2=store.lstat()
|
||||
assert s2.st_uid==1000 and s2.st_gid==1000 and stat.S_IMODE(s2.st_mode)==0o700 and s2.st_dev==2049 and s2.st_ino==4751222
|
||||
assert scope['runtime_digest'](store/digest)==digest
|
||||
print(json.dumps({'status':'verified_read_only','full_native_runtime_digest_verified':True,'native_checkpoint_sha256':'sha256:'+hashlib.sha256(raw).hexdigest(),'native_checkpoint_matches_exact_precleanup_local_reconstruction':True,'checkpoint_mode':'0600','checkpoint_reports_positive_quiescence':True,'native_owned_stage_absent':True,'all_three_launcher_exits_zero':True,'native_process_classification':'three dead adopted zombies reported reaped; no independent retrospective process-tree claim','runtime_activated':False,'model_calls':0,'remote_mutations':0}))'''
|
||||
remote = '/usr/bin/python3 -I -B -c ' + shlex.quote(code) + ' ' + shlex.quote(reader) + ' ' + shlex.quote(expected_checkpoint_sha)
|
||||
cp = subprocess.run(['ssh', '-o', 'BatchMode=yes', '-o', 'ConnectTimeout=15', 'railiance01', remote],
|
||||
stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, timeout=100)
|
||||
assert cp.returncode == 0, 'read-only verification refused; private diagnostics suppressed'
|
||||
result = json.loads(cp.stdout)
|
||||
with (HERE / 'verified-native-result.json').open('x') as stream:
|
||||
json.dump(result, stream, indent=2)
|
||||
stream.write('\n')
|
||||
print(json.dumps(result))
|
||||
|
|
@ -0,0 +1,24 @@
|
|||
{
|
||||
"status": "all_selected_public_trial_and_review_sources_published",
|
||||
"head": "c034f59befba077ed6c0e2bfc8679aa648aa9ed6",
|
||||
"remote_exact": true,
|
||||
"final_receiving_commit": "c034f59befba077ed6c0e2bfc8679aa648aa9ed6",
|
||||
"primary": "primary/railiance01",
|
||||
"batch_commits": [
|
||||
"ffd995213c1d980172598a0f97371e4e9a63c75e",
|
||||
"6844177f48e15158678232d8259b87abded67b12",
|
||||
"4016f3bdeefeb389b59e28722d1e897285dbf3d2",
|
||||
"c034f59befba077ed6c0e2bfc8679aa648aa9ed6"
|
||||
],
|
||||
"selected_file_hashes_verified": 63,
|
||||
"unrelated_worktree_and_index_entries_preserved": 8,
|
||||
"normal_gates_used": true,
|
||||
"prior_refusals_retained": [
|
||||
"batch0 projection pending uncommitted workplan",
|
||||
"batch1 remote advanced through independent concurrent source commit"
|
||||
],
|
||||
"r2_outcome": "failed_partial_install_verified",
|
||||
"r3_outcome": "exactapproved_read_only_cpu_refused_no_native_execution",
|
||||
"key39_parent": "active",
|
||||
"native_target_gates_closed": 0
|
||||
}
|
||||
|
|
@ -983,7 +983,7 @@ Evidence: dated 17 October `native-identity-r1`, `native-registration-r1`,
|
|||
`native-source-publication-r1/verified-bindings.json`, and
|
||||
`storage-share-tls-r1/source-history-followthrough-r2.json`.
|
||||
|
||||
## Partial runtime installation and pending verification, 2026-10-17
|
||||
## Runtime installation and refined offline verification, 2026-10-17
|
||||
|
||||
Founder approval `b6abb6ab-b182-4b4f-9f84-79ddc5ad91f3` authorized exact
|
||||
installation proposal revision 2, SHA256
|
||||
|
|
@ -1006,18 +1006,32 @@ process/cleanup checks passed. These local checks establish no native acceptance
|
|||
|
||||
The founder approved exact revision 3, SHA256
|
||||
`7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30`,
|
||||
under decision `bec667cc-15ea-4f87-ae16-111f08562e48`. Its fresh read-only
|
||||
under decision `bec667cc-15ea-4f87-ae16-111f08562e48`. Its first read-only
|
||||
preflight refused CPU headroom (99.25% busy; limit 85%) before any remote write
|
||||
or launcher call. No revision 3 execution receipt exists and no automatic poll
|
||||
or retry follows. The approved helper has no installation or runtime archive
|
||||
transfer path. Infrastructure cost and interruption/recovery loss in EUR remain
|
||||
unknown. No model call, credential/profile/queue change, Custodian migration,
|
||||
autopilot grant or native target gate closure follows from either preparation.
|
||||
or launcher call. After the main publication checks finished, one fresh preflight
|
||||
passed with 66.33% CPU busy. The exact approved controller then ran once: all
|
||||
three original empty-egress offline launcher checks exited zero, with complete
|
||||
f599 digest equality before and after. Its public process journal records three
|
||||
dead adopted zombies reaped and positive quiescence before staging removal.
|
||||
|
||||
Independent read-only verification matched the retained native0600 checkpoint
|
||||
to the exact local precleanup receipt reconstruction (SHA256
|
||||
`8e6468c2cbb89f1a6feb038d2f53e888d14b1bf4c64f93386e39802cf7916282`),
|
||||
verified the complete installed digest again and confirmed owned staging absent.
|
||||
This preserves the failed revision 2 outcome in the same refined trial; its
|
||||
native failure's cause remains unproven. No original unchanged-success credit
|
||||
or autopilot promotion follows.
|
||||
|
||||
Revision 3 made no installation, model/provider call, credential/profile/catalog/
|
||||
queue change or Custodian migration. Infrastructure cost in EUR remains unmeasured.
|
||||
This establishes native offline startup only; T07, TSA-06, KEY39 and all sixteen
|
||||
native target gates retain their separate acceptance requirements.
|
||||
|
||||
Evidence: `native-runtime-install-r2/execution-receipt.json`,
|
||||
`native-runtime-install-review-r2/installed-partial-verification.json`,
|
||||
`native-runtime-install-r3/FINAL-PROPOSAL.md`, and
|
||||
`native-runtime-install-r3/{FINAL-PROPOSAL.md,execution-receipt.json}`, and
|
||||
`native-runtime-install-review-r3/{root-review,approval-decision,approved-preflight}.json`
|
||||
plus `approved-followthrough-preflight.json` and `verified-native-result.json`
|
||||
in the dated 17 October packet.
|
||||
|
||||
## KEY-WP-0039 finalization review, 2026-10-17
|
||||
|
|
@ -1027,8 +1041,12 @@ T01 and T03 are done, and all 14 reviewed executable/test/producer-decision
|
|||
pins plus three Platform source pins still match. The later workplan narrative
|
||||
is not a change to those reviewed executables. Existing source acceptance,
|
||||
registration go `caafe4be-4f68-47b4-9567-316d47b94992` and the standing attended
|
||||
rule remain valid; no new helper protocol or repeated registration approval is
|
||||
needed.
|
||||
rule remain valid. Exact Hub readback identifies that registration decision as
|
||||
KEY-WP-0037-T03's original `secrets-engine-openbao` registration; it does not
|
||||
authorize new probe credentials or coding-client custody. There is no reason
|
||||
to repeat that original registration approval or create another helper protocol.
|
||||
The reviewed-command standing rule and any new custody-scope admission remain
|
||||
separate authority questions.
|
||||
|
||||
The parent cannot finish yet. T02 requires actual negative-claim/expiry refusals,
|
||||
a committed value-free receipt and removal of the probe clients. No such native
|
||||
|
|
|
|||
|
|
@ -1170,7 +1170,7 @@ All current task statuses remain appropriate: T03/T05/T06 progress, T04 todo,
|
|||
T01/T02 done. No completion percentage or native closure is inferred from the
|
||||
new completed source-review tasks. This remains the active implementation goal.
|
||||
|
||||
## Failed runtime trial with verified partial installation, 2026-10-17
|
||||
## Runtime installation and refined offline verification, 2026-10-17
|
||||
|
||||
Exact founder-approved installation revision 2 ran once under decision
|
||||
`b6abb6ab-b182-4b4f-9f84-79ddc5ad91f3`. The inactive f599 runtime is installed
|
||||
|
|
@ -1189,20 +1189,31 @@ and 29 frozen revision 2 file pins; five focused local process/cleanup checks pa
|
|||
The founder approved exact revision 3 under
|
||||
`bec667cc-15ea-4f87-ae16-111f08562e48`, proposal SHA256
|
||||
`7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30`.
|
||||
Its fresh read-only preflight refused CPU headroom (99.25% busy; limit 85%).
|
||||
No revision 3 remote write, launcher call or automatic retry occurred.
|
||||
Its first read-only preflight refused CPU headroom (99.25% busy; limit 85%).
|
||||
After the main publication checks finished, one fresh preflight passed at 66.33%
|
||||
CPU busy. The exact approved controller ran once. All three original empty-egress
|
||||
offline launcher checks exited zero with complete f599 before/post digest equality;
|
||||
its journal reports three dead adopted zombies reaped and positive quiescence.
|
||||
Independent native readback verified full f599 again, owned staging absence and
|
||||
the retained0600 public checkpoint's exact match to the local precleanup receipt.
|
||||
The same trial records refined success with the original failed revision 2
|
||||
receipt/history preserved; no unchanged original-success credit is inferred.
|
||||
No reinstall, model call, credential/profile/queue change or autonomous live
|
||||
retry is authorized by the failed revision 2 run. EUR cost/risk remain unknown.
|
||||
retry is authorized by the failed revision 2 run. Revision 3's separate exact
|
||||
approval covers the completed verification only. EUR cost remains unmeasured.
|
||||
All six task blocks, UUIDs and statuses remain unchanged; all sixteen native
|
||||
target gates remain open. Evidence is linked from the implementation document's
|
||||
dated partial-runtime-installation checkpoint.
|
||||
|
||||
2026-10-17 user-directed KEY-WP-0039 finalization review: its accepted source
|
||||
deliverables remain done (T01/T03); all 14 reviewed executable/test/decision pins
|
||||
and three Platform pins still match. Existing registration go and standing
|
||||
attended authorization remain valid. T02's actual negative/expiry/revoke/cleanup
|
||||
and three Platform pins still match. Exact Hub readback confirms the existing
|
||||
registration go covers KEY37-T03's original secrets-engine-openbao client; it
|
||||
does not admit new probe credentials or coding-client custody. That original
|
||||
approval remains valid, and the reviewed-command standing attended rule has its
|
||||
separate existing scope. T02's actual negative/expiry/revoke/cleanup
|
||||
receipt is absent in the bounded source search; KEY38-T02/T03 and the existing
|
||||
unadmitted coding-client custody/owner readiness returns remain prerequisites.
|
||||
The parent stays active, T02 waits, and no native gate closes. No new helper
|
||||
protocol or repeated source/registration approval is required. Evidence:
|
||||
protocol or repeated original-client registration approval is required. Evidence:
|
||||
`docs/changes/netkingdom-target-2026-10-17/key39-infra-finalization-r1/`.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue