From 16ab1bb490336fb2f954612b85e91f15bc5e7eff Mon Sep 17 00:00:00 2001 From: codex Date: Sat, 17 Oct 2026 13:40:48 +0200 Subject: [PATCH] Record verified native offline startup and precise KEY39 approval scope --- .../agents/custodian-codex/supervision.json | 80 +++-- .../key39-progress-readback.json | 30 ++ .../registration-approval-readback.json | 9 + .../execution-receipt.json | 282 ++++++++++++++++++ .../approved-followthrough-preflight.json | 1 + .../completed-supervision-report.json | 22 ++ .../verified-native-result.json | 14 + .../verify-native-result.py | 49 +++ .../verified-publication.json | 24 ++ docs/netkingdom-target-implementation.md | 38 ++- ...gdom-security-blueprint-and-gap-closure.md | 25 +- 11 files changed, 531 insertions(+), 43 deletions(-) create mode 100644 docs/changes/netkingdom-target-2026-10-17/key39-finalization-owner-followthrough-r1/key39-progress-readback.json create mode 100644 docs/changes/netkingdom-target-2026-10-17/key39-finalization-owner-followthrough-r1/registration-approval-readback.json create mode 100644 docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/execution-receipt.json create mode 100644 docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/approved-followthrough-preflight.json create mode 100644 docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/completed-supervision-report.json create mode 100644 docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/verified-native-result.json create mode 100644 docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/verify-native-result.py create mode 100644 docs/changes/netkingdom-target-2026-10-17/native-source-publication-r3/verified-publication.json diff --git a/.kaizen/agents/custodian-codex/supervision.json b/.kaizen/agents/custodian-codex/supervision.json index 1973200b..bd231976 100644 --- a/.kaizen/agents/custodian-codex/supervision.json +++ b/.kaizen/agents/custodian-codex/supervision.json @@ -882,7 +882,7 @@ { "proposal_id": "REINAH-WP-0008-T07-install-f599-r1", "disposition": "accepted_revised", - "outcome": "failed", + "outcome": "succeeded", "proposal_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/FINAL-PROPOSAL.md", "original_revision": 1, "original_digest_sha256": "408d779a19e0e83b3be9a80ad624c1f7b7be906d22c0a8efe6e629185cc0cd0a", @@ -891,7 +891,7 @@ "current_digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30", "target": "railiance01/92.205.62.239 account tegwick UID/GID1000; exact protected runtimes store and new f599 immutable digest directory", "expected_result": "Exact dormant artifact append with full extracted/installed/post-rehearsal f599 digest equality; three credential-free empty-egress launcher checks pass; positively quiesced owned processes and staging gone. No provider, owner/catalog/profile/queue changes or native security-gate closure.", - "verification_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r2/installed-partial-verification.json", + "verification_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/verified-native-result.json", "planned_execution_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r2/execution-receipt.json", "rollback_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/FINAL-PROPOSAL.md", "cost_estimate_eur": null, @@ -899,11 +899,11 @@ "cost_estimate": "Zero provider requests and no new paid resource; infrastructure/energy/operator EUR cost unknown, explicitly supervised.", "risk_estimate": "Shared single-node CPU/IO interruption and recovery EUR loss unknown; exact fresh headroom, private process supervision and conditional staging cleanup required. Installed digest retained inactive on partial failure.", "supervisor": "Bernd Worsch", - "approval_ref": "b6abb6ab-b182-4b4f-9f84-79ddc5ad91f3", - "approved_revision": 2, - "approved_digest_sha256": "44b17589c323e1a966caf6c1b1def123092ee289b929c8ea014bc84109103b1d", - "executed_revision": 2, - "executed_digest_sha256": "44b17589c323e1a966caf6c1b1def123092ee289b929c8ea014bc84109103b1d", + "approval_ref": "bec667cc-15ea-4f87-ae16-111f08562e48", + "approved_revision": 3, + "approved_digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30", + "executed_revision": 3, + "executed_digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30", "refinement_or_rescue": true, "promotion_evidence": false, "reason": "R1 held after root found descendant cleanup gap; founder approved exact R2 and it was executed once. R2 was partial/failed and requires review of separately prepared R3. No approval or success inferred for R3.", @@ -931,33 +931,35 @@ "revision": 3, "digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30", "manifest_sha256": "19d3a74b124a9a7236bd4b8f6fe45656b4651d875017486f0dfa515f3f81d806", - "outcome": "not_executed", + "outcome": "succeeded", "disposition": "accepted_revised", "root_review": "source_review_and_five_focused_root_checks_passed", "approval_ref": "bec667cc-15ea-4f87-ae16-111f08562e48", "approved_at": "2026-10-17T10:57:39.975862+00:00", - "preflight": "refused_cpu_headroom_0.99248; zero native mutation" + "preflight": "refused_cpu_headroom_0.99248; zero native mutation", + "executed_digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30", + "execution_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/execution-receipt.json", + "verification_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/verified-native-result.json", + "refinement_or_rescue": true } ], "pending_decision_ref": null, - "approved_at": "2026-10-17T08:34:32.549418+00:00", - "approval_record_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r2/approval-decision.json", - "supervisor_disposition": "Founder approved exact R3; fresh read-only preflight refused CPU headroom before any remote write/launch. Completed R2 failed outcome and its approval/execution remain the scored trial state; latest R3 approval is retained separately. No authority promotion or automatic retry.", - "execution_started_at": "2026-10-17T08:35:10.440830+00:00", - "execution_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r2/execution-receipt.json", - "execution_phase": "completed_failed_partial_install_independently_verified", - "approved_digest": "44b17589c323e1a966caf6c1b1def123092ee289b929c8ea014bc84109103b1d", - "executed_digest": "44b17589c323e1a966caf6c1b1def123092ee289b929c8ea014bc84109103b1d", - "verified_outcome": "R2 installed exact inactive f599; independent readback verified full digest and owned staging absence. Three-launcher proof failed with phase_receipt_unavailable/leader_left_descendants. R2 watchdog receipt reports positive process quiescence; erased process trace prevents independent retrospective process classification. Native launcher acceptance remains unverified. No automatic retry.", - "failure_receipt_sha256": "sha256:59969ad9992ac289a553e1076209ba0d04b6fa7cd171bfad83dcc1f96d80a1c6", - "failure_cause_limit": "R2 source zombie-classification bug reproduced locally; native trace removed, so causal attribution of this native failure remains unproven.", + "approved_at": "2026-10-17T10:57:39.975862+00:00", + "approval_record_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/approval-decision.json", + "supervisor_disposition": "Founder approved exact R3 after failed R2; first read-only CPU refusal preserved. After major publication checks completed, one fresh preflight passed and exact R3 controller invoked once. Successful refined verification earns no unchanged original-success credit and no authority promotion.", + "execution_started_at": "2026-10-17T11:38:08.445321+00:00", + "execution_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/execution-receipt.json", + "execution_phase": "completed_refined_native_offline_startup_verified", + "approved_digest": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30", + "executed_digest": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30", + "verified_outcome": "Exact R3 invoked once after fresh guards passed. All three original offline empty-egress launchers exit0; complete f599 before/post digests match; actual3deadadoptedzombies reaped and watchdog reports quiescence. Durable0600 public checkpoint matches exact local precleanup reconstruction; independent native readback verifies installed full f599 and owned stage absence. No reinstall/model/provider/credential/profile/catalog/queue change or native target gate closure. R2 remains failed in its immutable receipt and same-trial execution history.", "pending_revision": { "revision": 3, "digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30", "manifest_sha256": "19d3a74b124a9a7236bd4b8f6fe45656b4651d875017486f0dfa515f3f81d806", "proposal_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/FINAL-PROPOSAL.md", "disposition": "accepted_revised", - "outcome": "not_executed", + "outcome": "succeeded", "target": "railiance01/tegwick existing inactive f599; new exact verification staging and durable public precleanup receipt", "expected_result": "All three unchanged empty-egress offline launcher commands exit zero, full f599 digest before/after, durable public receipt before positive-quiescence conditional cleanup. No installation, model call, credential/profile/queue change or gate closure.", "verification_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/FINAL-PROPOSAL.md", @@ -968,7 +970,8 @@ "root_review_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/root-review.json", "decision_ref": "bec667cc-15ea-4f87-ae16-111f08562e48", "approval_ref": "bec667cc-15ea-4f87-ae16-111f08562e48", - "approved_at": "2026-10-17T10:57:39.975862+00:00" + "approved_at": "2026-10-17T10:57:39.975862+00:00", + "executed_digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30" }, "execution_attempts": [ { @@ -981,17 +984,35 @@ "execution_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r2/execution-receipt.json", "verification_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r2/installed-partial-verification.json", "verified_outcome": "R2 installed exact inactive f599; independent readback verified full digest and owned staging absence. Three-launcher proof failed with phase_receipt_unavailable/leader_left_descendants. R2 watchdog receipt reports positive process quiescence; erased process trace prevents independent retrospective process classification. Native launcher acceptance remains unverified. No automatic retry.", - "failure_receipt_sha256": "sha256:59969ad9992ac289a553e1076209ba0d04b6fa7cd171bfad83dcc1f96d80a1c6" + "failure_receipt_sha256": "sha256:59969ad9992ac289a553e1076209ba0d04b6fa7cd171bfad83dcc1f96d80a1c6", + "execution_started_at": "2026-10-17T08:35:10.440830+00:00", + "failure_cause_limit": "R2 source zombie-classification bug reproduced locally; native trace removed, so causal attribution of this native failure remains unproven." + }, + { + "revision": 3, + "approved_digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30", + "executed_digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30", + "approval_ref": "bec667cc-15ea-4f87-ae16-111f08562e48", + "execution_started_at": "2026-10-17T11:38:08.445321+00:00", + "execution_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/execution-receipt.json", + "outcome": "succeeded", + "refinement_or_rescue": true, + "preflight_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/approved-followthrough-preflight.json", + "first_read_only_cpu_refusal_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/approved-preflight.json", + "verified_at": "2026-10-17T11:39:57.322656+00:00", + "verification_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/verified-native-result.json", + "execution_receipt_sha256": "sha256:3f70eedcff7ff4b191bac030ce5a8b0f8e68688960b4fe35ef1745ebc8f3a6eb", + "native_checkpoint_sha256": "sha256:8e6468c2cbb89f1a6feb038d2f53e888d14b1bf4c64f93386e39802cf7916282" } ], "next_execution": { "revision": 3, "digest_sha256": "7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30", - "status": "approved_read_only_preflight_refused_cpu_headroom", + "status": "completed_once_no_automatic_replay", "execution_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/execution-receipt.json", "approval_ref": "bec667cc-15ea-4f87-ae16-111f08562e48", "approval_record_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/approval-decision.json", - "preflight_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/approved-preflight.json", + "preflight_ref": "docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/approved-followthrough-preflight.json", "native_mutations": 0, "launcher_calls": 0, "automatic_polling_or_retry": false @@ -1005,7 +1026,14 @@ "status": "resolved", "decided_by": "Bernd Worsch", "scope": "Founder actual conversation reply: Approve exact revision 3. Approval is bound only to stable proposal REINAH-WP-0008-T07-install-f599-r1 revision3 SHA256 7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30, verification-only of installed inactive f599, unchanged three empty-egress launcher commands, repaired dead-zombie handling, exclusive durable public precleanup receipt, fresh exact guards and reviewed conditional cleanup. Unknown infrastructure/operator EUR cost and interruption/recovery loss EUR explicitly accepted only for this supervised action. No reinstall/model/credential/profile/catalog/queue changes or autopilot grant. R2 failed partial outcome retained in the same trial." - } + }, + "prior_failure_receipt_sha256": "sha256:59969ad9992ac289a553e1076209ba0d04b6fa7cd171bfad83dcc1f96d80a1c6", + "prior_failure_cause_limit": "R2 source zombie-classification bug reproduced locally; native trace removed, so causal attribution of this native failure remains unproven.", + "verified_at": "2026-10-17T11:39:57.322656+00:00", + "actual_infrastructure_and_operator_cost_eur": null, + "actual_cost_note": "Zero model/provider calls/new paid resources. Infrastructure/operator EUR cost unmeasured and remains unknown.", + "execution_receipt_sha256": "sha256:3f70eedcff7ff4b191bac030ce5a8b0f8e68688960b4fe35ef1745ebc8f3a6eb", + "native_checkpoint_sha256": "sha256:8e6468c2cbb89f1a6feb038d2f53e888d14b1bf4c64f93386e39802cf7916282" } ], "trials": [ diff --git a/docs/changes/netkingdom-target-2026-10-17/key39-finalization-owner-followthrough-r1/key39-progress-readback.json b/docs/changes/netkingdom-target-2026-10-17/key39-finalization-owner-followthrough-r1/key39-progress-readback.json new file mode 100644 index 00000000..88a74911 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-17/key39-finalization-owner-followthrough-r1/key39-progress-readback.json @@ -0,0 +1,30 @@ +[ + { + "id": "165e29df-5a58-4314-9ec7-f8420eff72f1", + "created_at": "2026-10-17T11:32:33.188005Z", + "event_type": "note", + "summary": "Published one KEY-WP-0039 T02 Custodian coordinator finalization-review paragraph in exact owner commit40de616e078906e04c692edf7cb7a8bfbc07b5ea. All3taskblocks/frontmatter/UUIDs/dependencies unchanged: T01done,T02wait,T03done; parentactive. Existing source acceptance/registration go/standing attended rule preserved; existing KEY38 then coding-client admission/readiness then attended negative/revoke/cleanup sequence retained, no native acceptance inferred. Required consistency passed; restored generated brief writeback. Normal rmgr sync refused unrelated grandfathered ADHOC-2026-09-27-T02 UUID; no historical identity mutation. Canonical primary railiance01 receiver applied exact published commit with acknowledge_retirements=false; forge, task bindings and clean owner index/worktree independently verified. No credential/native/registration action. Evidence docs/changes/netkingdom-target-2026-10-17/key39-finalization-owner-followthrough-r1/.", + "author": "codex" + }, + { + "id": "2f769541-08ed-471c-8ebf-767ae3be7322", + "created_at": "2026-10-17T06:13:28.564115Z", + "event_type": "note", + "summary": "Orchestrated precondition work for KEY-WP-0039 (2026-10-17). Source only: ops-warden original-intent interface (a45cf47); railiance-platform owner returns (0a9617a); ops-mason attended checklist (20b92e2); net-kingdom NK-WP-0048 split T24-T31: six adapter candidates, restart fixtures, T15 reconcile source and the 1.2 descriptor composer, 98 tests passing. Remaining gates are owner decisions and reviews and founder-attended native runs. KEY-WP-0039-T02 stays wait.", + "author": "claude-code" + }, + { + "id": "dae4fa30-0e5d-4570-b914-0d7fc5a4af7c", + "created_at": "2026-10-17T02:25:21.598000Z", + "event_type": "note", + "summary": "KEY-WP-0039 checked 2026-10-17: source complete (T01/T03 done; runner 17/17 tests pass). T02 is live execution only and stays wait: KEY-WP-0038-T02/T03 wait on NK-WP-0048-T06 (13 deps), plus owner returns in docs/proposals/2026-10-11-key39-next-execution-prerequisites.json and a founder attended native go. No live or credential action taken.", + "author": "claude-code" + }, + { + "id": "d8b71df0-5002-4ded-b688-5973d33e752b", + "created_at": "2026-10-10T11:20:52.589984Z", + "event_type": "note", + "summary": "KEY-WP-0039-T01 done (railiance-platform agreed the case list). Probe packet docs/openbao-negative-probe-clients.yaml and attended script scripts/openbao_negative_probe.py with 7 tests (bae9f85). Corrections sent back: the expired case needs an otherwise-valid expiry client, and the claim probes pin the audience. T02 waits on re-agreement and an attended registry session.", + "author": "claude-code" + } +] diff --git a/docs/changes/netkingdom-target-2026-10-17/key39-finalization-owner-followthrough-r1/registration-approval-readback.json b/docs/changes/netkingdom-target-2026-10-17/key39-finalization-owner-followthrough-r1/registration-approval-readback.json new file mode 100644 index 00000000..7d199448 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-17/key39-finalization-owner-followthrough-r1/registration-approval-readback.json @@ -0,0 +1,9 @@ +{ + "id": "caafe4be-4f68-47b4-9567-316d47b94992", + "title": "Live registration go for the secrets-engine-openbao client", + "description": "KEY-WP-0037-T03. The custody boundary is approved (632a8893). Registration still needs an exact reviewed revision, image digest, a config preservation test, synthetic issuance and denial verification, and this separate live go. Resolving this decision is that live go. Opening it does not change a deployment, register the client, or generate a secret.", + "rationale": "Live go: register secrets-engine-openbao on the deployed image 6f79a2af via the NK-WP-0046 exact-match helper.", + "decision_type": "made", + "status": "resolved", + "decided_at": "2026-10-07T00:14:08.780439Z" +} diff --git a/docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/execution-receipt.json b/docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/execution-receipt.json new file mode 100644 index 00000000..372c07d3 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/execution-receipt.json @@ -0,0 +1,282 @@ +{ + "cleanup_status": "removed_after_durable_receipt_and_quiescence", + "credential_reads": false, + "destination": "/home/tegwick/.helixforge-factory/runtimes/f59959b605a51abd2901becde14e7abd852c2bd3f848004b51d250d1cb81af6d", + "durable_public_receipt": "/home/tegwick/.helixforge-factory/runtime-verify-f599-r3-20261017.receipt.json", + "durable_receipt_before_cleanup": true, + "install_calls": 0, + "installed_complete_digest_verified": true, + "launcher_status": [ + { + "exit_code": 0, + "name": "rein-aharness", + "status": "completed" + }, + { + "exit_code": 0, + "name": "glas-harness", + "status": "completed" + }, + { + "exit_code": 0, + "name": "claude", + "status": "completed" + } + ], + "model_calls": 0, + "native_receipt_scope": "immutable precleanup checkpoint; final cleanup outcome in local execution receipt", + "owned_staging_removed": true, + "owner_configuration_read": false, + "phase": "offline_rehearsal", + "post_rehearsal_complete_digest_verified": true, + "process_supervision": { + "jobs": [ + { + "label": "node-read", + "leader": { + "pgrp": 4142322, + "pid": 4142322, + "ppid": 4142302, + "sid": 4142322, + "start": 23500648, + "state": "R", + "uid": 1000 + }, + "returncode": 0, + "status": "completed" + }, + { + "label": "rehearsal-phase", + "leader": { + "pgrp": 4142383, + "pid": 4142383, + "ppid": 4142302, + "sid": 4142383, + "start": 23500825, + "state": "R", + "uid": 1000 + }, + "returncode": 0, + "status": "completed" + }, + { + "label": "rein-aharness", + "leader": { + "pgrp": 4142384, + "pid": 4142384, + "ppid": 4142302, + "sid": 4142384, + "start": 23500840, + "state": "R", + "uid": 1000 + }, + "returncode": 0, + "status": "completed" + }, + { + "label": "glas-harness", + "leader": { + "pgrp": 4142389, + "pid": 4142389, + "ppid": 4142302, + "sid": 4142389, + "start": 23500901, + "state": "R", + "uid": 1000 + }, + "returncode": 0, + "status": "completed" + }, + { + "label": "claude", + "leader": { + "pgrp": 4142396, + "pid": 4142396, + "ppid": 4142302, + "sid": 4142396, + "start": 23500936, + "state": "R", + "uid": 1000 + }, + "returncode": 0, + "status": "completed" + } + ], + "leftover_at_failure": [], + "no_live_or_waitable_descendants": true, + "private_values_emitted": false, + "quiescent": true, + "reaped_orphan_zombies": [ + { + "exit_code": 0, + "facts": { + "pgrp": 4142384, + "pid": 4142385, + "ppid": 4142302, + "sid": 4142384, + "start": 23500841, + "state": "Z", + "uid": 1000 + } + }, + { + "exit_code": 0, + "facts": { + "pgrp": 4142389, + "pid": 4142390, + "ppid": 4142302, + "sid": 4142389, + "start": 23500902, + "state": "Z", + "uid": 1000 + } + }, + { + "exit_code": 0, + "facts": { + "pgrp": 4142396, + "pid": 4142397, + "ppid": 4142302, + "sid": 4142396, + "start": 23500936, + "state": "Z", + "uid": 1000 + } + } + ], + "reason": "shutdown", + "stderr_suppressed": true + }, + "proposal_id": "REINAH-WP-0008-T07-install-f599-r1", + "public_job_journal": { + "jobs": [ + { + "label": "node-read", + "leader": { + "pgrp": 4142322, + "pid": 4142322, + "ppid": 4142302, + "sid": 4142322, + "start": 23500648, + "state": "R", + "uid": 1000 + }, + "returncode": 0, + "status": "completed" + }, + { + "label": "rehearsal-phase", + "leader": { + "pgrp": 4142383, + "pid": 4142383, + "ppid": 4142302, + "sid": 4142383, + "start": 23500825, + "state": "R", + "uid": 1000 + }, + "returncode": 0, + "status": "completed" + }, + { + "label": "rein-aharness", + "leader": { + "pgrp": 4142384, + "pid": 4142384, + "ppid": 4142302, + "sid": 4142384, + "start": 23500840, + "state": "R", + "uid": 1000 + }, + "returncode": 0, + "status": "completed" + }, + { + "label": "glas-harness", + "leader": { + "pgrp": 4142389, + "pid": 4142389, + "ppid": 4142302, + "sid": 4142389, + "start": 23500901, + "state": "R", + "uid": 1000 + }, + "returncode": 0, + "status": "completed" + }, + { + "label": "claude", + "leader": { + "pgrp": 4142396, + "pid": 4142396, + "ppid": 4142302, + "sid": 4142396, + "start": 23500936, + "state": "R", + "uid": 1000 + }, + "returncode": 0, + "status": "completed" + } + ], + "reaped_orphan_zombies": [ + { + "exit_code": 0, + "facts": { + "pgrp": 4142384, + "pid": 4142385, + "ppid": 4142302, + "sid": 4142384, + "start": 23500841, + "state": "Z", + "uid": 1000 + } + }, + { + "exit_code": 0, + "facts": { + "pgrp": 4142389, + "pid": 4142390, + "ppid": 4142302, + "sid": 4142389, + "start": 23500902, + "state": "Z", + "uid": 1000 + } + }, + { + "exit_code": 0, + "facts": { + "pgrp": 4142396, + "pid": 4142397, + "ppid": 4142302, + "sid": 4142396, + "start": 23500936, + "state": "Z", + "uid": 1000 + } + } + ] + }, + "rehearsal": { + "credential_reads": false, + "model_calls": 0, + "owner_configuration_read": false, + "status": "rehearsed", + "steps": { + "claude": 0, + "glas-harness": 0, + "rein-aharness": 0 + } + }, + "renewal_or_catalog_or_queue_mutation": false, + "revision": 3, + "status": "installed_runtime_offline_rehearsal_verified", + "ssh_exit_code": 0, + "staging_identity": { + "inode": 4723175, + "device": 2049 + } +} diff --git a/docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/approved-followthrough-preflight.json b/docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/approved-followthrough-preflight.json new file mode 100644 index 00000000..40dc1888 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/approved-followthrough-preflight.json @@ -0,0 +1 @@ +{"installed_runtime_complete_digest_verified": true, "next_exact_command": "python3 -I -B /home/worsch/the-custodian/docs/changes/netkingdom-target-2026-10-17/native-runtime-install-r3/execute-verify.py --apply", "observed_at": "2026-10-17T11:37:36.626473+00:00", "private_configuration_reads": false, "proposal_id": "REINAH-WP-0008-T07-install-f599-r1", "provider_calls": 0, "remote_mutations": 0, "revision": 3, "status": "read_only_dry_run_passed", "target": {"account": "tegwick", "bwrap_die_with_parent_supported": true, "bwrap_version": "bubblewrap 0.9.0", "checks": {"account": true, "bwrap_parent_death_contract": true, "cpu_headroom": true, "disk_headroom": true, "durable_receipt_absent": true, "exact_installed_runtime": true, "exact_ready_node": true, "load_headroom": true, "memory_headroom": true, "protected_store": true, "staging_absent": true, "supervision_primitives": true}, "cpu_busy_fraction": 0.6632653061224489, "cpu_count": 4, "cpu_sample_seconds": 1, "destination": {"device": 2049, "directory": true, "gid": 1000, "inode": 4743998, "mode": "0o755", "symlink": false, "uid": 1000}, "disk_free_bytes": 123061723136, "durable_receipt": null, "gid": 1000, "installed_complete_digest": "f59959b605a51abd2901becde14e7abd852c2bd3f848004b51d250d1cb81af6d", "load_average": [4.9775390625, 4.1982421875, 3.49267578125], "memory_available_bytes": 7441522688, "node_addresses": [{"address": "92.205.62.239", "type": "InternalIP"}, {"address": "2a00:1169:111:6d70::", "type": "InternalIP"}, {"address": "239.62.205.92.host.secureserver.net", "type": "Hostname"}], "node_ready": true, "pidfd_available": true, "primary_manual_contract_excerpt": ")\\&.\n.RE\n.PP\n\\fB\\-\\-die\\-with\\-parent\\fR\n.RS 4\nEnsures child process (COMMAND) dies when bwrap\\*(Aqs parent dies\\&. Kills (SIGKILL) all bwrap sandbox processes in sequence from parent to child including COMMAND process when bwrap or bwrap\\*(Aqs parent dies\\&. See prctl, PR_SET_PDEATHSIG\\&.\n.RE\n.PP\n\\fB\\-\\-as\\-pid\\-1\\fR\n.RS 4\nDo not create a process with PID=1 in the sandbox to reap child processes\\&.\n.RE\n.PP\n\\fB\\-\\-cap\\-add \\fR\\fBCAP\\fR\n.RS 4\nAdd ", "stage": null, "store": {"device": 2049, "directory": true, "gid": 1000, "inode": 4751222, "mode": "0o700", "symlink": false, "uid": 1000}, "subreaper_get_supported": true, "uid": 1000}} diff --git a/docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/completed-supervision-report.json b/docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/completed-supervision-report.json new file mode 100644 index 00000000..f740cb80 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/completed-supervision-report.json @@ -0,0 +1,22 @@ +{ + "agent_id": "custodian-codex", + "scope": "CUST-WP-0071 and CUST-WP-0073 preparation and founder-authorized Railiance changes", + "mode": "supervised", + "counts": { + "unscored": 12, + "total": 23, + "outcome_failed": 3, + "refinement_or_rescue": 12, + "outcome_succeeded": 18, + "accepted_unchanged": 8, + "adjudicated": 11, + "verified_executions": 10, + "unchanged_successes": 4, + "outcome_not_executed": 2, + "accepted_revised": 3 + }, + "unchanged_acceptance_rate": 0.7272727272727273, + "unchanged_execution_success_rate": 0.4, + "authority_granted": false, + "note": "Descriptive evidence only; null rates mean no eligible sample. Never promotes an agent." +} diff --git a/docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/verified-native-result.json b/docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/verified-native-result.json new file mode 100644 index 00000000..21bf98c9 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/verified-native-result.json @@ -0,0 +1,14 @@ +{ + "status": "verified_read_only", + "full_native_runtime_digest_verified": true, + "native_checkpoint_sha256": "sha256:8e6468c2cbb89f1a6feb038d2f53e888d14b1bf4c64f93386e39802cf7916282", + "native_checkpoint_matches_exact_precleanup_local_reconstruction": true, + "checkpoint_mode": "0600", + "checkpoint_reports_positive_quiescence": true, + "native_owned_stage_absent": true, + "all_three_launcher_exits_zero": true, + "native_process_classification": "three dead adopted zombies reported reaped; no independent retrospective process-tree claim", + "runtime_activated": false, + "model_calls": 0, + "remote_mutations": 0 +} diff --git a/docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/verify-native-result.py b/docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/verify-native-result.py new file mode 100644 index 00000000..9c13e735 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-17/native-runtime-install-review-r3/verify-native-result.py @@ -0,0 +1,49 @@ +"""Read only: independently compare retained native public checkpoint and digest.""" +import hashlib +import json +from pathlib import Path +import shlex +import subprocess + +HERE = Path(__file__).resolve().parent +ACTION = HERE.parent / 'native-runtime-install-r3' +DIGEST = 'f59959b605a51abd2901becde14e7abd852c2bd3f848004b51d250d1cb81af6d' +local = json.loads((ACTION / 'execution-receipt.json').read_text()) +assert local['status'] == 'installed_runtime_offline_rehearsal_verified' +expected = dict(local) +for name in ('ssh_exit_code', 'staging_identity'): + expected.pop(name) +expected['owned_staging_removed'] = False +expected['cleanup_status'] = 'pending' +expected_bytes = (json.dumps(expected, sort_keys=True) + '\n').encode() +expected_checkpoint_sha = hashlib.sha256(expected_bytes).hexdigest() +reader = (ACTION / 'runtime.py').read_text() +assert hashlib.sha256(reader.encode()).hexdigest() == '19b5fb687288bbc836978b0251599dc1e4d1593e8b5efee85a6abb6a7f388412' +code = r'''import hashlib,json,os,stat,sys +from pathlib import Path +digest='f59959b605a51abd2901becde14e7abd852c2bd3f848004b51d250d1cb81af6d' +stage=Path('/home/tegwick/.helixforge-factory/runtime-verify-f599-r3-20261017') +checkpoint=Path(str(stage)+'.receipt.json') +s=checkpoint.lstat() +assert stat.S_ISREG(s.st_mode) and s.st_uid==1000 and s.st_gid==1000 and stat.S_IMODE(s.st_mode)==0o600 and s.st_nlink==1 and s.st_size<=65536 +raw=checkpoint.read_bytes();j=json.loads(raw) +assert hashlib.sha256(raw).hexdigest()==sys.argv[2] +assert j['revision']==3 and j['status']=='installed_runtime_offline_rehearsal_verified' +assert j['cleanup_status']=='pending' and j['owned_staging_removed'] is False and j['durable_receipt_before_cleanup'] is True +assert j['process_supervision']['quiescent'] is True and j['process_supervision']['no_live_or_waitable_descendants'] is True +assert j['rehearsal']['steps']=={'rein-aharness':0,'glas-harness':0,'claude':0} +assert not stage.exists() and not stage.is_symlink() +scope={};exec(compile(sys.argv[1],'approved_public_digest_reader','exec'),scope) +store=Path('/home/tegwick/.helixforge-factory/runtimes');s2=store.lstat() +assert s2.st_uid==1000 and s2.st_gid==1000 and stat.S_IMODE(s2.st_mode)==0o700 and s2.st_dev==2049 and s2.st_ino==4751222 +assert scope['runtime_digest'](store/digest)==digest +print(json.dumps({'status':'verified_read_only','full_native_runtime_digest_verified':True,'native_checkpoint_sha256':'sha256:'+hashlib.sha256(raw).hexdigest(),'native_checkpoint_matches_exact_precleanup_local_reconstruction':True,'checkpoint_mode':'0600','checkpoint_reports_positive_quiescence':True,'native_owned_stage_absent':True,'all_three_launcher_exits_zero':True,'native_process_classification':'three dead adopted zombies reported reaped; no independent retrospective process-tree claim','runtime_activated':False,'model_calls':0,'remote_mutations':0}))''' +remote = '/usr/bin/python3 -I -B -c ' + shlex.quote(code) + ' ' + shlex.quote(reader) + ' ' + shlex.quote(expected_checkpoint_sha) +cp = subprocess.run(['ssh', '-o', 'BatchMode=yes', '-o', 'ConnectTimeout=15', 'railiance01', remote], + stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, timeout=100) +assert cp.returncode == 0, 'read-only verification refused; private diagnostics suppressed' +result = json.loads(cp.stdout) +with (HERE / 'verified-native-result.json').open('x') as stream: + json.dump(result, stream, indent=2) + stream.write('\n') +print(json.dumps(result)) diff --git a/docs/changes/netkingdom-target-2026-10-17/native-source-publication-r3/verified-publication.json b/docs/changes/netkingdom-target-2026-10-17/native-source-publication-r3/verified-publication.json new file mode 100644 index 00000000..9c7520a4 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-17/native-source-publication-r3/verified-publication.json @@ -0,0 +1,24 @@ +{ + "status": "all_selected_public_trial_and_review_sources_published", + "head": "c034f59befba077ed6c0e2bfc8679aa648aa9ed6", + "remote_exact": true, + "final_receiving_commit": "c034f59befba077ed6c0e2bfc8679aa648aa9ed6", + "primary": "primary/railiance01", + "batch_commits": [ + "ffd995213c1d980172598a0f97371e4e9a63c75e", + "6844177f48e15158678232d8259b87abded67b12", + "4016f3bdeefeb389b59e28722d1e897285dbf3d2", + "c034f59befba077ed6c0e2bfc8679aa648aa9ed6" + ], + "selected_file_hashes_verified": 63, + "unrelated_worktree_and_index_entries_preserved": 8, + "normal_gates_used": true, + "prior_refusals_retained": [ + "batch0 projection pending uncommitted workplan", + "batch1 remote advanced through independent concurrent source commit" + ], + "r2_outcome": "failed_partial_install_verified", + "r3_outcome": "exactapproved_read_only_cpu_refused_no_native_execution", + "key39_parent": "active", + "native_target_gates_closed": 0 +} diff --git a/docs/netkingdom-target-implementation.md b/docs/netkingdom-target-implementation.md index 54b8c04e..2de08a58 100644 --- a/docs/netkingdom-target-implementation.md +++ b/docs/netkingdom-target-implementation.md @@ -983,7 +983,7 @@ Evidence: dated 17 October `native-identity-r1`, `native-registration-r1`, `native-source-publication-r1/verified-bindings.json`, and `storage-share-tls-r1/source-history-followthrough-r2.json`. -## Partial runtime installation and pending verification, 2026-10-17 +## Runtime installation and refined offline verification, 2026-10-17 Founder approval `b6abb6ab-b182-4b4f-9f84-79ddc5ad91f3` authorized exact installation proposal revision 2, SHA256 @@ -1006,18 +1006,32 @@ process/cleanup checks passed. These local checks establish no native acceptance The founder approved exact revision 3, SHA256 `7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30`, -under decision `bec667cc-15ea-4f87-ae16-111f08562e48`. Its fresh read-only +under decision `bec667cc-15ea-4f87-ae16-111f08562e48`. Its first read-only preflight refused CPU headroom (99.25% busy; limit 85%) before any remote write -or launcher call. No revision 3 execution receipt exists and no automatic poll -or retry follows. The approved helper has no installation or runtime archive -transfer path. Infrastructure cost and interruption/recovery loss in EUR remain -unknown. No model call, credential/profile/queue change, Custodian migration, -autopilot grant or native target gate closure follows from either preparation. +or launcher call. After the main publication checks finished, one fresh preflight +passed with 66.33% CPU busy. The exact approved controller then ran once: all +three original empty-egress offline launcher checks exited zero, with complete +f599 digest equality before and after. Its public process journal records three +dead adopted zombies reaped and positive quiescence before staging removal. + +Independent read-only verification matched the retained native0600 checkpoint +to the exact local precleanup receipt reconstruction (SHA256 +`8e6468c2cbb89f1a6feb038d2f53e888d14b1bf4c64f93386e39802cf7916282`), +verified the complete installed digest again and confirmed owned staging absent. +This preserves the failed revision 2 outcome in the same refined trial; its +native failure's cause remains unproven. No original unchanged-success credit +or autopilot promotion follows. + +Revision 3 made no installation, model/provider call, credential/profile/catalog/ +queue change or Custodian migration. Infrastructure cost in EUR remains unmeasured. +This establishes native offline startup only; T07, TSA-06, KEY39 and all sixteen +native target gates retain their separate acceptance requirements. Evidence: `native-runtime-install-r2/execution-receipt.json`, `native-runtime-install-review-r2/installed-partial-verification.json`, -`native-runtime-install-r3/FINAL-PROPOSAL.md`, and +`native-runtime-install-r3/{FINAL-PROPOSAL.md,execution-receipt.json}`, and `native-runtime-install-review-r3/{root-review,approval-decision,approved-preflight}.json` +plus `approved-followthrough-preflight.json` and `verified-native-result.json` in the dated 17 October packet. ## KEY-WP-0039 finalization review, 2026-10-17 @@ -1027,8 +1041,12 @@ T01 and T03 are done, and all 14 reviewed executable/test/producer-decision pins plus three Platform source pins still match. The later workplan narrative is not a change to those reviewed executables. Existing source acceptance, registration go `caafe4be-4f68-47b4-9567-316d47b94992` and the standing attended -rule remain valid; no new helper protocol or repeated registration approval is -needed. +rule remain valid. Exact Hub readback identifies that registration decision as +KEY-WP-0037-T03's original `secrets-engine-openbao` registration; it does not +authorize new probe credentials or coding-client custody. There is no reason +to repeat that original registration approval or create another helper protocol. +The reviewed-command standing rule and any new custody-scope admission remain +separate authority questions. The parent cannot finish yet. T02 requires actual negative-claim/expiry refusals, a committed value-free receipt and removal of the probe clients. No such native diff --git a/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md b/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md index 21bb7535..762e6ddc 100644 --- a/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md +++ b/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md @@ -1170,7 +1170,7 @@ All current task statuses remain appropriate: T03/T05/T06 progress, T04 todo, T01/T02 done. No completion percentage or native closure is inferred from the new completed source-review tasks. This remains the active implementation goal. -## Failed runtime trial with verified partial installation, 2026-10-17 +## Runtime installation and refined offline verification, 2026-10-17 Exact founder-approved installation revision 2 ran once under decision `b6abb6ab-b182-4b4f-9f84-79ddc5ad91f3`. The inactive f599 runtime is installed @@ -1189,20 +1189,31 @@ and 29 frozen revision 2 file pins; five focused local process/cleanup checks pa The founder approved exact revision 3 under `bec667cc-15ea-4f87-ae16-111f08562e48`, proposal SHA256 `7d5741abc7da042d4de6cd36437801309b844760f606b3145d615fd75d6b2d30`. -Its fresh read-only preflight refused CPU headroom (99.25% busy; limit 85%). -No revision 3 remote write, launcher call or automatic retry occurred. +Its first read-only preflight refused CPU headroom (99.25% busy; limit 85%). +After the main publication checks finished, one fresh preflight passed at 66.33% +CPU busy. The exact approved controller ran once. All three original empty-egress +offline launcher checks exited zero with complete f599 before/post digest equality; +its journal reports three dead adopted zombies reaped and positive quiescence. +Independent native readback verified full f599 again, owned staging absence and +the retained0600 public checkpoint's exact match to the local precleanup receipt. +The same trial records refined success with the original failed revision 2 +receipt/history preserved; no unchanged original-success credit is inferred. No reinstall, model call, credential/profile/queue change or autonomous live -retry is authorized by the failed revision 2 run. EUR cost/risk remain unknown. +retry is authorized by the failed revision 2 run. Revision 3's separate exact +approval covers the completed verification only. EUR cost remains unmeasured. All six task blocks, UUIDs and statuses remain unchanged; all sixteen native target gates remain open. Evidence is linked from the implementation document's dated partial-runtime-installation checkpoint. 2026-10-17 user-directed KEY-WP-0039 finalization review: its accepted source deliverables remain done (T01/T03); all 14 reviewed executable/test/decision pins -and three Platform pins still match. Existing registration go and standing -attended authorization remain valid. T02's actual negative/expiry/revoke/cleanup +and three Platform pins still match. Exact Hub readback confirms the existing +registration go covers KEY37-T03's original secrets-engine-openbao client; it +does not admit new probe credentials or coding-client custody. That original +approval remains valid, and the reviewed-command standing attended rule has its +separate existing scope. T02's actual negative/expiry/revoke/cleanup receipt is absent in the bounded source search; KEY38-T02/T03 and the existing unadmitted coding-client custody/owner readiness returns remain prerequisites. The parent stays active, T02 waits, and no native gate closes. No new helper -protocol or repeated source/registration approval is required. Evidence: +protocol or repeated original-client registration approval is required. Evidence: `docs/changes/netkingdom-target-2026-10-17/key39-infra-finalization-r1/`.