Verify admitted scanner activation cb9a20f9 before publication acceptance
This commit is contained in:
codex
parent
f4f26a61d5
commit
c1fcd94812
6 changed files with 184 additions and 17 deletions
|
|
@ -1055,14 +1055,18 @@
|
|||
"cost_note": "No added infrastructure or paid service; human effort and availability risk are unpriced.",
|
||||
"risk_estimate": "Moderate availability risk: one Recreate restart, another if rollback is needed. No Secret, policy, image, database or credential changes. Existing single uncovered repository remains out of scope.",
|
||||
"disposition": "accepted_unchanged",
|
||||
"outcome": "not_executed",
|
||||
"outcome": "unverified",
|
||||
"approval_ref": "cb9a20f9-5f8d-411f-b034-b15856c0efb5",
|
||||
"approved_revision": 1,
|
||||
"approved_digest_sha256": "90bb3a1a35729396b02a377d8db62e1d1f8f38d8e24e601dbc3d4446cffd05e8",
|
||||
"executed_revision": null,
|
||||
"reason": "Founder actual conditional go; both independent owner reviews accepted exact original sealed revision1. No execution yet; failed/unverified outcomes will be retained and no authority promotion granted.",
|
||||
"executed_revision": 1,
|
||||
"reason": "Exact admitted native phases verified; overall publication/checkpoint acceptance still pending. No authority promotion.",
|
||||
"decision_request_ref": "cb9a20f9-5f8d-411f-b034-b15856c0efb5",
|
||||
"owner_reviews_ref": "docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/owner-reviews.json"
|
||||
"owner_reviews_ref": "docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/owner-reviews.json",
|
||||
"executed_digest_sha256": "90bb3a1a35729396b02a377d8db62e1d1f8f38d8e24e601dbc3d4446cffd05e8",
|
||||
"execution_ref": "docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/activation-r1.json",
|
||||
"execution_started_at": "2026-10-18T14:46:47.932140+00:00",
|
||||
"partial_verified_outcome": "Native exact stage and activation verified;166 scanner fragments,1328 protected hooks,old/new startup guard,inheritance,quarantine,unavailable/clean recovery and cleanup. Apps source2fdc198b published. Ordinary Custodian publication/readback pending."
|
||||
}
|
||||
],
|
||||
"trials": [
|
||||
|
|
|
|||
|
|
@ -1,6 +1,12 @@
|
|||
# T20: exact receive-scanner activation and recovery
|
||||
|
||||
Status: **prepared and tested; no live change, owner assent or founder go**.
|
||||
Status: **native stage and activation verified; ordinary Custodian publication/readback pending**.
|
||||
|
||||
Founder decision `cb9a20f9-5f8d-411f-b034-b15856c0efb5` records the actual
|
||||
conditional go, now satisfied by the two independent owner approvals in
|
||||
`owner-reviews.json`. Native receipts: `stage-r1.json` and `activation-r1.json`.
|
||||
The two Apps declarations are published at `2fdc198b2bb8e6d4ad50768c22cf99328828eb4f`.
|
||||
The prepared proposal remains byte-for-byte unchanged.
|
||||
|
||||
Stable proposal `FORGE10-RECEIVE-BATCH-20261018`, revision **1**, exact
|
||||
[`proposal.json`](proposal.json) digest:
|
||||
|
|
@ -96,12 +102,13 @@ and verifies all protected metadata. Then restore only exact Apps postimages to
|
|||
their sealed preimages and normally publish that inverse in the same session.
|
||||
Do not overwrite unknown drift. Retain inert public binaries/ConfigMap.
|
||||
|
||||
## Admission still needed
|
||||
## Admission history
|
||||
|
||||
The founder decides the exact supervised live change; Forge and Apps supply
|
||||
The founder decided the exact supervised live change; Forge and Apps supplied
|
||||
their owner judgements. A founder may personally supply both reviews under the
|
||||
[founder fallback](../../../../canon/standards/delegated-owner-review_v0.1.md).
|
||||
No owner verdict is written here by the requesting Custodian agent.
|
||||
The independently written owner verdicts are retained separately; the requesting
|
||||
Custodian agent recorded their return and the actual founder decision.
|
||||
|
||||
Review questions, for the owner or founder to answer:
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,98 @@
|
|||
{
|
||||
"proposal_id": "FORGE10-RECEIVE-BATCH-20261018",
|
||||
"proposal_sha256": "sha256:90bb3a1a35729396b02a377d8db62e1d1f8f38d8e24e601dbc3d4446cffd05e8",
|
||||
"revision": 1,
|
||||
"mode": "apply",
|
||||
"result": "verified",
|
||||
"events": [
|
||||
{
|
||||
"phase": "preflight-verified",
|
||||
"pod_uid": "d4728052-b8df-4574-8a3e-74490a04472d",
|
||||
"hook_profiles": 166,
|
||||
"allocated_resources": [
|
||||
"Allocated resources:",
|
||||
" (Total limits may be over 100 percent, i.e., overcommitted.)",
|
||||
" Resource Requests Limits",
|
||||
" -------- -------- ------",
|
||||
" cpu 3605m (90%) 37500m (937%)",
|
||||
" memory 9856Mi (61%) 34562Mi (216%)",
|
||||
" ephemeral-storage 256Mi (0%) 1Gi (0%)",
|
||||
" hugepages-1Gi 0 (0%) 0 (0%)",
|
||||
" hugepages-2Mi 0 (0%) 0 (0%)"
|
||||
],
|
||||
"incremental_requests": "0; same containers/resources, Recreate strategy"
|
||||
},
|
||||
{
|
||||
"phase": "owner-source-verified",
|
||||
"commit": "2fdc198b2bb8e6d4ad50768c22cf99328828eb4f"
|
||||
},
|
||||
{
|
||||
"phase": "native-exact-binary-probe",
|
||||
"clean_push": true,
|
||||
"intermediate_secret_refused": true,
|
||||
"quarantine_discarded": true,
|
||||
"scanner_unavailable_refused": true,
|
||||
"clean_recovery": true,
|
||||
"temporary_probe_removed": true,
|
||||
"builtin_authorization_excluded": true
|
||||
},
|
||||
{
|
||||
"phase": "configmap-create-intent",
|
||||
"name": "forgejo-secret-template-832f6dc6b809"
|
||||
},
|
||||
{
|
||||
"phase": "deployment-patch-intent",
|
||||
"before_pod_uid": "d4728052-b8df-4574-8a3e-74490a04472d"
|
||||
},
|
||||
{
|
||||
"phase": "hook-control-create-intent",
|
||||
"direction": "apply"
|
||||
},
|
||||
{
|
||||
"phase": "hook-update-intent",
|
||||
"direction": "apply",
|
||||
"control_directory": "/tmp/custodian-scanner-migration-XXPAGEMF"
|
||||
},
|
||||
{
|
||||
"phase": "hook-update-verified",
|
||||
"hook_files_verified": 166,
|
||||
"direction": "apply"
|
||||
},
|
||||
{
|
||||
"phase": "control-directory-removed",
|
||||
"directory": "/tmp/custodian-scanner-migration-XXPAGEMF"
|
||||
},
|
||||
{
|
||||
"phase": "native-exact-binary-probe",
|
||||
"clean_push": true,
|
||||
"intermediate_secret_refused": true,
|
||||
"quarantine_discarded": true,
|
||||
"scanner_unavailable_refused": true,
|
||||
"clean_recovery": true,
|
||||
"temporary_probe_removed": true,
|
||||
"builtin_authorization_excluded": true
|
||||
},
|
||||
{
|
||||
"phase": "template-inheritance-probe-intent"
|
||||
},
|
||||
{
|
||||
"phase": "template-inheritance-verified",
|
||||
"mounted_hook_regular": true,
|
||||
"inherited_hook_regular_executable": true,
|
||||
"hook_sha256": "832f6dc6b809de4dad401b283a77eb1372b9d29f62b893010f1cecd0af5d01de",
|
||||
"inherited_hook_malformed_input_refused": true,
|
||||
"scope": "Native Git init with actual Forgejo global configuration in an owned temporary bare repository; not production API repository creation."
|
||||
},
|
||||
{
|
||||
"phase": "all-scoped-runtime-checks-verified",
|
||||
"pod_uid": "b9c59178-2223-46e8-842b-2bc473f55940"
|
||||
},
|
||||
{
|
||||
"phase": "activation-verified",
|
||||
"pod_uid": "b9c59178-2223-46e8-842b-2bc473f55940"
|
||||
},
|
||||
{
|
||||
"phase": "completed"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
|
@ -0,0 +1,11 @@
|
|||
{
|
||||
"owner": "railiance-apps",
|
||||
"source_commit": "2fdc198b2bb8e6d4ad50768c22cf99328828eb4f",
|
||||
"normal_publication_verified": true,
|
||||
"expected_commit": "2fdc198b2bb8e6d4ad50768c22cf99328828eb4f",
|
||||
"derived_commit": "2fdc198b2bb8e6d4ad50768c22cf99328828eb4f",
|
||||
"instance_role": "primary",
|
||||
"instance_label": "railiance01",
|
||||
"unrelated_state_preserved": true,
|
||||
"scope": "Exact two Apps declaration files; no Helm replay."
|
||||
}
|
||||
|
|
@ -0,0 +1,48 @@
|
|||
{
|
||||
"proposal_id": "FORGE10-RECEIVE-BATCH-20261018",
|
||||
"proposal_sha256": "sha256:90bb3a1a35729396b02a377d8db62e1d1f8f38d8e24e601dbc3d4446cffd05e8",
|
||||
"revision": 1,
|
||||
"mode": "stage",
|
||||
"result": "verified",
|
||||
"events": [
|
||||
{
|
||||
"phase": "preflight-verified",
|
||||
"pod_uid": "d4728052-b8df-4574-8a3e-74490a04472d",
|
||||
"hook_profiles": 166,
|
||||
"allocated_resources": [
|
||||
"Allocated resources:",
|
||||
" (Total limits may be over 100 percent, i.e., overcommitted.)",
|
||||
" Resource Requests Limits",
|
||||
" -------- -------- ------",
|
||||
" cpu 3605m (90%) 37500m (937%)",
|
||||
" memory 9856Mi (61%) 34562Mi (216%)",
|
||||
" ephemeral-storage 256Mi (0%) 1Gi (0%)",
|
||||
" hugepages-1Gi 0 (0%) 0 (0%)",
|
||||
" hugepages-2Mi 0 (0%) 0 (0%)"
|
||||
],
|
||||
"incremental_requests": "0; same containers/resources, Recreate strategy"
|
||||
},
|
||||
{
|
||||
"phase": "stage-intent",
|
||||
"directory": "/data/security/receive-secret-scan/20261018-73ee04078786"
|
||||
},
|
||||
{
|
||||
"phase": "native-exact-binary-probe",
|
||||
"clean_push": true,
|
||||
"intermediate_secret_refused": true,
|
||||
"quarantine_discarded": true,
|
||||
"scanner_unavailable_refused": true,
|
||||
"clean_recovery": true,
|
||||
"temporary_probe_removed": true,
|
||||
"builtin_authorization_excluded": true
|
||||
},
|
||||
{
|
||||
"phase": "stage-complete",
|
||||
"stage_verified": true,
|
||||
"already_staged": false
|
||||
},
|
||||
{
|
||||
"phase": "completed"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
|
@ -27,14 +27,13 @@ Updated 18 October 2026 after the founder requested clearer progress and smaller
|
|||
| Complete native architecture gates | **0 of 16**: TSA-01-TSA-16 | Each requires its full deployed/consumer evidence. This is not 0% engineering progress. |
|
||||
| Original coordination records | **2 of 6 done**: T01-T06 | Stable umbrella IDs/UUIDs retained for existing callers; not a delivery percentage. |
|
||||
|
||||
**Now - T20:** finish the sealed scanner activation/recovery procedure and final
|
||||
owner/founder admission. The sealed revision 1 procedure passes nine controller
|
||||
test methods, sixteen isolated filesystem/receive-pack scenarios and current
|
||||
server dry runs; it guards both old and new binaries across the restart and
|
||||
verifies 166 scanner fragments plus 1,328 protected hook files. The published correction scans the refused 141-object
|
||||
change in **52.53 seconds**, with **54 distinct passing leaf cases**. Exact native
|
||||
forward/inverse simulation and server dry runs pass. Live installation still
|
||||
requires independent admission and the founder's go for that exact change.
|
||||
**Now - T20:** the exact founder-admitted revision has passed native activation:
|
||||
166 scanner fragments updated, 1,328 protected hook files preserved, both-version
|
||||
startup custody and actual template inheritance verified, clean/blocked/unavailable
|
||||
receive-pack and cleanup proofs passed. The two Apps declarations are published at
|
||||
2fdc198b. Ordinary Custodian publication and 40-task Hub readback remain before
|
||||
this checkpoint closes. No complete architecture gate is inferred from this scoped
|
||||
scanner migration.
|
||||
|
||||
**Next - T14/T15:** implement and verify the selected current KeyCape checks on
|
||||
ongoing browser/API/Git HTTP and SSH paths, using the existing producer clients.
|
||||
|
|
@ -350,7 +349,7 @@ state_hub_task_id: "0d9df435-b9a2-5b89-833d-799785c969a9"
|
|||
|
||||
Stage: native acceptance. Owner implementation: Forge / Apps / Repo Manager; FORGE-WP-0010-T02/T03.
|
||||
|
||||
Completion test: Sealed [activation/recovery revision 1](../docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/README.md) passes nine controller test methods and sixteen isolated filesystem/receive-pack scenarios, including old/new guard compatibility and partial-update recovery. Current 166 scanner fragments and 1,328 protected hook files are bound; exact forward/inverse and server dry runs pass. CPU requests are 90%, with zero added requests and the existing Recreate strategy. Remaining: independent package/owner admission, exact founder go, then exact installed binary/startup verification, 166-hook migration, native inheritance/clean/blocked/unavailable/cleanup proof and ordinary source publication plus 40-task Hub readback. No live change has occurred; this remains progress.
|
||||
Completion test: [Exact revision 1](../docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/README.md) received founder go cb9a20f9 after independent Forge/Apps approval. Native stage and activation passed: exact binaries/startup, 166 hook fragments, 1,328 protected hook files, inherited executable hook, clean/blocked/unavailable receive-pack, quarantine and cleanup. Apps declaration 2fdc198b is published. Remaining: ordinary Custodian source publication and exact 40-task Hub readback; keep progress until both pass.
|
||||
|
||||
## T21 - Accept signed decisions at the native privileged consumers
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue