diff --git a/.kaizen/agents/custodian-codex/supervision.json b/.kaizen/agents/custodian-codex/supervision.json index 68d77ab..b5c32b4 100644 --- a/.kaizen/agents/custodian-codex/supervision.json +++ b/.kaizen/agents/custodian-codex/supervision.json @@ -1055,14 +1055,18 @@ "cost_note": "No added infrastructure or paid service; human effort and availability risk are unpriced.", "risk_estimate": "Moderate availability risk: one Recreate restart, another if rollback is needed. No Secret, policy, image, database or credential changes. Existing single uncovered repository remains out of scope.", "disposition": "accepted_unchanged", - "outcome": "not_executed", + "outcome": "unverified", "approval_ref": "cb9a20f9-5f8d-411f-b034-b15856c0efb5", "approved_revision": 1, "approved_digest_sha256": "90bb3a1a35729396b02a377d8db62e1d1f8f38d8e24e601dbc3d4446cffd05e8", - "executed_revision": null, - "reason": "Founder actual conditional go; both independent owner reviews accepted exact original sealed revision1. No execution yet; failed/unverified outcomes will be retained and no authority promotion granted.", + "executed_revision": 1, + "reason": "Exact admitted native phases verified; overall publication/checkpoint acceptance still pending. No authority promotion.", "decision_request_ref": "cb9a20f9-5f8d-411f-b034-b15856c0efb5", - "owner_reviews_ref": "docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/owner-reviews.json" + "owner_reviews_ref": "docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/owner-reviews.json", + "executed_digest_sha256": "90bb3a1a35729396b02a377d8db62e1d1f8f38d8e24e601dbc3d4446cffd05e8", + "execution_ref": "docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/activation-r1.json", + "execution_started_at": "2026-10-18T14:46:47.932140+00:00", + "partial_verified_outcome": "Native exact stage and activation verified;166 scanner fragments,1328 protected hooks,old/new startup guard,inheritance,quarantine,unavailable/clean recovery and cleanup. Apps source2fdc198b published. Ordinary Custodian publication/readback pending." } ], "trials": [ diff --git a/docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/README.md b/docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/README.md index c3dafae..db819b1 100644 --- a/docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/README.md +++ b/docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/README.md @@ -1,6 +1,12 @@ # T20: exact receive-scanner activation and recovery -Status: **prepared and tested; no live change, owner assent or founder go**. +Status: **native stage and activation verified; ordinary Custodian publication/readback pending**. + +Founder decision `cb9a20f9-5f8d-411f-b034-b15856c0efb5` records the actual +conditional go, now satisfied by the two independent owner approvals in +`owner-reviews.json`. Native receipts: `stage-r1.json` and `activation-r1.json`. +The two Apps declarations are published at `2fdc198b2bb8e6d4ad50768c22cf99328828eb4f`. +The prepared proposal remains byte-for-byte unchanged. Stable proposal `FORGE10-RECEIVE-BATCH-20261018`, revision **1**, exact [`proposal.json`](proposal.json) digest: @@ -96,12 +102,13 @@ and verifies all protected metadata. Then restore only exact Apps postimages to their sealed preimages and normally publish that inverse in the same session. Do not overwrite unknown drift. Retain inert public binaries/ConfigMap. -## Admission still needed +## Admission history -The founder decides the exact supervised live change; Forge and Apps supply +The founder decided the exact supervised live change; Forge and Apps supplied their owner judgements. A founder may personally supply both reviews under the [founder fallback](../../../../canon/standards/delegated-owner-review_v0.1.md). -No owner verdict is written here by the requesting Custodian agent. +The independently written owner verdicts are retained separately; the requesting +Custodian agent recorded their return and the actual founder decision. Review questions, for the owner or founder to answer: diff --git a/docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/activation-r1.json b/docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/activation-r1.json new file mode 100644 index 0000000..4c6adfa --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/activation-r1.json @@ -0,0 +1,98 @@ +{ + "proposal_id": "FORGE10-RECEIVE-BATCH-20261018", + "proposal_sha256": "sha256:90bb3a1a35729396b02a377d8db62e1d1f8f38d8e24e601dbc3d4446cffd05e8", + "revision": 1, + "mode": "apply", + "result": "verified", + "events": [ + { + "phase": "preflight-verified", + "pod_uid": "d4728052-b8df-4574-8a3e-74490a04472d", + "hook_profiles": 166, + "allocated_resources": [ + "Allocated resources:", + " (Total limits may be over 100 percent, i.e., overcommitted.)", + " Resource Requests Limits", + " -------- -------- ------", + " cpu 3605m (90%) 37500m (937%)", + " memory 9856Mi (61%) 34562Mi (216%)", + " ephemeral-storage 256Mi (0%) 1Gi (0%)", + " hugepages-1Gi 0 (0%) 0 (0%)", + " hugepages-2Mi 0 (0%) 0 (0%)" + ], + "incremental_requests": "0; same containers/resources, Recreate strategy" + }, + { + "phase": "owner-source-verified", + "commit": "2fdc198b2bb8e6d4ad50768c22cf99328828eb4f" + }, + { + "phase": "native-exact-binary-probe", + "clean_push": true, + "intermediate_secret_refused": true, + "quarantine_discarded": true, + "scanner_unavailable_refused": true, + "clean_recovery": true, + "temporary_probe_removed": true, + "builtin_authorization_excluded": true + }, + { + "phase": "configmap-create-intent", + "name": "forgejo-secret-template-832f6dc6b809" + }, + { + "phase": "deployment-patch-intent", + "before_pod_uid": "d4728052-b8df-4574-8a3e-74490a04472d" + }, + { + "phase": "hook-control-create-intent", + "direction": "apply" + }, + { + "phase": "hook-update-intent", + "direction": "apply", + "control_directory": "/tmp/custodian-scanner-migration-XXPAGEMF" + }, + { + "phase": "hook-update-verified", + "hook_files_verified": 166, + "direction": "apply" + }, + { + "phase": "control-directory-removed", + "directory": "/tmp/custodian-scanner-migration-XXPAGEMF" + }, + { + "phase": "native-exact-binary-probe", + "clean_push": true, + "intermediate_secret_refused": true, + "quarantine_discarded": true, + "scanner_unavailable_refused": true, + "clean_recovery": true, + "temporary_probe_removed": true, + "builtin_authorization_excluded": true + }, + { + "phase": "template-inheritance-probe-intent" + }, + { + "phase": "template-inheritance-verified", + "mounted_hook_regular": true, + "inherited_hook_regular_executable": true, + "hook_sha256": "832f6dc6b809de4dad401b283a77eb1372b9d29f62b893010f1cecd0af5d01de", + "inherited_hook_malformed_input_refused": true, + "scope": "Native Git init with actual Forgejo global configuration in an owned temporary bare repository; not production API repository creation." + }, + { + "phase": "all-scoped-runtime-checks-verified", + "pod_uid": "b9c59178-2223-46e8-842b-2bc473f55940" + }, + { + "phase": "activation-verified", + "pod_uid": "b9c59178-2223-46e8-842b-2bc473f55940" + }, + { + "phase": "completed" + } + ] +} diff --git a/docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/apps-publication-verification.json b/docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/apps-publication-verification.json new file mode 100644 index 0000000..14afef2 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/apps-publication-verification.json @@ -0,0 +1,11 @@ +{ + "owner": "railiance-apps", + "source_commit": "2fdc198b2bb8e6d4ad50768c22cf99328828eb4f", + "normal_publication_verified": true, + "expected_commit": "2fdc198b2bb8e6d4ad50768c22cf99328828eb4f", + "derived_commit": "2fdc198b2bb8e6d4ad50768c22cf99328828eb4f", + "instance_role": "primary", + "instance_label": "railiance01", + "unrelated_state_preserved": true, + "scope": "Exact two Apps declaration files; no Helm replay." +} diff --git a/docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/stage-r1.json b/docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/stage-r1.json new file mode 100644 index 0000000..03702bc --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/stage-r1.json @@ -0,0 +1,48 @@ +{ + "proposal_id": "FORGE10-RECEIVE-BATCH-20261018", + "proposal_sha256": "sha256:90bb3a1a35729396b02a377d8db62e1d1f8f38d8e24e601dbc3d4446cffd05e8", + "revision": 1, + "mode": "stage", + "result": "verified", + "events": [ + { + "phase": "preflight-verified", + "pod_uid": "d4728052-b8df-4574-8a3e-74490a04472d", + "hook_profiles": 166, + "allocated_resources": [ + "Allocated resources:", + " (Total limits may be over 100 percent, i.e., overcommitted.)", + " Resource Requests Limits", + " -------- -------- ------", + " cpu 3605m (90%) 37500m (937%)", + " memory 9856Mi (61%) 34562Mi (216%)", + " ephemeral-storage 256Mi (0%) 1Gi (0%)", + " hugepages-1Gi 0 (0%) 0 (0%)", + " hugepages-2Mi 0 (0%) 0 (0%)" + ], + "incremental_requests": "0; same containers/resources, Recreate strategy" + }, + { + "phase": "stage-intent", + "directory": "/data/security/receive-secret-scan/20261018-73ee04078786" + }, + { + "phase": "native-exact-binary-probe", + "clean_push": true, + "intermediate_secret_refused": true, + "quarantine_discarded": true, + "scanner_unavailable_refused": true, + "clean_recovery": true, + "temporary_probe_removed": true, + "builtin_authorization_excluded": true + }, + { + "phase": "stage-complete", + "stage_verified": true, + "already_staged": false + }, + { + "phase": "completed" + } + ] +} diff --git a/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md b/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md index 07ad974..8f23595 100644 --- a/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md +++ b/workplans/CUST-WP-0080-netkingdom-security-blueprint-and-gap-closure.md @@ -27,14 +27,13 @@ Updated 18 October 2026 after the founder requested clearer progress and smaller | Complete native architecture gates | **0 of 16**: TSA-01-TSA-16 | Each requires its full deployed/consumer evidence. This is not 0% engineering progress. | | Original coordination records | **2 of 6 done**: T01-T06 | Stable umbrella IDs/UUIDs retained for existing callers; not a delivery percentage. | -**Now - T20:** finish the sealed scanner activation/recovery procedure and final -owner/founder admission. The sealed revision 1 procedure passes nine controller -test methods, sixteen isolated filesystem/receive-pack scenarios and current -server dry runs; it guards both old and new binaries across the restart and -verifies 166 scanner fragments plus 1,328 protected hook files. The published correction scans the refused 141-object -change in **52.53 seconds**, with **54 distinct passing leaf cases**. Exact native -forward/inverse simulation and server dry runs pass. Live installation still -requires independent admission and the founder's go for that exact change. +**Now - T20:** the exact founder-admitted revision has passed native activation: +166 scanner fragments updated, 1,328 protected hook files preserved, both-version +startup custody and actual template inheritance verified, clean/blocked/unavailable +receive-pack and cleanup proofs passed. The two Apps declarations are published at +2fdc198b. Ordinary Custodian publication and 40-task Hub readback remain before +this checkpoint closes. No complete architecture gate is inferred from this scoped +scanner migration. **Next - T14/T15:** implement and verify the selected current KeyCape checks on ongoing browser/API/Git HTTP and SSH paths, using the existing producer clients. @@ -350,7 +349,7 @@ state_hub_task_id: "0d9df435-b9a2-5b89-833d-799785c969a9" Stage: native acceptance. Owner implementation: Forge / Apps / Repo Manager; FORGE-WP-0010-T02/T03. -Completion test: Sealed [activation/recovery revision 1](../docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/README.md) passes nine controller test methods and sixteen isolated filesystem/receive-pack scenarios, including old/new guard compatibility and partial-update recovery. Current 166 scanner fragments and 1,328 protected hook files are bound; exact forward/inverse and server dry runs pass. CPU requests are 90%, with zero added requests and the existing Recreate strategy. Remaining: independent package/owner admission, exact founder go, then exact installed binary/startup verification, 166-hook migration, native inheritance/clean/blocked/unavailable/cleanup proof and ordinary source publication plus 40-task Hub readback. No live change has occurred; this remains progress. +Completion test: [Exact revision 1](../docs/changes/netkingdom-target-2026-10-18/receive-scanner-activation-r1/README.md) received founder go cb9a20f9 after independent Forge/Apps approval. Native stage and activation passed: exact binaries/startup, 166 hook fragments, 1,328 protected hook files, inherited executable hook, clean/blocked/unavailable receive-pack, quarantine and cleanup. Apps declaration 2fdc198b is published. Remaining: ordinary Custodian source publication and exact 40-task Hub readback; keep progress until both pass. ## T21 - Accept signed decisions at the native privileged consumers