the-custodian/docs/changes/netkingdom-target-2026-10-16/protected-execution-recovery/validation-r1.json
codex a192d24c9a
Some checks are pending
CI Smoke / host-smoke (push) Waiting to run
CI Smoke / container-smoke (push) Waiting to run
Reject generated-only commits / generated-commit-guard (push) Waiting to run
docs: preserve reviewed NetKingdom session artifacts
2026-11-01 23:14:27 +01:00

57 lines
3.2 KiB
JSON

{
"schema": "railiance-platform.protected-recovery-validation.v1",
"patch_sha256": "47812816af915534d6aec9431259f4290fb9b109a4fb47a54ed7dbd3b145c615",
"scope": "Only synthetic disposable loopback OpenBao, local owner-private fixture custody and local source checks; no estate backend, real credentials, production grant, live rollout or publication.",
"runs": [
{
"name": "initial setup",
"result": "8 errors",
"reason": "Missing SECRETS_ENGINE_SOURCE_ROOT for isolated checkout; no native fixture effects reached. Fixed runner environment, no implementation relaxation."
},
{
"name": "initial process-loss run",
"result": "7 passed, 1 assertion failure",
"reason": "OpenBao per-request UUID differs between reads. Compared stable metadata data/status instead; source recovery behavior unchanged."
},
{
"name": "broader recovery/native/journal/readback regression",
"result": "48 passed",
"seconds": 393.9,
"command": "SECRETS_ENGINE_SOURCE_ROOT=/home/worsch/secrets-engine PYTHONPATH=/home/worsch/secrets-engine/src:/home/worsch/approval-engine pytest -q tests/test_task_execution_recovery.py tests/test_task_execution_native_fixture.py tests/test_task_execution_journal.py tests/test_task_execution_readback.py",
"limit": "Started before the final recovery-pending observation addition and ninth recovery test; final frozen journal/module/test delta is covered by the final24 run below."
},
{
"name": "reopened journal process-loss subset",
"result": "3 passed, 5 deselected",
"seconds": 54.42,
"command": "same source environment; pytest -q tests/test_task_execution_recovery.py -k independent_cleanup_never_resumes_business"
},
{
"name": "final frozen recovery/journal suite",
"result": "24 passed",
"seconds": 159.31,
"command": "SECRETS_ENGINE_SOURCE_ROOT=/home/worsch/secrets-engine PYTHONPATH=/home/worsch/secrets-engine/src:/home/worsch/approval-engine pytest -q tests/test_task_execution_recovery.py tests/test_task_execution_journal.py",
"covers": [
"actual executor os.fork/os._exit at issued, business write/lost response, revoke/lost response",
"reopened public Journal plus separate independently retained private custody",
"native actual accessor invalidation and exact grant-policy absence",
"no mint/consume/business calls in recovery transport trace",
"original approval and recovery permit replay refusals",
"lost mint response without accessor remains unresolved debt",
"revoked/expired/stale/private-drift and public-flag refusals",
"revoked backend credential cannot fake cleanup success; fresh independent owner attempt recovers",
"same-name different policy never deleted",
"private file permissions and binding refusal",
"lost recovery response remains unknown across subsequent independently confirmed cleanup"
]
}
],
"checks": {
"canonical_git_apply_check": "passed",
"isolated_git_diff_check": "passed",
"source_py_compile": "passed",
"frozen_patch_and_source_after_hashes": "passed"
},
"repeat_counts": "Runs overlap; counts are not additive unique tests.",
"authority_granted": false
}