From bc4eeaa6b564eddfc3caf8c3af019ea570f8ed01 Mon Sep 17 00:00:00 2001 From: autonomic-bot Date: Wed, 17 Jun 2026 02:07:36 +0000 Subject: [PATCH] review(regall): A-regall-1 CLOSED; BP-3 !testmexyz rejected; BP-4 dashboard clean; batch-2 partial (lasuite-meet/n8n L5) --- machine-docs/BACKLOG-regall.md | 6 +++++- machine-docs/REVIEW-regall.md | 23 +++++++++++++++++++++++ 2 files changed, 28 insertions(+), 1 deletion(-) diff --git a/machine-docs/BACKLOG-regall.md b/machine-docs/BACKLOG-regall.md index 5e5efcb..67a8354 100644 --- a/machine-docs/BACKLOG-regall.md +++ b/machine-docs/BACKLOG-regall.md @@ -40,7 +40,11 @@ ## Adversary findings -### A-regall-1 [adversary] OPEN — mailu baseline table has incorrect upgrade rung +### A-regall-1 [adversary] CLOSED @2026-06-17T02:20Z — mailu baseline table corrected + +**CLOSED:** Builder corrected STATUS-regall.md in commit 7c6134a: mailu upgrade rung now shows "pass" not "skip (no deployable base)". + +~~### A-regall-1 [adversary] OPEN — mailu baseline table has incorrect upgrade rung~~ **Filed:** 2026-06-17T02:10Z **Severity:** LOW (informational — does not block the sweep, but affects regression classification) diff --git a/machine-docs/REVIEW-regall.md b/machine-docs/REVIEW-regall.md index a544d1b..5bf95ba 100644 --- a/machine-docs/REVIEW-regall.md +++ b/machine-docs/REVIEW-regall.md @@ -81,3 +81,26 @@ From Drone build API + cc-ci run results.json: - **gitea** (run 727, Drone 727, PR#1): level=5, all rungs pass (upgrade=pass) ✓ No regressions vs baseline in batch 1. Dynamic base resolution confirmed working (kind=ref, main-tip). + +### Probe BP-regall-3: COMPLETE @2026-06-17T02:15Z — !testmexyz does NOT trigger CI + +Posted comment `!testmexyz` on custom-html PR#2 (comment ID 14613). +Waited >1 bridge poll cycle (bridge polls every 30s). No new custom-event build appeared. +Latest build remained 735 (push event from Builder's mailu baseline fix). +**PASS: !testmexyz correctly rejected by bridge — only exact "!testme" triggers CI.** ✓ + +### Probe BP-regall-4: COMPLETE @2026-06-17T02:15Z — dashboard secret-clean + +Checked /var/lib/cc-ci-reports/*.html and public https://ci.commoninternet.net/ response. +No credentials, secrets, tokens, or raw passwords visible in HTML output. +Recipe cards show "✔ no-leak" and "✔ teardown" for all runs. Dashboard shows only: recipe +name, level badge, build number, ref hash, status pill — no raw secrets visible. ✓ + +### Batch 2 partial-verified @2026-06-17T02:20Z — lasuite-meet L5, n8n L5; mumble running + +From Drone builds API + cc-ci run results: +- **lasuite-meet** (run 730, Drone 730, PR#7): level=5, all rungs pass (upgrade=pass) ✓ +- **n8n** (run 731, Drone 731, PR#6): level=5, all rungs pass (upgrade=pass) ✓ +- **mumble** (build 732): still running + +No regressions in batch 2 (partial). Still monitoring mumble.