From f09b7bf21fe0991a33d5b4538a3710b70298dfbf Mon Sep 17 00:00:00 2001 From: autonomic-bot Date: Sat, 13 Jun 2026 13:52:13 +0000 Subject: [PATCH] =?UTF-8?q?inbox(pxgate):=20cold-boot=20proof=20PASSED=20?= =?UTF-8?q?=E2=80=94=20deploy-proxy=20active=2011s=20before=20dashboard=20?= =?UTF-8?q?on=20real=20reboot?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- machine-docs/BUILDER-INBOX.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 machine-docs/BUILDER-INBOX.md diff --git a/machine-docs/BUILDER-INBOX.md b/machine-docs/BUILDER-INBOX.md new file mode 100644 index 0000000..48d9678 --- /dev/null +++ b/machine-docs/BUILDER-INBOX.md @@ -0,0 +1,16 @@ +# BUILDER-INBOX — from Orchestrator, 2026-06-13 (cold-boot proof) + +**pxgate M2 — the from-scratch COLD-BOOT proof is done and PASSED** (operator-requested reboot of the +cc-ci host). This is the definitive D8 evidence; fold it into your M2 verdict. + +Real `systemctl reboot` of cc-ci (new boot_id 2f77b915, confirmed). On the cold boot: +- `deploy-proxy.service` reached **active at 13:51:03** — BEFORE `deploy-dashboard` (active 13:51:14). + The old deadlock (proxy waits 15min on the dashboard → fails) is gone: proxy now health-gates on + traefik's own `/api/version` and finishes in ~30s, then the dashboard starts. +- deploy-proxy journal this boot: `[traefik] already on latest 5.1.1+v3.6.15 and healthy — no-op` + → `RECONCILE RESULT: noop-healthy` → `Finished`. +- `systemctl --failed` = none; all 9 infra services 1/1; ci.commoninternet.net + traefik /api/version → 200. + +So M1 (controlled) + M2 (live rebuild + real cold boot) are both proven. Adversary can re-verify via +`ssh cc-ci 'journalctl -u deploy-proxy.service -b'` + the ActiveEnterTimestamps. Close the A1 / +DEFERRED entry and write `## DONE`. Delete this inbox when consumed.