|
|
006368ddae
|
note(2): cold-verify expectation — uniform overlay filename compose.ccci.yml; ghost/discourse rename = pure rename (verify byte-identical + COMPOSE_FILE updated, no smuggled behavior change)
|
2026-05-30 17:26:20 +01:00 |
|
|
|
bdef2820ba
|
review(2): POLICY RECALIBRATION — plan-ccci-compose-overlay-policy.md supersedes env-var-migration premise (which my repro 4b862f6 proved impossible). Overlays are a justified fallback; Builder's literal-recipe-PR start_period bumps are COMPLIANT (prefer-upstream path) — overlay deletions NOT violations. REVERSE prior lean to grant discourse §7.1 upgrade-tier deferral: upgrade-to-latest must ALWAYS run (re-pin overlay on 0.7.0 from-version now blessed). mumble: drop old-base host-ports copy, upgrade-to-latest+voice on latest. WITHDRAW 14:23 VETO; new re-scoped VETO on DONE
|
2026-05-30 17:22:38 +01:00 |
|
|
|
4b862f61ca
|
review(2): F2-14a oq-1 RESOLVED (Builder's favor) — independently reproduced abra FATA on env-interpolated start_period (${APP_START_PERIOD:-5m} → 'Does not match format duration' at app new; literal 20m creates OK). Env-var form genuinely impossible for start_period; literal recipe-PR bump is §9-compliant. oq-2 (5m→20m default acceptability) + green maximal-subset run remain; ghost/mumble open; VETO stands
|
2026-05-30 17:11:14 +01:00 |
|
|
|
70a8e72a0e
|
review(2): F2-14a corrections — install_steps DELETED (not no-op); env-interp-impossible is documented (abra FATA start_period format, lasuite-drive precedent) → likely justifies literal bump pending my abra re-check at claim; VETO stands
|
2026-05-30 16:45:50 +01:00 |
|
|
|
c8f5912c00
|
review(2): F2-14a discourse overlay migration mechanically DONE (overlay deleted, no COMPOSE_FILE, install_steps no-op) — but OPEN: literal 5m→20m start_period bump deviates from policy E2 env-var/default-current; settle at claim (prove abra-can't-interpolate OR use env var; confirm default-change acceptable); not a verdict, VETO stands
|
2026-05-30 16:42:16 +01:00 |
|
|
|
5c2d4c2af3
|
review(2): break-it teardown sweep CLEAN (0 orphan stacks/volumes, warm infra 1/1); minor stale-.env nit (3 files, 0 live resources/secrets — cosmetic, not a veto); note discourse policy-compliant pivot c346b97 (verify on claim)
|
2026-05-30 15:58:07 +01:00 |
|
|
|
4008c47ff4
|
review(2): ACK new anti-compose-overlay policy + SCOPED VETO on DONE — discourse/ghost start_period must migrate to env PR (ghost Q4.4 + mumble Q4.2 passes now CONDITIONAL); REVERSE discourse Q4.6 §7.1 (now GRANT upgrade-from-removed-image-base deferral per policy pt2); drift evidence = overlay-merge YAML dup-key fail
|
2026-05-30 15:23:43 +01:00 |
|
|
|
1d83beb6bd
|
review(2): discourse Q4.6 §7.1 DECISIVE FACT RESOLVED — prev[-2]=0.6.3+3.1.2(img3.1.2) but [-1]=0.7.0+3.3.1(img3.3.1)=PR's true predecessor; honest 0.7.0->0.8.0 crossover achievable via uniform bitnamilegacy:3.3.1 overlay + base-on-[-1]; obstacle is modest base-selection fix not env blocker; leaning DENY (not a verdict, gate unclaimed)
|
2026-05-30 14:10:11 +01:00 |
|
|
|
6a5c5f3e13
|
review(2): discourse Q4.6 §7.1 pre-positioning — premise VERIFIED first-hand (all bitnami/discourse:{3.1.2,3.3.1,3.4.5}=404, bitnamilegacy=200, upstream newest 0.8.0+3.4.5); deferral NOT yet established (honest uniform-overlay crossover may make upgrade tier testable iff prev base==head image ver); decisive fact OPEN; bar set; not a verdict
|
2026-05-30 14:07:50 +01:00 |
|
|
|
dd00934b4f
|
review(2): CORRECTION — retract garbled host specifics in 977b01f dashboard probe (no /var/lib dir; dashboard pulls Drone builds API filtered by RECIPE); verified fact 'no recipe runs yet' + Q5/DONE criterion stand; rewrite inbox accurately
|
2026-05-30 13:35:34 +01:00 |
|
|
|
977b01fb66
|
review(2): break-it probe — LIVE dashboard has 0 run records (data dir empty, mtime 06:01Z); D7/P1 forward-looking criterion for Q5/DONE; NOT a veto; corrects earlier garbled api/runs line
|
2026-05-30 13:31:32 +01:00 |
|
|
|
e850281bd6
|
review(2): §7.1 — discourse Q4.6 sign-off DENIED (bitnamilegacy/discourse:3.3.1 served → 1-line re-pin recipe-PR unblocks; not a hard upstream block); plausible Q4.7-full root-caused (CH crash-loop = silenced-wget restart-storm in custom entrypoint, clickhouse-server never starts; recipe-PR-fixable, not env-immutable) sign-off HELD→leaning-DENY pending retry loop
|
2026-05-30 10:29:41 +01:00 |
|
|
|
58e0a27ad5
|
review(2): §7.1 sign-off adjudication IN PROGRESS — drone Q4.10 operator-block CONFIRMED legit (sign-off warranted; /etc/timezone absent first-hand, fix 3bde76f needs host rebuild); plausible-full cold retry-loop RUNNING (will refute or sign-off per result); discourse pending
|
2026-05-30 10:11:23 +01:00 |
|
|
|
bb072422c1
|
review(2): Q3.1 lasuite-docs PASS — COLD full lifecycle GREEN (my clone, log adv-lasuite-docs-q31) 5 tiers, deploy-count=1 + deps ['keycloak'], real upgrade crossover 0.3.2+v5.1.0→0.3.3+v5.1.0, P4 postgres ci_marker survives restore (recipe's own restore.post-hook, no PR; non-vacuous drop+assert), clean teardown w/ per-run realm deletion + warm-keycloak preserved; CRITICAL: all 5 custom functional PASSED **NOT SKIPPED** — requires_deps guard did NOT fire — incl §4.3 test_create_doc_and_read_back (OIDC JWT→POST doc→GET roundtrip) + test_oidc_password_grant_against_dep_keycloak (per-run namespaced realm, real JWT iss/azp/typ/exp); P5 SSO-dep auto-deploy proven; no veto
|
2026-05-30 08:21:05 +01:00 |
|
|
|
baa7ad828b
|
review(2): Q4.4 ghost PASS — COLD full lifecycle GREEN (my clone, log adv-ghost-pr1) 5 tiers, deploy-count=1, real upgrade crossover 1.1.1+6-alpine→1.3.0+6.21.2-alpine (chaos 6d6227f7+U, HC1 preserved), create_post_roundtrip + restore + backup + upgrade markers PASS, clean teardown; P4 MySQL ci_marker restore proven NON-VACUOUS via PR=0 negative control (published recipe → test_restore_returns_state FAILED 'Table ghost.ci_marker doesnt exist', fail-loud) — recipe-PR ghost#1 is a genuine reimport-on-restore fix (4th data-loss recipe bug cc-ci caught); §4.3 create-post real (cookie admin session + unique-marker title+body read-back) CLOSES the ghost §4.3 floor; +U HC1 fix & healthcheck overlay reviewed legit (not weakening); clean teardown after FAILED run too; no veto
|
2026-05-30 07:57:56 +01:00 |
|
|
|
71af595915
|
review(2): Q4.7 plausible §4.3 floor NOW FIRST-HAND GREEN — my cold run (adv-plausible-cold2) install+custom pass, deploy-count=1, BOTH *_event_roundtrip PASSED (ClickHouse events_v2 read-back), clean teardown; prior readiness-404 was a transient ClickHouse-boot flake; Q4.7 first-hand-evidence obligation CLEARED; note: ClickHouse boot intermittently flaky 1/2 on single node
|
2026-05-30 04:08:04 +01:00 |
|
|
|
e45e0eea71
|
review(2): Q4.3 bluesky-pds PASS — COLD full lifecycle GREEN (my clone, log adv-bluesky-pr0) 5 tiers+4 custom, deploy-count=1, real upgrade crossover 0.1.1+v0.4→0.2.0+v0.4, clean teardown; P4 atproto-account marker non-vacuous via IN-BAND pre_restore delete+assert-gone (no recipe-PR — bluesky volume restore genuinely round-trips, real recipe diff from postgres recipes); 2 distinct P3 functional (account+post §4.3 round-trip + getSession auth-gating 401); no veto
|
2026-05-30 02:56:26 +01:00 |
|
|
|
2b4087712d
|
review(2): Q4.5 mattermost-lts PASS — COLD full lifecycle GREEN (my clone, log adv-mattermost-pr1) 5 tiers+4 custom, deploy-count=1, real upgrade crossover 10.11.15→10.11.18, clean teardown; P4 restore proven NON-VACUOUS via negative control (PR=0 published recipe → test_restore_returns_state FAILED 'relation ci_marker does not exist', fail-loud) — recipe-PR #1 is a genuine fix; 2 distinct P3 functional tests (self round-trip + cross-user delivery w/ user_b own token); clean teardown after FAILED run too; no veto
|
2026-05-30 02:35:50 +01:00 |
|
|
|
c503f7d51c
|
review(2): Q4.1 matrix-synapse PASS — COLD first-hand full lifecycle GREEN (my clone, log adv-matrix-cold); 5 tiers + 3 custom, deploy-count=1, real upgrade crossover 7.1.0→7.1.1, P4 restore ci_marker survives; §4.3 register retry verified NON-VACUOUS + reproduced the real post-restore transient (500 attempt1/2 → succeeded attempt3, full register→room→send→readback chain intact, 4xx fail-fast, timeout RAISEs); clean teardown; no veto
|
2026-05-30 01:07:53 +01:00 |
|
|
|
11c5498bfa
|
review(2): Q3.5 immich PASS — COLD first-hand full lifecycle GREEN (my clone, log adv-immich-cold); 5 tiers + 3 custom, deploy-count=1, P4 restore test_restore_returns_state PASSED (ci_marker survives recipe-PR pg_dump backup→restore; non-vacuous: pre_restore DROPs+asserts), negative control 7eb3937 lacks DB backupbot labels (bug confirmed), real upgrade crossover 1.5.1+v2.6.3→1.6.0+v2.7.5, 2 distinct P3 functional, clean teardown; P4-restore RED CLOSED; no veto
|
2026-05-30 00:36:17 +01:00 |
|
|
|
6241e735ca
|
review(2): drone leftover CLOSED (Builder removed stack+vol, node clean); immich Q3.5 P4 recipe-PR deploy in flight (immi-074f69); no gate pending; drone still operator-blocked (/etc/timezone absent)
|
2026-05-29 23:49:51 +01:00 |
|
|
|
af94708de4
|
review(2): resume checkpoint — no gate pending; drone block genuine (/etc/timezone still absent on host); leftover drone smoke stack flagged (housekeeping); immich P4-restore still OPEN, unsigned
|
2026-05-29 23:37:17 +01:00 |
|
|
|
2958eb6c97
|
review(2): Q4.9 mailu PASS — COLD first-hand full lifecycle GREEN ×2 (my clone @6a216ed); deploy-count=1, real upgrade crossover 3.0.0→3.0.1 (head_ref==chaos-version), 2 non-vacuous P3 (unique-mailbox round-trip + unique-marker postfix→dovecot delivery), wait_healthy real gate, clean teardown; P4-N/A §7.1 sign-off GRANTED (no backupbot label, independently confirmed); P5/P6 N/A justified; no veto
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-05-29 21:51:06 +01:00 |
|
|
|
594f2d3389
|
review(2): Q4.6 discourse deferral VERIFIED SOUND — bitnami/discourse:3.3.1 + :3.1.2 both GONE, bitnamilegacy present; genuine upstream env-blocker (§8), pre-cleared for DONE; no veto
|
2026-05-29 20:56:01 +01:00 |
|
|
|
1daa1ea067
|
review(2): Q4.2 mumble PASS — COLD first-hand full-lifecycle GREEN (my clone @1ba5613); 5 tiers, deploy-count=1, tcp ready-probe 2x, real upgrade crossover, P3 config round-trips non-vacuous (max_users=42 + welcome marker), P4 sqlite ci_marker survives, clean teardown; no veto. Minor: leftover mumb-smoke volume (housekeeping)
|
2026-05-29 20:34:57 +01:00 |
|
|
|
191fa774ec
|
review(2): Q4.2 mumble PRE-CLAIM code audit (NOT a verdict) — P7 non-vacuous at code level; cold-verify checklist staged for when claimed
|
2026-05-29 19:59:48 +01:00 |
|
|
|
7054e9bcd0
|
review(2): Q4.7 plausible teardown CLOSED (plau-0c70fd fully clean); cold run done, node FREE; §4.3 first-hand PASS still pending; inbox-notify Builder mumble unblocked
|
2026-05-29 19:58:01 +01:00 |
|
|
|
27abce678b
|
review(2): Q4.7 plausible CONSOLIDATED verdict — self-corrects 0efcc36+1ecae1c (both had errors); §4.3 green in ONE clean Builder log + non-vacuous; full-lifecycle unproven (upstream clickhouse stall); not cleared, no veto
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-05-29 19:45:51 +01:00 |
|
|
|
1ecae1ce27
|
review(2): Q4.7 plausible CORRECTION — retract 'no evidence'; §4.3 event tests ARE green (2 Builder logs, 1 clean) + non-vacuous; my own cold run launched; full-lifecycle still deferred
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-05-29 19:30:26 +01:00 |
|
|
|
0efcc36207
|
review(2): Q4.7 plausible — deferral sound + test content non-vacuous, but '§4.3 proven green' UNVERIFIED (no evidence log on host); Q4.7 not cleared
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-05-29 19:26:59 +01:00 |
|
|
|
0215bd2203
|
review(2): PASS gate HQ1 image pre-pull (claim 475ad5c/code 2bf40d6) — 4 unit pass (non-vacuous, raises on pull-fail); LIVE warm-cache skip (present n8n, zero network); LIVE bad-tag RAISES clear pull error BEFORE deploy (manifest unknown, not converge timeout); abra deploy real+UNCHANGED (prepull before, no service update/scale); honest scope (pull-time not init-time). No VETO
|
2026-05-29 16:18:28 +01:00 |
|
|
|
f7ed2d967c
|
review(2): cryptpad F2-9 + F2-13 CLOSED — re-verify after fix b44d75b (poll-all-frames). create-pad roundtrip test_cryptpad_pad_content_survives_fresh_session PASSED (46s, was 340s timeout), all 5 tiers green, deploy-count=1, clean teardown. Fix non-vacuous (still asserts marker surfaces in fresh context = server-side encrypted persistence). §4.3 create-pad floor demonstrated; conditional sign-off satisfied
|
2026-05-29 15:37:12 +01:00 |
|
|
|
1cbb1ccd73
|
review(2): cryptpad F2-9 NOT closed — create-pad roundtrip read-back leg FAILED on cold-verify (CKEditor frame never attached on fresh context, line 133; 1 failed in 340s) → test is flaky not 3x-reliable. Filed F2-13: make read-back robust before F2-9 closes. install/upgrade/backup/restore pass, only the §4.3-floor pad-persist test red; teardown clean. NOT a VETO (F2-9 was conditional/open)
|
2026-05-29 15:05:22 +01:00 |
|
|
|
754f508231
|
review(2): record forward-looking Adversary criteria for pre-pull harness unit (plan-prepull-images.md) — verify warm-cache no-redownload + bad-tag=clear-pull-error-pre-deploy + abra stays real/unchanged + honest scope (pull-time not init-time; F2-12 init races still need healthcheck)
|
2026-05-29 14:58:38 +01:00 |
|
|
|
a46f7d4593
|
review(2): PASS gate Q3.3 lasuite-meet (claim 5af513e/code 1f7806a) — cold-verify all 5 tiers GREEN, deploy-count=1, real upgrade crossover 0.2.0+v1.15.0->0.3.0+v1.16.0, meeting_flow (room create->read-back->LiveKit video-grant JWT->delete) PASSED, OIDC PASSED not-skipped, ci_marker survives, teardown clean+realm reaped. WebRTC media-relay non-port: ADVERSARY SIGN-OFF (genuine UDP env-blocker, maximal subset=LiveKit token issuance shipped)
|
2026-05-29 14:40:15 +01:00 |
|
|
|
c7b36ebb6a
|
review(2): record operator clarification — 3x repeat-green bar is lasuite-drive-recipe-PR ONLY (flakiness proof); normal gates = ONE cold-verified green per §6.1; cryptpad F2-9 needs only 1x
|
2026-05-29 13:25:46 +01:00 |
|
|
|
af1481f6fc
|
review(2): record forward-looking Adversary criteria for parked lasuite-drive recipe-PR (Q3.2b) — keystone collabora healthcheck must let cc-ci drop -c backstop to abra-native convergence w/o regressing F2-12; repeat-green+cold-verify before operator merge. Does NOT reopen Q3.2 (PASS stands)
|
2026-05-29 13:01:01 +01:00 |
|
|
|
3f5d58a7c2
|
review(2): PASS gate Q3.2 lasuite-drive (re-claim a13d2ae/code e1147b5+6506c4a) — F2-12 CLOSED. Cold re-run: all 5 tiers GREEN, upgrade tier now passes, deploy-count=1, ready-probe OK(200) twice, OIDC+minio round-trip PASS (not skipped), data-integrity survives, teardown clean. abra -c + owned wait_healthy/READY_PROBE proven non-vacuous (5 P7-negative units + code-read RAISE paths). DECISIONS: record operator READY_PROBE principle
|
2026-05-29 12:59:52 +01:00 |
|
|
|
f7c5681cd0
|
review(2): pre-claim recon F2-12 fix e1147b5 — abra -c skips converge monitor BUT harness owns stricter wait_healthy(N/N all svcs)+READY_PROBE(collabora 200, raises on timeout); plausibly not-a-weakening, MUST cold-verify upgrade-GREEN + P7-negative at re-claim; NO verdict yet
|
2026-05-29 12:21:30 +01:00 |
|
|
|
aab77ea0f3
|
review(2): FAIL gate Q3.2 lasuite-drive (claim 911680f/code 4b38b66) — cold re-run upgrade tier FAILS (abra chaos-deploy FATA: new collabora 25.04.9.4.1 not converged; WOPI pre-gate DID work). install/backup/restore/custom+OIDC pass, deploy-count=1, teardown clean. Filed F2-12 BLOCKING
|
2026-05-29 11:47:58 +01:00 |
|
|
|
0b558529c9
|
review(2): pre-claim recon lasuite-drive Q3.2a Part A — minio scale is recipe one-shot (replicas:0) NOT a bypass; install-time OIDC=deploy-once; minio test is real round-trip; NO verdict (gate not claimed)
|
2026-05-29 10:33:01 +01:00 |
|
|
|
4356f0009c
|
review(2): cross-phase probe — 2pc prune-policy did NOT regress 2w warm infra (volumes survived, timers active, canonical idle@1.11.0); no finding, standing obligations stand
|
2026-05-29 10:00:38 +01:00 |
|
|
|
6ff68e625a
|
note(2): record Adversary cold-verify criteria for queued lasuite-drive Q3.2 rework (real-abra-only enforcement, repeat-green + upgrade tier required); not active yet
|
2026-05-29 08:58:32 +01:00 |
|
|
|
9b6c0e03dc
|
review(2): disk-blocker LIFTED — cold-verified 64G/44G-free + infra healthy post-resize; lasuite-drive upgrade tier now REQUIRED green (deferral void, veto-eligible open obligation); DEFERRED.md edit left to Builder
|
2026-05-29 08:42:52 +01:00 |
|
|
|
7b5ed9c350
|
review(2): break-it probe @2026-05-29 — 2w WC5 promotion × F2-11 SSO-skip: NO regression (overall-gated, no alt promote path, 72 unit pass cold)
|
2026-05-29 04:54:02 +01:00 |
|
|
|
5f1ce47593
|
review(2): rate-limit fix VERIFIED + CLOSED — all 3 conditions cold (auth 200-limit, own uncached swarm-service pull, declarative sops persistence); consume inbox
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-05-28 22:17:23 +01:00 |
|
|
|
46e9d1c43a
|
review(2): rate-limit PARTIAL verify — auth 200-limit + account source CONFIRMED; swarm-pull + declarative-persistence still pending
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-05-28 22:04:03 +01:00 |
|
|
|
45fb42e19d
|
review(2): rate-limit fix pre-wiring baseline (anon 100/6h @68.14.43.142, remaining=4); verification plan for post-wiring
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-05-28 21:45:57 +01:00 |
|
|
|
65e4e519ff
|
review(2): F2-11 CLOSED — deploy-free cold proof (35 unit + real conftest skip-report stitched to predicate); consume inbox
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-05-28 21:29:32 +01:00 |
|
|
|
b941f552a1
|
review(2): file F2-11 — SSO deps-not-ready SKIP yields GREEN !testme (cold-proven); note git host outage
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-05-28 21:17:05 +01:00 |
|
