100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
autonomic-bot	3859cd7f40	review(regression): A-reg-3 — bad-backup/bad-restore compose.yml empty (wrong tier fails); bad-install/bad-upgrade PASS cold-verified	2026-06-02 01:59:50 +00:00
autonomic-botandClaude Sonnet 4.6	cf405b4195	feat(regression): add 4 per-tier RED canaries (DoD#4) + canary_fast marker ... Four new per-tier RED canaries prove the server catches failure at every lifecycle tier: - bad-install: custom-html-tiny @ regression-bad-image (4ae88661) nonexistent image → prepull fails → install=fail STAGES=install → no prev-version lookup → chaos deploy of HEAD - bad-upgrade: same branch + SHA, STAGES=install,upgrade install uses prev-version (good image) → PASS upgrade chaos checks out HEAD (bad image) → prepull fails → FAIL - bad-backup: custom-html @ regression-bad-backup (e1e3c5fc) backupbot.backup.path=/nonexistent-path-cc-ci-canary-bad abra app backup create fails → backup=fail - bad-restore: custom-html @ regression-bad-restore (5a481cc1) backup targets .backup-data/ subdir (not where ci-marker.txt lives) backup succeeds; restore puts .backup-data back but NOT the marker marker stays "mutated" → test_restore_returns_state FAILS → restore=fail Each test asserts: rc!=0, failing_tier="fail", prior tiers="pass". Adds @pytest.mark.canary_fast for the fast subset. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-02 01:49:28 +00:00
autonomic-bot	3dd06ef0ce	review(regression): A-reg-1 CLOSED (import fix verified); good-simple+bad canary artifacts cold-verified; A-reg-2 still open	2026-06-02 01:44:42 +00:00
autonomic-bot	b268a14cad	status(regression): good-significant upgrade flaky (convergence race); next: 4 RED canaries	2026-06-02 01:38:52 +00:00
autonomic-botandClaude Sonnet 4.6	a2a6eea757	fix(regression): fix relative import (A-reg-1) + consume inbox ... - tests/regression/test_canaries.py: replace `from .conftest import ...` (relative import fails when not a package) with sys.path + direct import, matching the pattern used by all other tests in this repo. - Delete machine-docs/BUILDER-INBOX.md (Adversary inbox consumed). - Update STATUS-regression.md + JOURNAL-regression.md with first two canary run results (bad-false-green RED confirmed, good-simple GREEN confirmed). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-02 01:37:31 +00:00
autonomic-bot	464760ebb7	review(regression): D-initial FAIL — A-reg-1 relative import (suite won't collect), A-reg-2 plan gap (4 per-tier RED canaries missing)	2026-06-02 01:34:56 +00:00
autonomic-botandClaude Sonnet 4.6	fd3db37c49	feat(regression): add tests/regression/ E2E canary suite ... Three canaries (@pytest.mark.canary) drive the real cold CI lifecycle: - good-simple: custom-html-tiny @ main (435df8fc) — fast signal, expects GREEN - good-significant: lasuite-docs @ main (290a8ad7) — multi-service, expects GREEN - bad-false-green: custom-html @ v5-stale-docroot (71e7326a) — expects RED Semantic teeth: beyond exit-code, each test asserts that specific named tests ran in results.json stages (test_serving, test_serving_and_frontend, test_content_type). If an assertion is removed, the named test disappears → regression test fails. Includes conftest (run_recipe_ci helper + stage_has_{passing,failing}_test), README (cadence policy, how to run, how to add), and phase state files. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-02 01:25:55 +00:00
autonomic-bot	91a7088f56	review(regression): pre-orientation — known-bad fixture #81 RED confirmed, infra healthy	2026-06-02 01:19:37 +00:00
autonomic-bot	f202c5aa7f	review(regression): Adversary phase files initialized — watching for Builder gate claims	2026-06-02 01:15:43 +00:00
autonomic-bot	baf5a21bdc	status(mirror): ## DONE — Ph0-Ph5 all Adversary-verified PASS @01:16Z ... Ph0 pre-flight ✓ | Ph1 3 mirrors created ✓ | Ph2 hedgedoc tests + !testme #113 PASS ✓ Ph3 9 recipes enrolled (POLL_REPOS 11→20) ✓ | Ph4 nixos-rebuild switch deployed ✓ Ph5 ghost/immich/plausible triggered ≤16s, built, reported back ✓ Phase 6 deferred: ghost/immich restore bugs + plausible ClickHouse (pre-existing, not regressions). All: clean_teardown=true, no_secret_leak=true. Loop stopped.	2026-06-02 01:14:05 +00:00
autonomic-bot	bdbbcda849	review(mirror): Ph4+Ph5 PASS @01:16Z — deploy verified, 3 new recipes triggered <60s ... Ph4: bridge task 2y4celpytdav3qax56jszaokv watching all 20 repos confirmed cold. Ph5: ghost #120 (15s) + immich #121 (~16s) + plausible #122 (~16s) all triggered. D1 met. Ghost+immich reported back; restore failures are pre-existing Ph6 issues (ci_marker table missing — not enrollment regressions). clean_teardown+no_secret_leak OK. Plausible still running; verdict does not depend on its result.	2026-06-02 01:11:45 +00:00
autonomic-bot	5fd95a6b84	status(mirror): immich #121 fail (restore PG bug); plausible #122 running	2026-06-02 01:05:49 +00:00
autonomic-bot	80359aaa8f	status(mirror): ghost #120 failure — pre-existing backup bug; immich/plausible running	2026-06-02 00:59:19 +00:00
autonomic-bot	cdd11a542b	review(mirror): Ph4 PASS + Ph5 trigger PASS (16s) — builds 120/121/122 in progress @01:02Z ... Ph4: new bridge task watching all 20 repos confirmed cold. Ph5: all 3 !testme triggers within 16s (D1 met). Build results pending.	2026-06-02 00:51:22 +00:00
autonomic-bot	876ea373d4	status(mirror): Ph5 builds triggered — #120 ghost running, #121/#122 queued	2026-06-02 00:49:30 +00:00
autonomic-bot	b6c70ef09b	claim(mirror): Ph4 deploy complete + Ph5 !testme posted on ghost/immich/plausible	2026-06-02 00:48:57 +00:00
autonomic-bot	19747bf10a	review(mirror): note operator update — Ph4 gate change, Builder does nixos-rebuild ... Operator confirmed Phase 4 gate no longer operator-gated; Builder runs nixos-rebuild. Adversary will verify deploy + Ph5 !testme after Builder claims Phase 4.	2026-06-02 00:46:29 +00:00
autonomic-bot	2f31131d8a	status(mirror): Ph1+Ph2+Ph3 full PASS @00:50Z — Ph4 gate awaiting operator nixos-rebuild	2026-06-02 00:42:33 +00:00
autonomic-bot	96070fdc92	review(mirror): A-mirror-1 CLOSED — Ph1+Ph2+Ph3 FULL PASS @00:50Z ... A-mirror-1 resolved: build #113 hedgedoc@441c411c SUCCESS @2026-06-02T00:30Z. test_hedgedoc_has_branding (cc-ci): pass + test_hedgedoc_root_serves (cc-ci): pass. clean_teardown=true, no_secret_leak=true. Ph1+Ph2+Ph3 all verified PASS. Phase 4 operator deploy: CLEARED (Adversary done).	2026-06-02 00:41:39 +00:00
autonomic-bot	ac85b0853e	status(mirror): A-mirror-1 RESOLVED — hedgedoc build #113 SUCCESS (00:32:07Z, 81s)	2026-06-02 00:37:43 +00:00
autonomic-botandClaude Opus 4.8	a9b0cbf468	docs(agents): add AGENTS.md with the server testing cadence ... Server regression canaries (tests/regression/, pytest -m canary) are expensive — run them at milestones (polish/review/release), NOT every commit. Per-recipe lifecycle tests keep their normal per-PR !testme trigger. Plus the standing 'never weaken a test to pass' guardrail. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-02 00:35:12 +00:00
autonomic-bot	9a8ee53c7a	status(mirror): A-mirror-1 in progress — build #113 running for hedgedoc !testme	2026-06-02 00:31:45 +00:00
autonomic-bot	81d933cac3	review(mirror): Ph1 PASS, Ph3 PASS, Ph2 PARTIAL FAIL (A-mirror-1 OPEN) @00:40Z ... Ph1: 3 mirrors cold-verified — lasuite-drive/mailu/mumble all HTTP 200, empty=false, default_branch=main, HEAD SHAs match upstream exactly. Ph3: POLL_REPOS has 20 repos; all 9 new recipes present + all have tests/. Ph2: tests authored (recipe_meta.py, test_health_check, test_branding, PARITY.md) but builds #153/#154 predate authoring (2026-05-28 vs 2026-06-02). Plan requires !testme green AFTER authoring. Filing A-mirror-1. Phase 4 deploy NOT blocked. Ph4 operator deploy: OK to proceed. A-mirror-1 must close before Phase 5 DONE.	2026-06-02 00:29:28 +00:00
autonomic-bot	242d56b56e	claim(mirror): Ph1+Ph2+Ph3 complete — mirrors created, hedgedoc tests, 9 recipes enrolled ... Phase 1: Create 3 missing Gitea mirrors (lasuite-drive, mailu, mumble) via API + force-sync upstream main (f4135d78, 23309a1a, 9fa5e949). All 3 return 200/empty=false from Gitea API. Phase 2: Author tests/hedgedoc/ (uptime-kuma template) — recipe_meta.py, functional/ test_health_check.py (GET / → 200/302), functional/test_branding.py (brand markers), PARITY.md. Generic tiers cover install/upgrade/backup baseline. Phase 3: Enroll 9 unenrolled recipes in nix/modules/bridge.nix POLL_REPOS: bluesky-pds, discourse, ghost, immich, lasuite-drive, mailu, mattermost-lts, mumble, plausible. Final POLL_REPOS: 20 entries (cc-ci + 19 recipes). Gate Ph4 CLAIMED: operator must run `nixos-rebuild switch --flake .#cc-ci` on cc-ci after Adversary-verifies Ph1+Ph2+Ph3. See STATUS-mirror.md for exact repro.	2026-06-02 00:25:12 +00:00
autonomic-bot	9ad1b6eaf7	review(mirror): break-it probes BP-mirror-1..5 — all PASS @00:25Z ... BP-1: auth rejection working; BP-2: live bridge POLL_REPOS correct; BP-3: box clean (5 legit stacks, 25% disk); BP-4: hedgedoc PR#1 open (noted); BP-5: all 3 upstream mirrors reachable. Ready for Builder Phase 0-3 work.	2026-06-02 00:20:41 +00:00
autonomic-bot	bcce8bd56d	status(mirror): bootstrap phase state files — Phase 0 complete, Phase 1 in progress	2026-06-02 00:20:19 +00:00
autonomic-bot	4e4e9c3c1f	review(mirror): init phase-namespaced files + pre-flight snapshot @00:18Z ... Cold-verified mirror state, live bridge POLL_REPOS, tests/ dirs. Matches plan survey: 3 mirrors missing (lasuite-drive, mailu, mumble), 9 recipes unenrolled, hedgedoc has no tests/. Awaiting Builder claims.	2026-06-02 00:18:42 +00:00
autonomic-botandClaude Opus 4.8	5cda830644	docs(decisions): §4 weekly cron migrated to NixOS systemd timer (Sun 02:00 UTC) ... Supersede the CronCreate/busybox notes: the weekly /upgrade-all now runs via the reboot-safe cc-ci-upgrade-all systemd timer in the orchestrator flake. Records the T0 PASS and the schedule move (Mon 23:04 -> Sun 02:00 UTC). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-02 00:07:18 +00:00
autonomic-bot	5355500ea4	status(5): ## DONE — all V1-V9 + §4 cron Adversary-verified PASS; cc-ci build complete	2026-06-01 23:22:24 +00:00
autonomic-bot	fd48daefc6	review(5): A5-7 CLOSED + §4 cron PASS + full gate M5 PASS @23:20Z ... CronCreate mechanism cold-verified: upgrader-cron.log created at 23:18:21Z with correct content; upgrader was started by cron fire; DECISIONS.md updated. busybox crond correctly replaced with CronCreate (plan §4 "Claude scheduled task"). All V1-V9 + §4 cron now PASS within 24h. No open findings, no VETOs. Builder may write ## DONE to STATUS-5.md.	2026-06-01 23:21:45 +00:00
autonomic-bot	5972ee1033	claim(5): A5-7 fix — CronCreate mechanism verified (T0-refire 23:18Z, upgrader-cron.log created)	2026-06-01 23:19:32 +00:00
autonomic-bot	b1cfa50340	inbox(5): consume A5-7 — switching cron to CronCreate (busybox crond non-functional as non-root)	2026-06-01 23:13:47 +00:00
autonomic-bot	dc12153f1b	review(5): §4 cron T0 MISS — busybox crond non-functional as non-root (A5-7 OPEN) ... Cold-verified at 23:11Z: T0 (23:04Z) was missed; no upgrader-cron.log created. busybox crond with -c dir requires root for setuid; silently skips all jobs as non-root 'loops' user. Confirmed by both T0 miss and a * * * * * control probe (waited through 23:09+23:10, nothing fired). V9 PASS stands. Gate M5 remains open pending a working cron mechanism + re-fire. A5-7 filed in BACKLOG-5. BUILDER-INBOX sent.	2026-06-01 23:13:01 +00:00
autonomic-bot	4ff208d0b6	review(5): V2 full PASS + V4 explicit PASS — cold-verified @22:42Z, awaiting §4 T0 fire 23:04Z	2026-06-01 22:41:25 +00:00
autonomic-bot	7ea7ef59ca	review(5): V9 PASS (cold) + §4 cron PARTIAL (install OK, T0 fire pending 23:04Z)	2026-06-01 22:14:26 +00:00
autonomic-bot	a431d3ea7a	claim(5): V9 done + cron installed; all V1-V9 evidence in STATUS-5.md	2026-06-01 22:12:31 +00:00
autonomic-bot	0884d04d01	inbox(5): summary to Builder — V1-V8a all PASS, V9+cron remaining	2026-06-01 22:10:07 +00:00
autonomic-bot	6785007f86	review(5): V7 full PASS — merged-upstream + superseded cases + mirror main cold-verified	2026-06-01 22:09:38 +00:00
autonomic-bot	62f8096331	review(5): close A5-6 — bridge fix verified, build #91 GREEN	2026-06-01 22:08:44 +00:00
autonomic-bot	1f5e76ae41	review(5): V8 PASS + V8a PASS (with noted self-term gap) — build #91 uptime-kuma GREEN	2026-06-01 22:08:34 +00:00
autonomic-bot	04441d416e	review(5): V1 full PASS — consolidate evidence (trigger+result+auth+no-fire)	2026-06-01 22:00:15 +00:00
autonomic-bot	6440873f66	status(5): V8 build #91 in progress for uptime-kuma	2026-06-01 21:59:09 +00:00
autonomic-bot	7d04c0090a	review(5): correct A5-6 — finding 2 retracted, bridge fix confirmed, awaiting V8 run	2026-06-01 21:58:31 +00:00
autonomic-bot	94788922ad	status(5): mark V5/V6 done in backlog	2026-06-01 21:56:03 +00:00
autonomic-bot	5c8adaee36	status(5): A5-6 fix — enroll uptime-kuma in bridge + upgrader restarted	2026-06-01 21:55:36 +00:00
autonomic-bot	51ba205bf1	fix(bridge): enroll uptime-kuma for !testme (A5-6)	2026-06-01 21:52:58 +00:00
autonomic-bot	81a7ab345c	inbox(5): consume A5-6 inbox — uptime-kuma enrollment fix in progress	2026-06-01 21:52:40 +00:00
autonomic-bot	35d474c933	review(5): V5 PASS, V3 full PASS, V8 FAIL (A5-6 uptime-kuma not enrolled)	2026-06-01 21:52:29 +00:00
autonomic-bot	e4a4db1c54	review(5): file A5-6 — V8 live run broken: uptime-kuma not enrolled (bridge+tests)	2026-06-01 21:51:33 +00:00
autonomic-bot	6939cedd16	review(5): A5-5 CLOSED — accurate comment #13900 + RESULT log verified cold	2026-06-01 21:49:44 +00:00
autonomic-bot	ffb62f1006	journal(5): record A5-5 fix + V8/V8a lifecycle tests started	2026-06-01 21:45:04 +00:00
autonomic-bot	6d4f4a32e6	status(5): fix A5-5 — accurate V5 comment + RESULT log for custom-html	2026-06-01 21:43:39 +00:00
autonomic-bot	f99bb3311d	inbox(5): consume adversary inbox re A5-5	2026-06-01 21:40:32 +00:00
autonomic-bot	f6f9f476a6	inbox(5): A5-5 finding — V5 needs recipe-upgrade re-run on MIME-only seed	2026-06-01 21:39:33 +00:00
autonomic-bot	dd000214b9	review(5): V6 PASS; V5 FAIL (A5-5) — stale comment + missing RESULT line ... V6 cold-verified GREEN: - cc-ci PR#3 (v6-custom-html-mime, head 826daec5): open, not merged ✓ - diff: only test_content_type_header.py (+6/-3) ✓ - verify-pr.sh log: all stages pass (install/upgrade/backup/restore/custom=PASS) ✓ - cross-links on both PRs ✓ V5 FAIL — filed A5-5: 1. Explanatory comment #13883 references build #40 (docroot-path failures); build #75 (final seeded case, ref 71e7326a) has only ONE failure: test_content_type_header.py MIME type (application/octet-stream vs text/plain). 2. No RESULT: SUCCESS-PENDING-TESTS log file produced — full /recipe-upgrade skill was not run end-to-end on the MIME-only seeded case.	2026-06-01 21:39:21 +00:00
autonomic-bot	9703687e43	status(5): record seeded custom-html V5/V6 flow	2026-06-01 20:09:06 +00:00
autonomic-bot	2e2b90b85f	inbox(5): consume adversary inbox	2026-06-01 19:39:41 +00:00
autonomic-bot	3191e1943b	review(5): reorient V5/V6 to seeded stale-test case	2026-06-01 19:38:37 +00:00
autonomic-bot	8623398acf	status(5): record matrix-synapse V6 dead-end	2026-06-01 19:09:43 +00:00
autonomic-bot	acb15a43de	review(5): note current V6 matrix frontier	2026-06-01 19:05:34 +00:00
autonomic-bot	9bad0ba671	review(5): close matrix-synapse status-gap finding	2026-06-01 18:53:31 +00:00
autonomic-bot	66a6a59212	review(5): flag matrix-synapse stale-test status gap	2026-06-01 14:14:44 +00:00
autonomic-bot	1e6dca5e50	status(5): record matrix-synapse stale-test candidate	2026-06-01 14:03:48 +00:00
autonomic-bot	7bad8aca3f	status(5): record lasuite-meet enrollment success	2026-06-01 14:02:10 +00:00
autonomic-bot	be4f451d3a	fix(flake): make Hetzner the canonical cc-ci host target	2026-06-01 13:57:45 +00:00
autonomic-bot	7225138f30	fix(tests): keep La Suite OIDC secret inserts offline	2026-06-01 13:57:15 +00:00
autonomic-bot	a147e0772d	status(5): record lasuite-meet enrollment rollout block	2026-06-01 13:00:34 +00:00
autonomic-bot	f28a2a37ff	fix(bridge): enroll lasuite-meet for !testme	2026-06-01 12:46:23 +00:00
autonomic-bot	6ec13729ef	status(5): record cryptpad and lasuite-meet probes	2026-06-01 08:52:35 +00:00
autonomic-bot	162534b91f	review(5): record fresh V2 n8n poll-only PASS	2026-06-01 03:50:03 +00:00
autonomic-bot	973fc69679	status(5): record V5/V6 groundwork and n8n probe	2026-06-01 03:44:17 +00:00
autonomic-bot	ad2e52b705	review(5 V2): close A5-3 after cold rerun PASS	2026-06-01 03:31:57 +00:00
autonomic-bot	58878280f2	status(5): record A5-3 fix and consume inbox	2026-06-01 03:26:27 +00:00
autonomic-bot	143f83a710	review(5 V2): flag stale rerun verdict race FAIL	2026-06-01 03:23:27 +00:00
autonomic-bot	18db5ea088	status(5): record V4 completion and consume inbox	2026-05-31 19:44:10 +00:00
autonomic-bot	e87782a123	review(5): close A5-1/A5-2 after cold retest	2026-05-31 19:41:33 +00:00
autonomic-bot	de635adf02	status(5): V3 DONE (custom-html-tiny upgrade GREEN, build #29); V7 DONE; A5-1/A5-2 fixed	2026-05-31 14:01:08 +00:00
autonomic-bot	a8dd346cd6	review(5 V1/V2/V3/V7): PASS (partial) — cold-verified !testme GREEN, VERDICT=GREEN, real upgrade, superseded-PR closed	2026-05-31 14:00:55 +00:00
autonomic-bot	98c56f71cd	decisions(5): record testme-on-pr.sh verdict approach (commit status, A5-2)	2026-05-31 13:54:51 +00:00
autonomic-bot	edd3d5ce0f	chore(5): update state files; consume BUILDER-INBOX (A5-1/A5-2 fixes applied, bridge redeployed)	2026-05-31 13:54:10 +00:00
autonomic-bot	94255e91ef	chore(5): update REVIEW-5 — A5-2 fix verified correct (code), probe artifact noted	2026-05-31 13:53:54 +00:00
autonomic-bot	722da24dbd	chore(5): update BUILDER-INBOX — probe status warning + A5-2 fix verified correct	2026-05-31 13:53:22 +00:00
autonomic-bot	5d48436577	fix(5 A5-1/A5-2): bridge commit status posting + enroll custom-html-tiny ... A5-2: bridge.py now posts Gitea commit statuses on the recipe PR's head SHA: - pending on build trigger (so testme-on-pr.sh sees the run immediately) - success/failure on build finish (so testme-on-pr.sh returns VERDICT=GREEN/RED) Added post_commit_status() using the existing _api() helper + GITEA_TOKEN. Called from process_testme() (pending) and watch_and_reflect() (terminal state). A5-1: added recipe-maintainers/custom-html-tiny to bridge POLL_REPOS in bridge.nix so !testme on custom-html-tiny PRs is picked up by the bridge poller.	2026-05-31 13:48:12 +00:00
autonomic-bot	dbe08e4ea7	review(5 init): Phase 5 Adversary init — break-it probes + two blocking findings ... Break-it probes (V1): - !testmexyz on custom-html PR#2 (watched repo): correctly ignored — no Drone trigger ✓ - Non-collaborator auth: GET /orgs/recipe-maintainers/members/nonexistent-user-999 → 404 ✓ - bridge source: parse_body("!testmexyz") → (False, False) ✓ CRITICAL finding A5-2 (blocks V2–V8): testme-on-pr.sh reads Gitea commit statuses on the recipe PR head SHA, but the bridge NEVER posts commit statuses — only PR comments. Drone posts statuses on cc-ci repo only. POST=0 testme-on-pr.sh custom-html 2 → VERDICT=PENDING always. Fix: bridge must POST /repos/{owner}/{recipe}/statuses/{sha} on build start/finish. Finding A5-1: custom-html-tiny not in bridge POLL_REPOS — testme on tiny PRs would silently do nothing. Must enroll it or use custom-html as sandbox instead. BUILDER-INBOX.md: heads-up to Builder with both findings.	2026-05-31 13:37:08 +00:00
autonomic-bot	e487b7febd	status(3): ## DONE — U5 PASS (Adversary @15b3057); all R1–R8 Adversary-verified, no VETO ... Phase 3 complete. U5 gate PASS @2026-05-31T13:13Z: - R6 per-recipe badge endpoint live (custom-html/uptime-kuma level 4, keycloak unknown fallback) - R8 docs/results-ux.md §1-5 complete, no TODOs - R7 render-kill: exit 0, install pass, results.json intact, no card/screenshot (u5-renderkill3) - R7 broad leak scan: 0 real secret values in any artifact or PR comment All R1–R8 verified <24h; STATUS-3 flipped to ## DONE.	2026-05-31 13:17:44 +00:00
autonomic-bot	15b30579fc	review(3 U5): PASS — badges+docs+hardening cold-verified; all R1–R8 done; Phase 3 DoD complete ... R6: /badge/<recipe>.svg live — custom-html/uptime-kuma level 4 (colour #a0b93f), keycloak status-fallback unknown (grey); badge level == results.json level; deployed 8acd8b9cc51c == source. R8: docs/results-ux.md §1-5 complete — ladder+rung-mapping, schema, card/screenshot/URLs, PR-comment, badge endpoints + embed snippet; no remaining TODOs. R7: render-kill u5-renderkill3 → exit 0, install pass, results.json intact (level=1, screenshot=null, summary_card=null), no screenshot.png, no summary.png (0B summary.html); defense-in-depth try/except at call site (line 985) outside deploy block confirmed. Broad leak scan: all 'secret' hits are the no_secret_leak flag name/label; zero real secret values across all published artifacts + 20 PR comments. Unit tests: 57 passed (cc-ci devshell, cold). Cardinal invariants: never-greener, zero real secrets, cosmetics never block. No VETO. Builder may flip STATUS-3 to ## DONE.	2026-05-31 13:16:19 +00:00
autonomic-bot	4b5b1ac205	chore(3): consume ADVERSARY-INBOX (U5 final-gate artifact map read; verifying U5 now)	2026-05-31 10:15:45 +00:00
autonomic-bot	97418c822e	claim(3 U5): FINAL gate — per-recipe level badge endpoint LIVE (R6), docs complete (R8), render-kill verdict-unaffected + broad leak scan clean + screenshot call-site hardening (R7); on Adversary U5 PASS → DONE	2026-05-31 10:14:57 +00:00
autonomic-bot	799cceb54a	fix(3 U5.3): defense-in-depth try/except around the screenshot capture call site — a screenshot can never crash/fail the run even if capture()'s internal swallow regresses or a SCREENSHOT hook raises (R7); proven by forced-render-kill run (install pass, exit 0, no card/screenshot, results.json intact)	2026-05-31 10:13:30 +00:00
autonomic-bot	e60415dd8f	status(3): U4 PASS (Adversary @9ca39dc); U5.1 badge + U5.2 docs built, deploying badge next	2026-05-31 10:04:54 +00:00
autonomic-bot	91a69b8971	feat(3 U5.1+U5.2): per-recipe latest-level badge endpoint /badge/<recipe>.svg (R6, level-coloured, status fallback) + complete docs/results-ux.md §3-5 (card/screenshot/PR-comment/badge-embedding, R8); +2 badge unit tests	2026-05-31 10:04:14 +00:00
autonomic-bot	9ca39dc179	review(3 U4): PASS — dashboard grid + history cold-verified (R5, R3 full); never-greener vs results.json, honest #11 failure row (no results.json→failure/—), no secrets, 9 tests	2026-05-31 10:04:09 +00:00
autonomic-bot	1be4492b90	chore(3): consume ADVERSARY-INBOX (U4 artifact map read; verifying U4 now)	2026-05-31 10:02:27 +00:00
autonomic-bot	fb8f382c6a	claim(3 U4): YunoHost-style dashboard grid LIVE — per-recipe cards (level badge + status + version + app screenshot + history link) + /recipe/<name> history; mirrors results.json (never greener); R5 + R3 satisfied; deployed cc-ci-dashboard:7b34ec8761df == source	2026-05-31 10:01:55 +00:00
autonomic-bot	db21a3bc3b	status(3): U3 PASS (Adversary @778b577); proceeding to U4 dashboard polish	2026-05-31 09:53:40 +00:00
autonomic-bot	778b57724a	review(3 U3): PASS — YunoHost PR comment cold-verified (R2); update-in-place reproduced on my own !testme (run4→7, comment 13792 never stacked), no inflation, no secrets	2026-05-31 09:52:39 +00:00
autonomic-bot	e1d837ee97	feat(3 U4): YunoHost-style dashboard grid — per-recipe level badge + status + version + app screenshot thumbnail + per-recipe /recipe/<name> history; reads results.json artifacts (R5); 9 dashboard unit tests	2026-05-31 09:52:06 +00:00
autonomic-bot	67ed6bf2d6	chore(3): consume ADVERSARY-INBOX (U3 artifact map read; verifying U3 now)	2026-05-31 09:47:45 +00:00
autonomic-bot	c7b5dc04cc	claim(3 U3): YunoHost-style PR comment LIVE on custom-html PR#2 (comment 13792) — 🌻 + level badge + summary card images linked, updates in place on re-!testme, no secrets; R2 satisfied	2026-05-31 09:47:00 +00:00
autonomic-bot	14aa785f55	journal(3): U3 live-demo start — Drone DB reset discovered, repo reactivated; validating pipeline (build #1 running)	2026-05-31 09:37:21 +00:00