100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
autonomic-botandClaude Sonnet 4.6	3de5925614	review(drone): M1 PASS @2026-06-11T22:22Z — build run 5 L5; all DoD + ADV findings verified ... Adversary M1 verdict: PASS. Evidence: - results.json: level=5, install+upgrade+custom+lint PASS, backup_restore intentional skip, clean_teardown=True, no_secret_leak=True, no unintentional skips - SCM test has teeth: ran against dep gitea @ gite-557a83 (not production); client_id 2a4dfaba matches dep-provisioned app; wrong domain/path/client_id would fail - DG4.1 satisfied: deploy-count=2 (expect 2) - ADV-drone-02 CLOSED: fallback teardown from $CCCI_DEPS_FILE in finally else-branch; 2 new unit tests; 19/19 pass; teardown-sacred §9 satisfied - ADV-drone-03 CLOSED: _count_deploy=False reverted; run 5 confirms no violation - All three adversary findings now closed; no open findings Builder may proceed to M2: recipe mirrors + !testme CI run. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-11 22:08:33 +00:00
autonomic-botandClaude Sonnet 4.6	7723cfef3d	claim(drone): M1 — all fixes applied; run 5 L5; ADV-drone-02+03 both fixed ... ADV-drone-02 fixed in 0aa46db (teardown fallback from $CCCI_DEPS_FILE in finally); ADV-drone-03 fixed in 5384f5c (removed _count_deploy=False; dep deploys count per formula). Harness run 5 evidence: deploy-count=2/2 (DG4.1 PASS), level=5, install/upgrade/custom all PASS. 19/19 unit tests pass. BUILDER-INBOX-drone.md consumed (both ADV-drone-02 + ADV-drone-03 already addressed). ADVERSARY-INBOX-drone.md written requesting M1 PASS verdict. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-11 22:05:38 +00:00
autonomic-botandClaude Sonnet 4.6	52866602e7	review(drone): ADV-drone-03 CRITICAL — DG4.1 always fires with cold dep (run exits 1) ... deps.py module docstring says "Dep deploys DO count toward DG4.1; expected = 1 + n_cold_deps" but deploy_deps passes _count_deploy=False, so deps never increment the counter. With gitea as cold dep: actual=1, expected=2 → DG4.1 fires → overall=1 → CI FAIL even when all tiers pass and level=5. Confirmed in Builder's run 4 (/tmp/drone-m1-run4.log): install+upgrade+custom green, L5, but deploy-count 1 != 2 (DG4.1 violation). Run exits 1. Fix: remove _count_deploy=False from deps.py:deploy_deps (one line). Deps SHOULD count. ADV-drone-02 also filed (dep orphan on SSO-enrichment failure). Both must be fixed before M1 can be claimed. BUILDER-INBOX updated with priority order. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-11 22:04:29 +00:00
autonomic-botandClaude Sonnet 4.6	0aa46dbe72	fix(drone-dep): ADV-drone-02 — teardown fallback when SSO enrichment fails after deploy ... When _enrich_deps_with_sso raises after deploy_deps succeeds (e.g., gitea API call fails), deps_state stays {} and the finally block's `if deps_state:` guard skips teardown, orphaning the dep at its deterministic domain. Fix: add an `else` branch after the `if deps_state:` block that reads $CCCI_DEPS_FILE (the legacy-list written by deploy_deps) and calls teardown_deps on the cold entries so no dep is left running. Unit tests: test_load_run_state_provides_fallback_for_enrichment_failure and test_fallback_skips_warm_entries verify the data-flow that the fallback relies on. 19/19 unit tests pass. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-11 22:03:29 +00:00
autonomic-botandClaude Sonnet 4.6	75c46ac5c1	chore(drone): update STATUS-drone.md — M1 DoD almost done, run 5 in flight ... All implementation items checked. Run 5 (DG4.1 fix applied) in flight on cc-ci. ADV-drone-01 fix verified by Adversary. DG4.1 deploy-count fix explained and committed. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-11 22:02:08 +00:00
autonomic-botandClaude Sonnet 4.6	b676d61df4	review(drone): ADV-drone-02 — dep orphan on SSO-enrichment failure; standing probes updated ... If deploy_deps succeeds (gitea up + healthy) but _enrich_deps_with_sso subsequently raises, deps_state stays {} in main(). The finally block's `if deps_state:` guard is falsy and gitea teardown is skipped entirely — violates §9 teardown-sacred invariant. BACKLOG-drone.md: ADV-drone-02 filed (MEDIUM) with exact failure path trace, risk analysis, and three fix options. REVIEW-drone.md: ADV-drone-02 summary + standing break-it probes updated (negative-control, secrets-in-logs, concurrent-run probes analysed structurally). BUILDER-INBOX created with must-fix notice and suggested minimal patch. Must be fixed + tested before M1 can be claimed. Adversary veto standing. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-11 22:01:49 +00:00
autonomic-botandClaude Sonnet 4.6	5384f5c13f	fix(drone-dep): revert _count_deploy=False — dep deploys must count for DG4.1 ... The DG4.1 formula in run_recipe_ci.py is: expected_deploy_count = 1 + deps_deployed_count So when gitea dep deploys, the expected count becomes 2 (1 recipe + 1 dep). The _count_deploy=False fix made dep deploys NOT count, giving actual=1 vs expected=2 → DG4.1 violation even though the run was correct. Original error "deploy-count 2 != 1" was because deps_state was empty when the DG4.1 check ran (provisioning had failed), giving expected=1 while count was already 2 from an early dep deploy. The proper fix is for _provision_deps to succeed (which it now does), not to suppress counting. Revert _count_deploy=False in deps.py; update docstrings for clarity. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-11 21:59:51 +00:00
autonomic-botandClaude Sonnet 4.6	7d18d6e561	chore(drone): update BACKLOG task checklist to reflect actual M1 implementation state ... All M1 implementation tasks are done (setup_gitea_oauth, _enrich_deps_with_sso, recipe_meta.py files, install_steps.sh, functional test, PARITY.md, unit tests). ADV-drone-01 fixed. Mirror/!testme PR tasks moved to M2. Harness run 4 in flight. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-11 21:56:31 +00:00
autonomic-bot	32125c6e65	review(drone): ADV-drone-01 CLOSED — fix verified; protocol note on Builder tick	2026-06-11 21:53:17 +00:00
autonomic-botandClaude Sonnet 4.6	7e7e84df34	fix(drone): ADV-drone-01 — no-follow redirect pattern in SCM test ... test_scm_configured.py was following ALL redirects via urlopen; gitea redirects unauthenticated users from /login/oauth/authorize → /user/login, so the path assertion always failed even for a correctly-wired drone. Fix: _CaptureOneRedirect urllib handler stops after drone's first 303 and reads the Location header directly, before gitea's own redirect chain runs. - Consume BUILDER-INBOX.md (ADV-drone-01 finding delivered and addressed) - Close ADV-drone-01 in BACKLOG-drone.md - Update test_gitea_dep.py terminology: "location_url" not "final_url" - All 10 unit tests pass Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-11 21:48:36 +00:00
autonomic-bot	d20bffd597	review(drone): BUILDER-INBOX — ADV-drone-01 critical, fix before M1 claim	2026-06-11 21:43:40 +00:00
autonomic-bot	eb58f9f053	review(drone): ADV-drone-01 CRITICAL — test_scm_configured follows all redirects; assertion always fails even when wired correctly	2026-06-11 21:42:42 +00:00
autonomic-botandClaude Sonnet 4.6	eec29614ae	fix(drone-dep): reset gitea admin password on stale volume re-use ... If a dep run uses the same deterministic gitea domain against a stale volume from a prior failed teardown, ci_admin may already exist with a different password. Reset it via `gitea admin user change-password` so the subsequent API call authenticates correctly. This is idempotent and does not affect clean (fresh-volume) runs. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-11 21:42:19 +00:00
autonomic-botandClaude Sonnet 4.6	1adfbd70cb	fix(drone-dep): correct gitea admin create flag + dep deploy counter ... Two issues found during first manual harness run: 1. gitea `--must-change-password false` (space form) leaves a pending password-change for the ci_admin user, blocking the OAuth2 API call. Fix: use `--must-change-password=false` (equals form, required by gitea's BoolFlag with default=true). 2. dep deploy_app() calls incremented the DG4.1 "one deploy per run" counter, causing a false violation when gitea dep + drone both deploy. Fix: lifecycle.deploy_app gains _count_deploy=True param (default backward-compat); deps_mod.deploy_deps passes _count_deploy=False so only the recipe-under-test counts toward DG4.1. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-11 21:37:45 +00:00
autonomic-botandClaude Sonnet 4.6	51c3280163	feat(drone): enroll drone + gitea SCM dep (M1 implementation) ... - tests/gitea/recipe_meta.py: gitea as install-time dep provider; sqlite3 overlay EXTRA_ENV, health path /api/healthz, relaxed access for CI use - tests/drone/recipe_meta.py: DEPS=["gitea"]; health /healthz; 600s timeout - tests/drone/install_steps.sh: wires GITEA_CLIENT_ID + GITEA_DOMAIN + client_secret Docker secret + DRONE_USER_CREATE before single drone deploy - tests/drone/functional/test_scm_configured.py: Playwright-free SCM test — follows /login redirect, asserts final URL is gitea dep's OAuth2 authorize endpoint with matching client_id (per Adversary pre-probe REVIEW-drone.md) - tests/drone/PARITY.md: backup structural-skip justified (no backupbot labels) - runner/harness/sso.py: setup_gitea_oauth() — creates gitea admin user via CLI + OAuth2 app via API, returns {admin_user, admin_password, client_id, client_secret} for install_steps.sh consumption - runner/run_recipe_ci.py: _enrich_deps_with_sso now handles gitea dep (calls setup_gitea_oauth; keycloak path unchanged) - tests/unit/test_gitea_dep.py: unit tests for gitea dep path — meta loading, SSO routing, SCM redirect assertion logic (parametrized) - machine-docs: STATUS/JOURNAL/BACKLOG-drone.md phase state files initialized Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-11 21:31:43 +00:00
autonomic-bot	8ca5b44186	review(drone): pre-probe — SCM-configured test design; /login redirect is the correct tooth	2026-06-11 21:26:11 +00:00
autonomic-bot	f3c526d9e9	review(drone): init phase — P0 verified, pre-probes done, awaiting Builder claims	2026-06-11 21:22:30 +00:00
autonomic-bot	6607d7767f	status(mailu): ## DONE — M1+M2 PASS; PR#3 open for operator merge; builds #477+#483 both L5; backup/restore on /data+/mail proven; DEFERRED closed	2026-06-11 21:17:45 +00:00
autonomic-bot	be526c8252	review(mailu): M2 PASS @2026-06-11T21:15Z — build #483 LEVEL 5, fresh independent re-trigger; all phase DoD satisfied ... Independent cold pass: Adversary posted !testme on PR#3 (comment #14363); build #483 reached LEVEL 5 (install/upgrade/backup_restore/functional/lint all pass); both Maildir tests pass again (test_backup_captures_mail_message + test_restore_returns_mail_message); clean_teardown+no_secret_leak true; DEFERRED closed; levels reconciled; PARITY.md dual-volume; operator summary complete. Phase mailu DONE. Builder cleared for ## DONE in STATUS-mailu.md.	2026-06-11 21:16:27 +00:00
autonomic-bot	b17b6f1232	claim(mailu): M2 — DEFERRED closed; PARITY.md updated with dual-volume evidence; operator summary written; PR#3 open for merge; awaiting Adversary fresh re-trigger	2026-06-11 21:03:51 +00:00
autonomic-bot	73ea239cfc	review(mailu): M1 PASS @2026-06-11T21:00Z — build #477 LEVEL 5, both /data+/mail volumes tested; ADV-mailu-01 closed ... Cold verify: PR#3 labels correct (admin:/data + imap:/mail); build #477 LEVEL 5 all rungs pass; test_backup_captures_mail_message PASS + test_restore_returns_mail_message PASS — Maildir backup/restore cycle proven. clean_teardown+no_secret_leak true. ADV-mailu-01 fix verified. Builder cleared for M2.	2026-06-11 21:01:19 +00:00
autonomic-bot	ec5882dd71	claim(mailu): M1 re-claim — build #477 LEVEL 5; ADV-mailu-01 fixed; /mail Maildir now seeded, wiped, and verified restored; both test_backup_captures_mail_message + test_restore_returns_mail_message PASS	2026-06-11 20:59:39 +00:00
autonomic-botandClaude Opus 4.8	85a781368a	machine-docs: move all per-phase coordination files out of repo root ... STATUS/BACKLOG/REVIEW/JOURNAL for bsky/conc/dstamp/kuma/lvl5/mailu/rcust/shot (32 files) were at the repo root; move them into machine-docs/ to match the mandated file-location rule (DECISIONS/DEFERRED/INBOX + older phases already live there). AGENTS.md gains an explicit File-location rule. No content change. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-11 20:57:03 +00:00
autonomic-bot	560e772b5f	journal(mailu): ADV-mailu-01 fix rationale; build #477 in flight	2026-06-11 20:56:46 +00:00
autonomic-bot	b9352e8313	fix(mailu): extend backup/restore seed to cover /mail Maildir volume (ADV-mailu-01)	2026-06-11 20:56:00 +00:00
autonomic-bot	bb1ebd34f6	review(mailu): M1 FAIL @2026-06-11T20:58Z — /mail Maildir restoration not tested; seed seeds account only (SQLite /data), never exercises mail message in /mail; plan requires mailbox+message; ADV-mailu-01 filed	2026-06-11 20:53:24 +00:00
autonomic-bot	2fa3f528a6	claim(mailu): M1 — build #473 LEVEL 5 PASS; PR#3 backupbot v2 labels (admin:/data + imap:/mail); backup→wipe→restore on real seeded mail data proven; clean teardown; BEFORE=L4(skip) AFTER=L5(earned)	2026-06-11 20:51:39 +00:00
autonomic-bot	1fbc4e0b15	fix(mailu): fix _mailu import path in ops.py+overlays (functional/ subdir)	2026-06-11 20:44:40 +00:00
autonomic-bot	36ece30442	status(mailu): drone build #470 in flight — PR#3 + cc-ci test files all committed	2026-06-11 20:43:18 +00:00
autonomic-bot	4b5051f003	feat(mailu): add ops.py + backup/restore tests + update PARITY.md (P4 now covered via PR#3)	2026-06-11 20:41:33 +00:00
autonomic-bot	ccabad8209	status(mailu): init phase state — data-layout research documented, awaiting PR+tests	2026-06-11 18:43:08 +00:00
autonomic-botandClaude Sonnet 4.6	06e1cee47c	status(kuma): ## DONE — M1+M2 PASS, test_monitor_wizard green 2× (builds #460+#462) ... DoD all satisfied: - Wizard+probe Playwright test: Up (self) + Down (dead-port) real probes proven - Level 5 both runs; runtime 2.75-2.82s (≪90s budget) - DEFERRED "uptime-kuma create-a-monitor" closed - PARITY.md updated - M1 PASS 2026-06-11T18:26Z + M2 PASS 2026-06-11; no standing VETO Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-11 18:34:42 +00:00
autonomic-bot	f96a639197	review(kuma): M2 PASS @2026-06-11T18:32Z — builds #460+#462 both LEVEL 5, test_monitor_wizard 2× green, clean_teardown+no_secret_leak true, DEFERRED closed, PARITY updated; all phase DoD satisfied; Builder cleared for ## DONE	2026-06-11 18:33:34 +00:00
autonomic-botandClaude Sonnet 4.6	9afdf3de5a	claim(kuma): M2 — build #462 LEVEL 5 PASS (flake #2); DEFERRED closed; PARITY updated ... Second drone run #462: uptime-kuma@eb4521cc (PR #3) = LEVEL 5. test_monitor_wizard [pass] in both #460 + #462 — flake check complete. DEFERRED.md "uptime-kuma create-a-monitor" closed with build+commit pointers. PARITY.md: new row for tests/uptime-kuma/playwright/test_monitor_wizard.py. M1 Adversary PASS @2026-06-11T18:26Z (REVIEW-kuma.md). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-11 18:32:16 +00:00
autonomic-bot	48a66b96a1	review(kuma): M1 PASS @2026-06-11T18:26Z — test_monitor_wizard LEVEL 5, clean_teardown+no_secret_leak true, real-probe evidence (up+down confirmed), runtime 2.8s, approach justified; Builder cleared for M2	2026-06-11 18:29:10 +00:00
autonomic-bot	1d51a7907b	status(kuma): M1 claimed; second !testme in flight for flake check (build 460 = L5 PASS)	2026-06-11 18:28:28 +00:00
autonomic-botandClaude Sonnet 4.6	fe8922c2da	claim(kuma): M1 PASS — test_monitor_wizard green at LEVEL 5 via drone build #460 ... Build 460: uptime-kuma@eb4521cc (PR #3); custom tier playwright:1 PASS. All stages: install/upgrade/backup/restore/custom/lint PASS. test_monitor_wizard [pass] — wizard + self-probe UP + dead-port DOWN. clean_teardown=true, no_secret_leak=true. PR comment ✅ posted. Artifacts: /var/lib/cc-ci-runs/460/ Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-11 18:27:26 +00:00
autonomic-botandClaude Sonnet 4.6	8da59cff22	feat(kuma): implement wizard+monitor Playwright test (tests/uptime-kuma/playwright/) ... Phase kuma M1 impl: resolves the 2026-05-28 DEFERRED uptime-kuma create-a-monitor item. Approach: Playwright (option b) — python-socketio not in cc-ci Nix env; Playwright handles Socket.IO transparently via the real browser. Selectors confirmed in 2.2.1 compiled bundle (data-cy setup wizard + data-testid monitor form/status badge). Test flow (test_monitor_wizard_and_probe): 1. Setup wizard: admin create via data-cy form → auto-login → /dashboard 2. Create self-probe monitor (https://{live_app}/) → wait ≤90s for "Up" badge 3. Heartbeat table row check: isFirstBeat=important, row has real datetime stamp 4. Negative: dead-port monitor (http://127.0.0.1:19999/dead) → wait ≤60s for "Down" All waits are bounded poll with page.wait_for_function/wait_for_url/wait_for_selector. Admin password: 64-char UUID hex, never printed/logged. Also: DECISIONS.md records Playwright choice; phase state files bootstrapped. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-11 18:15:13 +00:00
autonomic-bot	9eb5261c1e	probe(kuma): pre-flight — python-socketio absent on cc-ci (Playwright available); real-probe evidence requirements documented	2026-06-11 18:04:45 +00:00
autonomic-bot	f46aa05151	chore(kuma): init Adversary phase state files (REVIEW + BACKLOG adversary section)	2026-06-11 18:03:25 +00:00
autonomic-bot	43826918ed	chore(mailu): init Adversary phase state files (REVIEW + BACKLOG adversary section)	2026-06-11 18:00:07 +00:00
autonomic-bot	71358da446	review(dstamp): M2 PASS @2026-06-11T17:58Z — build 450 level 5 (install/upgrade/backup/restore/custom/lint all PASS, clean_teardown+no_secret_leak true); test_upgrade_reconverges PASS (HC1 chaos-version=7ae7b0f7==head_ref); !testme path confirmed (14346→14347 bot ✅); DEFERRED closed w/ pointers; HC1 teeth: m2p-discourse negative control (eb96de94≠7ae7b0f7→AssertionError HC1) + code unchanged; blast-radius discourse-only. All phase dstamp DoD items satisfied.	2026-06-11 17:51:54 +00:00
autonomic-bot	fb411b2563	review(dstamp): M1 PASS @2026-06-11T17:36Z — root cause proven by direct evidence (repro4: Spec=7ae7b0f7+U→PreviousSpec=eb96de94+U, swarm rollback confirmed); abra constant (gens4-11 same store path); fix verified (stop-first overlay + assert_upgrade_converged 2-phase, HC1 code unchanged); blast-radius n8n/keycloak PASS L4 in 06-10/06-11 era; dstamp-fix1/fix2 upgrade=PASS @7ae7b0f7+U. Builder cleared for M2.	2026-06-11 17:37:35 +00:00
autonomic-bot	f6058b9a00	review(bsky): post-verdict DECISIONS consult — pin-choice + EXPECTED_NA entries consistent (digest-pin rejected for abra tooling); verdict unchanged	2026-06-11 15:49:33 +00:00
autonomic-bot	42eabbaa24	review(bsky): M2 PASS @5b0e42a — fresh independent !testme re-trigger (comment 14344) → build 435 level 5 at PR head f7b6c8df, real functional tests (account/post/auth), clean teardown, no leak, screenshot real==427; DEFERRED both entries closed w/ pointers; operator summary crisp; 0.5.x has NO release tag (re-pin fully justified); no canonical to reseed; PR open/unmerged. Both M1+M2 fresh PASS, no VETO — Builder cleared for ## DONE.	2026-06-11 15:48:53 +00:00
autonomic-bot	369f4f486b	review(bsky): M1 PASS @73889ed — root cause reproduced cold (:0.4=0.5.1/index.ts crash, :0.4.219=index.js fix); PR#2 minimal +2/-2 unmerged; run 427 genuine drone !testme at PR head = level 5 (upgrade=declared intentional skip, premise verified: both published tags pin broken moving :0.4); negative control 423 red @ level 0 (teeth); 253 unit tests + repo lint PASS cold; screenshot real PDS landing credential-free (sha256 published==disk); no secret leak. No gate weakening — EXPECTED_NA scoped per-recipe-per-rung. No VETO.	2026-06-11 12:03:04 +00:00
autonomic-bot	cfda9e72db	review(bsky): EXPECTED_NA['upgrade'] premise verified cold — both published tags (0.1.1/0.2.0+v0.4) pin broken moving :0.4, no deployable base; recorded scoping/teeth checks for the claim	2026-06-11 11:56:07 +00:00
autonomic-bot	f88c6bc78d	review(bsky): cold image probe reproduces root cause both halves (:0.4 ships index.ts/node24, :0.4.219 ships index.js/node20); recorded M1 scrutiny points; no claim yet	2026-06-11 11:44:26 +00:00
autonomic-bot	8d5bf305e8	review(bsky): seed REVIEW-bsky + cold baseline recon (image :0.4 moving tag, entrypoint runs relative index.js); awaiting first claim	2026-06-11 11:32:20 +00:00
autonomic-bot	9ce987188a	status(lvl5): ## DONE — M1 (cfc87fd) + M2 (13cad1f) both PASS, no VETO; L5 lint rung + de-capped levels live end-to-end; cleanup complete	2026-06-11 11:29:32 +00:00
autonomic-bot	a521d43a17	claim(lvl5): M2 — P4 proven in real CI: L5 (398/406/407/413), lint-blocked L4 verdict-neutral (405), N/A-skip climb (399), drone !testme ×3, canaries red @ re-derived L1 (415/416), unver-blocks synthesized run L2, old artifacts render, durations at baseline, visuals verified	2026-06-11 11:18:26 +00:00
autonomic-bot	dc924c679b	status(lvl5): before/after table real values (398/399/405/406/407/413) + canary designed-level re-derivation (415/416 red @ L1)	2026-06-11 11:15:31 +00:00
autonomic-bot	763f8d1a47	journal(lvl5): P4 wave 2 — PR-path lint fix proven, L4-blocked + 2×L5 PR proofs green, visuals verified	2026-06-11 11:04:21 +00:00
autonomic-bot	68c3486216	fix(lvl5): lint executor PR-path — abra lint selects+checks out the repo DEFAULT BRANCH; scratch clone of a detached per-run tree has none (FATA, live 400-402), and a stale default would be silently linted instead of the PR head. Force local main AT the tested ref + repoint origin to the scratch itself (offline tag fetch, no drift). Regression test with detached two-commit source proves exact-ref content is linted. 247 unit tests green; real-abra detached-source smoke pass.	2026-06-11 10:56:56 +00:00
autonomic-bot	1fb70aafa6	journal(lvl5): P4 wave 1 — hedgedoc L5 + custom-html-tiny N/A-skip climb green; lint-demo PR4 + 3 testme builds in flight	2026-06-11 10:50:00 +00:00
autonomic-bot	29047a8dec	status(lvl5): M1 PASS consumed — merged 08e6cc8, suite green on merged main, dashboard rolled + live-verified; starting P4	2026-06-11 10:46:03 +00:00
autonomic-bot	08e6cc8273	feat(lvl5): merge phase-lvl5 → main after M1 PASS (review cfc87fd) — implementation content taken verbatim from the Adversary-verified branch tip 3d8d286	2026-06-11 07:56:34 +00:00
autonomic-bot	5ce813e910	journal(lvl5): P3 sweep evidence	2026-06-11 07:54:50 +00:00
autonomic-bot	40caaab8fb	status(lvl5): P3 sweep complete — 19/19 enrolled recipes lint PASS (warn-only misses), no mirror PRs needed; before/after baseline table assembled	2026-06-11 07:54:35 +00:00
autonomic-bot	24baac559c	claim(lvl5): M1 — P1+P2 complete on phase-lvl5 @ 3d8d286; 246 unit tests cold-green on cc-ci venv, repo lint PASS, real-abra smoke pass+R014-fail, verdict-neutral by construction; main holds reverts pending pre-merge PASS	2026-06-11 07:51:13 +00:00
autonomic-bot	3d8d286cf3	chore(lvl5): ruff format lint.py	2026-06-11 07:49:47 +00:00
autonomic-bot	1d3b61c6c2	fix(lvl5): lint table parser — abra renders HEAVY box verticals (┃ U+2503); accept both; meta registry EXPECTED_NA/BACKUP_CAPABLE wording → regenerated doc table ... Found by real-abra smoke on cc-ci: hedgedoc clean → pass; +lightweight tag → fail R014. Full suite 246 passed on cc-ci venv.	2026-06-11 07:49:29 +00:00
autonomic-bot	cd62743055	Revert "feat(lvl5): P1 — 5-rung ladder (L5=abra recipe lint) + de-capped level semantics" ... This reverts commit e219a7891d.	2026-06-11 07:46:57 +00:00
autonomic-bot	589943f46e	Revert "docs(lvl5): results-ux.md → 5-rung de-capped ladder + schema 2; recipe-customization.md EXPECTED_NA/BACKUP_CAPABLE rows to new semantics" ... This reverts commit af7488a498.	2026-06-11 07:46:57 +00:00
autonomic-bot	af7488a498	docs(lvl5): results-ux.md → 5-rung de-capped ladder + schema 2; recipe-customization.md EXPECTED_NA/BACKUP_CAPABLE rows to new semantics	2026-06-11 07:45:18 +00:00
autonomic-bot	392f7df48f	decisions(lvl5): level-semantics de-cap record, N/A classification table, lint mirror-context decision	2026-06-11 07:43:25 +00:00
autonomic-bot	e219a7891d	feat(lvl5): P1 — 5-rung ladder (L5=abra recipe lint) + de-capped level semantics ... level.py: RUNGS += lint; statuses {pass,fail,skip,unver}; compute_level = max passed rung with all below pass-or-skip (fail/unver block); cap_reason/capped DELETED. harness/lint.py: lint executor — pristine scratch clone of the per-run tree at the exact tested ref (mirror-origin + untracked-overlay pollution solved by context, no rule filtered), PTY via script -qec, 60s hard budget, lint.txt artifact, table-parse classifier (rc only signals FATA), unver on any non-run (never silent pass). results.py: derive_rungs classifies every N/A source (structural/declared → skip, else unver), lint rung + synthetic lint stage + lint block in results.json, schema 2, cap fields removed. run_recipe_ci.py: lint call before tiers (double-wrapped, verdict-neutral), badge = level only. card/dashboard: 0-5 ramp, cap line → 'level N of {4|5}', unverified rows, badge number+colour only, lint.txt servable, old schema-1 artifacts render untouched. Unit suite rewritten: 245 passed on cc-ci venv.	2026-06-11 07:42:30 +00:00
autonomic-bot	df301a5917	status(lvl5): phase open — state files bootstrapped, orientation done, probing abra lint next	2026-06-11 07:22:53 +00:00
autonomic-bot	4822115b2b	status(shot): ## DONE — M1 (ae10b55) + M2 (2b54adb) both PASS, A1 closed, no VETO; phase complete	2026-06-11 07:19:09 +00:00
autonomic-bot	2b54adbe46	review(shot): M2 PASS — all 19 enrolled cold-verified. 18/18 final PNGs Read (real, representative, credential-free; every login/setup form EMPTY-field, mattermost real login NOT interstitial, keycloak/immich/etc SPA paint-race fixed); no verdict/level regression (all pass at baseline); 2 GENUINE drone !testme (370 immich#2 comment 14321 + 371 plausible#3 comment 14322, bridge-triggered per ccci-bridge logs, NOT manual); durations 199→198/209→166 no balloon; R7 intact (call site outside-deploy+double-wrapped+untouched by shot phase, capture swallows, 60s budget); dashboard/screenshot/badge live 200; screenshot 12/12 + card 10/10 unit tests GREEN cold on real harness; no_secret_leak=true. bluesky N/A re-confirmed; mumble N/A-variant AGREED (reverses M1 on new evidence: connect-dialog DOM absent + perpetual spinner). A1 closed. No VETO — DoD handshake satisfied, Builder may write ## DONE.	2026-06-11 07:18:05 +00:00
autonomic-bot	196156e497	claim(shot): M2 — all 19 recipes OK or documented-N/A (bluesky-pds upstream-broken; mumble best-available loader + DEFERRED); fixes on main (harness settle+keep-larger retry, plausible 62→68ch SECRET_KEY_BASE root-cause, mattermost click-through hook); 10 fresh proof runs incl drone !testme 370+371, levels=baselines, durations 198/166s vs 199/209s; every PNG Builder-Read, credential-free; dashboard/card/badge verified	2026-06-11 07:06:04 +00:00
autonomic-bot	2b2a7ba823	status(shot): M2 evidence assembled — P3/P4 ledgers complete, proof table, durations, dashboard checks	2026-06-11 07:05:52 +00:00
autonomic-bot	6104a9970d	chore(shot): DEFERRED — mumble-web client never paints for anonymous visitors (upstream question; loader frame is the honest web-surface view; voice fully tested via protocol tests)	2026-06-11 07:02:49 +00:00
autonomic-bot	3c33129ebd	fix(shot): mattermost hook v2 — interstitial appears on ANY first-visit route incl /login (proven byte-identical PNG); click 'View in Browser' best-effort then settle; unit test covers click + no-interstitial fallback; 207 pass, lint PASS	2026-06-11 06:45:43 +00:00
autonomic-bot	5fc86991dd	review(shot): finding A1 CLOSED — fix 7ad7d1f re-verified cold by independent probe (filed case [9999,4801]->keeps 9999, no temp leak; 4 original cases intact; R7 preserved). 5/5 pass.	2026-06-11 06:33:02 +00:00
autonomic-bot	58d3505ea7	journal(shot): proof sweep progress + A1 fix + mumble probe plan	2026-06-11 06:32:42 +00:00
autonomic-bot	7ad7d1f20d	fix(shot): A1 — blank-retry keeps the LARGER frame (retry snapped to temp path, os.replace only if >= first; worse late frame discarded + temp cleaned); regression test [9999,4801]->9999; 207 unit tests pass, lint PASS	2026-06-11 06:24:01 +00:00
autonomic-bot	ea0e3e9d2f	review(shot): finding A1 [adversary] — blank-retry overwrites unconditionally, can REGRESS a larger frame (9999B->4801B) to a worse one; LOW/non-blocking (R7 holds, visual M2 check is backstop); trivial max(first,retry) guard suggested. Independent cold probe, 9/9 R7 checks otherwise pass.	2026-06-11 06:20:12 +00:00
autonomic-bot	80e5713c5c	feat(shot): mattermost-lts SCREENSHOT hook → /login (default lands the desktop-or-browser interstitial; watch-list wants the real sign-in form) + public screenshot.settle() for hooks; unit test via real loader; 206 unit tests pass, lint PASS	2026-06-11 06:19:39 +00:00
autonomic-bot	b8414a8fdb	journal(shot): plausible root-cause story + P4 proof-run kickoff	2026-06-11 06:00:11 +00:00
autonomic-bot	b98a471dac	fix(shot): plausible SECRET_KEY_BASE 62→68 chars — Phoenix cookie store requires >=64 bytes, so EVERY HTML render 500'd (the real cause of screenshot:null on all runs; /api/* unaffected which is why tiers passed). Default capture now lands the real registration page; verified: shot-fix-plausible run install=pass, screenshot.png 64132B real form, no hook needed	2026-06-11 05:55:43 +00:00
autonomic-bot	ce50f641cc	feat(shot): harness default capture fix — bounded networkidle settle after domcontentloaded + blank-frame retry (≤60s wait budget, R7 best-effort preserved); 6 unit tests; lint PASS, 205 unit tests pass via cc-ci-run	2026-06-11 01:31:03 +00:00
autonomic-bot	e005897cb9	claim(shot): M1 — audit matrix 19/19 (every PNG visually inspected), all non-OK rows root-caused with evidence (plausible 500-by-design via drone build-357 log; blank/loading = domcontentloaded paint race, 4801B fingerprint; bluesky-pds deploy-gated N/A; mumble NOT N/A), N/A candidates argued	2026-06-11 01:26:50 +00:00
autonomic-bot	8978fa6ae3	status(shot): phase open — P1 audit matrix complete (19/19 recipes, every PNG visually inspected) + P2 root causes (plausible /-500s-by-design via build-357 log; blank/loading = domcontentloaded paint race; bluesky-pds deploy-gated; mumble has real web UI; custom-html nginx-welcome is honest fresh-install content)	2026-06-11 01:26:23 +00:00
autonomic-bot	1bcb2ed8fe	status(rcust): ## DONE — M1 (01f9f70) + M2 (3245150) both PASS, no VETO; phase complete	2026-06-11 01:16:27 +00:00
autonomic-bot	3245150982	review(rcust): M2 PASS — merged-main regression sweep cold-verified. Canaries 7/7 (re-ran myself incl. false-green detector); all 21 recipes reconciled (every baseline deviation proven rcust-neutral via same-ref old-vs-new A/B or stale-schema w/ coverage preserved, all in DEFERRED); drone-path 356/357 custom success; customizations execute (manifest 21/21, mumble tcp, ghost overlay+chaos, immich seeds); zero leaks; both fix-forwards cleared. M1+M2 both PASS → DoD handshake satisfied, Builder may write ## DONE. No VETO.	2026-06-11 01:15:45 +00:00
autonomic-bot	f7b9b6f167	status(rcust): Current section → M2 CLAIMED	2026-06-11 01:07:13 +00:00
autonomic-bot	d7f85c3f28	claim(rcust): M2 — merge+2 approved fix-forwards green, canaries 7/7, 21/21 reconciled vs corrected baseline (3 lasuite via accepted L5≡L4+OIDC equivalence, bluesky-pds justified exclusion), drone path covered (356/357), zero leaks	2026-06-11 01:06:48 +00:00
autonomic-bot	89dec5188f	inbox(rcust): consumed 01:12Z be2026a-cleared note; bluesky-pds filed in DEFERRED.md as non-rcust upstream image breakage (justified M2 exclusion, A/B-proven harness-neutral)	2026-06-11 01:00:32 +00:00
autonomic-bot	24a203a098	review(rcust): be2026a fix-forward CLEARED (all 3 conditions met, independently verified) + ACCEPT L5≡L4+OIDC-pass equivalence — lasuite-* L5 baselines stale (c51cd84 4-rung predates rcust, git-proven), rcust innocent, OIDC coverage preserved. Consumed 01:10Z inbox. M2 still open: bluesky upstream-breakage note, drone-path runs, zero-leak, my sample re-check	2026-06-11 00:59:29 +00:00
autonomic-bot	f359069d40	inbox(rcust): m2p2 GREEN rc=0 3m19s (both fix-forwards exercised end-to-end; OIDC+MinIO pass) — level=4 vs condition-1 'L5' explained: 6-rung ladder removed on MAINLINE 06-09 (46e2cdb/c51cd84 PR#6) pre-merge; equivalence proposed (L4 all-pass + requires_deps OIDC PASSED)	2026-06-11 00:57:12 +00:00
autonomic-bot	a13a83a775	status(rcust): discourse A/B CLOSED — old==new byte-identical upgrade-HC1 at baseline ref+invocation (harness-neutral, env drift since 06-05; branch-tip/tag/abra-pin drift eliminated); m2p2 lasuite-drive binding proof started	2026-06-11 00:51:10 +00:00
autonomic-bot	4428e76f48	review(rcust): be2026a merge cold-verified — merged lifecycle.py + test file byte-identical to branch (condition #2 met); m2p-lasuite-drive L0 = diagnosed pre-fix symptom; awaiting discourse A/B + post-fix L5	2026-06-11 00:42:54 +00:00
autonomic-bot	b4505acbbd	status(rcust): disclosed SIGINT shortcut of doomed m2p overlay install burn (KeyboardInterrupt at the diagnosed converge line); m2p2 is the binding proof	2026-06-11 00:39:44 +00:00
autonomic-bot	9715ab5c50	status(rcust): be2026a merged as 6cabbe7 (build 350 green on 914c166); m2p2-lasuite-drive post-fix proof queued behind discourse A/B	2026-06-11 00:38:06 +00:00
autonomic-bot	914c1663b5	inbox(rcust): consumed 00:31Z conditional APPROVE — merging be2026a, post-merge lasuite-drive re-run queued behind discourse A/B pair	2026-06-11 00:33:07 +00:00
autonomic-bot	6cabbe73b7	fix(harness): merge fix/converged-oneshot @ be2026a — services_converged completed-one-shot rule (rcust M2 fix-forward #2, Adversary-approved a531746)	2026-06-11 00:33:07 +00:00
autonomic-bot	a531746e53	review(rcust): APPROVE fix-forward be2026a (services_converged completed-one-shot rule) — cold-verified diff+7 tests+199 unit+lint on fresh checkout, no false-green path (HTTP floor + minio custom test independent); conditional on post-merge lasuite-drive L5 + merged-diff==branch-diff + discourse PR=2 A/B cold re-check. Consumed 00:40Z inbox	2026-06-11 00:31:54 +00:00
autonomic-bot	49d796d9ac	status(rcust): m2p-lasuite-drive WILL land L0 — second P2b regression (completed one-shot 0/1 vs services_converged) root-caused live; fix on branch be2026a awaiting approval	2026-06-11 00:28:33 +00:00
autonomic-bot	73421dabb4	inbox(rcust): lasuite-drive SECOND P2b regression root-caused live (completed one-shot 0/1 poisons services_converged after hook moved pre-assert) — fix-forward on branch fix/converged-oneshot @ be2026a, 199 unit + lint green, awaiting approval	2026-06-11 00:27:49 +00:00