recipe-maintainers/cc-ci
0
0
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity
634 Commits 32 Branches 1 Tag
4237cc03f52c4ece304bbfcd941a622eb8dfd60b
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
notplants fe135d3d55 note(2): pre-assess ghost base-grace overlay compose.ccci.yml (7feeadd) — static read policy-compliant (minimal/justified/grace-only); NOT a PASS, durable proof = green upgrade-to-latest run; VETO stands 2026-05-30 17:56:05 +01:00
notplants 006368ddae note(2): cold-verify expectation — uniform overlay filename compose.ccci.yml; ghost/discourse rename = pure rename (verify byte-identical + COMPOSE_FILE updated, no smuggled behavior change) 2026-05-30 17:26:20 +01:00
notplants 3491485825 inbox(2): COURSE CORRECTION — new overlay policy supersedes env-var line. Your literal-bump approach is COMPLIANT (don't revert). REVERSAL: discourse upgrade-tier deferral now DISALLOWED — re-pin overlay on 0.7.0 from-version blessed to make upgrade-to-latest run; 0.7.0 custom tests may skip+record. mumble: drop old-base host-ports copy 2026-05-30 17:23:11 +01:00
notplants bdef2820ba review(2): POLICY RECALIBRATION — plan-ccci-compose-overlay-policy.md supersedes env-var-migration premise (which my repro 4b862f6 proved impossible). Overlays are a justified fallback; Builder's literal-recipe-PR start_period bumps are COMPLIANT (prefer-upstream path) — overlay deletions NOT violations. REVERSE prior lean to grant discourse §7.1 upgrade-tier deferral: upgrade-to-latest must ALWAYS run (re-pin overlay on 0.7.0 from-version now blessed). mumble: drop old-base host-ports copy, upgrade-to-latest+voice on latest. WITHDRAW 14:23 VETO; new re-scoped VETO on DONE 2026-05-30 17:22:38 +01:00
notplants ddc20e1547 inbox(2): heads-up — abra start_period env-interp impossible (reproduced); applies to ghost F2-14b too → literal recipe-PR bump is the path, skip env-var dead-end 2026-05-30 17:11:39 +01:00
notplants 4b862f61ca review(2): F2-14a oq-1 RESOLVED (Builder's favor) — independently reproduced abra FATA on env-interpolated start_period (${APP_START_PERIOD:-5m} → 'Does not match format duration' at app new; literal 20m creates OK). Env-var form genuinely impossible for start_period; literal recipe-PR bump is §9-compliant. oq-2 (5m→20m default acceptability) + green maximal-subset run remain; ghost/mumble open; VETO stands 2026-05-30 17:11:14 +01:00
notplants 70a8e72a0e review(2): F2-14a corrections — install_steps DELETED (not no-op); env-interp-impossible is documented (abra FATA start_period format, lasuite-drive precedent) → likely justifies literal bump pending my abra re-check at claim; VETO stands 2026-05-30 16:45:50 +01:00
notplants c8f5912c00 review(2): F2-14a discourse overlay migration mechanically DONE (overlay deleted, no COMPOSE_FILE, install_steps no-op) — but OPEN: literal 5m→20m start_period bump deviates from policy E2 env-var/default-current; settle at claim (prove abra-can't-interpolate OR use env var; confirm default-change acceptable); not a verdict, VETO stands 2026-05-30 16:42:16 +01:00
notplants 5c2d4c2af3 review(2): break-it teardown sweep CLEAN (0 orphan stacks/volumes, warm infra 1/1); minor stale-.env nit (3 files, 0 live resources/secrets — cosmetic, not a veto); note discourse policy-compliant pivot c346b97 (verify on claim) 2026-05-30 15:58:07 +01:00
notplants efe37900ad inbox(2): new anti-overlay policy — REVERSE discourse guidance (start_period→env PR, upgrade tier→§7.1 deferral I'll grant), ghost Q4.4 + mumble Q4.2 passes conditional, DONE veto'd until overlays migrated/justified 2026-05-30 15:24:43 +01:00
notplants 13952442af review(2): file [adversary] F2-14 (a-d) — cc-ci compose overlays vs anti-drift policy; discourse/ghost migrate to env PR, mumble justify-or-migrate; ghost Q4.4 + mumble Q4.2 passes CONDITIONAL; discourse upgrade-tier §7.1-deferral now preferred 2026-05-30 15:24:43 +01:00
notplants 4008c47ff4 review(2): ACK new anti-compose-overlay policy + SCOPED VETO on DONE — discourse/ghost start_period must migrate to env PR (ghost Q4.4 + mumble Q4.2 passes now CONDITIONAL); REVERSE discourse Q4.6 §7.1 (now GRANT upgrade-from-removed-image-base deferral per policy pt2); drift evidence = overlay-merge YAML dup-key fail 2026-05-30 15:23:43 +01:00
notplants 8288e0fd3c inbox(2): consume Builder §7.1-accept; ack CCCI_UPGRADE_BASE (sound); CATCH — overlay must re-pin BOTH app+sidekiq images to bitnamilegacy/discourse:3.3.1 (0.7.0 compose pins bitnami in 2 services, sidekiq would 404); restate claim bar 2026-05-30 14:23:59 +01:00
notplants c7116c41f3 inbox(2): discourse Q4.6 §7.1 UPDATE — honest 0.7.0->0.8.0 crossover achievable (base-on-[-1] + uniform bitnamilegacy:3.3.1 overlay); leaning DENY deferral; implement-or-justify 2026-05-30 14:10:16 +01:00
notplants 1d83beb6bd review(2): discourse Q4.6 §7.1 DECISIVE FACT RESOLVED — prev[-2]=0.6.3+3.1.2(img3.1.2) but [-1]=0.7.0+3.3.1(img3.3.1)=PR's true predecessor; honest 0.7.0->0.8.0 crossover achievable via uniform bitnamilegacy:3.3.1 overlay + base-on-[-1]; obstacle is modest base-selection fix not env blocker; leaning DENY (not a verdict, gate unclaimed) 2026-05-30 14:10:11 +01:00
notplants efacf17047 inbox(2): discourse Q4.6 §7.1 bar before claim — uniform bitnamilegacy:3.3.1 overlay may make upgrade crossover HONEST+testable (prev/head both 3.3.1); deferral only sound if prev-base≠head image ver; decisive question + bar 2026-05-30 14:08:05 +01:00
notplants 6a5c5f3e13 review(2): discourse Q4.6 §7.1 pre-positioning — premise VERIFIED first-hand (all bitnami/discourse:{3.1.2,3.3.1,3.4.5}=404, bitnamilegacy=200, upstream newest 0.8.0+3.4.5); deferral NOT yet established (honest uniform-overlay crossover may make upgrade tier testable iff prev base==head image ver); decisive fact OPEN; bar set; not a verdict 2026-05-30 14:07:50 +01:00
notplants dd00934b4f review(2): CORRECTION — retract garbled host specifics in 977b01f dashboard probe (no /var/lib dir; dashboard pulls Drone builds API filtered by RECIPE); verified fact 'no recipe runs yet' + Q5/DONE criterion stand; rewrite inbox accurately 2026-05-30 13:35:34 +01:00
notplants d0e19f6f1d inbox(2): heads-up to Builder — live dashboard empty (0 records); pick (a) !testme-publish sample or (b) operator-blessed host-run==P1 statement before Q5/DONE 2026-05-30 13:32:05 +01:00
notplants 977b01fb66 review(2): break-it probe — LIVE dashboard has 0 run records (data dir empty, mtime 06:01Z); D7/P1 forward-looking criterion for Q5/DONE; NOT a veto; corrects earlier garbled api/runs line 2026-05-30 13:31:32 +01:00
notplants b047af290a inbox(2): NODE FREE for your recipe-PRs — stopped my retry loop (was still running attempt 2; tore down plau-e65361 clean, 0 orphans), confirmed loop attempt1 install-FAIL; ack your retraction+acceptance of all 3 §7.1 rulings; will cold-verify each recipe-PR run on claim 2026-05-30 10:42:05 +01:00
notplants e850281bd6 review(2): §7.1 — discourse Q4.6 sign-off DENIED (bitnamilegacy/discourse:3.3.1 served → 1-line re-pin recipe-PR unblocks; not a hard upstream block); plausible Q4.7-full root-caused (CH crash-loop = silenced-wget restart-storm in custom entrypoint, clickhouse-server never starts; recipe-PR-fixable, not env-immutable) sign-off HELD→leaning-DENY pending retry loop 2026-05-30 10:29:41 +01:00
notplants 58e0a27ad5 review(2): §7.1 sign-off adjudication IN PROGRESS — drone Q4.10 operator-block CONFIRMED legit (sign-off warranted; /etc/timezone absent first-hand, fix 3bde76f needs host rebuild); plausible-full cold retry-loop RUNNING (will refute or sign-off per result); discourse pending 2026-05-30 10:11:23 +01:00
notplants f904f9b9f5 inbox(2): consumed §7.1 sign-off request — cold-verifying plausible-full with retries BEFORE ruling; flagging running drone stack vs 'operator-blocked' claim; will confirm discourse upstream block first-hand 2026-05-30 10:10:22 +01:00
notplants d753903c2a inbox(2): consumed plausible Q4.7-full heads-up — holding heavy deploys (node is Builder's). §4.3 floor already Adversary-verified first-hand (71af595); on Q4.7-full claim will cold-verify the ADDED upgrade + P4 tiers (test_backup/restore/upgrade markers) + deploy-count=1 + clean teardown; retry on the known ClickHouse cold-boot flake. drone Q4.10 + discourse Q4.6 remain blocked. 2026-05-30 08:24:32 +01:00
notplants bb072422c1 review(2): Q3.1 lasuite-docs PASS — COLD full lifecycle GREEN (my clone, log adv-lasuite-docs-q31) 5 tiers, deploy-count=1 + deps ['keycloak'], real upgrade crossover 0.3.2+v5.1.0→0.3.3+v5.1.0, P4 postgres ci_marker survives restore (recipe's own restore.post-hook, no PR; non-vacuous drop+assert), clean teardown w/ per-run realm deletion + warm-keycloak preserved; CRITICAL: all 5 custom functional PASSED **NOT SKIPPED** — requires_deps guard did NOT fire — incl §4.3 test_create_doc_and_read_back (OIDC JWT→POST doc→GET roundtrip) + test_oidc_password_grant_against_dep_keycloak (per-run namespaced realm, real JWT iss/azp/typ/exp); P5 SSO-dep auto-deploy proven; no veto 2026-05-30 08:21:05 +01:00
notplants 6d12991d8f inbox(2): consumed lasuite-docs Q3.1 heads-up — holding heavy deploys (node is Builder's for RECIPE=lasuite-docs DEPS=keycloak). On Q3.1 claim will cold-verify: 5 tiers green, deploy-count=2 (recipe+keycloak dep, no hidden redeploy), §4.3 create-doc real, OIDC-with-keycloak real, P4 data-integrity, clean teardown. Also noted: drone Q4.10 stack now running (recheck later). 2026-05-30 08:03:03 +01:00
notplants baa7ad828b review(2): Q4.4 ghost PASS — COLD full lifecycle GREEN (my clone, log adv-ghost-pr1) 5 tiers, deploy-count=1, real upgrade crossover 1.1.1+6-alpine→1.3.0+6.21.2-alpine (chaos 6d6227f7+U, HC1 preserved), create_post_roundtrip + restore + backup + upgrade markers PASS, clean teardown; P4 MySQL ci_marker restore proven NON-VACUOUS via PR=0 negative control (published recipe → test_restore_returns_state FAILED 'Table ghost.ci_marker doesnt exist', fail-loud) — recipe-PR ghost#1 is a genuine reimport-on-restore fix (4th data-loss recipe bug cc-ci caught); §4.3 create-post real (cookie admin session + unique-marker title+body read-back) CLOSES the ghost §4.3 floor; +U HC1 fix & healthcheck overlay reviewed legit (not weakening); clean teardown after FAILED run too; no veto 2026-05-30 07:57:56 +01:00
notplants e2be3cc07e inbox(2): consumed Q4.4 ghost cold-verify heads-up — starting PR=1 full lifecycle + PR=0 negative control; will retry on the noted mysql cold-init healthcheck flake (not fail the gate on it) 2026-05-30 07:28:17 +01:00
notplants c8c3cc8858 inbox(2): consumed Builder ghost-run heads-up — holding heavy deploys (node is Builder's for RECIPE=ghost); will cold-verify ghost on claim (esp. create-post replaces weak test_content_api + P4 restore non-vacuousness) 2026-05-30 04:09:57 +01:00
notplants 71af595915 review(2): Q4.7 plausible §4.3 floor NOW FIRST-HAND GREEN — my cold run (adv-plausible-cold2) install+custom pass, deploy-count=1, BOTH *_event_roundtrip PASSED (ClickHouse events_v2 read-back), clean teardown; prior readiness-404 was a transient ClickHouse-boot flake; Q4.7 first-hand-evidence obligation CLEARED; note: ClickHouse boot intermittently flaky 1/2 on single node 2026-05-30 04:08:04 +01:00
notplants 430d57aac3 inbox(2): Adversary running plausible break-it probe on the node (settling Q4.7 §4.3 first-hand); ping to reclaim node 2026-05-30 03:42:06 +01:00
notplants e45e0eea71 review(2): Q4.3 bluesky-pds PASS — COLD full lifecycle GREEN (my clone, log adv-bluesky-pr0) 5 tiers+4 custom, deploy-count=1, real upgrade crossover 0.1.1+v0.4→0.2.0+v0.4, clean teardown; P4 atproto-account marker non-vacuous via IN-BAND pre_restore delete+assert-gone (no recipe-PR — bluesky volume restore genuinely round-trips, real recipe diff from postgres recipes); 2 distinct P3 functional (account+post §4.3 round-trip + getSession auth-gating 401); no veto 2026-05-30 02:56:26 +01:00
notplants 2b4087712d review(2): Q4.5 mattermost-lts PASS — COLD full lifecycle GREEN (my clone, log adv-mattermost-pr1) 5 tiers+4 custom, deploy-count=1, real upgrade crossover 10.11.15→10.11.18, clean teardown; P4 restore proven NON-VACUOUS via negative control (PR=0 published recipe → test_restore_returns_state FAILED 'relation ci_marker does not exist', fail-loud) — recipe-PR #1 is a genuine fix; 2 distinct P3 functional tests (self round-trip + cross-user delivery w/ user_b own token); clean teardown after FAILED run too; no veto 2026-05-30 02:35:50 +01:00
notplants c503f7d51c review(2): Q4.1 matrix-synapse PASS — COLD first-hand full lifecycle GREEN (my clone, log adv-matrix-cold); 5 tiers + 3 custom, deploy-count=1, real upgrade crossover 7.1.0→7.1.1, P4 restore ci_marker survives; §4.3 register retry verified NON-VACUOUS + reproduced the real post-restore transient (500 attempt1/2 → succeeded attempt3, full register→room→send→readback chain intact, 4xx fail-fast, timeout RAISEs); clean teardown; no veto 2026-05-30 01:07:53 +01:00
notplants 11c5498bfa review(2): Q3.5 immich PASS — COLD first-hand full lifecycle GREEN (my clone, log adv-immich-cold); 5 tiers + 3 custom, deploy-count=1, P4 restore test_restore_returns_state PASSED (ci_marker survives recipe-PR pg_dump backup→restore; non-vacuous: pre_restore DROPs+asserts), negative control 7eb3937 lacks DB backupbot labels (bug confirmed), real upgrade crossover 1.5.1+v2.6.3→1.6.0+v2.7.5, 2 distinct P3 functional, clean teardown; P4-restore RED CLOSED; no veto 2026-05-30 00:36:17 +01:00
notplants 6241e735ca review(2): drone leftover CLOSED (Builder removed stack+vol, node clean); immich Q3.5 P4 recipe-PR deploy in flight (immi-074f69); no gate pending; drone still operator-blocked (/etc/timezone absent) 2026-05-29 23:49:51 +01:00
notplants dd45e9555e revert(2): drop adversary scratch probe scripts accidentally staged by git add -A (runner/adv_*.py are local-only adversary scratch, not Builder code) 2026-05-29 23:37:48 +01:00
notplants af94708de4 review(2): resume checkpoint — no gate pending; drone block genuine (/etc/timezone still absent on host); leftover drone smoke stack flagged (housekeeping); immich P4-restore still OPEN, unsigned 2026-05-29 23:37:17 +01:00
notplantsandClaude Opus 4.8 2958eb6c97 review(2): Q4.9 mailu PASS — COLD first-hand full lifecycle GREEN ×2 (my clone @6a216ed); deploy-count=1, real upgrade crossover 3.0.0→3.0.1 (head_ref==chaos-version), 2 non-vacuous P3 (unique-mailbox round-trip + unique-marker postfix→dovecot delivery), wait_healthy real gate, clean teardown; P4-N/A §7.1 sign-off GRANTED (no backupbot label, independently confirmed); P5/P6 N/A justified; no veto 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-29 21:51:06 +01:00
notplants 594f2d3389 review(2): Q4.6 discourse deferral VERIFIED SOUND — bitnami/discourse:3.3.1 + :3.1.2 both GONE, bitnamilegacy present; genuine upstream env-blocker (§8), pre-cleared for DONE; no veto 2026-05-29 20:56:01 +01:00
notplants 1daa1ea067 review(2): Q4.2 mumble PASS — COLD first-hand full-lifecycle GREEN (my clone @1ba5613); 5 tiers, deploy-count=1, tcp ready-probe 2x, real upgrade crossover, P3 config round-trips non-vacuous (max_users=42 + welcome marker), P4 sqlite ci_marker survives, clean teardown; no veto. Minor: leftover mumb-smoke volume (housekeeping) 2026-05-29 20:34:57 +01:00
notplants 191fa774ec review(2): Q4.2 mumble PRE-CLAIM code audit (NOT a verdict) — P7 non-vacuous at code level; cold-verify checklist staged for when claimed 2026-05-29 19:59:48 +01:00
notplants 7054e9bcd0 review(2): Q4.7 plausible teardown CLOSED (plau-0c70fd fully clean); cold run done, node FREE; §4.3 first-hand PASS still pending; inbox-notify Builder mumble unblocked 2026-05-29 19:58:01 +01:00
notplantsandClaude Opus 4.8 27abce678b review(2): Q4.7 plausible CONSOLIDATED verdict — self-corrects 0efcc36+1ecae1c (both had errors); §4.3 green in ONE clean Builder log + non-vacuous; full-lifecycle unproven (upstream clickhouse stall); not cleared, no veto 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-29 19:45:51 +01:00
notplantsandClaude Opus 4.8 1ecae1ce27 review(2): Q4.7 plausible CORRECTION — retract 'no evidence'; §4.3 event tests ARE green (2 Builder logs, 1 clean) + non-vacuous; my own cold run launched; full-lifecycle still deferred 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-29 19:30:26 +01:00
notplantsandClaude Opus 4.8 0efcc36207 review(2): Q4.7 plausible — deferral sound + test content non-vacuous, but '§4.3 proven green' UNVERIFIED (no evidence log on host); Q4.7 not cleared 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-29 19:26:59 +01:00
notplants 0215bd2203 review(2): PASS gate HQ1 image pre-pull (claim 475ad5c/code 2bf40d6) — 4 unit pass (non-vacuous, raises on pull-fail); LIVE warm-cache skip (present n8n, zero network); LIVE bad-tag RAISES clear pull error BEFORE deploy (manifest unknown, not converge timeout); abra deploy real+UNCHANGED (prepull before, no service update/scale); honest scope (pull-time not init-time). No VETO 2026-05-29 16:18:28 +01:00
notplants f7ed2d967c review(2): cryptpad F2-9 + F2-13 CLOSED — re-verify after fix b44d75b (poll-all-frames). create-pad roundtrip test_cryptpad_pad_content_survives_fresh_session PASSED (46s, was 340s timeout), all 5 tiers green, deploy-count=1, clean teardown. Fix non-vacuous (still asserts marker surfaces in fresh context = server-side encrypted persistence). §4.3 create-pad floor demonstrated; conditional sign-off satisfied 2026-05-29 15:37:12 +01:00
notplants 1cbb1ccd73 review(2): cryptpad F2-9 NOT closed — create-pad roundtrip read-back leg FAILED on cold-verify (CKEditor frame never attached on fresh context, line 133; 1 failed in 340s) → test is flaky not 3x-reliable. Filed F2-13: make read-back robust before F2-9 closes. install/upgrade/backup/restore pass, only the §4.3-floor pad-persist test red; teardown clean. NOT a VETO (F2-9 was conditional/open) 2026-05-29 15:05:22 +01:00
notplants 754f508231 review(2): record forward-looking Adversary criteria for pre-pull harness unit (plan-prepull-images.md) — verify warm-cache no-redownload + bad-tag=clear-pull-error-pre-deploy + abra stays real/unchanged + honest scope (pull-time not init-time; F2-12 init races still need healthcheck) 2026-05-29 14:58:38 +01:00
notplants a46f7d4593 review(2): PASS gate Q3.3 lasuite-meet (claim 5af513e/code 1f7806a) — cold-verify all 5 tiers GREEN, deploy-count=1, real upgrade crossover 0.2.0+v1.15.0->0.3.0+v1.16.0, meeting_flow (room create->read-back->LiveKit video-grant JWT->delete) PASSED, OIDC PASSED not-skipped, ci_marker survives, teardown clean+realm reaped. WebRTC media-relay non-port: ADVERSARY SIGN-OFF (genuine UDP env-blocker, maximal subset=LiveKit token issuance shipped) 2026-05-29 14:40:15 +01:00
notplants c7b36ebb6a review(2): record operator clarification — 3x repeat-green bar is lasuite-drive-recipe-PR ONLY (flakiness proof); normal gates = ONE cold-verified green per §6.1; cryptpad F2-9 needs only 1x 2026-05-29 13:25:46 +01:00
notplants af1481f6fc review(2): record forward-looking Adversary criteria for parked lasuite-drive recipe-PR (Q3.2b) — keystone collabora healthcheck must let cc-ci drop -c backstop to abra-native convergence w/o regressing F2-12; repeat-green+cold-verify before operator merge. Does NOT reopen Q3.2 (PASS stands) 2026-05-29 13:01:01 +01:00
notplants 3f5d58a7c2 review(2): PASS gate Q3.2 lasuite-drive (re-claim a13d2ae/code e1147b5+6506c4a) — F2-12 CLOSED. Cold re-run: all 5 tiers GREEN, upgrade tier now passes, deploy-count=1, ready-probe OK(200) twice, OIDC+minio round-trip PASS (not skipped), data-integrity survives, teardown clean. abra -c + owned wait_healthy/READY_PROBE proven non-vacuous (5 P7-negative units + code-read RAISE paths). DECISIONS: record operator READY_PROBE principle 2026-05-29 12:59:52 +01:00
notplants f7c5681cd0 review(2): pre-claim recon F2-12 fix e1147b5 — abra -c skips converge monitor BUT harness owns stricter wait_healthy(N/N all svcs)+READY_PROBE(collabora 200, raises on timeout); plausibly not-a-weakening, MUST cold-verify upgrade-GREEN + P7-negative at re-claim; NO verdict yet 2026-05-29 12:21:30 +01:00
notplants aab77ea0f3 review(2): FAIL gate Q3.2 lasuite-drive (claim 911680f/code 4b38b66) — cold re-run upgrade tier FAILS (abra chaos-deploy FATA: new collabora 25.04.9.4.1 not converged; WOPI pre-gate DID work). install/backup/restore/custom+OIDC pass, deploy-count=1, teardown clean. Filed F2-12 BLOCKING 2026-05-29 11:47:58 +01:00
notplants a22ba9c9cc inbox(2): relay orchestrator flag rename --extra-tests -> --extra to Builder (DEFERRED.md 12 occ + BACKLOG-2 4 occ; single-writer files, not editing them myself) 2026-05-29 10:39:46 +01:00
notplants 0b558529c9 review(2): pre-claim recon lasuite-drive Q3.2a Part A — minio scale is recipe one-shot (replicas:0) NOT a bypass; install-time OIDC=deploy-once; minio test is real round-trip; NO verdict (gate not claimed) 2026-05-29 10:33:01 +01:00
notplants 4356f0009c review(2): cross-phase probe — 2pc prune-policy did NOT regress 2w warm infra (volumes survived, timers active, canonical idle@1.11.0); no finding, standing obligations stand 2026-05-29 10:00:38 +01:00
notplantsandClaude Opus 4.8 486d162663 review(2pc): PASS gate 2pc (re-claim 9e73ebd) — PC1+PC2+PC3 cold-verified; F2pc-1 CLEARED. git==host: docker-prune.nix+swarm.nix byte-identical to /root/cc-ci, committed units now ci-docker-prune = live (enabled+active), old docker-prune.timer not-found. Live re-confirm: no-op prune@<80% images 18->18, cold->warm redis reuse. Pressure-branch keep-cache property structural (image prune w/o --all). PC2 PAT nptest2+retention+no-mirror, PC3 teardown-keeps-images+bogus-tag-fails GREEN from prior pass. 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-29 09:52:28 +01:00
notplantsandClaude Opus 4.8 49892be7b0 review(2pc): FAIL gate 2pc (claim de6103d) — PC1/PC2/PC3 behavior cold-verified GREEN on host (surgical gated prune no-op@31%, images 17→17; teardown keeps images; PAT nptest2; cold→teardown→warm reuses local layers; bogus tag still fails), BUT committed code != verified host: git defines docker-prune units, host runs ci-docker-prune from uncommitted /root/cc-ci → not reproducible from git (D8). Filed F2pc-1 BLOCKING. 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-29 09:47:45 +01:00
notplantsandClaude Opus 4.8 e42753c17c note(2pc): realign REVIEW-2pc to narrowed scope — registry pull-through cache DROPPED per operator; 2pc is now prune-policy only (PC1 surgical prune + teardown must NOT remove images, PC2 confirm PAT-auth+local-store retention, PC3 deploy/teardown/redeploy reuses local layers). Break-it checklist updated. 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-29 09:25:55 +01:00
notplantsandClaude Opus 4.8 863bbac4de note(2pc): init REVIEW-2pc — AWAITING CLAIM; baseline recon of current prune (swarm.nix --all until=24h) + confirm no pull-through cache exists yet; break-it checklist staged 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-29 09:22:11 +01:00
notplants 139e8b9797 review(2): close F2-7 out-of-scope per operator SSO policy (keycloak default; Phase-2 DONE not gated on authentik; re-entry only if a recipe REQUIRES authentik); Builder owns DECISIONS/DEFERRED#9/cryptpad-keycloak edits 2026-05-29 09:10:00 +01:00
notplants 6ff68e625a note(2): record Adversary cold-verify criteria for queued lasuite-drive Q3.2 rework (real-abra-only enforcement, repeat-green + upgrade tier required); not active yet 2026-05-29 08:58:32 +01:00
notplants 9b6c0e03dc review(2): disk-blocker LIFTED — cold-verified 64G/44G-free + infra healthy post-resize; lasuite-drive upgrade tier now REQUIRED green (deferral void, veto-eligible open obligation); DEFERRED.md edit left to Builder 2026-05-29 08:42:52 +01:00
notplants 4eae6eb208 inbox(2): disk resize 30→70GB in progress — deferral VOID; lasuite-drive upgrade tier now REQUIRED green for Q3.2 sign-off (no longer deferrable); pausing host verify during restart 2026-05-29 08:36:32 +01:00
notplants ccc42699ff chore(2): consume ADVERSARY-INBOX (Q3.2 lasuite-drive heads-up); reply via BUILDER-INBOX — disk blocker is operator-removable, will grant CONDITIONAL/deferred sign-off only, upgrade tier still blocks Phase-2 DONE 2026-05-29 05:53:51 +01:00
notplants 7b5ed9c350 review(2): break-it probe @2026-05-29 — 2w WC5 promotion × F2-11 SSO-skip: NO regression (overall-gated, no alt promote path, 72 unit pass cold) 2026-05-29 04:54:02 +01:00
notplants 2822d60474 review(2w): WC8 + WC9 (FINAL) — PASS @2026-05-29; ALL WC1-WC9 (incl WC1.1/WC1.2) Adversary cold-verified, NO VETO — DONE authorized 2026-05-29 04:46:30 +01:00
notplants b8b698e2f5 review(2w): WC6 nightly full-cold sweep — PASS @2026-05-29 (declarative timer Persistent + orchestration + live systemd-service run: infra roll health-gated → serial cold sweep → canonical advanced, infra healthy, no leftovers) 2026-05-29 04:38:51 +01:00
notplants 5bbc47cb02 review(2w): WC5 promote-on-green-cold — PASS @2026-05-29 (gate predicate anti-poison verified + live advancement 1.10.0→1.11.0 cold-only; --quick/PR-head/red/unenrolled excluded) 2026-05-29 04:13:17 +01:00
notplants e3b08a9bdf review(2w): traefik WC1.1 (W0.10a) — PASS @2026-05-29 (stateless rollback proven, no TLS outage); CLOSES W0.10 tracked-open → WC1.1 fully verified both reconcilers 2026-05-29 03:58:33 +01:00
notplants 31f0e426c4 review(2w): WC4 + WC7 — PASS @2026-05-29 (gate 3ff2bf6; --quick never-promote + FAIL-rollback-to-exact-known-good + no-canonical→cold fallback, all cold-verified; live-bridge trigger battery) 2026-05-29 03:31:57 +01:00
notplants 0246296370 review(2w): WC2 + WC3 — PASS @2026-05-29 (gate 4ce80f8; data-warm round-trip + restore round-trip cold-verified from own clone, canonical left idle+clean) 2026-05-29 02:33:35 +01:00
notplants 62f03191ed chore(2w): consume ADVERSARY-INBOX — WC2+WC3 formally claimed (4ce80f8); running cold reproduce 2026-05-29 02:26:03 +01:00
notplants b56a15403c review(2w): watchdog [C2 C3] premature — no formal WC2/WC3 claim (W1.2 live data-warm proof pending); read-only glance at canonical.py, await formal claim 2026-05-29 02:24:41 +01:00
notplants 31ac86d644 review(2w): WC1 + WC1.2 + WC1.1(keycloak-stateful) — PASS @2026-05-29 (gate 985686f cleared, all 6 checks cold-verified from own clone); traefik WC1.1/W0.10 tracked open before DONE 2026-05-29 02:08:49 +01:00
notplants 3f566436a4 review(2w): recovery OK (kc canonical) + check6 WC1.2 holds PASS; check3 headline e2e in progress 2026-05-29 02:04:11 +01:00
notplants 95ada595aa review(2w): WC1 checks 1/2/4 PASS + WC1.1 MARQUEE rollback PASS (data intact, last_good held, alert correct); test-script cleanup bug noted, recovery in flight 2026-05-29 01:59:12 +01:00
notplants eb54c95bfa chore(2w): consume ADVERSARY-INBOX — gate-claim confirmed, alerts-dir flag resolved (intentional cleanup), keycloak parked for my reproduce 2026-05-29 01:45:44 +01:00
notplants 38ba153e90 review(2w): watchdog [C1] ping — no formal gate yet; read-only pre-review (reconciler clean, alerts-dir flag) + inbox heads-up to coordinate live reproduce 2026-05-29 01:44:05 +01:00
notplants 0812132452 review(2w): standing WC8 probe — lasu-0a6fb2 fully torn down (no app/svc/vol/secret), disk 63% 2026-05-29 00:55:49 +01:00
notplants b127078516 review(2w): add WC1.2 pre-deploy safety gate (major/manual-migration hold + alert-with-notes) to verification map 2026-05-29 00:02:59 +01:00
notplants 2dc1e6edc7 review(2w): absorb design update — WC1 unpin + new WC1.1 health-gated rollback proof + WC6 reorder into verification map 2026-05-29 00:00:09 +01:00
notplants 534cd7066c review(2w): Adversary online — phase start, cold access verified, awaiting WC gate claims 2026-05-28 23:07:04 +01:00
notplantsandClaude Opus 4.8 5f1ce47593 review(2): rate-limit fix VERIFIED + CLOSED — all 3 conditions cold (auth 200-limit, own uncached swarm-service pull, declarative sops persistence); consume inbox 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-28 22:17:23 +01:00
notplantsandClaude Opus 4.8 46e9d1c43a review(2): rate-limit PARTIAL verify — auth 200-limit + account source CONFIRMED; swarm-pull + declarative-persistence still pending 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-28 22:04:03 +01:00
notplantsandClaude Opus 4.8 45fb42e19d review(2): rate-limit fix pre-wiring baseline (anon 100/6h @68.14.43.142, remaining=4); verification plan for post-wiring 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-28 21:45:57 +01:00
notplantsandClaude Opus 4.8 65e4e519ff review(2): F2-11 CLOSED — deploy-free cold proof (35 unit + real conftest skip-report stitched to predicate); consume inbox 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-28 21:29:32 +01:00
notplantsandClaude Opus 4.8 b941f552a1 review(2): file F2-11 — SSO deps-not-ready SKIP yields GREEN !testme (cold-proven); note git host outage 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-28 21:17:05 +01:00
notplantsandClaude Opus 4.8 900b427444 review(2): idle checkpoint — cold access OK; consolidated Phase-2 DONE-gate conditions (F2-7, F2-9, ghost §4.3 floor); lasuite-drive Q3.2 base WIP noted 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-28 21:17:05 +01:00
notplantsandClaude Opus 4.7 9f2e120ec0 review(2): F2-10 CLOSED via DEFERRED.md route — accept new operator-confirmed framing; F2-9 effectively migrates too (Phase-4 review) 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 17:33:31 +01:00
notplantsandClaude Opus 4.7 1ae23598e7 review(2): F2-8 CLOSED (bluesky goat+post round-trip cold-verified); F2-10 NEW (uptime-kuma §4.3 floor bypass — same pattern, DEFERRED.md migration suggested) 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 17:06:20 +01:00
notplantsandClaude Opus 4.7 a0a7b70127 review(2): Q3/Q4 partial checkpoint — F2-8 bluesky-pds bypasses §4.3 floor; F2-9 cryptpad conditional sign-off; matrix-synapse Q4.1 cold green and §4.3-floor-compliant 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 16:25:43 +01:00
notplantsandClaude Opus 4.7 116f7a9aa0 review(2): Q2 PASS — F2-5 fix verified (verify=True teardown, leak gone); F2-6 collateral resolved; F2-7 stands as Q2.2/Q5 tracking 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 09:51:26 +01:00
notplantsandClaude Opus 4.7 9a857d9ef4 review(2): Q2 FAIL — F2-5 dep teardown silently suppressed (keyc-c12afe still up); F2-6 install 502 flake; F2-7 SSO setup partial pluggability 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 08:57:49 +01:00
notplantsandClaude Opus 4.7 adb3bf9669 review(2): Q1 PASS — F2-3 + F2-4 fixed; n8n workflow round-trip cold-verified, 4/4 custom + deploy-count=1; NO VETO 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 07:11:53 +01:00
notplantsandClaude Opus 4.7 90e95270a0 review(2): Q1 FAIL — F2-4 n8n specific tests miss §4.3 P3 floor (no create-and-read-back); F2-3 install hardening flake gap 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 07:02:33 +01:00