recipe-maintainers/cc-ci
0
0
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity
288 Commits 32 Branches 1 Tag
45fb42e19db405db3eedc5dff2b665a0f7cecabe
Commit Graph
81 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
notplantsandClaude Opus 4.8 45fb42e19d review(2): rate-limit fix pre-wiring baseline (anon 100/6h @68.14.43.142, remaining=4); verification plan for post-wiring 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-28 21:45:57 +01:00
notplantsandClaude Opus 4.8 65e4e519ff review(2): F2-11 CLOSED — deploy-free cold proof (35 unit + real conftest skip-report stitched to predicate); consume inbox 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-28 21:29:32 +01:00
notplantsandClaude Opus 4.8 b941f552a1 review(2): file F2-11 — SSO deps-not-ready SKIP yields GREEN !testme (cold-proven); note git host outage 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-28 21:17:05 +01:00
notplantsandClaude Opus 4.8 900b427444 review(2): idle checkpoint — cold access OK; consolidated Phase-2 DONE-gate conditions (F2-7, F2-9, ghost §4.3 floor); lasuite-drive Q3.2 base WIP noted 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-05-28 21:17:05 +01:00
notplantsandClaude Opus 4.7 9f2e120ec0 review(2): F2-10 CLOSED via DEFERRED.md route — accept new operator-confirmed framing; F2-9 effectively migrates too (Phase-4 review) 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 17:33:31 +01:00
notplantsandClaude Opus 4.7 1ae23598e7 review(2): F2-8 CLOSED (bluesky goat+post round-trip cold-verified); F2-10 NEW (uptime-kuma §4.3 floor bypass — same pattern, DEFERRED.md migration suggested) 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 17:06:20 +01:00
notplantsandClaude Opus 4.7 a0a7b70127 review(2): Q3/Q4 partial checkpoint — F2-8 bluesky-pds bypasses §4.3 floor; F2-9 cryptpad conditional sign-off; matrix-synapse Q4.1 cold green and §4.3-floor-compliant 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 16:25:43 +01:00
notplantsandClaude Opus 4.7 116f7a9aa0 review(2): Q2 PASS — F2-5 fix verified (verify=True teardown, leak gone); F2-6 collateral resolved; F2-7 stands as Q2.2/Q5 tracking 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 09:51:26 +01:00
notplantsandClaude Opus 4.7 9a857d9ef4 review(2): Q2 FAIL — F2-5 dep teardown silently suppressed (keyc-c12afe still up); F2-6 install 502 flake; F2-7 SSO setup partial pluggability 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 08:57:49 +01:00
notplantsandClaude Opus 4.7 adb3bf9669 review(2): Q1 PASS — F2-3 + F2-4 fixed; n8n workflow round-trip cold-verified, 4/4 custom + deploy-count=1; NO VETO 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 07:11:53 +01:00
notplantsandClaude Opus 4.7 90e95270a0 review(2): Q1 FAIL — F2-4 n8n specific tests miss §4.3 P3 floor (no create-and-read-back); F2-3 install hardening flake gap 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 07:02:33 +01:00
notplantsandClaude Opus 4.7 df28cef590 review(2): watchdog FP — no Q1 CLAIMED in STATUS-2 (still shows stale Q0 RE-CLAIMED) 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 06:49:35 +01:00
notplantsandClaude Opus 4.7 5ab25c3dea review(2): Q0 PASS — F2-1 fix verified cold (pytest 21/21), e2e from prior verdict stands; NO VETO 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 06:34:37 +01:00
notplantsandClaude Opus 4.7 097234e9ce review(2): Q0 FAIL — F2-1 pytest regression (test_custom_tests_repo_local_gated stale assertion); e2e PASS, harness work sound 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 06:31:03 +01:00
notplantsandClaude Opus 4.7 d480411413 review(2): record watchdog false-positive — no Phase-2 gate CLAIMED yet 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 04:43:25 +01:00
notplantsandClaude Opus 4.7 e7e3e24aed review(2): seed REVIEW-2.md — Adversary first wake; no Builder activity yet 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 04:29:54 +01:00
notplants 4cf40c6334 review(1e): E3/HC4 PASS + FINAL — own !testme build #155 production cold (head_ref==chaos-version full sha, additive, deploy-count=1, no secret leak, clean teardown); NO VETO — Builder may write ## DONE 2026-05-28 04:24:57 +01:00
notplants 9d52aa420d review(1e): E2/HC1 PASS — head_ref==chaos-version proven cold (custom-html 1.10.0→1.11.0, deploy-count=1); non-vacuousness proven via adversarial probe 2026-05-28 04:09:06 +01:00
notplants 1a9632c2e8 review(1e): E1/HC3 PASS — fix 6eabfdc verified cold (opt-out backup/restore PASS, no silent-empty exec path); F1e-1 CLOSED 2026-05-28 03:47:19 +01:00
notplants 75f7e5d46b review(1e): CORRECT F1e-1 — isolated repro disproves opt-out theory (3/3 pass); reframe as load/concurrency trigger; file F1e-2 (recipe-fetch race); fix-verify in flight 2026-05-28 03:45:44 +01:00
notplants 4334e19a7b review(1e): E1/HC3 FAIL — opt-out surfaces backup/restore race (F1e-1); additive+count=1 confirmed, PASS withheld 2026-05-28 03:30:24 +01:00
notplants 6a59343996 review(1e): E0/HC2 PASS — repo-local trust gate cold-verified (8 unit + hostile-code break-it probe; no bypass) 2026-05-28 03:01:29 +01:00
notplants f9257fc891 review(1e): seed REVIEW-1e ledger + HC1-HC4 tracker; cold access re-verified 2026-05-28 02:48:50 +01:00
notplantsandClaude Opus 4.7 4a6d6cf4bf review(1d): G4 PASS + FINAL sign-off — DG1-DG8 all Adversary cold-verified, NO VETO 
DG6 cold-verified with my OWN !testme (build 154, not the Builder's #153): poller triggered <60s
(comment 13752), !testmexyz (13754) triggered nothing, all 4 tiers GENERIC e2e, per-op report
install/upgrade/backup/restore=pass custom=skip, deploy-count=1, clean teardown, PR comment ✅ passed.
DG7 clean (no softened/skip/xfail; DRY shared harness; teardown always; F1d-1+F1d-2 resolved). DG8
docs/testing.md complete+accurate. Secret-leak grep (incl. wildcard PRIVATE KEY) on build 154 log +
dashboard = ZERO. Non-member rejection confirmed by code (no live account; Phase-1 carry-forward).

DG1-DG8 all PASS <24h, F1d-1+F1d-2 CLOSED, no VETO — Builder cleared to write ## DONE.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 02:25:02 +01:00
notplantsandClaude Opus 4.7 9b5bcff92a review(1d): G3 PASS — install-steps hook + graceful-generic + DG3 N/A-skip 
Cold my clone @ce3c0f8 (has G3 files), both directions: custom-html-tiny install FAILS gracefully
without install_steps.sh (404, per-op, deploy-count=1) and PASSES with it (hook seeds index.html).
DG3 N/A-skip confirmed: non-backup-capable => backup/restore skip while install/upgrade pass. Move
-assertion robust to image-identical version bump (1.0.0->1.0.1, same image 2.38.0, label moved).
Clean teardown. DG5 PASS. Only G4 (DG6/DG7/DG8) remains, not yet claimed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 00:26:18 +01:00
notplantsandClaude Opus 4.7 ce3c0f8e7f review(1d): G2 PASS — overlays override+extend, deploy-count=1, precedence proven 
Cold my clone @c965f6c: unit tests 5/5 (precedence repo-local>cc-ci>generic + no-overlay=>generic);
full custom-html lifecycle shows all 4 TIER lines as (cc-ci: ...) overlays — override LIVE — all
green with data-continuity (upgrade-survives marker; backup original->mutate->restore->original);
deploy-count=1 (no redeploy); clean teardown. DG4+DG4.1 PASS. G3 (DG5) verification next.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 00:22:09 +01:00
notplantsandClaude Opus 4.7 b5c1faffea review(1d): G1 PASS (re-claim) — F1d-2 fixed, upgrade non-vacuous (verified both ways) 
Cold my clone @c965f6c: genuine prev->target MOVES (deploy 3.0.9->image 1.10.7; upgrade->1.10.8;
version label changed) AND a no-op upgrade now RAISES 'did not move'. DG2 non-vacuous +
regression-locked; DG3 genuine. Closed F1d-2. G2 (custom-html overlays) verification in progress
(unit tests 5/5; full overlay lifecycle pending — Builder run in flight on the node, waiting).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-28 00:18:22 +01:00
notplantsandClaude Opus 4.7 1aea1541a7 review(1d): G1 FAIL — DG2 upgrade is a vacuous no-op (base deploys LATEST, not previous) 
Cold-verified my own clone @9d771a1. Full lifecycle runs green + deploy-count=1 + clean
teardown, and DG3 backup/restore mechanism is genuine — BUT DG2 is vacuous:
deploy_app(version='3.0.9+1.10.7') runs hedgedoc:1.10.8 (LATEST), upgrade->newest is
latest->latest (CHANGED:False; upgrade tier finished in 1.97s). Root cause: abra app new
<version> positional does not check out the tag — recipe dir stays at HEAD 3.0.10+1.10.8.
The still-serving-only assertion can't catch it. Filed F1d-2 (HIGH, blocks G1); Builder must
pin the base version for real + assert the version actually changes prev->target, then re-claim.

Also closed F1d-1: cert-check reframe (6c5d8f2) verified honest. No global VETO (DONE far off).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-27 23:49:23 +01:00
notplantsandClaude Opus 4.7 a8f78b8673 review(1d): G0/DG1 PASS — generic install green on hedgedoc, cold-verified from my own clone @ef44d46 
install:pass + deploy-count=1 + clean teardown (only 5 infra stacks remain, no orphans).
Serving assertion proven load-bearing: assert_serving RAISES on a non-deployed domain
(services not converged; 404 excluded from HEALTH_OK). Pure-generic confirmed (hedgedoc has
no cc-ci/repo-local tests). No VETO — Builder cleared past G0.

Filed F1d-1 [adversary] (low, DG7-scoped, NOT a DG1 blocker): served_cert is a near-no-op —
VERIFIED for any in-zone subdomain incl. non-deployed (Traefik serves the wildcard for the
whole zone), so it does NOT distinguish app-vs-fallback as journal/STATUS/code claim. Fix
wording/check before the DG7/G4 gate.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-27 23:36:42 +01:00
notplantsandClaude Opus 4.7 6300cba503 review(1d): open Phase-1d Adversary ledger — cold access OK, IDLE awaiting first gate (G0/DG1) 
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-27 23:00:49 +01:00
notplants 8e0f0cbc7d review(1b): ✅ RL6 PASS + Adversary FINAL SIGN-OFF — git mv my REVIEW*.md → machine-docs/ (lockstep; Builder moved theirs in 992d87c, README stays root). Watchdog survived (resolve_state prefers machine-docs/; it pinged me from machine-docs/STATUS-1b.md). Refs re-verified (README+install.md updated; no .drone/flake/scripts refs; closure byte-identical 8i3jcad9 unaffected). ALL RL1-RL6 Adversary-PASS, no VETO — Builder cleared to write ## DONE 2026-05-27 22:56:25 +01:00
notplants 53efd54983 review(1b): ✅ RL3 PASS — full cold D1-D10 re-verify on the byte-identical cleaned closure, NOTHING weakened. 2 fresh green e2e (custom-html #151 + keycloak #152 SSO/DB, all 3 stages, upgrade ran); D6 leak test clean (8/8 infra + wildcard cert/key + generated keycloak admin pw = 0 in logs/dashboard; white-box secret_generate captured-never-printed); teardown no orphans; byte-identical rebuild=D8. D10 2-fresh + Phase-1 6/6 carry-forward. RL1-RL5 all Adversary-PASS, no VETO — only RL6 (coordinated machine-docs/ move) before DONE; ready for lockstep cutover 2026-05-27 22:07:46 +01:00
notplants 9bfd6f2ad3 review(1b): RL3 fresh e2e #1 (custom-html #151) — D1(20s trigger)/D2(install+upgrade+backup green, upgrade ACTUALLY RAN)/D3(playwright)/D7(PR comment+dashboard)/D6-infra(0 secret matches) all PASS on the byte-identical cleaned closure. D6 app-secret watch-item RESOLVED white-box (secret_generate output captured, never printed); keycloak e2e #2 in flight for behavioral confirm. D5/D8/D9 PASS; D10 breadth carry-forward + 2 fresh runs; D4 byte-identical carried 2026-05-27 21:42:26 +01:00
notplants 41c6571895 review(1b): RL3 live !testme e2e in flight — triggered custom-html PR#2 @20:33:16Z (comment 13743, bot=org-member); watching trigger latency (D1) + install/upgrade/backup stages (D2-D4) + run URL (D7) on the byte-identical cleaned closure; D6 leak test to follow on this run's logs/dashboard. Noted: push→Drone webhook flaky (no push build for 1b commits) — RL1 advisory
continuous-integration/drone Build is passing
Details
2026-05-27 21:34:24 +01:00
notplants f033139aca review(1b): RL3 D8+RL5 byte-identical cold rebuild PASS — fresh recursive clone on cc-ci → nixos-rebuild build git+file://...?submodules=1#cc-ci → toplevel 8i3jcad9==running (build==running). Confirms reproducibility survived format+nix/ refactor; secrets genuinely from submodule (no-submodule build fails). RL3 remaining: live !testme e2e + D6 leak test + D5/D9/D10 refresh
continuous-integration/drone Build is passing
Details
2026-05-27 21:31:38 +01:00
notplants aa120d10d0 review(1b): RL2 PASS (no blocking §3 findings) + RL5 structural PASS (nix/ layout, flake at root, #cc-ci unchanged, no dangling refs) + RL3 cardinal-rule PASS (tests NOT weakened — diff 6d2bc3d..HEAD is ruff line-wrapping only, all assertions/operators/values preserved, no skip/xfail added). cc-ci running==8i3jcad9, healthy, 5 stacks. RL3 byte-identical cold rebuild + e2e + leak test next 2026-05-27 21:28:04 +01:00
notplants 5a811e4ae4 review(1b): acknowledge operator RL5+RL6 (plan §7) as new blocking items. RL5 (nix/ folder consolidation) verification folds into RL3 cold byte-identical rebuild; RL6 (machine-docs/ move) is coordinated near-end-of-1b — REVIEW*.md are my files, I keep writing at root until the lockstep watchdog cutover then git mv my own. DoD now RL1–RL6 2026-05-27 21:13:19 +01:00
notplants 12e1336d2a review(1b): white-box §3 pass #2 (RL2 input) — harness DRY PASS (no harness surgery), architecture-matches-plan PASS (poll-primary §4.1, real traefik recipe §4.2), Nix idempotent/no-sentinels PASS, log-redaction real for infra secrets. No blocking findings; 2 advisories (old_app copy-paste→IDEAS; generated-app-secret redaction→RL3/D6 watch-item) 2026-05-27 21:08:53 +01:00
notplants 1237d29899 review(1b): W0 PASS (RL1) — lint/format tooling verified COLD on cc-ci over pristine archive of 233939a: nix develop .#lint → lint: PASS exit 0 (8 linters clean); stage wired in .drone.yml; break-it probe confirms FAIL exit 1 on injected violations (gate has teeth). Advisory: confirm push→Drone actually fires lint stage at RL3 (webhook flaky per §4.1) 2026-05-27 21:04:40 +01:00
notplants a74925bf7d review(1b): phase-1b Adversary ledger seeded; white-box §3 prep pass #1 over post-1c baseline — tests real, no sentinels, no committed secrets, sleeps are poll intervals, teardown verified. Awaiting Builder to seed 1b state + claim W0 2026-05-27 20:41:30 +01:00
notplants 6d2bc3d8e0 review(1c): ✅ DONE confirmed — Adversary final sign-off. All C1-C7 + E2E-TESTME PASS <24h, no VETO, no open findings; cc-ci healthy cqym8knj byte-identical, public TLS 200. Phase 1c genuinely DONE; loop terminating 2026-05-27 20:34:22 +01:00
notplants 9e0f72ac4b review(1c): C7 PASS — ADV-1c-1 closed (architecture.md now 1c-correct: cc-ci-secrets submodule + cert-in-git + recovery-key bootstrap). ALL C1-C7 + E2E-TESTME Adversary-PASS, no VETO — DONE handshake unblocked 2026-05-27 20:29:26 +01:00
notplants 0556ff5ad9 backlog(1c): file ADV-1c-1 [adversary] — architecture.md still describes pre-1c secrets/cert model; blocks C7 (doc gap, not VETO) 2026-05-27 20:01:41 +01:00
notplants b301b031a1 review(1c): E2E-TESTME E1-E6 PASS (independent) + DONE-verification C1-C6 PASS; C7 WITHHELD — architecture.md stale (pre-1c secrets/cert model). No VETO. Filing ADV-1c-1 2026-05-27 20:01:13 +01:00
notplants 40c50545f1 review(1c): heads-up for Builder e2e — dual-bridge double-trigger risk in swap window; recommend pausing original's bridge during E1-E6
continuous-integration/drone/push Build is passing
Details
2026-05-27 19:13:52 +01:00
notplants 446f326a1e review(1c): W4/C4/C5 PASS COLD — independent throwaway rebuild: blank VM+2 repos+1 age key -> single switch -> ld19aj2 byte-identical, 0 failed, 6/6 stacks, cert+TLS from git (leaf 57:8D:67). VM ccci-w5-rebuild@100.97.167.73 recorded for Builder swap. D8 honest (Phase-1 'infeasible' superseded)
continuous-integration/drone/push Build is passing
Details
2026-05-27 19:12:47 +01:00
notplants b73307908d review(1c): C1 refresh — byte-identical against new keyFile config (izsmiajw==running, zero drift); supersedes vh6vwxbl
continuous-integration/drone/push Build is passing
Details
2026-05-27 17:57:18 +01:00
notplants dd710a6f56 review(1c): set C4/W5 TLS verification standard — domain=ci.commoninternet.net (not ci2), SNI+--resolve on fresh VM, leaf fingerprint must match git cert
continuous-integration/drone/push Build is passing
Details
2026-05-27 17:30:08 +01:00
notplants 228b930a96 review(1c): corroboration — sops cert re-decrypts byte-identically at boot after W1 resize-reboot (strengthens C2)
continuous-integration/drone/push Build is passing
Details
2026-05-27 17:24:00 +01:00
notplants 95ac37c7bd review(1c): W2 PASS cold — byte-identical build==running (vh6vwxbl), cert sops-from-git + live TLS leaf-match, no plaintext leak; C1/C2/C3 Adversary-PASS
continuous-integration/drone/push Build is passing
Details
2026-05-27 16:52:14 +01:00
notplants c36052021c review(1c): interim probe — cc-ci-secrets private + all 8 secrets ENC (cert+key in sops, 0 plaintext); byte-identical/TLS pending W2 gate
continuous-integration/drone/push Build is passing
Details
2026-05-27 16:23:17 +01:00
notplants e746f37676 review(1c): pre-W2 cold baselines (running-system toplevel, cert hashes, clean-base grep); W2 scrutiny checklist
continuous-integration/drone/push Build is passing
Details
2026-05-27 16:22:08 +01:00
notplants be37eccd31 review(1c): Adversary ledger seeded; cold baseline (system healthy pre-refactor; Builder has not begun 1c)
continuous-integration/drone/push Build is passing
Details
2026-05-27 16:02:13 +01:00
notplants 492fa231cb review: Adversary sign-off — DONE confirmed by cold check (all D1-D10 PASS <24h, no VETO, system healthy, 6/6 dashboard, 0 orphans); loop terminating
continuous-integration/drone/push Build is passing
Details
2026-05-27 12:13:12 +01:00
notplants d4f8dc5093 review: D8 PASS (byte-identical build==running; throwaway-VM live rebuild infeasible by design—documented); DONE-readiness: all D1-D10 PASS <24h, no VETO
continuous-integration/drone/push Build is passing
Details
2026-05-27 12:00:46 +01:00
notplants be610b297a review: D10 PASS 6/6 — lasuite #108 corroborated (real !testme, upgrade genuinely converged+data survived, not -c-hollowed)
continuous-integration/drone/push Build is passing
Details
2026-05-27 11:58:39 +01:00
notplants c9087fde20 review: scrutinized lasuite -c (no-converge-checks) — NOT a softening (harness still verifies convergence+health+data); empirical green still required
continuous-integration/drone/push Build is passing
Details
2026-05-27 11:46:25 +01:00
notplants 78250bc8ce review: D9 PASS — docs complete + accurate (architecture/enroll/runbook/secrets/install/README) vs verified reality
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone Build is failing
Details
2026-05-27 10:49:18 +01:00
notplants 6bd6061653 review: M9/D8 reproducibility core PROVEN (clean build == running, zero drift; docs complete); live blank-VM rebuild pending registry creds
continuous-integration/drone/push Build is passing
Details
2026-05-27 10:48:24 +01:00
notplants 288cdeeb47 review: close A2 (live: default janitor spares fresh orphan; janitor(0) reaps env-less orphan via reconstruction) — all A1-A4 closed
continuous-integration/drone/push Build is passing
Details
2026-05-27 10:44:00 +01:00
notplants 4b204930a3 review: D10 5/6 VERIFIED via real !testme (3-stage green + outcome-reflected); 6th (lasuite upgrade) blocked on registry creds
continuous-integration/drone/push Build is passing
Details
2026-05-27 10:41:29 +01:00
notplants 8aaeb29187 review: independently confirmed Docker Hub rate-limit (remaining=1/100) gating lasuite upgrade — real A1 blocker, not harness defect
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone Build was killed
Details
2026-05-27 10:24:44 +01:00
notplants 27cce50f4c review: M8/D7 PASS — overview matches reality (6 recipes, corroborated build #s), badges, PR outcome reflection
continuous-integration/drone/push Build is passing
Details
2026-05-27 08:11:32 +01:00
notplants 6bb3df0139 review: M7/D6 PASS — secret-grep clean across logs+dashboard+git; sops rotation doc matches reality
continuous-integration/drone/push Build is passing
Details
2026-05-27 07:55:33 +01:00
notplants 307c7dc91e review: M6.5 PASS — all 6 recipes 3-stage green (Drone builds corroborated) + D5 (no harness surgery) + bluesky-swap documented
continuous-integration/drone/push Build is passing
Details
2026-05-27 07:24:43 +01:00
notplants 7558654d98 review: reconciliation — all gates M0-M6 PASS (<24h); STATUS CLAIMED strings stale; M6.5 in-flight, no open claim
continuous-integration/drone/push Build is passing
Details
2026-05-27 06:18:07 +01:00
notplants b2bf51f754 review: M6.5 running evidence — cryptpad #46 + matrix-synapse #51 3-stage corroborated (4 recipes green)
continuous-integration/drone/push Build is passing
Details
2026-05-27 06:13:51 +01:00
notplants 9b5910bef8 review: close A3 (verified teardown reaps env-less orphan via docker fallback); A2 mechanism verified, live janitor sweep pending idle
continuous-integration/drone/push Build is passing
Details
2026-05-27 05:02:40 +01:00
notplants 26cbc06120 review: M6 PASS — custom-html 3-stage + keycloak full 3-stage (build #39 corroborated) + D4 recipe-local (own run) + D5
continuous-integration/drone/push Build is passing
Details
2026-05-27 04:43:41 +01:00
notplants fa410ea4c6 review: D6 leak scan extended to recipe-CI build logs — clean (no app-secret leak)
continuous-integration/drone/push Build is passing
Details
2026-05-27 04:04:51 +01:00
notplants d6f0f67d49 review: M3 PASS (live: !testme 12s trigger, re-run, !testmexyz no-trigger, org-auth); close A4 (cap=1 mitigates)
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone Build is passing
Details
2026-05-27 03:14:49 +01:00
notplants 38dcdc7750 review: preliminary D6 leak scan of published Drone logs — clean (no infra-secret leaks)
continuous-integration/drone/push Build is passing
Details
2026-05-27 02:05:28 +01:00
notplants 720ae1f28f review: file [adversary] A4 (same-recipe concurrent checkout collision); M6 verify in progress
continuous-integration/drone/push Build is passing
Details
2026-05-27 01:51:15 +01:00
notplants 23a30388d0 review: M4 PASS + M5 PASS (own cold 3-stage run green, clean teardown); A2/A3 remain open
continuous-integration/drone/push Build is passing
Details
2026-05-27 01:05:33 +01:00
notplants b8f3473777 review: remove orphaned old-A1 text left after closing A1
continuous-integration/drone/push Build is passing
Details
2026-05-27 00:58:46 +01:00
notplants 0fe3d7cda7 review: close A1 (no-ACME enforced); file A2 (dead janitor) + A3 (unverified teardown); M4 verify in progress
continuous-integration/drone/push Build is passing
Details
2026-05-27 00:52:35 +01:00
notplants 796b642519 review: M3 pre-claim — bridge auth/filter verified (all reject paths); blocker corroborated operator-side
continuous-integration/drone/push Build is passing
Details
2026-05-26 23:54:06 +01:00
notplants e07f8a4194 review: M2 PASS — push→green Drone build verified via own push (build #4 @hook success)
continuous-integration/drone/push Build is passing
Details
2026-05-26 23:28:08 +01:00
notplants 91a8e8d64c review: M2 live-trigger probe (expect Drone build #4 green)
continuous-integration/drone/push Build is passing
Details
2026-05-26 23:27:14 +01:00
notplants 352f624ce6 review: M1 PASS (cold E2E: wildcard HTTPS via abra+traefik, clean teardown); file [adversary] A1 ACME-hazard 2026-05-26 22:38:26 +01:00
notplants c006083967 review: M0 PASS — cold rebuild + sops decrypt + no plaintext-secret leak 2026-05-26 21:57:52 +01:00