841 Commits

Author	SHA1	Message	Date
autonomic-bot	5babd027f0	note(redfix-M2): keycloak component VERIFIED (1/6) — promote at warm-canon-keycloak, live SSO undisturbed (up 4d, 200); gate verdict pending 5 more	2026-06-18 06:09:23 +00:00
autonomic-bot	0e255d8570	claim(redfix-M2): all 6 canon-sweep failures FIXED + verified green ... mattermost-lts (PR #1, !testme #901), discourse (PR #4, !testme #849), keycloak (harness branch, promotes at warm-canon-keycloak), mumble (harness branch, budget 180s) — already verified. gitea (PR #2 @a0f2db8, app.ini seed-on-empty into writable volume) + bluesky-pds (PR #4 @4987ba9, caddy ${STACK_NAME}_app per operator, NO rename) verified by direct chaos-deploy reproducing the exact M1 scenario: gitea app.ini 0->1862, API 200, 0 RO crashes; bluesky external HTTPS /xrpc/_health 200 (M1 000), caddy resolves own internal app. Both promotes operator-merge-gated (harness WC5 force-fetches the published tag); direct deploy is the maximal pre-merge proof. No standing exceptions. Nothing merged. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Bacy8SJhBebNAGoYsi1Fxt	2026-06-18 05:55:43 +00:00
autonomic-bot	966edb3042	note(redfix): idle break-it probe — live keycloak 200 (undisturbed), gitea canonical unchanged (no false promote during rework); M2 not yet claimed	2026-06-18 04:12:39 +00:00
autonomic-bot	12925b5ab8	journal(redfix): M2 4/6 verified; bluesky warm-verify structurally blocked pre-merge (fix proven); gitea needs rework	2026-06-18 02:39:37 +00:00
autonomic-bot	c5bc29bb97	journal(redfix): M2 mumble VERIFIED (4/6); bluesky force-chaos verification plan	2026-06-18 02:28:42 +00:00
autonomic-bot	a65372cfde	journal(redfix): M2 keycloak VERIFIED — canonical promotes at collision-free warm-canon-keycloak, live warm-keycloak undisturbed (200). 3/6 verified	2026-06-18 02:25:02 +00:00
autonomic-bot	6846bbe83d	journal(redfix): M2 — bluesky verify blocked by abra non-chaos tag-revert (recipe fixes need chaos); keycloak/mumble (harness) verify cleanly, doing next	2026-06-18 02:21:19 +00:00
autonomic-bot	ed7d897e5f	status(redfix): M2 tracker — mattermost+discourse VERIFIED; bluesky rename routing-works-but-backup-fails; gitea needs rework; keycloak/mumble pending verify	2026-06-18 02:16:47 +00:00
autonomic-bot	fca936ef50	note(redfix): M2 interim corroboration — mattermost-lts run #901 restore tier (test_restore_returns_state) PASSES, clean teardown + no leak; non-contending artifact check, not a verdict; M2 not yet claimed	2026-06-18 02:15:17 +00:00
autonomic-bot	c021d7e305	journal(redfix): M2 gitea fix v1 (seed) broke 3.5.3->3.6.0 transition (wizard mode); reverted clone, needs rework; proceeding to bluesky/keycloak/mumble	2026-06-18 02:09:43 +00:00
autonomic-bot	278cb4e4b8	journal(redfix): M2 progress — gitea PR #2 + advance verifying; bluesky rename PR #4; harness branch redfix-m2-harness pushed (keycloak/mumble/bluesky-exec)	2026-06-18 02:00:06 +00:00
autonomic-bot	c742f9adc4	journal(redfix): cc-ci-side verification mechanism (temp-checkout run) + M2 progress snapshot	2026-06-18 01:51:54 +00:00
autonomic-bot	125e1ba675	journal(redfix): M2 bluesky — abra drops compose net aliases (proven); pivot to service rename app->pds + coupled cc-ci exec-ref update	2026-06-18 01:50:26 +00:00
autonomic-bot	c3854a9bcc	status+journal(redfix): M2 — mattermost-lts FIXED (run #901 all green, restore fixed); discourse #4 green; bluesky PR #4 created (promote-path verify next)	2026-06-18 01:30:57 +00:00
autonomic-bot	abfbe8b0aa	journal+status(redfix): M2 recon — discourse #4 (official-image) already !testme-green; mattermost #1 (pg-restore) triggered for verify	2026-06-18 01:24:48 +00:00
autonomic-bot	6771c713f0	inbox(redfix): consume Adversary M1-PASS heads-up — node clean (gitea idle 3.5.3 unchanged, keycloak healthy); proceeding to M2	2026-06-18 01:20:27 +00:00
autonomic-bot	191ddc9fb8	status(redfix): M1 PASS (Adversary cold-verified all 6 classifications CORRECT); begin M2 fixes	2026-06-18 01:20:15 +00:00
autonomic-bot	b6038e9796	inbox(redfix): heads-up to Builder — M1 PASS, node restored clean (gitea idle 3.5.3 canonical unchanged), cleared for M2	2026-06-18 01:19:52 +00:00
autonomic-bot	edee91341c	review(redfix-M1): PASS — all 6 classifications cold-verified by my own isolation re-runs. discourse=stale overlay (no timeout, my run converged in min), mattermost=deterministic restore RED, mumble=flake (handshake green isolated), bluesky=recipe app-alias proxy collision (getent app->10.10.0.4, not machinery), gitea=read-only app.ini JWT crash (canonical unchanged), keycloak=warm-domain collision. No VETO. Node clean before+after.	2026-06-18 01:19:27 +00:00
autonomic-bot	14aa55f02b	note(redfix): M1 interim — gitea CONFIRMED by my run + container crash log (LoadCommonSettings JWT save to read-only /etc/gitea/app.ini config mount); genuine recipe defect	2026-06-18 01:09:49 +00:00
autonomic-bot	c9c870f0a6	note(redfix): M1 interim — mattermost CONFIRMED deterministic restore RED (ci_marker does not exist, 91s isolation; no restore.post-hook); genuine recipe defect not load-race	2026-06-18 01:02:16 +00:00
autonomic-bot	968780234b	note(redfix): M1 interim — discourse CONFIRMED (no timeout/wedge; install+backup+restore+custom pass, upgrade reds on PR-faithfulness overlay asserting unreleased official:3.5.3/no-sidekiq); stale overlay test	2026-06-18 00:56:57 +00:00
autonomic-bot	5512dcaba5	note(redfix): M1 interim — mumble CONFIRMED flake (handshake test PASSED in my isolation run, all 5 tiers green, promote ok); bluesky orphan cleaned up	2026-06-18 00:44:44 +00:00
autonomic-bot	0c11b0b39d	note(redfix): M1 interim — bluesky-pds CONFIRMED by my reproduction (getent app->10.10.0.4 proxy collision, real app 10.0.5.6 never resolved; deterministic 000); recipe routing defect not machinery/flake	2026-06-18 00:26:19 +00:00
autonomic-bot	65fe47feea	journal(redfix): M2 prep — bluesky fix refinement (unique internal alias, not service rename)	2026-06-18 00:25:57 +00:00
autonomic-bot	4777ba8edc	backlog(redfix): M2 fix designs from M1 evidence (mattermost/bluesky/gitea recipe PRs; keycloak/mumble harness; discourse overlay-scope) — execution gated on M1 PASS	2026-06-18 00:20:14 +00:00
autonomic-bot	0a06c411a6	claim(redfix-M1): all 6 canon-sweep failures investigated in isolation + classified (results table + cold-verify guide). discourse=stale overlay test, mattermost-lts=recipe restore defect, mumble=load FLAKE (2x green), bluesky=app-alias proxy collision, gitea=app.ini RO crash, keycloak=warm-domain collision. 2 canon root-causes corrected.	2026-06-18 00:18:09 +00:00
autonomic-bot	00fca8a33e	journal+status(redfix): M1 gitea app.ini read-only JWT crash CONFIRMED on warm advance (recipe defect); 6/6 classified	2026-06-18 00:14:32 +00:00
autonomic-bot	88c9ebcce4	status(redfix): M1 tracker — keycloak classified (harness collision); 5/6 done, gitea app.ini advance reproducing	2026-06-18 00:08:40 +00:00
autonomic-bot	93e1e7d87a	note(redfix): M1 pre-staging — mattermost (no restore.post-hook) + discourse (PR-faithfulness overlay) static claims corroborated via code; owe own discourse isolation run + bluesky diag before any PASS	2026-06-18 00:08:31 +00:00
autonomic-bot	8a54c4d0ea	journal(redfix): M1 keycloak (harness warm-domain collision, design-complete) + gitea first-run already-deployed confound	2026-06-18 00:08:25 +00:00
autonomic-bot	f8ba0c3a1f	journal(redfix): M1 bluesky-pds — 000 reproduces deterministically; root cause = caddy↔app cross-stack 'app' alias collision on shared proxy (recipe defect)	2026-06-18 00:02:26 +00:00
autonomic-bot	41e161a433	status(redfix): M1 tracker — discourse/mattermost/mumble classified; bluesky promote in flight	2026-06-17 23:53:13 +00:00
autonomic-bot	9a58268e12	journal(redfix): M1 mumble isolation GREEN — load/timing flake confirmed	2026-06-17 23:44:24 +00:00
autonomic-bot	8df74d7bc0	journal(redfix): M1 mattermost-lts isolation — DETERMINISTIC restore fail; genuine recipe defect (no restore.post-hook vs immich)	2026-06-17 23:41:29 +00:00
autonomic-bot	23b439db83	journal(redfix): M1 discourse isolation — canon root-cause wrong; deploys fine, only upgrade overlay (unreleased official-image migration) fails	2026-06-17 23:33:18 +00:00
autonomic-bot	3e61473365	chore(redfix): bootstrap phase state files (STATUS/BACKLOG/JOURNAL); M1 investigation tracker seeded	2026-06-17 23:20:55 +00:00
autonomic-bot	a30e71825e	review(redfix): open phase — REVIEW skeleton, cold access to cc-ci confirmed healthy, awaiting Builder bootstrap + M1 claim	2026-06-17 23:19:36 +00:00
autonomic-bot	de4d69072c	status(nixenv): mark phase DONE in STATUS (M1+M2 both PASS, no VETO)	2026-06-17 23:18:36 +00:00
autonomic-bot	0b84452290	review(M2-nixenv): PASS — live parity cold-verified on cc-ci (claim f7b6f26, deploy d11f8f5). Deploy byte-identical to M1 build; host healthy post-sweep (systemctl --failed empty, timer+services active, endpoints 200, no orphan test stacks, live cc-ci-run=zxlx9jn). gitea test_lfs_roundtrip GREEN under BOTH real timer fire (git-lfs from runtimeInputs; unit PATH has no git-lfs) AND Drone #871 (cc-ci-run runner/run_recipe_ci.py). No regression: ZERO missing-tool signatures across whole sweep; SKIPs/promotes correct; gitea promote-fail (warm-gitea already deployed) + discourse/mattermost reds (image-assertion / postgres relation, docker resolved) all proven pre-existing — identical in OLD-env pre-deploy fires, runner/ unchanged since canon f94de22. No defects, no VETO. M1+M2 fresh PASS → DONE cleared. ... Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-17 18:21:16 +00:00
autonomic-bot	f7b6f26859	claim(M2-nixenv): live parity proven on BOTH paths — gitea test_lfs_roundtrip green under the real timer fire (@17:57:54Z, git-lfs from cc-ci-run runtimeInputs; unit PATH has no git-lfs) AND the Drone path (build #871, RECIPE=gitea REF=357926f2 PR=1). Deploy d11f8f5 healthy post-sweep (systemctl --failed empty, timer+oneshots active, endpoints 200). No regression: sweep SKIPs/promotes correct; gitea promote-fail + discourse/mattermost reds all pre-existing (identical pre-deploy, runner/ unchanged since canon f94de22). Awaiting Adversary.	2026-06-17 18:18:53 +00:00
autonomic-bot	e0c296e0e6	inbox(nixenv): consumed Builder M2 heads-up — Drone-path witness #871 in flight; concur promote-failure pre-existing. Will independently verify both witnesses before verdict. ... Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-17 18:12:00 +00:00
autonomic-bot	c8d4528cbc	inbox(nixenv): Drone-path LFS witness build #871 in flight (RECIPE=gitea REF=357926f2 PR=1); timer-fire witness already PASS	2026-06-17 18:11:25 +00:00
autonomic-bot	bfdfd10098	inbox(nixenv): consume Adversary M2 heads-up — concur GREEN-BUT-PROMOTE-FAILED is pre-existing (nixenv diff dd6712c..d11f8f5 is nix/+docs only, runner/nightly_sweep.py unchanged since canon f94de22; warm-gitea up since 08:39Z → 'already deployed')	2026-06-17 18:07:05 +00:00
autonomic-bot	b278082272	note(nixenv): heads-up to Builder — gitea LFS witness GREEN under timer fire, but sweep hit GREEN-BUT-PROMOTE-FAILED (warm-gitea already deployed); asking claim to establish it's pre-existing not nixenv-caused (runner promote path unchanged) ... Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-17 18:05:58 +00:00
autonomic-bot	2cc7328c5c	status(M2-nixenv): timer-fire LFS witness PASS (test_lfs_roundtrip green from cc-ci-run runtimeInputs; systemd unit PATH has no git-lfs). GREEN-BUT-PROMOTE-FAILED is pre-existing abra warm-deploy idempotency, not a regression. Drone-path witness pending sweep completion.	2026-06-17 18:05:29 +00:00
autonomic-bot	d9eab45557	status(M2-nixenv): deployed clean (system byte-identical to M1 review); real timer fire started — gitea LFS witness in flight ... Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-17 17:36:09 +00:00
autonomic-bot	c0ac552441	status(M2-nixenv): M1 PASS recorded; M2 deploy in flight on cc-ci(hetzner) ... Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-17 17:28:37 +00:00
autonomic-bot	d11f8f56c4	review(M1-nixenv): PASS — single-source harness runtime env cold-verified (claim 8b8fc1f). Both hosts build (no collision); withPackages/pytest-playwright/ccciRuntimeTools each single-def; sweep+Drone both exec byte-identical cc-ci-run zxlx9jn… (15-tool PATH incl git-lfs-3.6.1+openssl-3.3.3, ends :$PATH so nothing dropped); host configs textually identical, cc-ci sw/bin GAINS git-lfs+openssl, DEFECT-3 host-PATH patch removed; future-dep propagation single-source by construction. No defects, no VETO. M2 (deploy+live LFS witness) awaits. ... Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-17 17:26:56 +00:00
autonomic-bot	8b8fc1ff8e	claim(M1-nixenv): single-source harness runtime env — ccciPyEnv+ccciRuntimeTools+cc-ci-run in packages.nix, referenced by harness/sweep/both hosts; sweep execs cc-ci-run (no dup pyEnv, no DEFECT-3 PATH patch); cc-ci host gains git-lfs+openssl; both #cc-ci and #cc-ci-hetzner build; awaiting Adversary ... Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-17 17:23:28 +00:00