1c10fa52e1
## DONE — all D1-D10 Adversary-PASS <24h, no VETO, handshake cleared
...
continuous-integration/drone/push Build is passing
cc-ci recipe CI server complete. Loop stopped.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 12:02:03 +01:00
28142ae1d8
D10 PASS (6/6); DONE gated only on D8 live VM rebuild (Adversary); creds premise obsolete
...
continuous-integration/drone/push Build is passing
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 12:00:57 +01:00
ba37529a30
M10/D10 CLAIMED: all 6 recipes green via real !testme (lasuite #108 via -c fix); blockers cleared
...
continuous-integration/drone/push Build is passing
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 11:46:58 +01:00
7eec8b3efd
lasuite: halt retries pending Docker Hub creds (3rd rate-limit confirmation); pivot to M9
...
continuous-integration/drone/push Build is passing
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 10:33:00 +01:00
dc5aca90bd
M10 finding: Docker Hub rate limit blocks lasuite-docs upgrade — A1 registry creds needed (5/6 green)
...
continuous-integration/drone/push Build is passing
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 10:09:23 +01:00
432487f4e8
M10: 5/6 recipes green via real !testme; lasuite-docs upgrade failed (retrying)
...
continuous-integration/drone/push Build is passing
continuous-integration/drone Build was killed
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 09:31:49 +01:00
ed3f087875
M10: real-!testme path proven on custom-html (build #84 , 3 stages green via PR)
...
continuous-integration/drone/push Build is passing
continuous-integration/drone Build is passing
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 08:35:14 +01:00
38f83c85ea
M8/D7 gate CLAIMED: PR-comment outcome reflection verified; dashboard live
...
continuous-integration/drone/push Build is passing
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 08:04:53 +01:00
c39d4fb936
M8/D7: dashboard overview + badges live at ci.commoninternet.net (verified via gateway)
...
continuous-integration/drone/push Build is passing
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 07:27:02 +01:00
91b241f89e
M6.5 CLAIMED: n8n (recipe #6 ) full 3-stage green — all 6 D10 recipes done across all categories
...
continuous-integration/drone/push Build is passing
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 07:09:15 +01:00
69c3cf9574
M6.5: lasuite-docs (recipe #5 , multi-service+S3) full 3-stage green; TIMEOUT fix; Drone #57 in flight
...
continuous-integration/drone/push Build is passing
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 06:41:01 +01:00
d5c79773d4
M6.5: matrix-synapse (recipe #4 ) full 3-stage green on host (postgres-marker DB-hook); Drone #51 in flight
...
continuous-integration/drone/push Build is passing
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 05:46:04 +01:00
daa0a7e6c4
M6.5: cryptpad (recipe #3 ) full 3-stage green on host; record set_env/RESTIC backup fix
...
continuous-integration/drone/push Build is passing
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 04:56:12 +01:00
180094a366
M6.5: keycloak full 3-stage green via recipe-ci pipeline (build #39 , DB data survival)
...
continuous-integration/drone/push Build is passing
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 04:10:35 +01:00
b477274e67
STATUS/JOURNAL: A4 mitigated by capacity=1; A2/A3 fixed-in-code, awaiting Adversary re-test
...
continuous-integration/drone/push Build is passing
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 03:10:36 +01:00
17e9896516
STATUS/JOURNAL/BACKLOG: recipe-ci integration green (build #33 ), bridge→Drone→harness wired
...
continuous-integration/drone/push Build is passing
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 03:08:32 +01:00
6bdf43febd
STATUS: M3 CLAIMED (polling primary verified) + resource-safety section; clear webhook blocker
...
continuous-integration/drone/push Build is passing
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 02:56:28 +01:00
9b33fdf6e6
M6: D4 recipe-local discovery + recipe #2 (keycloak, DB-backed) enrolled; M6 CLAIMED
...
continuous-integration/drone/push Build is passing
D4 snapshots recipe-shipped tests/ and runs them against the live app. abra -C -o
everywhere + token clone for private mirror PRs. keycloak install green with no
harness surgery (D5). docs/enroll-recipe.md.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 01:48:06 +01:00
0c083069f3
M6 (part 2): recipe #2 keycloak install green (DB-backed, no harness surgery)
...
continuous-integration/drone/push Build is passing
keycloak+mariadb deployed via only tests/keycloak/recipe_meta.py + test_install.py
(realm health + Playwright admin login). Proves recipe-agnostic enrollment (D5).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 01:32:09 +01:00
7fc26fae68
M6 (part 1): per-recipe meta + D4 recipe-local discovery + shared naming helper
...
continuous-integration/drone/push Build is passing
Recipe-agnostic harness (no surgery to enroll a recipe): recipe_meta.py for
health path/codes/timeouts; run_recipe_local discovers + runs recipe-shipped
tests/ against the live app. install non-regressed.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 01:16:29 +01:00
b7a2d70380
harness: fix A2 (janitor real-name + docker reap + age gate) and A3 (verified teardown)
...
continuous-integration/drone/push Build is passing
teardown_app now docker-stack-rm fallback, removes .env only after stack gone,
retries volume rm, and verifies no residual (raises TeardownError). janitor matches
the real <recipe[:4]>-<6hex> scheme + reaps env-less orphans via docker. Verified.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 01:05:18 +01:00
7eb0dd3c77
M5: upgrade + backup/restore stages green (custom-html); backup-bot-two oneshot
...
continuous-integration/drone/push Build is passing
3-stage run green (install/upgrade/backup), clean teardown. backupbot deployed
via reconcile oneshot; PTY (script) for abra backup/restore; -m for secret generate
(no value leak). M5 CLAIMED.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 00:53:16 +01:00
38a145fd9c
M4: harness + green install stage (custom-html + Playwright); guaranteed teardown; M4 CLAIMED
...
continuous-integration/drone/push Build is passing
run_recipe_ci.py + conftest + abra/lifecycle wrappers + Nix python/playwright env.
deploy_app forces LETS_ENCRYPT_ENV='' (addresses A1). Short per-run domain scheme
for the 64-char swarm name limit. 2 passed; teardown leaves zero orphans.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 00:23:55 +01:00
2d6a312d44
M3: bridge deployed + verified publicly reachable; webhook delivery blocked at Gitea (ALLOWED_HOST_LIST)
...
continuous-integration/drone/push Build is passing
Bridge healthz 200 over public DNS; HMAC verified. Gitea sends no deliveries
(suspect webhook host allowlist). Recorded in STATUS Blocked + operator options.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-26 23:46:43 +01:00
1c81279fda
M3 start: comment-bridge source (stdlib) + bridge secrets in sops
...
continuous-integration/drone/push Build is passing
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-26 23:17:30 +01:00
e251a1177c
M2 GATE: green build via push (Drone + exec runner); OAuth bootstrap script + docs
...
continuous-integration/drone/push Build is passing
Build #1 success (clone+hello on exec runner). Drone<->Gitea OAuth scripted as
one-time bootstrap-drone-oauth.sh. M2 claimed.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-26 23:08:38 +01:00
a385148af9
M2: Drone server + exec runner up; infra as idempotent-reconcile oneshots
...
Convert proxy+drone bring-up to writeShellApplication systemd oneshots that
reconcile every activation (orchestrator steer). pkgs.abra overlay. Runner
connected via RPC (polling, capacity=2). install.md = clone + nixos-rebuild switch.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-26 22:59:59 +01:00
4d09b1e41e
M2 start: Drone CI decision; Gitea OAuth app + Drone secrets (sops)
...
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-26 22:41:14 +01:00
12f86fd3fb
M1: proxy via real coop-cloud/traefik (abra, wildcard/no-ACME); recipe deploy+teardown; M1 CLAIMED
...
Orchestrator decision: deploy canonical coop-cloud traefik via abra instead of a
hand-rolled module. abra packaged in Nix (pinned). custom-html deployed over HTTPS
(200) via the gateway and torn down clean. docs/install.md seeded.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-26 22:21:12 +01:00
51b18841bc
M1: Traefik swarm stack (wildcard cert via file provider); HTTPS path proven E2E
...
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-26 21:55:08 +01:00
ab839ae61d
M1: Docker + single-node swarm via Nix (swarm-init + proxy overlay)
...
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-26 21:47:42 +01:00
deb4a0fbed
M0 complete: sops-nix wiring + decrypt-a-test-secret; M0 gate CLAIMED
...
Host decrypts /run/secrets/test_secret via its ssh host key (age identity);
off-box master recovery recipient. sops-nix pinned to a buildGoModule-era rev
for nixpkgs 24.11 compat.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-26 21:41:45 +01:00
9bffb55b28
M0: flake + base NixOS config, rebuilt from repo on cc-ci
...
Pins nixpkgs to the rev cc-ci already ran (no-op-then-base); deploy via
switch --flake on-host. System healthy (gen 3) post-switch.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-26 21:25:48 +01:00
c21cce51b9
chore: bootstrap cc-ci loop state
...
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-26 21:07:31 +01:00