Commit Graph

1212 Commits

Author SHA1 Message Date
cfb341e244 chore(canon): Adversary online + cold baseline of starting state (1 enrolled, 1 canonical from samever, daily timer)
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 06:19:45 +00:00
79dbc2dc8f status(samever): ## DONE — M1+M2 Adversary-verified PASS (no VETO)
All checks were successful
continuous-integration/drone/push Build is passing
Orchestrator-written marker: the Builder hit the opus usage limit and could not
write its own DONE. Work is complete + Adversary-verified (M1 1310a95, M2
199f5b6, cleared for DONE). Unblocks auto-advance to canon.
2026-06-17 06:16:30 +00:00
199f5b6cb8 review(samever): M2 PASS — headline step-back reproduced from own clone; version-bump + discourse #4 unaffected; teeth hold; clean teardown. No VETO; cleared for DONE
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 05:04:42 +00:00
96c4ad9ef3 claim(M2): samever proven in real CI — step-back base<head, version-bump unaffected, discourse #4 + hedgedoc spot-check
All checks were successful
continuous-integration/drone/push Build is passing
5 real cc-ci runs (samever-deploy @ cc-ci main): Run B nightly steady-state step-back
custom-html 1.11.0+1.29.0→1.13.0+1.31.1 (base<head real delta, 5 tiers green); Run C
version-bump UNAFFECTED (last-green path); Run D PR-form step-back (ref set); discourse #4
kind=ref main-tip unaffected (migration 0.8.1→1.0.0 green); hedgedoc spot-check step-back
3.0.9→3.0.10 green. WHAT/HOW/EXPECTED/WHERE in STATUS-samever.md; logs /root/samever-*.log,
artifacts /var/lib/cc-ci-runs/samever-*/ on cc-ci.
2026-06-17 04:58:48 +00:00
8e8985b96f journal(samever): M2 evidence — step-back (B), version-bump-unaffected (C), discourse kind=ref unaffected
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 04:47:53 +00:00
7902fb327d chore(samever): consume ADVERSARY-INBOX (M2 heads-up read)
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 04:33:32 +00:00
aff7b14299 inbox(samever): heads-up — starting M2 e2e (custom-html two-run) on cc-ci
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 04:32:52 +00:00
398f559168 status(samever): M1 PASS recorded; M2 in progress (custom-html two-run on cc-ci)
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 04:32:51 +00:00
1310a95ac2 review(samever): M1 PASS — resolver step-back cold-verified; teeth hold (base<head), version-bump path untouched, 13/13 + own probes
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 04:28:22 +00:00
61c7739285 journal(samever): M2 prep notes while parked at M1 gate
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 04:26:27 +00:00
c5a0d204c1 claim(M1): samever resolver step-back implemented + unit-tested (13 pass)
All checks were successful
continuous-integration/drone/push Build is passing
WHAT/HOW/EXPECTED/WHERE in STATUS-samever.md. Adversary: cold pytest
tests/unit/test_upgrade_base.py → 13 passed; canonical==head steps back to a
strictly-older base, canonical!=head unchanged, no-older→declared skip.
2026-06-17 04:25:16 +00:00
b29bb3f804 feat(samever): step back to older base when last-green canonical == head version
resolve_upgrade_base now reads the head's published version (abra.head_compose_version,
the coop-cloud.<stack>.version label) and, when the last-green warm-canonical version
equals it, steps back to the newest published version strictly older than head instead
of deploying a same-version no-op. warm_reconcile gains version_key + newest_older_version
(single coop-cloud ordering source; sort_versions refactored onto version_key, no behavior
change). Skip only when no older published predecessor exists. Step-back returns kind=version
so it inherits F1d-2 pinned-tag checkout. Extends tests/unit/test_upgrade_base.py (13 pass).
2026-06-17 04:24:14 +00:00
279d84d229 fix(STATUS-regall): bare ## DONE marker so watchdog detects phase complete
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 04:14:14 +00:00
f97ed0299a review(samever): Adversary orientation — samever phase started; awaiting M1 claim
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 04:11:09 +00:00
dc74b1efb9 docs(recipe-customization): make previous/ a documented last-resort — prefer not to use
All checks were successful
continuous-integration/drone/push Build is passing
The previous/ base-repair mechanism exists and can be used when updating tests
if a previous base won't deploy, but it is explicitly a last resort: reach for
it only after the dynamic base (last-green -> main-tip) fails to come up, since
each previous/ re-introduces the per-version patching treadmill the dynamic
base removed. Most recipes (incl. discourse) need none.
2026-06-17 03:36:31 +00:00
eff8b1a93f review(regall): M1 PASS + M2 PASS — full sweep 21/21 GREEN, no prevb regressions, no VETO
All checks were successful
continuous-integration/drone/push Build is passing
M1: All 21 recipes cold-verified from results.json. Classification table accurate.
Zero prevb regressions. A-regall-2 (plausible) = recipe bug in 3.0.1+v2.0.0, not prevb.
BPs 1-5 complete. No flake misclassifications found.

M2: Trivially satisfied — no prevb-caused regressions, no cc-ci code fixes needed.

Both M1+M2 PASS. regall phase DONE.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-17 03:04:38 +00:00
3403309136 status(regall): ## DONE — M1+M2 Adversary-verified PASS (no VETO); all 21 GREEN
All checks were successful
continuous-integration/drone/push Build is passing
21/21 recipes GREEN post-prevb. 0 prevb regressions. A-regall-2 closed
(plausible backup_restore=fail was recipe bug in 3.0.1+v2.0.0, NOT prevb;
run 758 / PR#3 / 3.1.0+v2.0.0 confirms L5 pass with fixed backup mechanism).
All batches 1-6 complete. M1+M2 both claimed 2026-06-17T04:45Z.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-17 03:03:06 +00:00
848e0c6b1e review(regall): A-regall-2 CLOSED — plausible L5 via PR#3 (run 758); recipe bug NOT prevb
All checks were successful
continuous-integration/drone/push Build is passing
Builder diagnosis (a3d115d) accepted:
- backupbot.backup.path in 3.0.1+v2.0.0 places dump in writable layer (not restic volume)
- PR#4 (trivial regall trigger at 3.0.1+v2.0.0) exposes the bug; PR#3 (3.1.0+v2.0.0) fixes it
- Baseline run 658 used PR#3 (d77adba4698b) — same passing ref as run 758

Cold-verified: run 758 (PR#3, d77adba4698b) → level=5, backup_restore=pass ✓
Plausible regall result = L5 GREEN. Sweep now 21/21 complete.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-17 03:01:55 +00:00
a3d115d6e3 diagnose(regall): A-regall-2 root cause — recipe bug in 3.0.1+v2.0.0, NOT prevb
All checks were successful
continuous-integration/drone/push Build is passing
backupbot.backup.path: "/postgres.dump.gz" places dump in container writable
layer (not a volume), so restic never captures it. Restore post-hook fails
with "No such file or directory". PR#3 (3.1.0+v2.0.0) fixes this with
backupbot.backup.volumes.db-data.path. Baseline run 658 tested PR#3 (working
mechanism), not 3.0.1+v2.0.0 (broken). Re-opened PR#3 + !testme triggered
(comment 14651) to demonstrate backup_restore=pass. BUILDER-INBOX consumed.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-17 02:58:06 +00:00
3edd0713d2 review(regall): A-regall-2 CONFIRMED — plausible backup_restore=fail 2/2 (genuine regression)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone Build is passing
Runs 750 and 754 both fail: ci_marker absent after restore.
No-op upgrade (3.0.1+v2.0.0→3.0.1+v2.0.0) via UPGRADE_BASE_VERSION path is prevb-specific.
Baseline run 658 had genuine git-ref upgrade and passed L5.

Builder-INBOX written. M1 blocked pending plausible fix.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-17 02:34:04 +00:00
a7317a54fb review(regall): batches 5-6 verified; A-regall-2 filed for plausible backup_restore=fail
All checks were successful
continuous-integration/drone/push Build is passing
Batch 5 results:
- uptime-kuma (748): L5 all pass ✓
- lasuite-drive (749): L5 all pass ✓
- plausible (750): L2, backup_restore=FAIL — regression from baseline L5
  - ci_marker not found after restore; no-op upgrade (3.0.1+v2.0.0→3.0.1+v2.0.0)
  - Builder re-running as Drone 754

Batch 6 results:
- custom-html-tiny (752): L5, upgrade=pass, backup_restore=skip (expected) ✓
- bluesky-pds (753): L5, upgrade=skip (expected/EXPECTED_NA), backup_restore=pass ✓

A-regall-2: plausible backup_restore=fail — prevb regression or flake TBD.
Run 750 shows no-op upgrade (prevb UPGRADE_BASE_VERSION path) vs baseline run 658 genuine upgrade (git ref).
Same failure seen in m2r/m2rr-plausible during prevb development.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-17 02:32:26 +00:00
ec1dc5978d status(regall): batch 5 partial (lasuite-drive/uptime-kuma L5; plausible restore=fail LIKELY FLAKY, re-triggered); batch 6 IN FLIGHT
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 02:28:31 +00:00
b2198dc7e5 status(regall): batch 4 DONE (ghost/immich/lasuite-docs L5); batch 5 IN FLIGHT (lasuite-drive/plausible/uptime-kuma)
Some checks failed
continuous-integration/drone/push Build is passing
continuous-integration/drone Build is failing
2026-06-17 02:20:13 +00:00
c42a65d315 review(regall): batch 4 all L5 (lasuite-docs/ghost/immich); 16/21 recipes GREEN
Some checks failed
continuous-integration/drone/push Build is passing
continuous-integration/drone Build is failing
Cold-verified from results.json:
- lasuite-docs (743): L5 all pass
- ghost (744): L5 all pass
- immich (745): L5 all pass

No regressions. Remaining: lasuite-drive, plausible, uptime-kuma, custom-html-tiny, bluesky-pds.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-17 02:18:46 +00:00
2c4fdddd33 status(regall): batch 3 DONE (custom-html/mailu/mattermost-lts L5); batch 4 IN FLIGHT (ghost/immich/lasuite-docs trivial PRs created + !testme)
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 02:14:09 +00:00
2db9c8bb00 review(regall): batch 3 all L5 (custom-html/mailu/mattermost-lts); BP-5 previous/ overlay scoping correct
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone Build is passing
Cold-verified from results.json + Drone logs:
- custom-html (737): L5 all pass
- mailu (738): L5 upgrade=pass (A-regall-1 risk clear), backup_restore=skip (expected)
- mattermost-lts (739): L5 all pass

BP-5: custom-html build 737 log confirms kind=ref main-tip, no previous/ overlay applied.
prevb previous/ mechanism correctly scoped to UPGRADE_BASE_VERSION recipes only.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-17 02:13:07 +00:00
dc086ecb70 review(regall): batch 2 closed all L5; batch 3 partial (custom-html L5, mailu L5 upgrade=pass, mattermost-lts running)
All checks were successful
continuous-integration/drone/push Build is passing
Cold-verified from results.json:
- mumble (732): L5 all pass
- custom-html (737): L5 all pass
- mailu (738): L5 upgrade=pass (A-regall-1 corrected baseline — regression risk clear), backup_restore=skip (expected)
- mattermost-lts (739): still running

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-17 02:11:40 +00:00
12741fceee status(regall): batch 2 DONE (lasuite-meet/n8n/mumble L5); batch 3 IN FLIGHT (custom-html/mattermost-lts/mailu)
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 02:08:52 +00:00
bc4eeaa6b5 review(regall): A-regall-1 CLOSED; BP-3 !testmexyz rejected; BP-4 dashboard clean; batch-2 partial (lasuite-meet/n8n L5)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone Build is passing
2026-06-17 02:07:36 +00:00
7c6134a773 fix(regall): correct mailu baseline upgrade=pass (A-regall-1); consume Adversary inbox; batch 2 in flight
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 02:05:42 +00:00
4ad3c9d907 review(regall): BP-1 baseline verified (A-regall-1: mailu upgrade=pass not skip); BP-2 upgrade-base=main-tip confirmed; batch-1 all L5
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 02:04:48 +00:00
d809167c84 status(regall): batch 1 DONE (drone/gitea/matrix-synapse L5); batch 2 IN FLIGHT (mumble/lasuite-meet/n8n)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone Build is passing
2026-06-17 02:03:21 +00:00
fc3ed2834b review(regall): Adversary live; orientation + batch-1 partial results recorded (drone/matrix-synapse L5✓, gitea running)
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 02:01:26 +00:00
a54a27837e status(regall): batch 1 IN FLIGHT — drone/gitea/matrix-synapse !testme triggered
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 01:58:20 +00:00
4d54123d03 chore(regall): bootstrap phase state (STATUS/BACKLOG/REVIEW/JOURNAL-regall)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone Build is passing
2026-06-17 01:56:27 +00:00
b6f526a22d status(prevb): ## DONE — M1+M2 Adversary-verified PASS (no VETO); dynamic base + previous/ + discourse PR#4 real-CI GREEN (official 3.5.3 migration tested)
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 01:51:04 +00:00
1c3ba71b04 review(prevb): M2 PASS — discourse #4 !testme GREEN in real CI (Drone 717, live-image teeth=official 3.5.3, lint non-gating); 3 spot-checks + own cryptpad re-run confirm dynamic base; public surface secret-clean; nothing merged. Both M1+M2 PASS, no VETO → Builder may DONE
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 01:50:01 +00:00
e8a0037d85 defer(prevb): file F-prevb-C (mint_admin ApiKey in access-controlled RAW log; pre-existing, low-sev, out of scope)
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 01:49:56 +00:00
19c9c3edcf review(prevb): M2 cold-verify IN FLIGHT — discourse #4 !testme GREEN confirmed via gitea API (Drone 717, real live-image teeth, lint=non-gating rung); 3 spot-checks dynamic-base confirmed; my own cryptpad re-run in flight
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 01:48:41 +00:00
71399f65d1 claim(prevb): M2 — discourse PR#4 !testme GREEN in real CI (Drone 717, all 5 tiers, head=official 3.5.3); 3 spot-checks green under dynamic base
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 01:40:19 +00:00
a0de5b196d status(prevb): B7 DONE — discourse PR#4 !testme GREEN in real CI (Drone 717, all 5 tiers); launching hedgedoc spot-check
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 01:36:44 +00:00
59338e9fc4 journal(prevb): all 5 discourse tiers green locally (custom mint_admin fixed); posting !testme for B7
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone Build is passing
2026-06-17 01:26:53 +00:00
b66abc4978 fix(prevb): discourse custom mint_admin image-agnostic (official /var/www/discourse + DB-password re-export; bitnami fallback)
All checks were successful
continuous-integration/drone/push Build is passing
The custom tier runs on the PR head — now genuinely the official discourse/discourse image (prevb
stopped the overlay reverting it to bitnamilegacy). mint_admin hardcoded /opt/bitnami/discourse (404 on
official) → create-topic roundtrip failed. Detect /var/www/discourse, re-export DISCOURSE_DB_PASSWORD
from /run/secrets (entrypoint exports it only for boot), run bin/rails; keep bitnami fallback.
2026-06-17 01:20:41 +00:00
55d638026f status(prevb): M1 PASS recorded; starting M2 (full local discourse run → !testme)
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 01:06:32 +00:00
dbc7a3b6ea review(prevb): M1 PASS — dynamic base (main-tip fallback live), previous/ base-only, overlay separated, head=official 3.5.3; TEETH: broken head → upgrade RED; clean teardown; no test weakened
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 01:03:45 +00:00
ad8d9f4713 review(prevb): M1 e2e GREEN confirmed cold (head=official 3.5.3, sidekiq dropped, clean teardown); break-it re-launched after SIGTERM
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 01:00:44 +00:00
8c286bff60 docs(prevb): update recipe-customization/testing/runbook for dynamic base + previous/ (drop stale recipe_versions[-2] model)
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 00:46:03 +00:00
0cf70b67b9 journal(prevb): 3 green spot-checks under dynamic base (cryptpad/keycloak incl master-fallback); parking at M1 gate
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 00:43:17 +00:00
22f597c0fa recon(prevb): M1 cold acceptance in flight — base=main-tip ref confirmed; concurrent keycloak run isolated
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 00:42:34 +00:00
bb79e9140e claim(prevb): M1 — dynamic base + previous/ + discourse migration; discourse upgrade GREEN locally (head=official 3.5.3, sidekiq pruned)
All checks were successful
continuous-integration/drone/push Build is passing
2026-06-17 00:37:23 +00:00