autonomic-bot d07873a276 fix(redfix): SECURITY — redact live Gitea bot password from machine-docs/BACKLOG-redfix.md ...

Commit 2ad38f5 (review(redfix) re-confirmation #17) added an A-redfix-1 "repro" line that inlined the
ACTUAL autonomic-bot Gitea password as a grep pattern, and it was pushed to origin/main. Redacted at
HEAD: the repro now greps 'autonomic-bot:' instead, verified to return the same result (1), so the
finding loses no verifiability.

This ESCALATES A-redfix-1: the secret moved from one 0644 file on one host (reachable only from pid1's
mount ns) into a git repo replicated to every clone and readable by anyone with mirror access — and the
credential grants push to recipe-maintainers/*, so it now sits inside a repo it can write to.

Redaction stops propagation; it does NOT undo disclosure. The secret is in history at 2ad38f5, and
excising it needs a history rewrite + --force, which the standing rules forbid. => The autonomic-bot
password MUST be rotated by the operator (Class-A1 external input, plan §4.4). Filed as B-redfix-8.

No DoD item is touched; the phase is not reopened. DONE stands.

2026-07-09 01:55:28 +00:00

..

screenshots

claim(drone): M2 — CI build #506 L5; !testme via bridge; SCM test PASS

2026-06-11 22:25:06 +00:00

BACKLOG-1b.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

BACKLOG-1c.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

BACKLOG-1d.md

DONE(1d): Phase 1d complete — DG1-DG8 all Adversary cold-verified PASS, NO VETO

2026-05-28 02:26:03 +01:00

BACKLOG-1e.md

status(1e): HC1 PASS; E3/HC4 CLAIMED — no-regression rationale + docs done

2026-05-28 04:11:14 +01:00

BACKLOG-2.md

review(2:F2-14c): PASS — mumble full lifecycle incl real upgrade-to-latest 0.2.0->1.0.0 GREEN cold-verified (fork removed via UPGRADE_EXTRA_ENV, voice/web/config on latest, P2/P3/P4 real, clean teardown); LAST DONE-VETO checklist item. F2-15 CLOSED (discourse PARITY.md)

2026-05-31 05:26:17 +00:00

BACKLOG-2b.md

claim(2b): deploy budget confirmed minimal+enforced (1+N_cold_deps); B1-B4 claimed

2026-05-31 05:35:46 +00:00

BACKLOG-2pc.md

review(2pc): PASS gate 2pc (re-claim 9e73ebd) — PC1+PC2+PC3 cold-verified; F2pc-1 CLEARED. git==host: docker-prune.nix+swarm.nix byte-identical to /root/cc-ci, committed units now ci-docker-prune = live (enabled+active), old docker-prune.timer not-found. Live re-confirm: no-op prune@<80% images 18->18, cold->warm redis reuse. Pressure-branch keep-cache property structural (image prune w/o --all). PC2 PAT nptest2+retention+no-mirror, PC3 teardown-keeps-images+bogus-tag-fails GREEN from prior pass.

2026-05-29 09:52:28 +01:00

BACKLOG-2w.md

claim(2w): Gate WC1+WC1.1+WC1.2 CLAIMED — warm keycloak headline e2e GREEN + concurrency/reaping + rollback/holds proven

2026-05-29 01:40:32 +01:00

BACKLOG-3.md

status(3): ## DONE — U5 PASS (Adversary @15b3057); all R1–R8 Adversary-verified, no VETO

2026-05-31 13:17:44 +00:00

BACKLOG-5.md

review(5): A5-7 CLOSED + §4 cron PASS + full gate M5 PASS @23:20Z

2026-06-01 23:21:45 +00:00

BACKLOG-aoeng.md

chore(aoeng): init Adversary phase files — orientation done, awaiting Builder

2026-06-13 18:25:01 +00:00

BACKLOG-aotest.md

claim(aotest): test suite pushed (deliverable cdcece9) — unit+claude+opencode smokes PASS, isolated, awaiting Adversary

2026-06-13 18:59:11 +00:00

BACKLOG-bsky.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-canon.md

review(canon): CLOSE DEFECT-1/2/3 — all re-verified resolved at M2 PASS (honest labels, faithful-install promote 16 clean, env-parity git-lfs proven in production timer fire)

2026-06-17 16:16:35 +00:00

BACKLOG-cf48.md

claim(cf48): Opus 4.8 cold review matrix complete — NO COVERAGE LOST

2026-06-13 05:24:46 +00:00

BACKLOG-cf55.md

status(cf55): mark phase DONE — M1+M2 PASS, NO COVERAGE LOST

2026-06-13 05:16:04 +00:00

BACKLOG-cfold.md

status(cfold): mark phase done

2026-06-13 04:07:53 +00:00

BACKLOG-conc.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-dash.md

status(dash): ## DONE — M1+M2 fresh Adversary PASS (3595e80, 4c0b289), no VETO

2026-06-17 16:40:29 +00:00

BACKLOG-drone.md

status(drone): ## DONE — M1+M2 PASS; build #506 L5; Adversary M2 PASS @2026-06-11T22:30Z

2026-06-11 22:29:02 +00:00

BACKLOG-dstamp.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-ghost.md

review(ghost-M1+M2): M1 PASS + M2 PASS — build #612 post-proxy L5/5, PR#4 operator-ready

2026-06-13 06:27:57 +00:00

BACKLOG-gtea.md

claim(gtea): M2 PASS + ## DONE — all DoD verified by Adversary

2026-06-15 22:04:15 +00:00

BACKLOG-kuma.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-lvl5.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-mailu.md

review(mailu): M1 PASS @2026-06-11T21:00Z — build #477 LEVEL 5, both /data+/mail volumes tested; ADV-mailu-01 closed

2026-06-11 21:01:19 +00:00

BACKLOG-mirror.md

status(mirror): ## DONE — Ph0-Ph5 all Adversary-verified PASS @01:16Z

2026-06-02 01:14:05 +00:00

BACKLOG-nixenv.md

claim(M2-nixenv): live parity proven on BOTH paths — gitea test_lfs_roundtrip green under the real timer fire (@17:57:54Z, git-lfs from cc-ci-run runtimeInputs; unit PATH has no git-lfs) AND the Drone path (build #871, RECIPE=gitea REF=357926f2 PR=1). Deploy d11f8f5 healthy post-sweep (systemctl --failed empty, timer+oneshots active, endpoints 200). No regression: sweep SKIPs/promotes correct; gitea promote-fail + discourse/mattermost reds all pre-existing (identical pre-deploy, runner/ unchanged since canon f94de22). Awaiting Adversary.

2026-06-17 18:18:53 +00:00

BACKLOG-poe2e.md

claim(poe2e): all 5 DoD built + cold-verified (staged cc-ci 38e5c90 @ /home/loops/poe2e/cc-ci, PO fleet 6cc3ed4) — awaiting Adversary

2026-06-13 19:42:59 +00:00

BACKLOG-porepo.md

claim(porepo): all 5 DoD built + cold-verified from anon /tmp recursive clone (deliverable 346ed31) — awaiting Adversary

2026-06-13 19:17:44 +00:00

BACKLOG-prevb.md

status(prevb): ## DONE — M1+M2 Adversary-verified PASS (no VETO); dynamic base + previous/ + discourse PR#4 real-CI GREEN (official 3.5.3 migration tested)

2026-06-17 01:51:04 +00:00

BACKLOG-pvcheck.md

claim(pvcheck-M2): real CI run + allocator proof — M2 evidence complete

2026-06-13 06:06:23 +00:00

BACKLOG-pvfix.md

review(pvfix-M2): M2 PASS + [adversary] A1 health gate deadlock

2026-06-13 05:50:22 +00:00

BACKLOG-pxgate.md

claim(pxgate-M1): change traefik health probe to /api/version (A1 cycle fix)

2026-06-13 12:46:34 +00:00

BACKLOG-rcust.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-redfix.md

fix(redfix): SECURITY — redact live Gitea bot password from machine-docs/BACKLOG-redfix.md

2026-07-09 01:55:28 +00:00

BACKLOG-regall.md

status(regall): ## DONE — M1+M2 Adversary-verified PASS (no VETO); all 21 GREEN

2026-06-17 03:03:06 +00:00

BACKLOG-regression.md

review(regression): A-reg-2+A-reg-3 CLOSED; 6/7 canaries cold-verified; good-significant+PR still pending

2026-06-02 02:18:40 +00:00

BACKLOG-samever.md

claim(M2): samever proven in real CI — step-back base<head, version-bump unaffected, discourse #4 + hedgedoc spot-check

2026-06-17 04:58:48 +00:00

BACKLOG-settings.md

claim(M2-settings): live server verified — no-canonical recipe (keycloak) -> release tag 10.7.1+26.6.2; flag true bypasses gitea canonical to release-tag path, restored false. Deployed /etc/cc-ci@99d6bbc; awaiting Adversary

2026-06-17 17:04:16 +00:00

BACKLOG-shot.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

DECISIONS.md

journal(redfix): wake #8 — VETO F-redfix-4 reproduced independently, root-caused, fixed at b5f2b10; decision recorded (warm state keyed by stack namespace); B-redfix-5 residual filed

2026-07-09 00:13:47 +00:00

DEFERRED.md

status(redfix): ## DONE re-asserted — M2 PASS @2026-07-09T00:18Z, VETO CLEARED, F-redfix-4 CLOSED; merge target redfix-m2-harness@b5f2b10; B-redfix-5 recorded in DEFERRED.md

2026-07-09 00:20:54 +00:00

JOURNAL-1b.md

## DONE — Phase 1b complete: RL1-RL6 all Adversary-PASS <24h, no VETO (lint/format + nix/ + machine-docs/ refactor, D1-D10 re-verified cold, nothing weakened)

2026-05-27 22:57:44 +01:00

JOURNAL-1c.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

JOURNAL-1d.md

status(1d): DG6 GREEN (build #153 hedgedoc e2e); G4 CLAIMED — requesting Adversary cold-verify DG1-DG8

2026-05-28 02:15:25 +01:00

JOURNAL-1e.md

DONE(1e): Phase 1e complete — HC1-HC4 all Adversary cold-verified PASS, NO VETO

2026-05-28 04:26:42 +01:00

JOURNAL-2.md

journal(2): DONE-VETO checklist complete; plausible Q4.7b mirror+PR#1+run launched

2026-05-31 05:28:57 +00:00

JOURNAL-2b.md

claim(2b): deploy budget confirmed minimal+enforced (1+N_cold_deps); B1-B4 claimed

2026-05-31 05:35:46 +00:00

JOURNAL-2pc.md

claim(2pc): re-claim — F2pc-1 resolved (git==host==ci-docker-prune via b9bbd25)

2026-05-29 09:50:39 +01:00

JOURNAL-2w.md

done(2w): Phase 2w COMPLETE — WC1-WC9 (incl WC1.1/WC1.2) all Adversary-verified, NO VETO

2026-05-29 04:48:02 +01:00

JOURNAL-3.md

journal(3): U3 live-demo start — Drone DB reset discovered, repo reactivated; validating pipeline (build #1 running)

2026-05-31 09:37:21 +00:00

JOURNAL-5.md

claim(5): A5-7 fix — CronCreate mechanism verified (T0-refire 23:18Z, upgrader-cron.log created)

2026-06-01 23:19:32 +00:00

JOURNAL-aoeng.md

chore(aoeng): init Adversary phase files — orientation done, awaiting Builder

2026-06-13 18:25:01 +00:00

JOURNAL-aotest.md

chore(aotest): Adversary JOURNAL — all DoD PASS, phase complete

2026-06-13 19:02:32 +00:00

JOURNAL-bsky.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-canon.md

journal(canon): production re-fire COMPLETE (Result=success, gitea cold-green via lfs PASS under parity PATH) — DEFECT-3 closed; launched clean determinism 2nd sweep (custom-html now at 1.13.0 → all 16 promoted at-latest)

2026-06-17 14:41:45 +00:00

JOURNAL-cf48.md

journal(cf48): resumed to close phase; M2 claimed, awaiting Adversary

2026-06-13 06:32:12 +00:00

JOURNAL-cf55.md

claim(cf55): M1 review matrix complete — NO COVERAGE LOST

2026-06-13 05:13:15 +00:00

JOURNAL-cfold.md

claim(cfold): claim M2 full sweep green

2026-06-13 04:04:14 +00:00

JOURNAL-conc.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-dash.md

claim(M2): dashboard redeployed (image 15addbc7bf45 -> 11ac2a1e6c07), live full per-recipe history verified

2026-06-17 16:37:21 +00:00

JOURNAL-drone.md

feat(drone): enroll drone + gitea SCM dep (M1 implementation)

2026-06-11 21:31:43 +00:00

JOURNAL-dstamp.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-ghost.md

claim(ghost-M1+M2): build #612 level 5/5 PASS — ghost upgrade infra-confounded, PR#4 operator-ready

2026-06-13 06:23:52 +00:00

JOURNAL-gtea.md

journal(gtea): Blocker 4 fix + STACK_NAME discovery + ruff cleanup

2026-06-15 21:57:47 +00:00

JOURNAL-kuma.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-lvl5.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-mailu.md

claim(mailu): M1 re-claim — build #477 LEVEL 5; ADV-mailu-01 fixed; /mail Maildir now seeded, wiped, and verified restored; both test_backup_captures_mail_message + test_restore_returns_mail_message PASS

2026-06-11 20:59:39 +00:00

JOURNAL-mirror.md

status(mirror): ## DONE — Ph0-Ph5 all Adversary-verified PASS @01:16Z

2026-06-02 01:14:05 +00:00

JOURNAL-nixenv.md

claim(M2-nixenv): live parity proven on BOTH paths — gitea test_lfs_roundtrip green under the real timer fire (@17:57:54Z, git-lfs from cc-ci-run runtimeInputs; unit PATH has no git-lfs) AND the Drone path (build #871, RECIPE=gitea REF=357926f2 PR=1). Deploy d11f8f5 healthy post-sweep (systemctl --failed empty, timer+oneshots active, endpoints 200). No regression: sweep SKIPs/promotes correct; gitea promote-fail + discourse/mattermost reds all pre-existing (identical pre-deploy, runner/ unchanged since canon f94de22). Awaiting Adversary.

2026-06-17 18:18:53 +00:00

JOURNAL-poe2e.md

claim(poe2e): all 5 DoD built + cold-verified (staged cc-ci 38e5c90 @ /home/loops/poe2e/cc-ci, PO fleet 6cc3ed4) — awaiting Adversary

2026-06-13 19:42:59 +00:00

JOURNAL-porepo.md

claim(porepo): all 5 DoD built + cold-verified from anon /tmp recursive clone (deliverable 346ed31) — awaiting Adversary

2026-06-13 19:17:44 +00:00

JOURNAL-prevb.md

status(prevb): ## DONE — M1+M2 Adversary-verified PASS (no VETO); dynamic base + previous/ + discourse PR#4 real-CI GREEN (official 3.5.3 migration tested)

2026-06-17 01:51:04 +00:00

JOURNAL-pvcheck.md

claim(pvcheck-M2): real CI run + allocator proof — M2 evidence complete

2026-06-13 06:06:23 +00:00

JOURNAL-pvfix.md

claim(pvfix-M2): proxy recreated as /16 — all routes healthy

2026-06-13 05:47:04 +00:00

JOURNAL-pxgate.md

status(pxgate): ## DONE — M1+M2 PASS, cycle broken, cold-boot sim confirms no deadlock

2026-06-13 13:47:42 +00:00

JOURNAL-rcust.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-redfix.md

journal(redfix): wake #19 — consumed review(redfix)@2ad38f5 (re-confirmation #17); my B-redfix-7 severity rationale was wrong on the axis ("no non-root login users" — but mode 644 lets any uid read; setpriv --reuid=1000 succeeds). Re-derived the correct containment first-hand rather than inheriting it: mount-namespace isolation (only dbus-daemon uid 4 shares pid1's mnt-ns; the uid-1000 warm-keycloak JVM is in ns 4026533305 and cannot see host /etc). Same LOW severity, different load-bearing reason — and a fragile one, so the case to fix strengthens. Corrected the bullet, cross-ref A-redfix-1; no verdict change, DONE stands, loop remains stopped

2026-07-09 01:54:14 +00:00

JOURNAL-regall.md

chore(regall): bootstrap phase state (STATUS/BACKLOG/REVIEW/JOURNAL-regall)

2026-06-17 01:56:27 +00:00

JOURNAL-regression.md

fix(regression): fix relative import (A-reg-1) + consume inbox

2026-06-02 01:37:31 +00:00

JOURNAL-samever.md

claim(M2): samever proven in real CI — step-back base<head, version-bump unaffected, discourse #4 + hedgedoc spot-check

2026-06-17 04:58:48 +00:00

JOURNAL-settings.md

claim(M2-settings): live server verified — no-canonical recipe (keycloak) -> release tag 10.7.1+26.6.2; flag true bypasses gitea canonical to release-tag path, restored false. Deployed /etc/cc-ci@99d6bbc; awaiting Adversary

2026-06-17 17:04:16 +00:00

JOURNAL-shot.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

plausible-entrypoint.clickhouse.sh.fixed

backlog(2): plausible Q4.7b scoped + ready (staged hardened entrypoint.clickhouse.sh; mirror+PR+run steps); queued behind Adversary Q4.6/F2-14c verifies

2026-05-31 05:21:23 +00:00

REVIEW-1b.md

review(1b): ✅ RL6 PASS + Adversary FINAL SIGN-OFF — git mv my REVIEW*.md → machine-docs/ (lockstep; Builder moved theirs in 992d87c, README stays root). Watchdog survived (resolve_state prefers machine-docs/; it pinged me from machine-docs/STATUS-1b.md). Refs re-verified (README+install.md updated; no .drone/flake/scripts refs; closure byte-identical 8i3jcad9 unaffected). ALL RL1-RL6 Adversary-PASS, no VETO — Builder cleared to write ## DONE

2026-05-27 22:56:25 +01:00

REVIEW-1c.md

review(1b): ✅ RL6 PASS + Adversary FINAL SIGN-OFF — git mv my REVIEW*.md → machine-docs/ (lockstep; Builder moved theirs in 992d87c, README stays root). Watchdog survived (resolve_state prefers machine-docs/; it pinged me from machine-docs/STATUS-1b.md). Refs re-verified (README+install.md updated; no .drone/flake/scripts refs; closure byte-identical 8i3jcad9 unaffected). ALL RL1-RL6 Adversary-PASS, no VETO — Builder cleared to write ## DONE

2026-05-27 22:56:25 +01:00

REVIEW-1d.md

review(1d): G4 PASS + FINAL sign-off — DG1-DG8 all Adversary cold-verified, NO VETO

2026-05-28 02:25:02 +01:00

REVIEW-1e.md

review(1e): E3/HC4 PASS + FINAL — own !testme build #155 production cold (head_ref==chaos-version full sha, additive, deploy-count=1, no secret leak, clean teardown); NO VETO — Builder may write ## DONE

2026-05-28 04:24:57 +01:00

REVIEW-2.md

review(2:F2-14c): PASS — mumble full lifecycle incl real upgrade-to-latest 0.2.0->1.0.0 GREEN cold-verified (fork removed via UPGRADE_EXTRA_ENV, voice/web/config on latest, P2/P3/P4 real, clean teardown); LAST DONE-VETO checklist item. F2-15 CLOSED (discourse PARITY.md)

2026-05-31 05:26:17 +00:00

REVIEW-2b.md

review(2b): PASS — deploy budget 1+N_cold_deps COLD-verified minimal+enforced (DG4.1 non-vacuous; doc-only claim so B3 holds by construction; mumble real run deploy-count=1 all-tiers-green + prior lasuite-docs=2 cold-dep verdict). doc complete incl WC5 caveat. No VETO. B1-B4 all PASS

2026-05-31 05:38:17 +00:00

REVIEW-2pc.md

review(2pc): PASS gate 2pc (re-claim 9e73ebd) — PC1+PC2+PC3 cold-verified; F2pc-1 CLEARED. git==host: docker-prune.nix+swarm.nix byte-identical to /root/cc-ci, committed units now ci-docker-prune = live (enabled+active), old docker-prune.timer not-found. Live re-confirm: no-op prune@<80% images 18->18, cold->warm redis reuse. Pressure-branch keep-cache property structural (image prune w/o --all). PC2 PAT nptest2+retention+no-mirror, PC3 teardown-keeps-images+bogus-tag-fails GREEN from prior pass.

2026-05-29 09:52:28 +01:00

REVIEW-2w.md

review(2w): WC8 + WC9 (FINAL) — PASS @2026-05-29; ALL WC1-WC9 (incl WC1.1/WC1.2) Adversary cold-verified, NO VETO — DONE authorized

2026-05-29 04:46:30 +01:00

REVIEW-3.md

review(3 U5): PASS — badges+docs+hardening cold-verified; all R1–R8 done; Phase 3 DoD complete

2026-05-31 13:16:19 +00:00

REVIEW-5.md

review(5): A5-7 CLOSED + §4 cron PASS + full gate M5 PASS @23:20Z

2026-06-01 23:21:45 +00:00

REVIEW-aoeng.md

review(aoeng): ALL DoD PASS @2026-06-13T18:41Z — phase DONE

2026-06-13 18:42:04 +00:00

REVIEW-aotest.md

review(aotest): ALL DoD PASS @2026-06-13T19:00Z — phase DONE

2026-06-13 19:02:06 +00:00

REVIEW-bsky.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-canon.md

review(M2): PASS — canonical sweep proven end-to-end, no VETO. 16 canonicals commit==tag (cold re-derived), real non-hollow timer fire (Result=success, single serial, custom-html 1.11→1.13 advance), determinism 2nd sweep 15-skip/5-documented-exception-run (no overlap, launched 14:41 after 14:37 fire end), tagged-gate both ways, samever step-back never fires in-sweep, UPGRADE_BASE_VERSION retired (plausible dynamic base 3.0.1 re-derived), my own --quick warm reattach reuses retained volume + 200, all 6 exceptions in DECISIONS, AI-free. DEFECT-3 CLOSED (parity byte-match + gitea lfs PASS in prod fire). M1+M2 fresh PASS → Builder may write ## DONE

2026-06-17 16:15:28 +00:00

REVIEW-cf48.md

review(cf48-M2): M2 PASS — NO COVERAGE LOST, independently cold-verified, no VETO

2026-06-13 06:33:47 +00:00

REVIEW-cf55.md

review(cf55): M1 PASS + M2 NO COVERAGE LOST

2026-06-13 05:15:18 +00:00

REVIEW-cfold.md

review(cfold): M2 PASS full sweep green

2026-06-13 04:06:40 +00:00

REVIEW-conc.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-dash.md

review(M2): PASS — live full per-recipe history verified (image 11ac2a1e6c07 1/1; bluesky-pds 8/ghost 24/immich 28/discourse 25 = host, plausible+custom-html capped 30; exact ts order incl mixed-id trap; cap keeps newest=758; overview+badge 200; live traversal/injection 404, no leak; retention no-trim confirmed). M1+M2 fresh PASS, no VETO.

2026-06-17 16:39:35 +00:00

REVIEW-drone.md

review(drone): M2 PASS @2026-06-11T22:30Z — build #506 L5; bridge !testme verified; §7.1 signed

2026-06-11 22:27:45 +00:00

REVIEW-dstamp.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-ghost.md

review(ghost-M1+M2): M1 PASS + M2 PASS — build #612 post-proxy L5/5, PR#4 operator-ready

2026-06-13 06:27:57 +00:00

REVIEW-gtea.md

review(gtea): M2 ADVERSARY PASS @2026-06-15T22:10Z

2026-06-15 22:02:46 +00:00

REVIEW-kuma.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-lvl5.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-mailu.md

review(mailu): M2 PASS @2026-06-11T21:15Z — build #483 LEVEL 5, fresh independent re-trigger; all phase DoD satisfied

2026-06-11 21:16:27 +00:00

REVIEW-mirror.md

review(mirror): Ph4+Ph5 PASS @01:16Z — deploy verified, 3 new recipes triggered <60s

2026-06-02 01:11:45 +00:00

REVIEW-nixenv.md

review(M2-nixenv): PASS — live parity cold-verified on cc-ci (claim f7b6f26, deploy d11f8f5). Deploy byte-identical to M1 build; host healthy post-sweep (systemctl --failed empty, timer+services active, endpoints 200, no orphan test stacks, live cc-ci-run=zxlx9jn). gitea test_lfs_roundtrip GREEN under BOTH real timer fire (git-lfs from runtimeInputs; unit PATH has no git-lfs) AND Drone #871 (cc-ci-run runner/run_recipe_ci.py). No regression: ZERO missing-tool signatures across whole sweep; SKIPs/promotes correct; gitea promote-fail (warm-gitea already deployed) + discourse/mattermost reds (image-assertion / postgres relation, docker resolved) all proven pre-existing — identical in OLD-env pre-deploy fires, runner/ unchanged since canon f94de22. No defects, no VETO. M1+M2 fresh PASS → DONE cleared.

2026-06-17 18:21:16 +00:00

REVIEW-poe2e.md

review(poe2e): ALL DoD PASS @2026-06-13T19:46Z — phase DONE

2026-06-13 19:47:59 +00:00

REVIEW-porepo.md

review(porepo): ALL DoD PASS @2026-06-13T19:19Z — phase DONE

2026-06-13 19:20:26 +00:00

REVIEW-prevb.md

review(prevb): M2 PASS — discourse #4 !testme GREEN in real CI (Drone 717, live-image teeth=official 3.5.3, lint non-gating); 3 spot-checks + own cryptpad re-run confirm dynamic base; public surface secret-clean; nothing merged. Both M1+M2 PASS, no VETO → Builder may DONE

2026-06-17 01:50:01 +00:00

REVIEW-pvcheck.md

review(pvcheck-M2): M2 PASS — real CI run + allocator proof verified cold

2026-06-13 06:07:47 +00:00

REVIEW-pvfix.md

review(pvfix-M2): M2 PASS + [adversary] A1 health gate deadlock

2026-06-13 05:50:22 +00:00

REVIEW-pxgate.md

review(pxgate-M2): PASS — cold-boot sim confirms cycle broken, proxy active without dashboard

2026-06-13 13:45:25 +00:00

REVIEW-rcust.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-redfix.md

review(redfix): re-confirmation #17 — consumed ADVERSARY-INBOX (Builder wake #18); accepted their correction after re-deriving it (/etc/cc-ci HEAD is main@d11f8f56; redfix-m2-harness is a stale local branch there; b5f2b10 ABSENT — conclusion unchanged, NOT-MERGED holds); confirmed B-redfix-7 as A-redfix-1 with repro but corrected its rationale (LOW rests on mount-namespace isolation, not on absence of login users — mode DOES permit uid1000); caught my own near-miss before it became evidence (setpriv ran in host ns; the real uid-1000 java IS warm-keycloak but is containerized and cannot read host /etc); no VETO, DONE stands

2026-07-09 01:52:39 +00:00

REVIEW-regall.md

review(regall): M1 PASS + M2 PASS — full sweep 21/21 GREEN, no prevb regressions, no VETO

2026-06-17 03:04:38 +00:00

REVIEW-regression.md

review(regression): D-final PASS — all 7 canaries cold-verified; PR#5 open; DoD complete

2026-06-02 03:37:18 +00:00

REVIEW-samever.md

review(samever): M2 PASS — headline step-back reproduced from own clone; version-bump + discourse #4 unaffected; teeth hold; clean teardown. No VETO; cleared for DONE

2026-06-17 05:04:42 +00:00

REVIEW-settings.md

review(M2-settings): PASS — live cold-verified on cc-ci. Deployed runner @99d6bbc byte-identical to M1-reviewed cd19c1b. CASE1 (file absent/false): keycloak(no canon)->release tag 10.7.1+26.6.2 NOT main-tip; gitea(canon)->last-green 3.5.3 unchanged. CASE2 (scratch file/true): live flag reads True from /etc/cc-ci/settings.toml, gitea canonical BYPASSED to release-tag path. RESTORE: file removed->flag False, reason back to last-green; steady state restored (file absent, clean). Harness file-pickup proven via real DEFAULT_PATH. No defects, no VETO. M1+M2 fresh PASS.

2026-06-17 17:06:24 +00:00

REVIEW-shot.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW.md

review(1b): ✅ RL6 PASS + Adversary FINAL SIGN-OFF — git mv my REVIEW*.md → machine-docs/ (lockstep; Builder moved theirs in 992d87c, README stays root). Watchdog survived (resolve_state prefers machine-docs/; it pinged me from machine-docs/STATUS-1b.md). Refs re-verified (README+install.md updated; no .drone/flake/scripts refs; closure byte-identical 8i3jcad9 unaffected). ALL RL1-RL6 Adversary-PASS, no VETO — Builder cleared to write ## DONE

2026-05-27 22:56:25 +01:00

STATUS-1b.md

## DONE — Phase 1b complete: RL1-RL6 all Adversary-PASS <24h, no VETO (lint/format + nix/ + machine-docs/ refactor, D1-D10 re-verified cold, nothing weakened)

2026-05-27 22:57:44 +01:00

STATUS-1c.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

STATUS-1d.md

status(1d): tidy ledger post-DONE (clear In-flight; settle DG6/DG7 lines)

2026-05-28 02:26:34 +01:00

STATUS-1e.md

DONE(1e): Phase 1e complete — HC1-HC4 all Adversary cold-verified PASS, NO VETO

2026-05-28 04:26:42 +01:00

STATUS-2.md

status(2): all 3 DONE-VETO upgrade-to-latest items Adversary-PASSED (ghost/discourse/mumble); remaining = plausible Q4.7b + drone Q4.10 + Q5; executing plausible

2026-05-31 05:27:18 +00:00

STATUS-2b.md

status(2b): ## DONE — B1-B4 all Adversary cold-PASS @05:38Z, no VETO

2026-05-31 05:38:52 +00:00

STATUS-2pc.md

status(2pc): ## DONE — Adversary PASS for PC1+PC2+PC3, F2pc-1 closed, no VETO

2026-05-29 09:53:30 +01:00

STATUS-2w.md

done(2w): Phase 2w COMPLETE — WC1-WC9 (incl WC1.1/WC1.2) all Adversary-verified, NO VETO

2026-05-29 04:48:02 +01:00

STATUS-3.md

status(3): ## DONE — U5 PASS (Adversary @15b3057); all R1–R8 Adversary-verified, no VETO

2026-05-31 13:17:44 +00:00

STATUS-5.md

status(5): ## DONE — all V1-V9 + §4 cron Adversary-verified PASS; cc-ci build complete

2026-06-01 23:22:24 +00:00

STATUS-aoeng.md

review(aoeng): ALL DoD PASS @2026-06-13T18:41Z — phase DONE

2026-06-13 18:42:04 +00:00

STATUS-aotest.md

status(aotest): ## DONE — all 5 DoD Adversary-verified PASS @2026-06-13T19:00Z (cdcece9), no VETO

2026-06-13 19:03:08 +00:00

STATUS-bsky.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-canon.md

status(canon): ## DONE — M1+M2 fresh Adversary PASS (8149a2c, no VETO), §5 DoD fully cold-verified

2026-06-17 16:16:02 +00:00

STATUS-cf48.md

status(cf48): ## DONE — M1+M2 PASS, NO COVERAGE LOST cross-validated (Sonnet 4.6 + Opus 4.8)

2026-06-13 06:34:33 +00:00

STATUS-cf55.md

status(cf55): mark phase DONE — M1+M2 PASS, NO COVERAGE LOST

2026-06-13 05:16:04 +00:00

STATUS-cfold.md

status(cfold): mark phase done

2026-06-13 04:07:53 +00:00

STATUS-conc.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-dash.md

status(dash): ## DONE — M1+M2 fresh Adversary PASS (3595e80, 4c0b289), no VETO

2026-06-17 16:40:29 +00:00

STATUS-drone.md

status(drone): ## DONE — M1+M2 PASS; build #506 L5; Adversary M2 PASS @2026-06-11T22:30Z

2026-06-11 22:29:02 +00:00

STATUS-dstamp.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-ghost.md

status(ghost): ## DONE — M1+M2 PASS, ghost upgrade infra-confounded confirmed

2026-06-13 06:28:59 +00:00

STATUS-gtea.md

claim(gtea): M2 PASS + ## DONE — all DoD verified by Adversary

2026-06-15 22:04:15 +00:00

STATUS-kuma.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-lvl5.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-mailu.md

status(mailu): ## DONE — M1+M2 PASS; PR#3 open for operator merge; builds #477+#483 both L5; backup/restore on /data+/mail proven; DEFERRED closed

2026-06-11 21:17:45 +00:00

STATUS-mirror.md

status(mirror): ## DONE — Ph0-Ph5 all Adversary-verified PASS @01:16Z

2026-06-02 01:14:05 +00:00

STATUS-nixenv.md

status(nixenv): mark phase DONE in STATUS (M1+M2 both PASS, no VETO)

2026-06-17 23:18:36 +00:00

STATUS-poe2e.md

status(poe2e): ## DONE — all 5 DoD Adversary-verified PASS @2026-06-13T19:46Z, no VETO

2026-06-13 19:48:26 +00:00

STATUS-porepo.md

status(porepo): ## DONE — all 5 DoD Adversary-verified PASS @2026-06-13T19:19Z (346ed31), no VETO

2026-06-13 19:21:24 +00:00

STATUS-prevb.md

status(prevb): ## DONE — M1+M2 Adversary-verified PASS (no VETO); dynamic base + previous/ + discourse PR#4 real-CI GREEN (official 3.5.3 migration tested)

2026-06-17 01:51:04 +00:00

STATUS-pvcheck.md

status(pvcheck): ## DONE — M1+M2 PASS, proxy /16 confirmed safe in production

2026-06-13 06:08:43 +00:00

STATUS-pvfix.md

status(pvfix): ## DONE — M1+M2 PASS, proxy live as /16

2026-06-13 05:52:18 +00:00

STATUS-pxgate.md

status(pxgate): ## DONE — M1+M2 PASS, cycle broken, cold-boot sim confirms no deadlock

2026-06-13 13:47:42 +00:00

STATUS-rcust.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-redfix.md

journal(redfix): wake #17 — consumed review(redfix)@32fefb2 (re-confirmation #15); fixed stale "15 existing canonicals" in STATUS (real: 17 seeded, and the invariant is structural not numeric — WARM_DOMAINS singleton ⇒ exactly one re-key, 20 of 21 enrolled unchanged); all figures re-derived first-hand off live disk + b5f2b10, not taken from the verdict; filed B-redfix-6 for the same stale count in canonical.py:52's docstring, deliberately NOT fixed inline to avoid moving the branch off the M2-PASS-pinned b5f2b10; no verdict change, DONE stands, loop remains stopped

2026-07-09 01:42:59 +00:00

STATUS-regall.md

fix(STATUS-regall): bare ## DONE marker so watchdog detects phase complete

2026-06-17 04:14:14 +00:00

STATUS-regression.md

status(regression): ## DONE — D-final PASS @03:36Z; all 7 canaries verified; phase complete

2026-06-02 03:38:24 +00:00

STATUS-samever.md

status(samever): ## DONE — M1+M2 Adversary-verified PASS (no VETO)

2026-06-17 06:16:30 +00:00

STATUS-settings.md

status(settings): ## DONE — M1+M2 fresh Adversary PASS (cd19c1b, 99d6bbc), no VETO

2026-06-17 17:07:14 +00:00

STATUS-shot.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00