autonomic-bot e6349a9dfe claim(pvfix-M1): proxy /16 patch + maintenance plan ready ...

Patch nix/modules/swarm.nix to create the `proxy` overlay with
--subnet 10.10.0.0/16 (~65k VIPs, 258× headroom over the exhausted /24).

Live host survey confirms 10.10.0.0/16 is clear of all existing
Docker networks (ingress 10.0.0.0/24, existing per-stack overlays
10.0.1-4.0/24, host routes). Exact maintenance procedure in
STATUS-pvfix.md including pre-checks, stack teardown order, drain
wait, remove/recreate proxy, nixos-rebuild, deploy-* restart chain,
and health verification steps.

Adversary: please cold-review the patch + procedure before any live
disruptive action.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-13 05:31:21 +00:00

..

screenshots

claim(drone): M2 — CI build #506 L5; !testme via bridge; SCM test PASS

2026-06-11 22:25:06 +00:00

BACKLOG-1b.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

BACKLOG-1c.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

BACKLOG-1d.md

DONE(1d): Phase 1d complete — DG1-DG8 all Adversary cold-verified PASS, NO VETO

2026-05-28 02:26:03 +01:00

BACKLOG-1e.md

status(1e): HC1 PASS; E3/HC4 CLAIMED — no-regression rationale + docs done

2026-05-28 04:11:14 +01:00

BACKLOG-2.md

review(2:F2-14c): PASS — mumble full lifecycle incl real upgrade-to-latest 0.2.0->1.0.0 GREEN cold-verified (fork removed via UPGRADE_EXTRA_ENV, voice/web/config on latest, P2/P3/P4 real, clean teardown); LAST DONE-VETO checklist item. F2-15 CLOSED (discourse PARITY.md)

2026-05-31 05:26:17 +00:00

BACKLOG-2b.md

claim(2b): deploy budget confirmed minimal+enforced (1+N_cold_deps); B1-B4 claimed

2026-05-31 05:35:46 +00:00

BACKLOG-2pc.md

review(2pc): PASS gate 2pc (re-claim 9e73ebd) — PC1+PC2+PC3 cold-verified; F2pc-1 CLEARED. git==host: docker-prune.nix+swarm.nix byte-identical to /root/cc-ci, committed units now ci-docker-prune = live (enabled+active), old docker-prune.timer not-found. Live re-confirm: no-op prune@<80% images 18->18, cold->warm redis reuse. Pressure-branch keep-cache property structural (image prune w/o --all). PC2 PAT nptest2+retention+no-mirror, PC3 teardown-keeps-images+bogus-tag-fails GREEN from prior pass.

2026-05-29 09:52:28 +01:00

BACKLOG-2w.md

claim(2w): Gate WC1+WC1.1+WC1.2 CLAIMED — warm keycloak headline e2e GREEN + concurrency/reaping + rollback/holds proven

2026-05-29 01:40:32 +01:00

BACKLOG-3.md

status(3): ## DONE — U5 PASS (Adversary @15b3057); all R1–R8 Adversary-verified, no VETO

2026-05-31 13:17:44 +00:00

BACKLOG-5.md

review(5): A5-7 CLOSED + §4 cron PASS + full gate M5 PASS @23:20Z

2026-06-01 23:21:45 +00:00

BACKLOG-bsky.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-cf48.md

claim(cf48): Opus 4.8 cold review matrix complete — NO COVERAGE LOST

2026-06-13 05:24:46 +00:00

BACKLOG-cf55.md

status(cf55): mark phase DONE — M1+M2 PASS, NO COVERAGE LOST

2026-06-13 05:16:04 +00:00

BACKLOG-cfold.md

status(cfold): mark phase done

2026-06-13 04:07:53 +00:00

BACKLOG-conc.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-drone.md

status(drone): ## DONE — M1+M2 PASS; build #506 L5; Adversary M2 PASS @2026-06-11T22:30Z

2026-06-11 22:29:02 +00:00

BACKLOG-dstamp.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-kuma.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-lvl5.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-mailu.md

review(mailu): M1 PASS @2026-06-11T21:00Z — build #477 LEVEL 5, both /data+/mail volumes tested; ADV-mailu-01 closed

2026-06-11 21:01:19 +00:00

BACKLOG-mirror.md

status(mirror): ## DONE — Ph0-Ph5 all Adversary-verified PASS @01:16Z

2026-06-02 01:14:05 +00:00

BACKLOG-pvfix.md

claim(pvfix-M1): proxy /16 patch + maintenance plan ready

2026-06-13 05:31:21 +00:00

BACKLOG-rcust.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG-regression.md

review(regression): A-reg-2+A-reg-3 CLOSED; 6/7 canaries cold-verified; good-significant+PR still pending

2026-06-02 02:18:40 +00:00

BACKLOG-shot.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

BACKLOG.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

DECISIONS.md

feat(cfold): canonicalize custom test layout

2026-06-12 16:08:18 +00:00

DEFERRED.md

review(drone): M2 PASS @2026-06-11T22:30Z — build #506 L5; bridge !testme verified; §7.1 signed

2026-06-11 22:27:45 +00:00

JOURNAL-1b.md

## DONE — Phase 1b complete: RL1-RL6 all Adversary-PASS <24h, no VETO (lint/format + nix/ + machine-docs/ refactor, D1-D10 re-verified cold, nothing weakened)

2026-05-27 22:57:44 +01:00

JOURNAL-1c.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

JOURNAL-1d.md

status(1d): DG6 GREEN (build #153 hedgedoc e2e); G4 CLAIMED — requesting Adversary cold-verify DG1-DG8

2026-05-28 02:15:25 +01:00

JOURNAL-1e.md

DONE(1e): Phase 1e complete — HC1-HC4 all Adversary cold-verified PASS, NO VETO

2026-05-28 04:26:42 +01:00

JOURNAL-2.md

journal(2): DONE-VETO checklist complete; plausible Q4.7b mirror+PR#1+run launched

2026-05-31 05:28:57 +00:00

JOURNAL-2b.md

claim(2b): deploy budget confirmed minimal+enforced (1+N_cold_deps); B1-B4 claimed

2026-05-31 05:35:46 +00:00

JOURNAL-2pc.md

claim(2pc): re-claim — F2pc-1 resolved (git==host==ci-docker-prune via b9bbd25)

2026-05-29 09:50:39 +01:00

JOURNAL-2w.md

done(2w): Phase 2w COMPLETE — WC1-WC9 (incl WC1.1/WC1.2) all Adversary-verified, NO VETO

2026-05-29 04:48:02 +01:00

JOURNAL-3.md

journal(3): U3 live-demo start — Drone DB reset discovered, repo reactivated; validating pipeline (build #1 running)

2026-05-31 09:37:21 +00:00

JOURNAL-5.md

claim(5): A5-7 fix — CronCreate mechanism verified (T0-refire 23:18Z, upgrader-cron.log created)

2026-06-01 23:19:32 +00:00

JOURNAL-bsky.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-cf48.md

claim(cf48): Opus 4.8 cold review matrix complete — NO COVERAGE LOST

2026-06-13 05:24:46 +00:00

JOURNAL-cf55.md

claim(cf55): M1 review matrix complete — NO COVERAGE LOST

2026-06-13 05:13:15 +00:00

JOURNAL-cfold.md

claim(cfold): claim M2 full sweep green

2026-06-13 04:04:14 +00:00

JOURNAL-conc.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-drone.md

feat(drone): enroll drone + gitea SCM dep (M1 implementation)

2026-06-11 21:31:43 +00:00

JOURNAL-dstamp.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-kuma.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-lvl5.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-mailu.md

claim(mailu): M1 re-claim — build #477 LEVEL 5; ADV-mailu-01 fixed; /mail Maildir now seeded, wiped, and verified restored; both test_backup_captures_mail_message + test_restore_returns_mail_message PASS

2026-06-11 20:59:39 +00:00

JOURNAL-mirror.md

status(mirror): ## DONE — Ph0-Ph5 all Adversary-verified PASS @01:16Z

2026-06-02 01:14:05 +00:00

JOURNAL-pvfix.md

claim(pvfix-M1): proxy /16 patch + maintenance plan ready

2026-06-13 05:31:21 +00:00

JOURNAL-rcust.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL-regression.md

fix(regression): fix relative import (A-reg-1) + consume inbox

2026-06-02 01:37:31 +00:00

JOURNAL-shot.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

JOURNAL.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

plausible-entrypoint.clickhouse.sh.fixed

backlog(2): plausible Q4.7b scoped + ready (staged hardened entrypoint.clickhouse.sh; mirror+PR+run steps); queued behind Adversary Q4.6/F2-14c verifies

2026-05-31 05:21:23 +00:00

REVIEW-1b.md

review(1b): ✅ RL6 PASS + Adversary FINAL SIGN-OFF — git mv my REVIEW*.md → machine-docs/ (lockstep; Builder moved theirs in 992d87c, README stays root). Watchdog survived (resolve_state prefers machine-docs/; it pinged me from machine-docs/STATUS-1b.md). Refs re-verified (README+install.md updated; no .drone/flake/scripts refs; closure byte-identical 8i3jcad9 unaffected). ALL RL1-RL6 Adversary-PASS, no VETO — Builder cleared to write ## DONE

2026-05-27 22:56:25 +01:00

REVIEW-1c.md

review(1b): ✅ RL6 PASS + Adversary FINAL SIGN-OFF — git mv my REVIEW*.md → machine-docs/ (lockstep; Builder moved theirs in 992d87c, README stays root). Watchdog survived (resolve_state prefers machine-docs/; it pinged me from machine-docs/STATUS-1b.md). Refs re-verified (README+install.md updated; no .drone/flake/scripts refs; closure byte-identical 8i3jcad9 unaffected). ALL RL1-RL6 Adversary-PASS, no VETO — Builder cleared to write ## DONE

2026-05-27 22:56:25 +01:00

REVIEW-1d.md

review(1d): G4 PASS + FINAL sign-off — DG1-DG8 all Adversary cold-verified, NO VETO

2026-05-28 02:25:02 +01:00

REVIEW-1e.md

review(1e): E3/HC4 PASS + FINAL — own !testme build #155 production cold (head_ref==chaos-version full sha, additive, deploy-count=1, no secret leak, clean teardown); NO VETO — Builder may write ## DONE

2026-05-28 04:24:57 +01:00

REVIEW-2.md

review(2:F2-14c): PASS — mumble full lifecycle incl real upgrade-to-latest 0.2.0->1.0.0 GREEN cold-verified (fork removed via UPGRADE_EXTRA_ENV, voice/web/config on latest, P2/P3/P4 real, clean teardown); LAST DONE-VETO checklist item. F2-15 CLOSED (discourse PARITY.md)

2026-05-31 05:26:17 +00:00

REVIEW-2b.md

review(2b): PASS — deploy budget 1+N_cold_deps COLD-verified minimal+enforced (DG4.1 non-vacuous; doc-only claim so B3 holds by construction; mumble real run deploy-count=1 all-tiers-green + prior lasuite-docs=2 cold-dep verdict). doc complete incl WC5 caveat. No VETO. B1-B4 all PASS

2026-05-31 05:38:17 +00:00

REVIEW-2pc.md

review(2pc): PASS gate 2pc (re-claim 9e73ebd) — PC1+PC2+PC3 cold-verified; F2pc-1 CLEARED. git==host: docker-prune.nix+swarm.nix byte-identical to /root/cc-ci, committed units now ci-docker-prune = live (enabled+active), old docker-prune.timer not-found. Live re-confirm: no-op prune@<80% images 18->18, cold->warm redis reuse. Pressure-branch keep-cache property structural (image prune w/o --all). PC2 PAT nptest2+retention+no-mirror, PC3 teardown-keeps-images+bogus-tag-fails GREEN from prior pass.

2026-05-29 09:52:28 +01:00

REVIEW-2w.md

review(2w): WC8 + WC9 (FINAL) — PASS @2026-05-29; ALL WC1-WC9 (incl WC1.1/WC1.2) Adversary cold-verified, NO VETO — DONE authorized

2026-05-29 04:46:30 +01:00

REVIEW-3.md

review(3 U5): PASS — badges+docs+hardening cold-verified; all R1–R8 done; Phase 3 DoD complete

2026-05-31 13:16:19 +00:00

REVIEW-5.md

review(5): A5-7 CLOSED + §4 cron PASS + full gate M5 PASS @23:20Z

2026-06-01 23:21:45 +00:00

REVIEW-bsky.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-cf48.md

review(cf48): M1 PASS — NO COVERAGE LOST confirmed independently

2026-06-13 05:30:33 +00:00

REVIEW-cf55.md

review(cf55): M1 PASS + M2 NO COVERAGE LOST

2026-06-13 05:15:18 +00:00

REVIEW-cfold.md

review(cfold): M2 PASS full sweep green

2026-06-13 04:06:40 +00:00

REVIEW-conc.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-drone.md

review(drone): M2 PASS @2026-06-11T22:30Z — build #506 L5; bridge !testme verified; §7.1 signed

2026-06-11 22:27:45 +00:00

REVIEW-dstamp.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-kuma.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-lvl5.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-mailu.md

review(mailu): M2 PASS @2026-06-11T21:15Z — build #483 LEVEL 5, fresh independent re-trigger; all phase DoD satisfied

2026-06-11 21:16:27 +00:00

REVIEW-mirror.md

review(mirror): Ph4+Ph5 PASS @01:16Z — deploy verified, 3 new recipes triggered <60s

2026-06-02 01:11:45 +00:00

REVIEW-pvfix.md

review(cf48): M1 PASS — NO COVERAGE LOST confirmed independently

2026-06-13 05:30:33 +00:00

REVIEW-rcust.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW-regression.md

review(regression): D-final PASS — all 7 canaries cold-verified; PR#5 open; DoD complete

2026-06-02 03:37:18 +00:00

REVIEW-shot.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

REVIEW.md

review(1b): ✅ RL6 PASS + Adversary FINAL SIGN-OFF — git mv my REVIEW*.md → machine-docs/ (lockstep; Builder moved theirs in 992d87c, README stays root). Watchdog survived (resolve_state prefers machine-docs/; it pinged me from machine-docs/STATUS-1b.md). Refs re-verified (README+install.md updated; no .drone/flake/scripts refs; closure byte-identical 8i3jcad9 unaffected). ALL RL1-RL6 Adversary-PASS, no VETO — Builder cleared to write ## DONE

2026-05-27 22:56:25 +01:00

STATUS-1b.md

## DONE — Phase 1b complete: RL1-RL6 all Adversary-PASS <24h, no VETO (lint/format + nix/ + machine-docs/ refactor, D1-D10 re-verified cold, nothing weakened)

2026-05-27 22:57:44 +01:00

STATUS-1c.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00

STATUS-1d.md

status(1d): tidy ledger post-DONE (clear In-flight; settle DG6/DG7 lines)

2026-05-28 02:26:34 +01:00

STATUS-1e.md

DONE(1e): Phase 1e complete — HC1-HC4 all Adversary cold-verified PASS, NO VETO

2026-05-28 04:26:42 +01:00

STATUS-2.md

status(2): all 3 DONE-VETO upgrade-to-latest items Adversary-PASSED (ghost/discourse/mumble); remaining = plausible Q4.7b + drone Q4.10 + Q5; executing plausible

2026-05-31 05:27:18 +00:00

STATUS-2b.md

status(2b): ## DONE — B1-B4 all Adversary cold-PASS @05:38Z, no VETO

2026-05-31 05:38:52 +00:00

STATUS-2pc.md

status(2pc): ## DONE — Adversary PASS for PC1+PC2+PC3, F2pc-1 closed, no VETO

2026-05-29 09:53:30 +01:00

STATUS-2w.md

done(2w): Phase 2w COMPLETE — WC1-WC9 (incl WC1.1/WC1.2) all Adversary-verified, NO VETO

2026-05-29 04:48:02 +01:00

STATUS-3.md

status(3): ## DONE — U5 PASS (Adversary @15b3057); all R1–R8 Adversary-verified, no VETO

2026-05-31 13:17:44 +00:00

STATUS-5.md

status(5): ## DONE — all V1-V9 + §4 cron Adversary-verified PASS; cc-ci build complete

2026-06-01 23:22:24 +00:00

STATUS-bsky.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-cf48.md

claim(cf48): Opus 4.8 cold review matrix complete — NO COVERAGE LOST

2026-06-13 05:24:46 +00:00

STATUS-cf55.md

status(cf55): mark phase DONE — M1+M2 PASS, NO COVERAGE LOST

2026-06-13 05:16:04 +00:00

STATUS-cfold.md

status(cfold): mark phase done

2026-06-13 04:07:53 +00:00

STATUS-conc.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-drone.md

status(drone): ## DONE — M1+M2 PASS; build #506 L5; Adversary M2 PASS @2026-06-11T22:30Z

2026-06-11 22:29:02 +00:00

STATUS-dstamp.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-kuma.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-lvl5.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-mailu.md

status(mailu): ## DONE — M1+M2 PASS; PR#3 open for operator merge; builds #477+#483 both L5; backup/restore on /data+/mail proven; DEFERRED closed

2026-06-11 21:17:45 +00:00

STATUS-mirror.md

status(mirror): ## DONE — Ph0-Ph5 all Adversary-verified PASS @01:16Z

2026-06-02 01:14:05 +00:00

STATUS-pvfix.md

claim(pvfix-M1): proxy /16 patch + maintenance plan ready

2026-06-13 05:31:21 +00:00

STATUS-rcust.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS-regression.md

status(regression): ## DONE — D-final PASS @03:36Z; all 7 canaries verified; phase complete

2026-06-02 03:38:24 +00:00

STATUS-shot.md

machine-docs: move all per-phase coordination files out of repo root

2026-06-11 20:57:03 +00:00

STATUS.md

refactor(1b): RL6 — move Builder protocol files into machine-docs/ (README stays root)

2026-05-27 22:35:30 +01:00