test(rebuild): prove live recovery boundaries

[jyaunches]

Summary

This stacked draft turns the existing sandbox-rebuild live target into the rollout proof for both destructive recovery forks: recreation after durable deletion and adoption after unjournaled replacement creation. It uses the public rebuild command for both resumes and adds no workflow job or recovery engine. After review-driven fixture consolidation and the production defects found by the live test, the full PR is +1104/-193 (net +911), almost entirely test and fixture coverage; production code is +15/-9 (net +6) versus #6522.

Related Issue

Closes #6437.
Part of #6433.

Changes

• Add a fully guarded live-E2E pause immediately after the durable old_deleted transition while preserving the existing hermetic interruption points.
• Add a focused detached-process fixture that returns only after the CLI is SIGSTOPped, captures redacted artifacts, and verifies the subsequent SIGKILL.
• Extend the existing sandbox-rebuild target to recover two distinct generations on one provisioned sandbox, prove workspace restoration, both observed completions with latest-only durable tombstone semantics, host/runtime version agreement, exact registry/default ownership, and replacement adoption without another create/delete.
• Extend upgrade-sandboxes recovery coverage to prove an existing old_deleted transaction reaches completion through the installer runner and that a real unsupported transaction file blocks only its sandbox while an unrelated transaction completes; extract its shared harness so the prior monolith shrinks from 566 to 427 lines.
• Bound interrupted-process evidence to 256 KiB per stream plus a 16 KiB error tail, while preserving marker detection, redaction, and detached-group SIGKILL verification.
• Exclude display-only snapshotVersion metadata from durable backup receipt fingerprints; the live test proved that otherwise a process restart rejects its own valid old_deleted transaction before recovery.
• Recreate an absent old_deleted sandbox when the preserved registry row matches the transaction's normalized target; this remains a create path, not adoption, and still refuses uncorrelated live replacements.
• Treat only active records as interrupted recovery in the orchestrator so a later intentional rebuild replaces a completed tombstone with a new transaction generation; remove the now-redundant pre-prepare deletion reconciliation.
• Keep the 283-line recovery fixture separate because its stopped-child/SIGKILL/redaction/bounded-output contract is exercised hermetically by the support test; inlining those OS and secret-handling boundaries into the already large live scenario would remove that proof. Review reduced it from 387 lines and kept only process supervision plus allow-listed transaction/session evidence.
• Keep the current PR at production +15/-9 (net +6), tests +1085/-184 (net +901), and test-only config +4/-0; no workflow files change.
• Report the cumulative epic stack at production net +2055, tests net +3396, and total net +5459; Epic: make sandbox rebuild resumable across host-process interruption #6433 therefore still requires a concrete consolidation child before completion.

Type of Change

• Code change (feature, bug fix, or refactor)
• Code change with doc updates
• Doc only (prose changes, no code sample modifications)
• Doc only (includes code sample changes)

Quality Gates

• Tests added or updated for changed behavior
• Existing tests cover changed behavior — justification:
• Tests not applicable — justification:
• Docs updated for user-facing behavior changes
• Docs not applicable — justification: the public interface and configuration are unchanged; this corrects internal durable-recovery fingerprinting and adds repository test coverage.
• Sensitive paths changed (security, policy, credentials, preflight, onboarding, inference, runner, sandbox, or messaging)
• Sensitive-path review completed or maintainer-approved waiver recorded — reviewer/approval link/justification: pending automated and human review on this draft.
• Non-success, skipped, or missing CI check accepted by maintainer — check name, approval link, and follow-up issue:

Verification

• PR description includes the DCO sign-off declaration and every commit appears as Verified in GitHub
• Normal pre-commit, commit-msg, and pre-push hooks passed, or npm run check:diff passed when hooks were skipped or unavailable
• Targeted behavior tests pass for the current change set, or tests are marked not applicable above — npm run typecheck:cli; 78 focused CLI tests; 43 E2E-support tests; 6 process-death integration tests; npm run test:projects:check; npm run test:titles:check.
• Applicable broad gate passed — npm test for broad runtime/test-harness changes; npm run check for repo-wide validation/coverage changes — not claimed: npm run test:fast deterministically loses the generated oclif manifest after clean:cli on both this branch and exact base refactor(rebuild): resume transaction-owned replacements #6522; a build-first local pass reached 8510/8533 with the remaining failures attributable to local macOS/PyYAML prerequisites and parallel five-second timeouts. Required CI remains authoritative.
• Quality Gates section completed with required justifications or waivers
• No secrets, API keys, or credentials committed
• npm run docs builds without warnings (doc changes only)
• Doc pages follow the style guide (doc changes only)
• New doc pages include SPDX header and frontmatter (new pages only)

---

Signed-off-by: Julie Yaunches jyaunches@nvidia.com

[copy-pr-bot]

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: d8e9d371-b77b-49f0-beb2-b22404dcaf2d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch test/6437-rebuild-live-recovery

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

PR Review Advisor — No blocking findings

Merge posture: No blocking advisor findings
Primary next action: Add or justify PRA-T1 and any related test follow-ups.
Open items: 0 required · 0 warnings · 0 suggestions · 8 test follow-ups
Since last review: 1 prior item resolved · 0 still apply · 0 new items found

Action checklist

• PRA-T1 Add or justify test follow-up: Runtime validation
• PRA-T2 Add or justify test follow-up: Runtime validation
• PRA-T3 Add or justify test follow-up: Runtime validation
• PRA-T4 Add or justify test follow-up: Runtime validation
• PRA-T5 Add or justify test follow-up: Runtime validation
• PRA-T6 Add or justify test follow-up: Acceptance clause
• PRA-T7 Add or justify test follow-up: Acceptance clause
• PRA-T8 Add or justify test follow-up: Acceptance clause

Test follow-ups to resolve or justify

If these cover changed behavior, prefer adding them in this PR; otherwise state why existing coverage is enough or link the follow-up.

• PRA-T1 Runtime validation — Run the `onboard-repair` E2E job for Onboarding and sandbox state must converge across persisted metadata, reported status, and the live runtime. Matched files: `src/lib/actions/sandbox/rebuild-destroy-phase.ts`, `src/lib/actions/sandbox/rebuild-e2e-interruption.ts`, `src/lib/actions/sandbox/rebuild-pipeline.ts`, `src/lib/actions/sandbox/rebuild-recovery-orchestrator.ts`, `src/lib/actions/sandbox/rebuild-recovery.ts`.. Deterministic regression risks require live validation: lifecycle-state, upgrade-rebuild. Deterministic regression risks cover lifecycle-state and upgrade-rebuild. The diff contains strong unit/support/live-target test evidence for changed invariants, but the risk plan still requires runtime validation as the validation floor; this review does not claim those jobs ran.
• PRA-T2 Runtime validation — Run the `onboard-repair` E2E job to validate onboarding/sandbox state convergence across persisted metadata, reported status, and live runtime after rebuild recovery changes.. Deterministic regression risks require live validation: lifecycle-state, upgrade-rebuild. Deterministic regression risks cover lifecycle-state and upgrade-rebuild. The diff contains strong unit/support/live-target test evidence for changed invariants, but the risk plan still requires runtime validation as the validation floor; this review does not claim those jobs ran.
• PRA-T3 Runtime validation — Run the `onboard-resume` E2E job for Onboarding and sandbox state must converge across persisted metadata, reported status, and the live runtime. Matched files: `src/lib/actions/sandbox/rebuild-destroy-phase.ts`, `src/lib/actions/sandbox/rebuild-e2e-interruption.ts`, `src/lib/actions/sandbox/rebuild-pipeline.ts`, `src/lib/actions/sandbox/rebuild-recovery-orchestrator.ts`, `src/lib/actions/sandbox/rebuild-recovery.ts`.. Deterministic regression risks require live validation: lifecycle-state, upgrade-rebuild. Deterministic regression risks cover lifecycle-state and upgrade-rebuild. The diff contains strong unit/support/live-target test evidence for changed invariants, but the risk plan still requires runtime validation as the validation floor; this review does not claim those jobs ran.
• PRA-T4 Runtime validation — Run the `onboard-resume` E2E job to validate partial failure and retry convergence without ghost resources or stale ports after rebuild recovery changes.. Deterministic regression risks require live validation: lifecycle-state, upgrade-rebuild. Deterministic regression risks cover lifecycle-state and upgrade-rebuild. The diff contains strong unit/support/live-target test evidence for changed invariants, but the risk plan still requires runtime validation as the validation floor; this review does not claim those jobs ran.
• PRA-T5 Runtime validation — Run the `state-backup-restore` E2E job for Upgrade, rebuild, snapshot, and restore operations must preserve user state while replacing stale runtime state. Matched files: `src/lib/actions/sandbox/rebuild-destroy-phase.ts`, `src/lib/actions/sandbox/rebuild-e2e-interruption.ts`, `src/lib/actions/sandbox/rebuild-pipeline.ts`, `src/lib/actions/sandbox/rebuild-recovery-orchestrator.ts`, `src/lib/actions/sandbox/rebuild-recovery.ts`.. Deterministic regression risks require live validation: lifecycle-state, upgrade-rebuild. Deterministic regression risks cover lifecycle-state and upgrade-rebuild. The diff contains strong unit/support/live-target test evidence for changed invariants, but the risk plan still requires runtime validation as the validation floor; this review does not claim those jobs ran.
• PRA-T6 Acceptance clause — Existing uninterrupted live rebuild and stale-upgrade coverage remains green. — add test evidence or identify existing coverage. This advisor did not evaluate external CI/E2E status or claim those jobs ran.
• PRA-T7 Acceptance clause — `npm run test:fast`, targeted integration/E2E support tests, `npm run typecheck:cli`, and repository checks pass. — add test evidence or identify existing coverage. This advisor did not execute package-manager commands or inspect external check status.
• PRA-T8 Acceptance clause — The authorized live target passes with `NEMOCLAW_RUN_LIVE_E2E=1 npx vitest run --project e2e-live test/e2e/live/sandbox-rebuild.test.ts`. — add test evidence or identify existing coverage. The diff adds/updates the live target behavior, but this advisor did not run the authorized live command or evaluate external results.

Workflow run details

This is an automated, non-binding review; it still expects maintainers and agents to respond to each required or warning item. Treat suggestions as current-PR improvements when they touch changed code; defer only with maintainer rationale or a linked follow-up. A human maintainer must make the final merge decision.

[github-actions]

E2E Advisor Recommendation

Required E2E: onboard-repair, onboard-resume, state-backup-restore, upgrade-stale-sandbox, sandbox-rebuild
Optional E2E: rebuild-openclaw

Dispatch hint: onboard-repair,onboard-resume,state-backup-restore,upgrade-stale-sandbox,sandbox-rebuild

Workflow run

Full advisor summary

E2E Recommendation Advisor

Base: origin/refactor/6436-rebuild-replacement-recovery
Head: HEAD
Confidence: high

Required E2E

• onboard-repair (live Docker/OpenShell hosted-inference E2E): Required by the deterministic risk plan for lifecycle-state convergence: persisted metadata, status, and live runtime must repair consistently after partial lifecycle failures.
• onboard-resume (live Docker/OpenShell hosted-inference E2E): Required by the deterministic risk plan for lifecycle-state resume behavior after interrupted state transitions.
• state-backup-restore (live Docker/OpenShell hosted-inference E2E): Required by the deterministic risk plan for upgrade/rebuild preservation paths; the PR changes backup manifest fingerprinting and recovery inputs used to restore state after sandbox replacement.
• upgrade-stale-sandbox (live Docker/OpenShell hosted-inference E2E): Required by the deterministic risk plan for upgrade/rebuild flows; the PR changes upgrade-sandboxes recovery handoff and stale/non-ready sandbox rebuild recovery behavior.
• sandbox-rebuild (live Docker/OpenShell hosted-inference E2E): Directly required because the PR changes sandbox rebuild transaction boundaries, process-death interruption hooks, recovery/adoption decisions, and the live sandbox-rebuild test itself. This job validates the real destructive rebuild recovery flow against Docker/OpenShell.

Optional E2E

• rebuild-openclaw (live Docker/OpenShell hosted-inference E2E): Useful adjacent confidence for the ordinary OpenClaw rebuild path outside the new process-death recovery scenario, because rebuild-pipeline and transaction coordination changed.

New E2E recommendations

• None.

Dispatch hint

• Workflow: .github/workflows/e2e.yaml
• jobs input: onboard-repair,onboard-resume,state-backup-restore,upgrade-stale-sandbox,sandbox-rebuild

[github-actions]

E2E Target Recommendation

Required E2E targets: onboard-repair, onboard-resume, state-backup-restore, upgrade-stale-sandbox, sandbox-rebuild, e2e-all
Optional E2E targets: None

Dispatch required E2E targets:

• gh workflow run e2e.yaml --ref <pr-head-ref> --field jobs=onboard-repair
• gh workflow run e2e.yaml --ref <pr-head-ref> --field jobs=onboard-resume
• gh workflow run e2e.yaml --ref <pr-head-ref> --field jobs=state-backup-restore
• gh workflow run e2e.yaml --ref <pr-head-ref> --field jobs=upgrade-stale-sandbox
• gh workflow run e2e.yaml --ref <pr-head-ref> --field jobs=sandbox-rebuild
• gh workflow run e2e.yaml --ref <pr-head-ref>

Workflow run

Full E2E target advisor summary

E2E Target Advisor

Base: origin/refactor/6436-rebuild-replacement-recovery
Head: HEAD
Confidence: high

Required E2E targets

• onboard-repair: Onboarding and sandbox state must converge across persisted metadata, reported status, and the live runtime.
  • Dispatch: gh workflow run e2e.yaml --ref <pr-head-ref> --field jobs=onboard-repair
• onboard-resume: Onboarding and sandbox state must converge across persisted metadata, reported status, and the live runtime.
  • Dispatch: gh workflow run e2e.yaml --ref <pr-head-ref> --field jobs=onboard-resume
• state-backup-restore: Upgrade, rebuild, snapshot, and restore operations must preserve user state while replacing stale runtime state.
  • Dispatch: gh workflow run e2e.yaml --ref <pr-head-ref> --field jobs=state-backup-restore
• upgrade-stale-sandbox: Upgrade, rebuild, snapshot, and restore operations must preserve user state while replacing stale runtime state.
  • Dispatch: gh workflow run e2e.yaml --ref <pr-head-ref> --field jobs=upgrade-stale-sandbox
• sandbox-rebuild: Focused free-standing E2E job wired for changed live test test/e2e/live/sandbox-rebuild.test.ts.
  • Dispatch: gh workflow run e2e.yaml --ref <pr-head-ref> --field jobs=sandbox-rebuild
• e2e-all: Shared E2E target fixtures/support changed, including state-validation helpers and rebuild-recovery fixtures, so the full supported E2E target fan-out is required as the safe coverage floor.
  • Dispatch: gh workflow run e2e.yaml --ref <pr-head-ref>

Optional E2E targets

• None.

Relevant changed files

• src/lib/actions/sandbox/rebuild-destroy-phase.ts
• src/lib/actions/sandbox/rebuild-e2e-interruption.ts
• src/lib/actions/sandbox/rebuild-pipeline.ts
• src/lib/actions/sandbox/rebuild-recovery-orchestrator.ts
• src/lib/actions/sandbox/rebuild-recovery.ts
• src/lib/actions/sandbox/rebuild-transaction-coordinator.ts
• test/e2e/fixtures/phases/state-validation.ts
• test/e2e/fixtures/rebuild-recovery.ts
• test/e2e/live/sandbox-rebuild.test.ts
• test/e2e/support/rebuild-recovery.test.ts
• src/lib/actions/upgrade-sandboxes-recovery.test-support.ts

[github-actions]

PR Review Advisor (Nemotron Ultra) — Informational

Merge posture: Informational / low confidence
Primary next action: Resolve or justify PRA-1: PR review advisor unavailable.
Open items: 0 required · 1 warning · 0 suggestions · 4 test follow-ups
Top item: PR review advisor unavailable

Action checklist

• PRA-1 Resolve or justify: PR review advisor unavailable
• PRA-T1 Add or justify test follow-up: Runtime validation
• PRA-T2 Add or justify test follow-up: Runtime validation
• PRA-T3 Add or justify test follow-up: Runtime validation
• PRA-T4 Add or justify test follow-up: Runtime validation

Findings index

ID	Severity	Category	Location	Required action
PRA-1	Resolve/justify	correctness	—	Re-run the PR Review Advisor or perform a manual review.

Review findings by urgency: 0 required fixes, 1 item to resolve/justify, 0 in-scope improvements

⚠️ Resolve or justify before merge

Investigate these in the current review; either fix them, explain why they are not applicable, or document the accepted risk.

PRA-1 Resolve/justify — PR review advisor unavailable

• Location: not file-specific
• Category: correctness
• Problem: The automated advisor could not complete: PR review advisor SDK execution failed: session: scope-risk-map called pr_review_update_ledger before analysis; turn: scope-risk-map: scope-risk-map called pr_review_update_ledger before analysis
• Impact: Automated review evidence is incomplete, so human review must cover the changed code manually.
• Recommended action: Re-run the PR Review Advisor or perform a manual review.
• Expected follow-up: Resolve in this PR or explain why the risk is acceptable.
• Verification: Inspect the workflow logs and raw advisor artifact for the execution failure.
• Missing regression test: No regression test recommendation is available because the advisor did not complete.
• Done when: The risk is fixed or explicitly justified in the PR. Verification: Inspect the workflow logs and raw advisor artifact for the execution failure.
• Evidence: PR review advisor SDK execution failed: session: scope-risk-map called pr_review_update_ledger before analysis; turn: scope-risk-map: scope-risk-map called pr_review_update_ledger before analysis

💡 In-scope improvements

These are lower-risk, not throwaway. Prefer fixing them in this PR when they are local to changed code; defer only with rationale or a linked follow-up.

• None.

Test follow-ups to resolve or justify

If these cover changed behavior, prefer adding them in this PR; otherwise state why existing coverage is enough or link the follow-up.

• PRA-T1 Runtime validation — Run the `onboard-repair` E2E job for Onboarding and sandbox state must converge across persisted metadata, reported status, and the live runtime. Matched files: `src/lib/actions/sandbox/rebuild-destroy-phase.ts`, `src/lib/actions/sandbox/rebuild-e2e-interruption.ts`, `src/lib/actions/sandbox/rebuild-pipeline.ts`, `src/lib/actions/sandbox/rebuild-recovery-orchestrator.ts`, `src/lib/actions/sandbox/rebuild-recovery.ts`.. Deterministic regression risks require live validation: lifecycle-state, upgrade-rebuild.
• PRA-T2 Runtime validation — Run the `onboard-resume` E2E job for Onboarding and sandbox state must converge across persisted metadata, reported status, and the live runtime. Matched files: `src/lib/actions/sandbox/rebuild-destroy-phase.ts`, `src/lib/actions/sandbox/rebuild-e2e-interruption.ts`, `src/lib/actions/sandbox/rebuild-pipeline.ts`, `src/lib/actions/sandbox/rebuild-recovery-orchestrator.ts`, `src/lib/actions/sandbox/rebuild-recovery.ts`.. Deterministic regression risks require live validation: lifecycle-state, upgrade-rebuild.
• PRA-T3 Runtime validation — Run the `state-backup-restore` E2E job for Upgrade, rebuild, snapshot, and restore operations must preserve user state while replacing stale runtime state. Matched files: `src/lib/actions/sandbox/rebuild-destroy-phase.ts`, `src/lib/actions/sandbox/rebuild-e2e-interruption.ts`, `src/lib/actions/sandbox/rebuild-pipeline.ts`, `src/lib/actions/sandbox/rebuild-recovery-orchestrator.ts`, `src/lib/actions/sandbox/rebuild-recovery.ts`.. Deterministic regression risks require live validation: lifecycle-state, upgrade-rebuild.
• PRA-T4 Runtime validation — Run the `upgrade-stale-sandbox` E2E job for Upgrade, rebuild, snapshot, and restore operations must preserve user state while replacing stale runtime state. Matched files: `src/lib/actions/sandbox/rebuild-destroy-phase.ts`, `src/lib/actions/sandbox/rebuild-e2e-interruption.ts`, `src/lib/actions/sandbox/rebuild-pipeline.ts`, `src/lib/actions/sandbox/rebuild-recovery-orchestrator.ts`, `src/lib/actions/sandbox/rebuild-recovery.ts`.. Deterministic regression risks require live validation: lifecycle-state, upgrade-rebuild.

Workflow run details

This is an automated, non-binding review; it still expects maintainers and agents to respond to each required or warning item. Treat suggestions as current-PR improvements when they touch changed code; defer only with maintainer rationale or a linked follow-up. A human maintainer must make the final merge decision.

[github-code-quality]

Code Coverage Overview

Languages: TypeScript

TypeScript / code-coverage/plugin

The overall coverage remains at 96%, unchanged from the refactor/6436-rebuil... branch.

TypeScript / code-coverage/cli

The overall coverage in the test/6437-rebuild-li... branch is 76%. The coverage in the refactor/6436-rebuil... branch is 77%.

Show a code coverage summary of the most impacted files.

File	refactor/6436-rebuil... 0d2aca4	test/6437-rebuild-li... b66fdb3	+/-
src/lib/inference/vllm.ts	76%	41%	-35%
src/lib/actions...ess-recovery.ts	79%	64%	-15%
src/lib/sandbox/config.ts	52%	61%	+9%
src/lib/inferen...board-probes.ts	84%	95%	+11%
src/lib/state/r...-transaction.ts	0%	96%	+96%
src/lib/actions...-coordinator.ts	0%	96%	+96%
src/lib/actions...orchestrator.ts	0%	96%	+96%
src/lib/actions...ild-recovery.ts	0%	100%	+100%
src/lib/rebuild-correlation.ts	0%	100%	+100%
src/lib/actions...test-support.ts	0%	100%	+100%

---

_{Updated July 09, 2026 15:26 UTC
Code Coverage is in Public Preview. Learn more and provide us with your feedback.}

[github-actions]

E2E Target Results — ❌ Some jobs failed

Run: 29019873920
Workflow ref: test/6437-rebuild-live-recovery
Requested targets: (default — all supported)
Requested jobs: (default — all default-enabled free-standing jobs; explicit-only jobs openshell-gateway-auth-contract, mcp-bridge-dev, hermes-gpu-startup, sandbox-rlimits-connect, and jetson-nvmap-gpu are skipped unless selected)
Summary: 7 passed, 1 failed, 62 cancelled, 5 skipped

Job	Result
agent-turn-latency	⚠️ cancelled
bedrock-runtime-compatible-anthropic	⚠️ cancelled
brave-search	✅ success
channels-add-remove	⚠️ cancelled
channels-stop-start	⚠️ cancelled
cloud-inference	⚠️ cancelled
cloud-onboard	⚠️ cancelled
common-egress-agent	⚠️ cancelled
concurrent-gateway-ports	⚠️ cancelled
credential-migration	⚠️ cancelled
credential-sanitization	⚠️ cancelled
cron-preflight-inference-local	⚠️ cancelled
device-auth-health	⚠️ cancelled
diagnostics	⚠️ cancelled
docs-validation	✅ success
double-onboard	⚠️ cancelled
full-e2e	⚠️ cancelled
gateway-drift-preflight	⚠️ cancelled
gateway-guard-recovery	⚠️ cancelled
gateway-health-honest	⚠️ cancelled
generate-matrix	✅ success
gpu-double-onboard	⚠️ cancelled
gpu-e2e	⚠️ cancelled
hermes-dashboard	⚠️ cancelled
hermes-discord	⚠️ cancelled
hermes-e2e	⚠️ cancelled
hermes-gpu-startup	⏭️ skipped
hermes-inference-switch	⚠️ cancelled
hermes-shields-config	⚠️ cancelled
hermes-slack	✅ success
inference-routing	⚠️ cancelled
issue-2478-crash-loop-recovery	⚠️ cancelled
issue-4434-tui-unreachable-inference	✅ success
issue-4462-scope-upgrade-approval	⚠️ cancelled
jetson-nvmap-gpu	⏭️ skipped
kimi-inference-compat	❌ failure
launchable-smoke	⚠️ cancelled
live	⚠️ cancelled
mcp-bridge	⚠️ cancelled
mcp-bridge-dev	⏭️ skipped
messaging-compatible-endpoint	⚠️ cancelled
messaging-providers	⚠️ cancelled
model-router-provider-routed-inference	⚠️ cancelled
network-policy	⚠️ cancelled
ollama-auth-proxy	⚠️ cancelled
onboard-negative-paths	✅ success
onboard-repair	⚠️ cancelled
onboard-resume	⚠️ cancelled
openclaw-discord-pairing	⚠️ cancelled
openclaw-inference-switch	⚠️ cancelled
openclaw-skill-cli	⚠️ cancelled
openclaw-slack-pairing	⚠️ cancelled
openclaw-tui-chat-correlation	⚠️ cancelled
openshell-gateway-auth-contract	⏭️ skipped
openshell-gateway-upgrade	⚠️ cancelled
openshell-version-pin	⚠️ cancelled
overlayfs-autofix	✅ success
rebuild-hermes	⚠️ cancelled
rebuild-hermes-stale-base	⚠️ cancelled
rebuild-openclaw	⚠️ cancelled
sandbox-operations	⚠️ cancelled
sandbox-rebuild	⚠️ cancelled
sandbox-rlimits-connect	⏭️ skipped
sandbox-survival	⚠️ cancelled
security-posture	⚠️ cancelled
sessions-agents-cli	⚠️ cancelled
shields-config	⚠️ cancelled
skill-agent	⚠️ cancelled
snapshot-commands	⚠️ cancelled
spark-install	⚠️ cancelled
state-backup-restore	⚠️ cancelled
telegram-injection	⚠️ cancelled
token-rotation	⚠️ cancelled
tunnel-lifecycle	⚠️ cancelled
upgrade-stale-sandbox	⚠️ cancelled

Explicit-only jobs skipped: openshell-gateway-auth-contract (default dispatch excludes the resource-heavy OpenShell auth-contract probe unless selected; validate with jobs=openshell-gateway-auth-contract or targets=openshell-gateway-auth-contract), mcp-bridge-dev (default dispatch excludes moving OpenShell dev artifacts unless explicitly selected; validate with jobs=mcp-bridge-dev or targets=mcp-bridge-dev), hermes-gpu-startup (default dispatch excludes this explicit-only job unless selected; validate with jobs=hermes-gpu-startup or targets=hermes-gpu-startup), sandbox-rlimits-connect (default dispatch excludes the destructive rlimit fork/connect probe unless selected; validate with jobs=sandbox-rlimits-connect or targets=sandbox-rlimits-connect), jetson-nvmap-gpu (default dispatch excludes Jetson until a stable Jetson runner is available; validate with jobs=jetson-nvmap-gpu or targets=jetson-nvmap-gpu).

Failed jobs: kimi-inference-compat. Check run artifacts for logs.

[github-actions]

E2E Target Results — ⚠️ Run cancelled — no signal

Run: 29021921207
Workflow ref: test/6437-rebuild-live-recovery
Requested targets: (default — all supported)
Requested jobs: (default — all default-enabled free-standing jobs; explicit-only jobs openshell-gateway-auth-contract, mcp-bridge-dev, hermes-gpu-startup, sandbox-rlimits-connect, and jetson-nvmap-gpu are skipped unless selected)
Summary: 0 passed, 0 failed, 75 cancelled, 0 skipped

Job	Result
agent-turn-latency	⚠️ cancelled
bedrock-runtime-compatible-anthropic	⚠️ cancelled
brave-search	⚠️ cancelled
channels-add-remove	⚠️ cancelled
channels-stop-start	⚠️ cancelled
cloud-inference	⚠️ cancelled
cloud-onboard	⚠️ cancelled
common-egress-agent	⚠️ cancelled
concurrent-gateway-ports	⚠️ cancelled
credential-migration	⚠️ cancelled
credential-sanitization	⚠️ cancelled
cron-preflight-inference-local	⚠️ cancelled
device-auth-health	⚠️ cancelled
diagnostics	⚠️ cancelled
docs-validation	⚠️ cancelled
double-onboard	⚠️ cancelled
full-e2e	⚠️ cancelled
gateway-drift-preflight	⚠️ cancelled
gateway-guard-recovery	⚠️ cancelled
gateway-health-honest	⚠️ cancelled
generate-matrix	⚠️ cancelled
gpu-double-onboard	⚠️ cancelled
gpu-e2e	⚠️ cancelled
hermes-dashboard	⚠️ cancelled
hermes-discord	⚠️ cancelled
hermes-e2e	⚠️ cancelled
hermes-gpu-startup	⚠️ cancelled
hermes-inference-switch	⚠️ cancelled
hermes-shields-config	⚠️ cancelled
hermes-slack	⚠️ cancelled
inference-routing	⚠️ cancelled
issue-2478-crash-loop-recovery	⚠️ cancelled
issue-4434-tui-unreachable-inference	⚠️ cancelled
issue-4462-scope-upgrade-approval	⚠️ cancelled
jetson-nvmap-gpu	⚠️ cancelled
kimi-inference-compat	⚠️ cancelled
launchable-smoke	⚠️ cancelled
live	⚠️ cancelled
mcp-bridge	⚠️ cancelled
mcp-bridge-dev	⚠️ cancelled
messaging-compatible-endpoint	⚠️ cancelled
messaging-providers	⚠️ cancelled
model-router-provider-routed-inference	⚠️ cancelled
network-policy	⚠️ cancelled
ollama-auth-proxy	⚠️ cancelled
onboard-negative-paths	⚠️ cancelled
onboard-repair	⚠️ cancelled
onboard-resume	⚠️ cancelled
openclaw-discord-pairing	⚠️ cancelled
openclaw-inference-switch	⚠️ cancelled
openclaw-skill-cli	⚠️ cancelled
openclaw-slack-pairing	⚠️ cancelled
openclaw-tui-chat-correlation	⚠️ cancelled
openshell-gateway-auth-contract	⚠️ cancelled
openshell-gateway-upgrade	⚠️ cancelled
openshell-version-pin	⚠️ cancelled
overlayfs-autofix	⚠️ cancelled
rebuild-hermes	⚠️ cancelled
rebuild-hermes-stale-base	⚠️ cancelled
rebuild-openclaw	⚠️ cancelled
sandbox-operations	⚠️ cancelled
sandbox-rebuild	⚠️ cancelled
sandbox-rlimits-connect	⚠️ cancelled
sandbox-survival	⚠️ cancelled
security-posture	⚠️ cancelled
sessions-agents-cli	⚠️ cancelled
shields-config	⚠️ cancelled
skill-agent	⚠️ cancelled
snapshot-commands	⚠️ cancelled
spark-install	⚠️ cancelled
state-backup-restore	⚠️ cancelled
telegram-injection	⚠️ cancelled
token-rotation	⚠️ cancelled
tunnel-lifecycle	⚠️ cancelled
upgrade-stale-sandbox	⚠️ cancelled

Explicit-only jobs skipped: .

[github-actions]

E2E Target Results — ❌ Some jobs failed

Run: 29022741069
Workflow ref: test/6437-rebuild-live-recovery
Requested targets: (default — all supported)
Requested jobs: (default — all default-enabled free-standing jobs; explicit-only jobs openshell-gateway-auth-contract, mcp-bridge-dev, hermes-gpu-startup, sandbox-rlimits-connect, and jetson-nvmap-gpu are skipped unless selected)
Summary: 25 passed, 2 failed, 43 cancelled, 5 skipped

Job	Result
agent-turn-latency	⚠️ cancelled
bedrock-runtime-compatible-anthropic	✅ success
brave-search	✅ success
channels-add-remove	⚠️ cancelled
channels-stop-start	⚠️ cancelled
cloud-inference	✅ success
cloud-onboard	⚠️ cancelled
common-egress-agent	⚠️ cancelled
concurrent-gateway-ports	⚠️ cancelled
credential-migration	✅ success
credential-sanitization	✅ success
cron-preflight-inference-local	✅ success
device-auth-health	✅ success
diagnostics	⚠️ cancelled
docs-validation	✅ success
double-onboard	⚠️ cancelled
full-e2e	✅ success
gateway-drift-preflight	✅ success
gateway-guard-recovery	⚠️ cancelled
gateway-health-honest	✅ success
generate-matrix	✅ success
gpu-double-onboard	⚠️ cancelled
gpu-e2e	⚠️ cancelled
hermes-dashboard	⚠️ cancelled
hermes-discord	⚠️ cancelled
hermes-e2e	⚠️ cancelled
hermes-gpu-startup	⏭️ skipped
hermes-inference-switch	⚠️ cancelled
hermes-shields-config	⚠️ cancelled
hermes-slack	✅ success
inference-routing	✅ success
issue-2478-crash-loop-recovery	⚠️ cancelled
issue-4434-tui-unreachable-inference	✅ success
issue-4462-scope-upgrade-approval	⚠️ cancelled
jetson-nvmap-gpu	⏭️ skipped
kimi-inference-compat	❌ failure
launchable-smoke	⚠️ cancelled
live	✅ success
mcp-bridge	⚠️ cancelled
mcp-bridge-dev	⏭️ skipped
messaging-compatible-endpoint	⚠️ cancelled
messaging-providers	⚠️ cancelled
model-router-provider-routed-inference	⚠️ cancelled
network-policy	⚠️ cancelled
ollama-auth-proxy	✅ success
onboard-negative-paths	✅ success
onboard-repair	⚠️ cancelled
onboard-resume	✅ success
openclaw-discord-pairing	⚠️ cancelled
openclaw-inference-switch	⚠️ cancelled
openclaw-skill-cli	⚠️ cancelled
openclaw-slack-pairing	⚠️ cancelled
openclaw-tui-chat-correlation	✅ success
openshell-gateway-auth-contract	⏭️ skipped
openshell-gateway-upgrade	⚠️ cancelled
openshell-version-pin	✅ success
overlayfs-autofix	✅ success
rebuild-hermes	⚠️ cancelled
rebuild-hermes-stale-base	⚠️ cancelled
rebuild-openclaw	⚠️ cancelled
sandbox-operations	⚠️ cancelled
sandbox-rebuild	❌ failure
sandbox-rlimits-connect	⏭️ skipped
sandbox-survival	⚠️ cancelled
security-posture	⚠️ cancelled
sessions-agents-cli	⚠️ cancelled
shields-config	⚠️ cancelled
skill-agent	✅ success
snapshot-commands	✅ success
spark-install	✅ success
state-backup-restore	⚠️ cancelled
telegram-injection	⚠️ cancelled
token-rotation	⚠️ cancelled
tunnel-lifecycle	⚠️ cancelled
upgrade-stale-sandbox	⚠️ cancelled

Explicit-only jobs skipped: openshell-gateway-auth-contract (default dispatch excludes the resource-heavy OpenShell auth-contract probe unless selected; validate with jobs=openshell-gateway-auth-contract or targets=openshell-gateway-auth-contract), mcp-bridge-dev (default dispatch excludes moving OpenShell dev artifacts unless explicitly selected; validate with jobs=mcp-bridge-dev or targets=mcp-bridge-dev), hermes-gpu-startup (default dispatch excludes this explicit-only job unless selected; validate with jobs=hermes-gpu-startup or targets=hermes-gpu-startup), sandbox-rlimits-connect (default dispatch excludes the destructive rlimit fork/connect probe unless selected; validate with jobs=sandbox-rlimits-connect or targets=sandbox-rlimits-connect), jetson-nvmap-gpu (default dispatch excludes Jetson until a stable Jetson runner is available; validate with jobs=jetson-nvmap-gpu or targets=jetson-nvmap-gpu).

Failed jobs: kimi-inference-compat, sandbox-rebuild. Check run artifacts for logs.

[github-actions]

E2E Target Results — ⚠️ Some jobs cancelled — partial pass

Run: 29023535211
Workflow ref: test/6437-rebuild-live-recovery
Requested targets: (default — all supported)
Requested jobs: (default — all default-enabled free-standing jobs; explicit-only jobs openshell-gateway-auth-contract, mcp-bridge-dev, hermes-gpu-startup, sandbox-rlimits-connect, and jetson-nvmap-gpu are skipped unless selected)
Summary: 1 passed, 0 failed, 69 cancelled, 5 skipped

Job	Result
agent-turn-latency	⚠️ cancelled
bedrock-runtime-compatible-anthropic	⚠️ cancelled
brave-search	⚠️ cancelled
channels-add-remove	⚠️ cancelled
channels-stop-start	⚠️ cancelled
cloud-inference	⚠️ cancelled
cloud-onboard	⚠️ cancelled
common-egress-agent	⚠️ cancelled
concurrent-gateway-ports	⚠️ cancelled
credential-migration	⚠️ cancelled
credential-sanitization	⚠️ cancelled
cron-preflight-inference-local	⚠️ cancelled
device-auth-health	⚠️ cancelled
diagnostics	⚠️ cancelled
docs-validation	⚠️ cancelled
double-onboard	⚠️ cancelled
full-e2e	⚠️ cancelled
gateway-drift-preflight	⚠️ cancelled
gateway-guard-recovery	⚠️ cancelled
gateway-health-honest	⚠️ cancelled
generate-matrix	✅ success
gpu-double-onboard	⚠️ cancelled
gpu-e2e	⚠️ cancelled
hermes-dashboard	⚠️ cancelled
hermes-discord	⚠️ cancelled
hermes-e2e	⚠️ cancelled
hermes-gpu-startup	⏭️ skipped
hermes-inference-switch	⚠️ cancelled
hermes-shields-config	⚠️ cancelled
hermes-slack	⚠️ cancelled
inference-routing	⚠️ cancelled
issue-2478-crash-loop-recovery	⚠️ cancelled
issue-4434-tui-unreachable-inference	⚠️ cancelled
issue-4462-scope-upgrade-approval	⚠️ cancelled
jetson-nvmap-gpu	⏭️ skipped
kimi-inference-compat	⚠️ cancelled
launchable-smoke	⚠️ cancelled
live	⚠️ cancelled
mcp-bridge	⚠️ cancelled
mcp-bridge-dev	⏭️ skipped
messaging-compatible-endpoint	⚠️ cancelled
messaging-providers	⚠️ cancelled
model-router-provider-routed-inference	⚠️ cancelled
network-policy	⚠️ cancelled
ollama-auth-proxy	⚠️ cancelled
onboard-negative-paths	⚠️ cancelled
onboard-repair	⚠️ cancelled
onboard-resume	⚠️ cancelled
openclaw-discord-pairing	⚠️ cancelled
openclaw-inference-switch	⚠️ cancelled
openclaw-skill-cli	⚠️ cancelled
openclaw-slack-pairing	⚠️ cancelled
openclaw-tui-chat-correlation	⚠️ cancelled
openshell-gateway-auth-contract	⏭️ skipped
openshell-gateway-upgrade	⚠️ cancelled
openshell-version-pin	⚠️ cancelled
overlayfs-autofix	⚠️ cancelled
rebuild-hermes	⚠️ cancelled
rebuild-hermes-stale-base	⚠️ cancelled
rebuild-openclaw	⚠️ cancelled
sandbox-operations	⚠️ cancelled
sandbox-rebuild	⚠️ cancelled
sandbox-rlimits-connect	⏭️ skipped
sandbox-survival	⚠️ cancelled
security-posture	⚠️ cancelled
sessions-agents-cli	⚠️ cancelled
shields-config	⚠️ cancelled
skill-agent	⚠️ cancelled
snapshot-commands	⚠️ cancelled
spark-install	⚠️ cancelled
state-backup-restore	⚠️ cancelled
telegram-injection	⚠️ cancelled
token-rotation	⚠️ cancelled
tunnel-lifecycle	⚠️ cancelled
upgrade-stale-sandbox	⚠️ cancelled

Explicit-only jobs skipped: openshell-gateway-auth-contract (default dispatch excludes the resource-heavy OpenShell auth-contract probe unless selected; validate with jobs=openshell-gateway-auth-contract or targets=openshell-gateway-auth-contract), mcp-bridge-dev (default dispatch excludes moving OpenShell dev artifacts unless explicitly selected; validate with jobs=mcp-bridge-dev or targets=mcp-bridge-dev), hermes-gpu-startup (default dispatch excludes this explicit-only job unless selected; validate with jobs=hermes-gpu-startup or targets=hermes-gpu-startup), sandbox-rlimits-connect (default dispatch excludes the destructive rlimit fork/connect probe unless selected; validate with jobs=sandbox-rlimits-connect or targets=sandbox-rlimits-connect), jetson-nvmap-gpu (default dispatch excludes Jetson until a stable Jetson runner is available; validate with jobs=jetson-nvmap-gpu or targets=jetson-nvmap-gpu).

[github-actions]

E2E Target Results — ❌ Some jobs failed

Run: 29025419580
Workflow ref: test/6437-rebuild-live-recovery
Requested targets: (default — all supported)
Requested jobs: (default — all default-enabled free-standing jobs; explicit-only jobs openshell-gateway-auth-contract, mcp-bridge-dev, hermes-gpu-startup, sandbox-rlimits-connect, and jetson-nvmap-gpu are skipped unless selected)
Summary: 66 passed, 4 failed, 0 cancelled, 5 skipped

Job	Result
agent-turn-latency	✅ success
bedrock-runtime-compatible-anthropic	✅ success
brave-search	✅ success
channels-add-remove	✅ success
channels-stop-start	✅ success
cloud-inference	✅ success
cloud-onboard	✅ success
common-egress-agent	✅ success
concurrent-gateway-ports	✅ success
credential-migration	✅ success
credential-sanitization	✅ success
cron-preflight-inference-local	✅ success
device-auth-health	✅ success
diagnostics	✅ success
docs-validation	✅ success
double-onboard	✅ success
full-e2e	✅ success
gateway-drift-preflight	✅ success
gateway-guard-recovery	✅ success
gateway-health-honest	✅ success
generate-matrix	✅ success
gpu-double-onboard	✅ success
gpu-e2e	✅ success
hermes-dashboard	✅ success
hermes-discord	✅ success
hermes-e2e	✅ success
hermes-gpu-startup	⏭️ skipped
hermes-inference-switch	✅ success
hermes-shields-config	❌ failure
hermes-slack	✅ success
inference-routing	✅ success
issue-2478-crash-loop-recovery	✅ success
issue-4434-tui-unreachable-inference	✅ success
issue-4462-scope-upgrade-approval	✅ success
jetson-nvmap-gpu	⏭️ skipped
kimi-inference-compat	❌ failure
launchable-smoke	✅ success
live	✅ success
mcp-bridge	✅ success
mcp-bridge-dev	⏭️ skipped
messaging-compatible-endpoint	✅ success
messaging-providers	❌ failure
model-router-provider-routed-inference	✅ success
network-policy	✅ success
ollama-auth-proxy	✅ success
onboard-negative-paths	✅ success
onboard-repair	✅ success
onboard-resume	✅ success
openclaw-discord-pairing	✅ success
openclaw-inference-switch	✅ success
openclaw-skill-cli	✅ success
openclaw-slack-pairing	✅ success
openclaw-tui-chat-correlation	✅ success
openshell-gateway-auth-contract	⏭️ skipped
openshell-gateway-upgrade	✅ success
openshell-version-pin	✅ success
overlayfs-autofix	✅ success
rebuild-hermes	✅ success
rebuild-hermes-stale-base	✅ success
rebuild-openclaw	✅ success
sandbox-operations	✅ success
sandbox-rebuild	❌ failure
sandbox-rlimits-connect	⏭️ skipped
sandbox-survival	✅ success
security-posture	✅ success
sessions-agents-cli	✅ success
shields-config	✅ success
skill-agent	✅ success
snapshot-commands	✅ success
spark-install	✅ success
state-backup-restore	✅ success
telegram-injection	✅ success
token-rotation	✅ success
tunnel-lifecycle	✅ success
upgrade-stale-sandbox	✅ success

Explicit-only jobs skipped: openshell-gateway-auth-contract (default dispatch excludes the resource-heavy OpenShell auth-contract probe unless selected; validate with jobs=openshell-gateway-auth-contract or targets=openshell-gateway-auth-contract), mcp-bridge-dev (default dispatch excludes moving OpenShell dev artifacts unless explicitly selected; validate with jobs=mcp-bridge-dev or targets=mcp-bridge-dev), hermes-gpu-startup (default dispatch excludes this explicit-only job unless selected; validate with jobs=hermes-gpu-startup or targets=hermes-gpu-startup), sandbox-rlimits-connect (default dispatch excludes the destructive rlimit fork/connect probe unless selected; validate with jobs=sandbox-rlimits-connect or targets=sandbox-rlimits-connect), jetson-nvmap-gpu (default dispatch excludes Jetson until a stable Jetson runner is available; validate with jobs=jetson-nvmap-gpu or targets=jetson-nvmap-gpu).

Failed jobs: hermes-shields-config, kimi-inference-compat, messaging-providers, sandbox-rebuild. Check run artifacts for logs.

[github-actions]

E2E Target Results — ❌ Some jobs failed

Run: 29028975951
Workflow ref: test/6437-rebuild-live-recovery
Requested targets: (default — all supported)
Requested jobs: (default — all default-enabled free-standing jobs; explicit-only jobs openshell-gateway-auth-contract, mcp-bridge-dev, hermes-gpu-startup, sandbox-rlimits-connect, and jetson-nvmap-gpu are skipped unless selected)
Summary: 67 passed, 3 failed, 0 cancelled, 5 skipped

Job	Result
agent-turn-latency	✅ success
bedrock-runtime-compatible-anthropic	✅ success
brave-search	✅ success
channels-add-remove	✅ success
channels-stop-start	✅ success
cloud-inference	✅ success
cloud-onboard	✅ success
common-egress-agent	✅ success
concurrent-gateway-ports	✅ success
credential-migration	✅ success
credential-sanitization	✅ success
cron-preflight-inference-local	✅ success
device-auth-health	✅ success
diagnostics	✅ success
docs-validation	✅ success
double-onboard	✅ success
full-e2e	✅ success
gateway-drift-preflight	✅ success
gateway-guard-recovery	✅ success
gateway-health-honest	✅ success
generate-matrix	✅ success
gpu-double-onboard	✅ success
gpu-e2e	✅ success
hermes-dashboard	✅ success
hermes-discord	✅ success
hermes-e2e	✅ success
hermes-gpu-startup	⏭️ skipped
hermes-inference-switch	✅ success
hermes-shields-config	❌ failure
hermes-slack	✅ success
inference-routing	✅ success
issue-2478-crash-loop-recovery	✅ success
issue-4434-tui-unreachable-inference	✅ success
issue-4462-scope-upgrade-approval	✅ success
jetson-nvmap-gpu	⏭️ skipped
kimi-inference-compat	❌ failure
launchable-smoke	✅ success
live	✅ success
mcp-bridge	✅ success
mcp-bridge-dev	⏭️ skipped
messaging-compatible-endpoint	✅ success
messaging-providers	❌ failure
model-router-provider-routed-inference	✅ success
network-policy	✅ success
ollama-auth-proxy	✅ success
onboard-negative-paths	✅ success
onboard-repair	✅ success
onboard-resume	✅ success
openclaw-discord-pairing	✅ success
openclaw-inference-switch	✅ success
openclaw-skill-cli	✅ success
openclaw-slack-pairing	✅ success
openclaw-tui-chat-correlation	✅ success
openshell-gateway-auth-contract	⏭️ skipped
openshell-gateway-upgrade	✅ success
openshell-version-pin	✅ success
overlayfs-autofix	✅ success
rebuild-hermes	✅ success
rebuild-hermes-stale-base	✅ success
rebuild-openclaw	✅ success
sandbox-operations	✅ success
sandbox-rebuild	✅ success
sandbox-rlimits-connect	⏭️ skipped
sandbox-survival	✅ success
security-posture	✅ success
sessions-agents-cli	✅ success
shields-config	✅ success
skill-agent	✅ success
snapshot-commands	✅ success
spark-install	✅ success
state-backup-restore	✅ success
telegram-injection	✅ success
token-rotation	✅ success
tunnel-lifecycle	✅ success
upgrade-stale-sandbox	✅ success

Explicit-only jobs skipped: openshell-gateway-auth-contract (default dispatch excludes the resource-heavy OpenShell auth-contract probe unless selected; validate with jobs=openshell-gateway-auth-contract or targets=openshell-gateway-auth-contract), mcp-bridge-dev (default dispatch excludes moving OpenShell dev artifacts unless explicitly selected; validate with jobs=mcp-bridge-dev or targets=mcp-bridge-dev), hermes-gpu-startup (default dispatch excludes this explicit-only job unless selected; validate with jobs=hermes-gpu-startup or targets=hermes-gpu-startup), sandbox-rlimits-connect (default dispatch excludes the destructive rlimit fork/connect probe unless selected; validate with jobs=sandbox-rlimits-connect or targets=sandbox-rlimits-connect), jetson-nvmap-gpu (default dispatch excludes Jetson until a stable Jetson runner is available; validate with jobs=jetson-nvmap-gpu or targets=jetson-nvmap-gpu).

Failed jobs: hermes-shields-config, kimi-inference-compat, messaging-providers. Check run artifacts for logs.

[github-actions]

E2E Target Results — ❌ Some jobs failed

Run: 29028975951
Workflow ref: test/6437-rebuild-live-recovery
Requested targets: (default — all supported)
Requested jobs: (default — all default-enabled free-standing jobs; explicit-only jobs openshell-gateway-auth-contract, mcp-bridge-dev, hermes-gpu-startup, sandbox-rlimits-connect, and jetson-nvmap-gpu are skipped unless selected)
Summary: 67 passed, 3 failed, 0 cancelled, 5 skipped

Job	Result
agent-turn-latency	✅ success
bedrock-runtime-compatible-anthropic	✅ success
brave-search	✅ success
channels-add-remove	✅ success
channels-stop-start	✅ success
cloud-inference	✅ success
cloud-onboard	✅ success
common-egress-agent	✅ success
concurrent-gateway-ports	✅ success
credential-migration	✅ success
credential-sanitization	✅ success
cron-preflight-inference-local	✅ success
device-auth-health	✅ success
diagnostics	✅ success
docs-validation	✅ success
double-onboard	✅ success
full-e2e	✅ success
gateway-drift-preflight	✅ success
gateway-guard-recovery	✅ success
gateway-health-honest	✅ success
generate-matrix	✅ success
gpu-double-onboard	✅ success
gpu-e2e	✅ success
hermes-dashboard	✅ success
hermes-discord	✅ success
hermes-e2e	✅ success
hermes-gpu-startup	⏭️ skipped
hermes-inference-switch	✅ success
hermes-shields-config	❌ failure
hermes-slack	✅ success
inference-routing	✅ success
issue-2478-crash-loop-recovery	✅ success
issue-4434-tui-unreachable-inference	✅ success
issue-4462-scope-upgrade-approval	✅ success
jetson-nvmap-gpu	⏭️ skipped
kimi-inference-compat	❌ failure
launchable-smoke	✅ success
live	✅ success
mcp-bridge	✅ success
mcp-bridge-dev	⏭️ skipped
messaging-compatible-endpoint	✅ success
messaging-providers	❌ failure
model-router-provider-routed-inference	✅ success
network-policy	✅ success
ollama-auth-proxy	✅ success
onboard-negative-paths	✅ success
onboard-repair	✅ success
onboard-resume	✅ success
openclaw-discord-pairing	✅ success
openclaw-inference-switch	✅ success
openclaw-skill-cli	✅ success
openclaw-slack-pairing	✅ success
openclaw-tui-chat-correlation	✅ success
openshell-gateway-auth-contract	⏭️ skipped
openshell-gateway-upgrade	✅ success
openshell-version-pin	✅ success
overlayfs-autofix	✅ success
rebuild-hermes	✅ success
rebuild-hermes-stale-base	✅ success
rebuild-openclaw	✅ success
sandbox-operations	✅ success
sandbox-rebuild	✅ success
sandbox-rlimits-connect	⏭️ skipped
sandbox-survival	✅ success
security-posture	✅ success
sessions-agents-cli	✅ success
shields-config	✅ success
skill-agent	✅ success
snapshot-commands	✅ success
spark-install	✅ success
state-backup-restore	✅ success
telegram-injection	✅ success
token-rotation	✅ success
tunnel-lifecycle	✅ success
upgrade-stale-sandbox	✅ success

Explicit-only jobs skipped: openshell-gateway-auth-contract (default dispatch excludes the resource-heavy OpenShell auth-contract probe unless selected; validate with jobs=openshell-gateway-auth-contract or targets=openshell-gateway-auth-contract), mcp-bridge-dev (default dispatch excludes moving OpenShell dev artifacts unless explicitly selected; validate with jobs=mcp-bridge-dev or targets=mcp-bridge-dev), hermes-gpu-startup (default dispatch excludes this explicit-only job unless selected; validate with jobs=hermes-gpu-startup or targets=hermes-gpu-startup), sandbox-rlimits-connect (default dispatch excludes the destructive rlimit fork/connect probe unless selected; validate with jobs=sandbox-rlimits-connect or targets=sandbox-rlimits-connect), jetson-nvmap-gpu (default dispatch excludes Jetson until a stable Jetson runner is available; validate with jobs=jetson-nvmap-gpu or targets=jetson-nvmap-gpu).

Failed jobs: hermes-shields-config, kimi-inference-compat, messaging-providers. Check run artifacts for logs.

[jyaunches]

Closing this draft stack as requested while the broader human-and-agent lifecycle architecture is reconsidered.