Retire dead srv3 install/reconcile subgraph (shell→dag wave-2 §5.D)

dag/gunbc/ci_deploy_access_observe.dag

@@ -73,17 +73,13 @@ fn deploy_access_effect_is_typed_probe(effect: HostEffect) -> Bool {
     ShellCommand { script: _ } => false
     RedfishAction { action: _ } => false
     ConvergePlan { policy: _ } => false
-    Srv3InstallDiagnosticObserve { bmc: _, port: _, iso_path: _, iso_content_hash: _ } => false
     OsInstallActuatorToolchainEnsure {} => false
     ProvisionBuildCache { catalog_id: _ } => false
     SetHostnameCas { hostnamectl_path: _, base: _, desired: _ } => false
-    Srv3InstallReconcileObserve { include_git_meta: _ } => false
-    DurableApprovalGrantRecord => false
     DurableApprovalGrantRead => false
     Srv3InstallMediaFetch => false
     Srv3SeededInstallMediaRemaster => false
     Srv3SeededInstallMediaToolchainEnsure => false
-    Srv3SolConsoleCapture => false
     Srv3BmcwebSessionLogin => false
     Srv3BmcwebTokenExtract => false
     Srv3NbdProxyServe { intent: _, lease_key: _ } => false

dag/gunbc/fleet_converge_cli.dag

@@ -59,16 +59,12 @@ fn converge_cli_applied_knob_count(intent: HostEffectIntent, fallback: Int) -> I
     SetHostnameCas { hostnamectl_path: _, base: _, desired: _ } => fallback
     ReadEffectivePosixPrincipal { read: _ } => fallback
     SudoNopasswdExecuteProbe { probe: _ } => fallback
-    Srv3InstallDiagnosticObserve { bmc: _, port: _, iso_path: _, iso_content_hash: _ } => fallback
     OsInstallActuatorToolchainEnsure {} => fallback
     ProvisionBuildCache { catalog_id: _ } => fallback
-    Srv3InstallReconcileObserve { include_git_meta: _ } => fallback
-    DurableApprovalGrantRecord => fallback
     DurableApprovalGrantRead => fallback
     Srv3InstallMediaFetch => fallback
     Srv3SeededInstallMediaRemaster => fallback
     Srv3SeededInstallMediaToolchainEnsure => fallback
-    Srv3SolConsoleCapture => fallback
     Srv3BmcwebSessionLogin => fallback
     Srv3BmcwebTokenExtract => fallback
     Srv3NbdProxyServe { intent: _, lease_key: _ } => fallback

dag/gunbc/host_effect.dag

@@ -28,24 +28,15 @@ type HostEffect =
     ShellCommand { script: String }
   | RedfishAction { action: RedfishSystemAction }
   | ConvergePlan { policy: HostConverge }
-  | Srv3InstallDiagnosticObserve {
-      bmc: NonEmptyStr,
-      port: Int,
-      iso_path: NonEmptyStr,
-      iso_content_hash: ContentHash,
-    }
   | OsInstallActuatorToolchainEnsure {}
   | ProvisionBuildCache { catalog_id: CacheInterfaceId }
   | SetHostnameCas { hostnamectl_path: NonEmptyStr, base: DnsLabel, desired: DnsLabel }
   | ReadEffectivePosixPrincipal { read: EffectivePosixPrincipalRead }
   | SudoNopasswdExecuteProbe { probe: SudoNopasswdExecuteProbeShape }
-  | Srv3InstallReconcileObserve { include_git_meta: Bool }
-  | DurableApprovalGrantRecord
   | DurableApprovalGrantRead
   | Srv3InstallMediaFetch
   | Srv3SeededInstallMediaRemaster
   | Srv3SeededInstallMediaToolchainEnsure
-  | Srv3SolConsoleCapture
   | Srv3BmcwebSessionLogin
   | Srv3BmcwebTokenExtract
   | Srv3NbdProxyServe {

dag/gunbc/nbd_proxy_virtual_media_install.dag

@@ -53,7 +53,7 @@ import gunbc.host_effect {
   HostEffectIntent,
   LocalShell,
 }
-import gunbc.srv3_os_install_reconcile_types { srv3_nbd_proxy_lease_key }
+import gunbc.srv3_nbd_proxy_serve_intent { srv3_nbd_proxy_lease_key }
 
 type OsInstallActuatorStep
   = ActuatorNbdProxyServe {

dag/gunbc/non_fold_residue.dag

@@ -105,41 +105,6 @@ data non_fold_residue_frontier: List<FrontierRow> = [
     reason: nfr_reason_land_red_era,
     dissolve_on: nfr_dissolve_owning_fold
   },
-  FrontierRow {
-    unit: "dag/gunbc/srv3_os_install_reconcile.dag::kvm_screen_from_diagnostic",
-    reason: nfr_reason_land_red_era,
-    dissolve_on: nfr_dissolve_owning_fold
-  },
-  FrontierRow {
-    unit: "dag/gunbc/srv3_os_install_reconcile.dag::optional_kvm_attestation_from_observation",
-    reason: nfr_reason_land_red_era,
-    dissolve_on: nfr_dissolve_owning_fold
-  },
-  FrontierRow {
-    unit: "dag/gunbc/srv3_os_install_reconcile.dag::reconcile_pending_step_id",
-    reason: nfr_reason_land_red_era,
-    dissolve_on: nfr_dissolve_owning_fold
-  },
-  FrontierRow {
-    unit: "dag/gunbc/srv3_os_install_reconcile.dag::workflow_approval_from_durable_grant",
-    reason: nfr_reason_land_red_era,
-    dissolve_on: nfr_dissolve_owning_fold
-  },
-  FrontierRow {
-    unit: "dag/gunbc/srv3_os_install_reconcile_apply.dag::process_exit_succeeded",
-    reason: nfr_reason_land_red_era,
-    dissolve_on: nfr_dissolve_owning_fold
-  },
-  FrontierRow {
-    unit: "dag/gunbc/srv3_os_install_reconcile_receipt.dag::durable_grant_is_active",
-    reason: nfr_reason_land_red_era,
-    dissolve_on: nfr_dissolve_owning_fold
-  },
-  FrontierRow {
-    unit: "dag/gunbc/srv3_os_install_reconcile_receipt.dag::reconcile_refusal_reason_wire",
-    reason: nfr_reason_land_red_era,
-    dissolve_on: nfr_dissolve_owning_fold
-  },
   FrontierRow {
     unit: "src/v2/lens/enforcement/cost_coverage.dag::cost_coverage_fn_verdict_is_body_not_located",
     reason: nfr_reason_land_red_era,

dag/gunbc/srv3_boot_once_cd.dag

@@ -1,5 +1,10 @@
 module gunbc.srv3_boot_once_cd
 
+import std.measure { Second, second }
+
+data srv3_boot_once_approval_grant_path: String = "/var/lib/gunbc/logs/approvals/srv3-boot-once-cd.grant"
+
+data srv3_boot_once_apply_read_back_sleep: Second = second(count: 45)
 
 data srv3_boot_once_cd_secret_debt: Disposition = Scaffold {
   dissolves_to: RealizationDispatch,

dag/gunbc/srv3_host_effect_apply.dag

@@ -32,27 +32,6 @@ fn srv3_host_effect_apply(
   )
 }
 
-fn srv3_host_effect_observe_apply(
-  include_git_meta: Bool,
-) -> Reconciliation<HostEffectIntent, HostEffectEvidence> {
-  srv3_host_effect_apply(
-    effect: Srv3InstallReconcileObserve { include_git_meta: include_git_meta },
-  )
-}
-
-fn srv3_host_effect_observe_read_apply() -> Reconciliation<HostEffectIntent, HostEffectEvidence> {
-  host_effect_apply(
-    target: srv3_actuator_target(),
-    effect: Srv3InstallReconcileObserve { include_git_meta: true },
-    evidence: host_effect_read_evidence,
-    transport: LocalShell,
-  )
-}
-
-fn srv3_durable_approval_grant_record_apply() -> Reconciliation<HostEffectIntent, HostEffectEvidence> {
-  srv3_host_effect_apply(effect: DurableApprovalGrantRecord)
-}
-
 fn srv3_durable_approval_grant_read_apply() -> Reconciliation<HostEffectIntent, HostEffectEvidence> {
   host_effect_apply(
     target: srv3_actuator_target(),
@@ -81,10 +60,6 @@ fn srv3_seeded_install_media_remaster_apply() -> Reconciliation<HostEffectIntent
   srv3_host_effect_apply(effect: Srv3SeededInstallMediaRemaster)
 }
 
-fn srv3_sol_console_capture_apply() -> Reconciliation<HostEffectIntent, HostEffectEvidence> {
-  srv3_host_effect_apply(effect: Srv3SolConsoleCapture)
-}
-
 fn srv3_bmcweb_session_login_apply() -> Reconciliation<HostEffectIntent, HostEffectEvidence> {
   srv3_host_effect_apply(effect: Srv3BmcwebSessionLogin)
 }