Repository navigation

CONVERGE-0 acceptance: a merged main revision becomes observed fleet state, including offline catch-up — open until the receipt set exists - #8083

Merged

briansrls merged 62 commits into

mainfrom

session/wise-moth-430

Aug 10, 2026

Merged

CONVERGE-0 acceptance: a merged main revision becomes observed fleet state, including offline catch-up — open until the receipt set exists#8083
briansrls merged 62 commits into
mainfrom
session/wise-moth-430

Commits on Aug 8, 2026
- CONVERGE-0 capsule 1: TasksMax=512 as the second knob on the slice1 converge circuit
  
  Brian Searls
  and
  claude
  committed
  2ea1c79
- Merge origin/main into session/wise-moth-430 (resolve witness import conflict)
  
  Brian Searls
  and
  claude
  committed
  0883afd
- Ruling compliance (PR 8045): desired TasksMax is the repair value 16384; 512 is the RED
  
  Brian Searls
  and
  claude
  committed
  b1ef6b2
- Merge remote-tracking branch 'origin/main' into session/wise-moth-430
  Brian Searls
  committed
  2a10e0b
- Review fixes: drop 512 literal from ConvergeTarget note; mark unreachable TasksConverged CLI arm
  
  Brian Searls
  and
  claude
  committed
  2255a8d
- Merge remote-tracking branch 'origin/main' into session/wise-moth-430
  Brian Searls
  committed
  4aa7822
- CONVERGE-0 arc items 1+2: canonical observe_host_phase seam, first two real producers, and the fleet-atomic-convergence fold
  
  Brian Searls
  and
  claude
  committed
  725c60c
Commits on Aug 9, 2026
- Arc items 3+4: main-revision authority + per-host timer; recut stale srv1-at-512 control notes
  
  Brian Searls
  and
  claude
  committed
  47d0f3b
- Review 50635: two dissolve-on markers (TaskCount measure carrier; string-built unit INI scaffold)
  
  Brian Searls
  and
  claude
  committed
  e5cd695
- Review 50639: Second measure carrier for timer jitter; typed Scaffold row for string-built unit text
  
  Brian Searls
  and
  claude
  committed
  7f8594d
- Fix heal CI red: hoist the TaskCount dissolve-on annotation to module-item grain
  
  Brian Searls
  and
  claude
  committed
  f0a95ca
- Register the task-budget envelope follow-up at the authority (operator ruling 2026-08-09)
  
  Brian Searls
  and
  claude
  committed
  1fda538
- Read-only srv1 tasks pre-apply observation job (workflow_dispatch-only, srv1-pinned)
  
  Brian Searls
  and
  claude
  committed
  663c9f5
- Observation entry returns ProcessExit; receipt lands as file + step cat
  
  Brian Searls
  and
  claude
  committed
  39f7ea9
- Review 50676: scaffold row + emitted 🟡 header for the observation shell; feature-tag the two task-count unit gates
  
  Brian Searls
  and
  claude
  committed
  eb20798
- Control notes: srv1 tasks standing decided by observation (receipt-accepted 16384)
  
  Brian Searls
  and
  claude
  committed
  79edc96
- Fix floor red (two unrostered wildcard arms); land --host self and main→desired-ref advancement
  
  Brian Searls
  and
  claude
  committed
  d4da13b
- Merge origin/main into session/wise-moth-430 (V2-LENS-0 + host-phase fixture correction)
  Brian Searls
  committed
  dc8fbef
- Post-merge repair: std.algebra trim imports (main #8070 made bare trim a Class B refusal); flat_map for the per-unit outcome accumulator
  
  Brian Searls
  and
  claude
  committed
  41ce80b
- Loop legs: fleet-converge timer as a live_deploy member; receipt publication on the self route
  
  Brian Searls
  and
  claude
  committed
  b797365
- Probe mismatch arm: expected_fingerprint becomes Optional-by-meaning and threads without fabrication
  
  Brian Searls
  and
  claude
  committed
  1178e7d
- Fix heal red (annotation hoisted to module-item grain); land the live fleet reach probe job (loop leg e)
  
  Brian Searls
  and
  claude
  committed
  7711f0a
- Class B repair: explicit Filesystem service imports at all three Write sites
  
  Brian Searls
  and
  claude
  committed
  3d41fb8
- Ruling compliance (leg f, option 1): Mismatch/Absent reads Inaccessible, never Conflict, never satisfied
  
  Brian Searls
  and
  claude
  committed
  f9e9e69
- Pre-merge rightness (msg_1c4e0bce): Spark endpoint resolution; duplicate-receipt ambiguity wall; machine-id hazard checked
  
  Brian Searls
  and
  claude
  committed
  26af69d
- Joins 3+7 (operator verdict): total fleet applicability; Unenrolled/Mismatch constructor split; receipt-dir re-homed to host_layout breaking the apply->emit->cli cycle
  
  Brian Searls
  and
  claude
  committed
  1106e49
- Join 1: refs/fleet/desired gains its live reader — typed git.Core ls-remote/rev-parse ops, fleet_desired_observe standing, self-route revision gate + published revision cell
  
  Brian Searls
  and
  claude
  committed
  6130c89
- Join 2: fleet timer route is total — srv1 via live_deploy membership, srv2-4 via typed self-install plan (argv derived from the one timer authority, is-enabled readback), Sparks typed pre-enrollment
  
  Brian Searls
  and
  claude
  committed
  0e3fefb
- Join 5: fleet receipt collector — published receipts are read back over the typed argv seam, parsed by the backward read of the byte-locked grammar, and fed to the atomic fold; Absent/Unparseable s…
  
  Brian Searls
  and
  claude
  committed
  5fb6d8d
- Factual correction (operator, bold-eagle receipt): probe module header — Spark host keys are DISTINCT; machine-id is the shared non-anchor
  
  Brian Searls
  and
  claude
  committed
  e3f1ac7
- Join 4: executed probe receipts committed into the registry (run 31300640122, all six hosts ProbeHostKeyUnenrolled at SSH layer — Sparks now reached at modeled endpoints); coverage witnesses re-der…
  
  Brian Searls
  and
  claude
  committed
  c147d04
- Parent verification + review 50817 repairs: live invocation wires for self-install (workflow_dispatch job) and collector (push-to-main job); collector label decoder no longer collapses drifted into…
  
  Brian Searls
  and
  claude
  committed
  a6bb527
- Review 50824: the transcribed probe registry carries a typed Scaffold disposition — dissolves when the receipt artifact is machine-ingested into the registry
  
  Brian Searls
  and
  claude
  committed
  88c80ec
- Reviews 50827/50828: ROOT= prelude on the timer-install invoke (rooted invocation was broken on first dispatch); probe-run provenance is a typed ProbeRunProvenance row, not a prose String
  
  Brian Searls
  and
  claude
  committed
  e5af161
- CONVERGE acceptance item 4 build: host-key enrollment vertical — scan (observe-only) + registry (scaffold-marked transcription target) + enroll apply with ssh-keygen -F readback; probe consumes enr…
  
  Brian Searls
  and
  claude
  committed
  b5cc9fc
- Merge remote-tracking branch 'origin/main' into session/wise-moth-430
  Brian Searls
  committed
  aec49a2
- Acceptance item 4: scan receipts transcribed into the enrollment registry (run 31323244273, all six hosts observed, ED25519, distinct keys; Spark fingerprints cross-check bold-eagle's independent m…
  
  Brian Searls
  and
  claude
  committed
  75c2e41
- Enrollment is per-run, not host state: CI job HOME is ephemeral (measured — enroll readbacks found while the sibling probe job still refused); probe entry materializes the registry into its own kno…
  
  Brian Searls
  and
  claude
  committed
  aaa9561
- §4c: probe-entry enrollment note hoisted to module-item grain
  
  Brian Searls
  and
  claude
  committed
  5217839
- Acceptance item 4 progress transcription: run 31324732370 — enrollment materialized in-run clears the host-key layer on all six hosts; failure descends to authentication (Permission denied); remedy…
  
  Brian Searls
  and
  claude
  committed
  c4f27f3
- Class B repair: explicit imports for every bare cross-module reference in fleet_converge_cli (slice1 loop/validity, runner-memory converge/verify, host_converge verdict fns, operator-host identitie…
  
  Brian Searls
  and
  claude
  committed
  16d0495
- Class B + §4c sweep continues under real dispatch: fleet_show_effective_read ssh-transport imports made explicit; unreachable-arm annotation dropped from match body; probe-identity observe-first jo…
  
  Brian Searls
  and
  claude
  committed
  0c3ea63
- Observe job repair: filesystem_read raises on failure (content-only record) — authorized_keys read moved to the capture runner so unreadable classifies as a typed line
  
  Brian Searls
  and
  claude
  committed
  06787b6
- A2 crossed: WIF wiring in CI, versions/1 pinned key agent, skip-cascade fix, B2 standing framing
  
  Brian Searls
  and
  claude
  committed
  6374496
- Probe loudness gap: unknown-failure cause carries both channels (srv3 empty-cause reproduced twice)
  
  Brian Searls
  and
  claude
  committed
  b80fdc7
- Transcribe run 31331184536 probe receipts: authentication CROSSED on srv3 (A2 closure evidence); new wall is command reach (nologin shell)
  
  Brian Searls
  and
  claude
  committed
  9acd410
- Principal (b) wired: gunbc-fleet on srv1/srv2; PrincipalAllocationPending arm for srv3/srv4; B2 prerequisite typed refusal + bootstrap receipts
  
  Brian Searls
  and
  claude
  committed
  15c1b0d
- Transcribe run 31333011288: command reach CROSSED on srv1/srv2 (gunbc-fleet principal, ProbeReachable, identity Converged); srv3-6 typed auth refusals
  
  Brian Searls
  and
  claude
  committed
  d6996b8
- Timer self-install route guard: refuse on a host whose modeled route is not TimerViaSelfInstall (srv1 landing would fork live_deploy ownership)
  
  Brian Searls
  and
  claude
  committed
  2793e72
- Prerequisite probe measured wrong on a bootstrapped host: sudo -n true tests blanket sudo; the grant set is exact-argv — probe with sudo -n -l (run 31334610318 srv2 receipt)
  
  Brian Searls
  and
  claude
  committed
  176639e
- Merge main (#8085 skip-cascade repair); ci.yml regenerated from the merged model
  
  Brian Searls
  and
  claude
  committed
  ab96d22
- Line-stop reversal (msg_af607b12): hand-applied host state is drift-to-converge; read-only multi-principal probe for srv3/srv4 foothold measurement
  
  Brian Searls
  and
  claude
  committed
  d931bc5
- Repairs #1-#4 (operator scan of #8083): principal-target refusal, principal verification, failure-safe credential trap, key-identity check; + srv3/srv4 privileged foothold MEASURED
  
  Brian Searls
  and
  claude
  committed
  18a60a3
- Fix ci materialization ladder: WIF key-agent + teardown are fresh per-job effects
  
  Brian Searls
  and
  claude
  committed
  6d939ba
- Merge remote-tracking branch 'origin/main' into session/wise-moth-430
  Brian Searls
  committed
  17a8c7a
Commits on Aug 10, 2026
- Address review 50872 (RC): SecretRef is the single version authority; CI URL + requirement row derive from it
  
  Brian Searls
  and
  claude
  committed
  49a5071
- Correct evidence inflation + 3 §3 import forks (review 50880 RC + operator finding)
  
  Brian Searls
  and
  claude
  committed
  c97d65f
- Clear cursor RC 50886: §3 secret-identity single-authority + Class B witness imports
  
  Brian Searls
  and
  claude
  committed
  497719b
- Host-key anchor: mint HostKeyEnrollmentProvenance (TOFU-honest) + pin probe to enrolled-only known_hosts
  
  Brian Searls
  and
  claude
  committed
  59129ef
- Correct srv5/srv6 provenance reason: slot->box WAS decided 2026-08-07; the honest blocker is the unperformed anchor join
  
  Brian Searls
  and
  claude
  committed
  791fadb
- Clear cursor RC 50900: collector enrolls host keys in-process before its SSH legs (same path as probe)
  
  Brian Searls
  and
  claude
  committed
  80aa480
- Consolidate 10 deploy/convergence/toolbox jobs into ONE `fleet` job (operator request)
  
  Brian Searls
  and
  claude
  committed
  ee42c52

Commits

Commits on Aug 8, 2026

Commits on Aug 9, 2026

Commits on Aug 10, 2026