plan 4 rev 9: cleanup requires a non-root agent; the arming identity is a persisted nonce; no console rollback across the plan 4 boundary (the drain stays as an operator tool; the clean-shutdown handler and the settlement wait are gone); an unarmed box never writes the reservation table
Answers Astra's review of rev 8 (items 1, 2, 4, 5, 6). Rollback for plan 4 is disarming the boxes; a defect is fixed by rolling forward.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
1 file changed,
+79
−75
docs/superpowers/plans/2026-10-22-self-serve-moves-4-cleanup.md+79 −75
CI failed — run details
CI log
=== gate === sigwho: pid 2 ppid 1 pgid 0 sid 0; child pid 3 .amadan/test-gate.sh gate: 2026-10-24T10:51:19Z on aarch64, 32 cpus, 61716 MB available, go1.26.8 linux/arm64 gate: +0s start launchctx gate: +0s start vet gate: +0s start gofmt gate: +1s start rest gate: +12s start internal_console@0 gate: +12s start internal_console@1 gate: +12s start internal_console@2 gate: +12s start internal_console@3 gate: +12s start internal_console@4 gate: +12s start internal_console@5 gate: +12s start internal_console@6 gate: +12s start internal_console@7 gate: +12s waiting for internal_console's shards before the next split package gate: +172s start root@0 gate: +172s start root@1 gate: +172s start root@2 gate: +172s waiting for root's shards before the next split package amadan: step gate failed: signal: terminated amadan: job failed at step gate — its output is above, not at the tail of this log
docs/superpowers/plans/2026-10-22-self-serve-moves-4-cleanup.mdLoading diff…