amadan
runbook: 8.1 drops install-control --dry-run (always refuses before 8.2's host.env edit; harness Run 4)
1 file changed,
+1
−2
docs/superpowers/plans/2026-10-16-claim-activation-dev-cohort1.md+1 −2
CI cancelled — superseded by a newer push — run details
CI log
=== gate === cd launchctx && go vet ./... && go test ./... -count=1 ok amadan.net/carlos/platform.git/launchctx 0.011s ? amadan.net/carlos/platform.git/launchctx/controlname [no test files] ? amadan.net/carlos/platform.git/launchctx/wireid [no test files] go vet ./... gofmt -l .: clean go test ./... -count=1 -timeout 30m amadan: job cancelled — a newer push superseded it
diff --git a/docs/superpowers/plans/2026-10-16-claim-activation-dev-cohort1.md b/docs/superpowers/plans/2026-10-16-claim-activation-dev-cohort1.md| index 848efce66..76a9cef7d 100644 |
| --- a/docs/superpowers/plans/2026-10-16-claim-activation-dev-cohort1.md |
| +++ b/docs/superpowers/plans/2026-10-16-claim-activation-dev-cohort1.md |
| @@ -2816,10 +2816,9 @@ for unit in "${UNITS[@]}"; do |
| done |
| systemctl daemon-reload |
| systemctl show "${UNITS[@]}" -p Id -p LoadState -p ActiveState |
| -pub /opt/carlos/carlos system claims install-control --dry-run |
| ``` |
| -Expected: every unit `LoadState=masked` and inactive. `install-control --dry-run` calls main's unchanged `verifyOfflineRootMigration`: all six migration services must be `LoadState=masked` and inactive or failed, and no root `adopt`, `system apply` or `guard-arm` process may remain. The operator checks the triggers, the edge and the tenant drain. Do not relax the verifier or read it as proof of replication. |
| +Expected: every unit `LoadState=masked` and inactive. (8.1 no longer runs `install-control --dry-run`: it always refuses before 8.2's `host.env` edit, because `activationUnitSettings` needs `CARLOS_HOST_CLAIM` set (`internal/host/activation_install.go:51-52`; harness Run 4). 8.2's own dry run, after the edit, is the check.) That dry run calls main's unchanged `verifyOfflineRootMigration`: all six migration services must be `LoadState=masked` and inactive or failed, and no root `adopt`, `system apply` or `guard-arm` process may remain. The operator checks the triggers, the edge and the tenant drain. Do not relax the verifier or read it as proof of replication. |
| ### 8.1b Collect the backfill: a zero-host plan (signer, at the end of 8.1) |