amadan
runbook: quiesce the dev console from 8.1b's collect to 8.2b's done (platform-1c)
1 file changed,
+19
−0
docs/superpowers/plans/2026-10-16-claim-activation-dev-cohort1.md+19 −0
CI cancelled — superseded by a newer push — run details
CI log
=== gate === cd launchctx && go vet ./... && go test ./... -count=1 ok amadan.net/carlos/platform.git/launchctx 0.012s ? amadan.net/carlos/platform.git/launchctx/controlname [no test files] ? amadan.net/carlos/platform.git/launchctx/wireid [no test files] go vet ./... gofmt -l .: clean go test ./... -count=1 -timeout 30m amadan: job cancelled — a newer push superseded it
diff --git a/docs/superpowers/plans/2026-10-16-claim-activation-dev-cohort1.md b/docs/superpowers/plans/2026-10-16-claim-activation-dev-cohort1.md| index ca5dd38e6..414ab9bce 100644 |
| --- a/docs/superpowers/plans/2026-10-16-claim-activation-dev-cohort1.md |
| +++ b/docs/superpowers/plans/2026-10-16-claim-activation-dev-cohort1.md |
| @@ -2802,6 +2802,15 @@ Expected: every unit `LoadState=masked` and inactive. `install-control --dry-run |
| `journal-migrate`'s census reads a signed `collecting` plan, so it must exist before 8.2. It runs in signing session 6 on the trusted signer, as one SSM command from DOCS-T1 that sources `helpers.sh` (5.1's first helper block, with `CARLOS=/usr/local/bin/carlos`, `KEY=/run/claim-signer/release.key` and no `AWS_PROFILE`). The dev console is claims-off, so the plan freezes nothing on dev (Fable section 1). It still comes at the end of 8.1, with leo's agent stopped, so nothing on leo moves a record between collect and the census. |
| +**Quiesce the dev console from collect to done** (platform-1c, 2026-10-20). Stop sophie's `console.service` right before collect, and start it again right after 8.2b's done. Then nothing can write an instance record between the plan and `done`. The console stays claims-off throughout, and dev's console is unavailable for the length of 8.1b to 8.2b. From DOCS-T1: |
| + |
| +```bash |
| +./ssm.sh eu-west-1 i-05498eada6f0afd23 'systemctl stop console.service' |
| +./ssm.sh eu-west-1 i-05498eada6f0afd23 'systemctl is-active console.service || true' |
| +``` |
| + |
| +Expected: the second command prints `inactive`. If it prints anything else, stop and hold before collect. |
| + |
| ```bash |
| WINDOW_ID=YYYYMMDDTHHMMZ # set at go: the window package's value |
| BACKFILL_ID="cohort1-${WINDOW_ID%%T*}" |
| @@ -2933,6 +2942,16 @@ Refusals, and what each means (any of them is gate G8's failure: hold, case B2; |
| - `ErrBackfillRecords`: the record set changed since 8.1b's collect. |
| - `ErrBackfillPlan`: the wrong id, phase, revision or etag. |
| +Right after done, whether done passed or was refused, start the dev console again (the quiesce from 8.1b): |
| + |
| +```bash |
| +./ssm.sh eu-west-1 i-05498eada6f0afd23 'systemctl start console.service' |
| +./ssm.sh eu-west-1 i-05498eada6f0afd23 'systemctl is-active console.service' |
| +curl -s -o /dev/null -w '%{http_code}\n' https://platform.dev.carlosframework.com/healthz |
| +``` |
| + |
| +Expected: `active` and `200`, the console still claims-off (the "Paused state" env unchanged). |
| + |
| Then close signing session 6 ("Closing the signing session"), with its CloudTrail check. Nothing after 8.2b needs the signer. |
| ### 8.4 Remask, restore and hold for the serving go |