amadan
The first temporary Linux CI runner could not fetch the private Estilo dependency and stalled in git+ssh. I stopped its Go process; job 242 correctly recorded failure. The failure was runner setup, not a passing or skipped gate. The replacement runner has the existing checksum-verified Go download cache for private modules before claiming work. Final candidate bc5becd adds only the explicit release command and Linux/dependency prerequisites to README; application code is unchanged from the reviewed bc34580. The canary has been rebuilt/redeployed with the new stamp. Full CI remains mandatory before merge.
Preserve public Home while deploying approved icons open
On branch codex/home-placeholder-icons
The current public Home deployment is the stateless 0d0262a skeleton. Deploying cmd/home from current main failed its protective migration check because this instance has only Litestream metadata, with no current identity schema or migration ledger; edge was rolled back and 0d0262a recovery verified.
This branch adds an explicit cmd/home-placeholder release target that keeps the same public placeholder while serving the approved Oficina artwork. It clears DBPath after activation resolution and does not construct authentication/directory services. Existing credential/directory canaries continue to run cmd/home. No database migration or domain cutover is part of this branch.
The regression test starts the actual binary without secrets and with an unusable --db path, verifies the page/icon and auth404/no cookies, and confirms no database directory was created. Local vet/build/all Go tests pass; required remote Linux CI remains queued.
Independent reviewer: inherited GPT-6 Astra. Source and exact-binary canary bc34580 approved. https://icon-home-placeholder.bds.oncarlos.com reports bc34580, serves byte-identical artwork and the expected placeholder, sets no cookies, and returns 404 for /signin, /authorize and the asset directory. Merge only after CI is green.
The second Linux runner reached the Go gate but the existing provisioner correctly refused Docker’s filesystem: its persistent-directory contract allows only ext4/XFS. This is recorded as job 243 failure, not waived. A real ext4-backed checkout passes the provisioner suite (35s). Final candidate 0493320 documents that requirement; application and test code are unchanged from approved bc34580. The final full CI job runs with its checkout on an ext4 image and the verified dependency cache. Independent GPT-6 Astra source approval extends to 0493320; final canary/CI verification is pending.
Final candidate 0493320 has independent source and deployed-canary approval from inherited GPT-6 Astra. icon-home-placeholder.bds.oncarlos.com reports that exact version, serves the approved SVG bytes and placeholder, and retains the previously checked no-cookie/auth404 behavior. Application code is unchanged from the first approved candidate; later commits document the release command and CI prerequisites.
The complete existing Linux CI gate passed with the checkout on real ext4 and verified private-module downloads available. No tests were disabled or rewritten. Earlier temporary runner setup failures (private module fetch, then unsupported filesystem) remain in the CI/review record.
Deploy cmd/home-placeholder from merged source onto the current public edge instance. Keep cmd/home for the paired identity/directory preview deployments. This release does not initialize or migrate the public database or change domain roles.
Merged as 8535299 after full green CI and independent GPT-6 Astra source/canary approval. Built cmd/home-placeholder from that merge and deployed edge. Verified actual /api/version=8535299 and health200 on oficina.works, id.oficina.works and home.bds.oncarlos.com. The public page and approved icon load; /signin remains404 and these routes set no cookies. The legacy database is untouched by this binary. Signed-in directory/identity rollout remains separate.