oficina / suite Public

Record approved Home stage and team authorization progress

Paul Campbell pushed by paul@keymail.dev 1 month ago 347f056c9b9e747ff4c98dc6c992d024b74aca10 parent d5f6b38

1 file changed, +10 −0

implementation/overnight-2026-09-07.md +10 −0

No CI script — run details

CI log

amadan: no CI script — add an executable .amadan/ci or a `ci` target to the Makefile

diff --git a/implementation/overnight-2026-09-07.md b/implementation/overnight-2026-09-07.md

index 5dab83f..fe961f8 100644

--- a/implementation/overnight-2026-09-07.md

+++ b/implementation/overnight-2026-09-07.md

@@ -833,3 +833,13 @@ Home consumer manifest was changed only in credential environment overnight-home

- Pending-consumer staging design42529b5 explicitly Fable APPROVE at /tmp/oficina-pending-consumer-review/verdict.txt: exact consumer/bindings/owner/epoch, immutable600s expiry, no replay extension,60s residual lease ceiling, live-only chooser and transaction-bound activation. Producer agent now owns feat-roster-pending from9e, Home40/task41; operator author owns additive schema/writes. Existing roster_operator_receipts CHECK enum stays untouched.

- Home operator implementation checkpoints f80ea16/cd598f6/89aadfc are pushed: signed input/owner receipt and actual Sqids vectors; immediate-transaction engine with sealed replay/results/FK proof; empty verification and consumer-pointer schema. Domain/staging/activation writes, fixed command and durable external provisioner remain underway; no readiness claim. No approved reserved-label vocabulary exists: use DNS shape, suitewide unique reservation, signed exact label and compiled canonical origin; actual host ownership/availability still required before activation.

- Canonical framework FromContext correctiond9c28d7085567552668ead32fcf3651038b98e72 explicitly Fable APPROVE, /tmp/oficina-session-context-review2/final.txt; revised full gate finishing before push/exact CI/publication. Removed unrelated writing/ ignore diff, preserved writing artifacts under /tmp, bounded real-writer deadline observation, closed-DB parity and routine cancellation logging fixed. Docs adapter/stream integration follows publication: original opaque stream lease is never extended; nonblocking validity plus context-bounded session/grant checks precede each event, expiry/fencing closes and reconnect gets fresh admission. Full Docs runtime review/activation remain pending.

+## Team authorization and maintenance implementation — 2026-09-08

+- Home9e canary evidence received configured Fable APPROVE; merged actual Home maincdfc1c536712a4c3e6b5f1b499f8df2c90b98a3a with green CI. Both previously reported previews remain9e, roster disabled. Exact published roster module source matches all seven nested files: /tmp/oficina-roster-http-release/published-roster-source.json. No teams created or production changes.

+- Platform design6a81dac R4 explicitly APPROVE, merged05c877f. Actual main gate exposed an unrelated relay test race: packet delivery precedes accounting callback. Fix4cd7380 uses the existing bounded wait; delayed real accounting makes old test fail/new pass, and missing accounting still fails. Fable APPROVE, full/race/exact CI green; mergedb39d1efabe3c375cadd498f7f6209f0b2d263d5f main CI green. Receipts /tmp/oficina-relay-meter-wait-review; prior failed05 run preserved.

+- Private maintenance envelopef22d861 independently Fable APPROVE, full native/race/exact CI plus four compiled mutations passed; merged platformmaind43d971b43bd38cdcebfc948f6149d2db7d4a6df, merged CI running. Unused purpose-separated P256/HKDF/AES-GCM library only, no execution/API enablement. Conditional DeleteIfMatch35cc65d independently APPROVE/full/race/exact CI; merge awaits preceding main gate. Actual Dir race and AWS SDK request/response tests pass, but no real backing-store capability proof yet.

+- Local delegated cgroup positive/negative proof /tmp/oficina-maintenance-cgroup-proof/result.json: supervisor death kills the full process tree with control-group settings; deliberately wrong process-only setting leaves a grandchild and the checker catches it. Both exact synthetic service units are stopped and empty. This is local evidence, not a deployed platform unit/lease/restore proof.

+- Root now implements bounded exact-byte private input framing on feat-maintenance-payload, platform task19. Agent team_directory_design owns shared guard/lifecycle package. Guard identity derives from validated account/app/host/nonzero UTC CreatedAt with domain-separated canonical framing, original record revision retained separately. Global guard and app lifecycle claim prevent delete/recreate while bound; metadata digest alone does not establish owner authority. Permanent nonsecret request/attempt/receipt references remain separate from24h expiring encrypted payloads. Unmanaged absent guard+projection remains ordinary admission; partial/mismatched managed references deny. No live maintenance operation is enabled.

+- Canonical Rastrillo FromContextd9c28d is published v0.26.1-0.20260908132728-d9c28d708556 after Fable/full gate/exact CI. Docs isolated TeamMode7cf6417 full gate passed; checkpoint2a5de8b adds real TCP original-lease closure during actual SQLite session writer contention, plus healthy publication/reconnect. Compiled uncancellable-reader mutation fails the intended assertion. Six Chromium/WebKit snapshot/raw/since interrupted-body cases pass against the actual router and native TLS browser: partial body rejected, zero bytes applied, cursor retained, retry applies complete response after fresh admission. /tmp/oficina-team-browser/results.json. Whole-feature Fable and preview activation still pending.

+- Home operator643ff56 integrates actual approved Home maincdf with full make and added operator/provisioner/directory race gates passed. Native journala1d7618 uses signed ciphertext-only records, independent floor and real process locks. Separate subprocess kills at prepared/floor/finalized boundaries recover single sequence/result; stale registry backup refuses against surviving floor. Pending reader64e3081 was independently approved and integrated. CLI, encrypted backup/restore, deployment collectors and supported live transport remain incomplete.