amadan
Record Home canary and Keymail revocation progress
1 file changed,
+37
−0
implementation/overnight-2026-09-07.md+37 −0
No CI script — run details
CI log
amadan: no CI script — add an executable .amadan/ci or a `ci` target to the Makefile
diff --git a/implementation/overnight-2026-09-07.md b/implementation/overnight-2026-09-07.md| index e9eb120..f07e378 100644 |
| --- a/implementation/overnight-2026-09-07.md |
| +++ b/implementation/overnight-2026-09-07.md |
| @@ -444,3 +444,40 @@ Full review is retained there and posted to suite discussion 5. |
| Root asked owner to cite the remaining written-form approval gate against the |
| existing Go-ahead before holding slice1. Existing ownership remains intact; |
| no Meet implementation/live media completion is claimed. |
| + |
| +## Checkpoint at 00:46 Dublin, 2026-09-08 |
| + |
| +- Original Home owner handback remains authoritative in Home9: root owns |
| + integration, SMTP, canary and deployment. Combined4013745 is now verified |
| + in both canary API bodies and headers after a scoped credential restart; |
| + initial deploy watch timed out and is not reported as a successful watch. |
| + Sixteen GET-only browser cases pass. Live redemption/passkey/recovery and |
| + restore remain outstanding; zero real sign-in mail sent. Estilo theme6e5f715 |
| + and browser driverf94d690 remain separate review candidates. |
| +- Keymail backend dbee45c implements scoped device listing and row deletion, |
| + additive public IDs, legacy insert/backfill, transactional actor revalidation, |
| + collision handling, relay/mailbox isolation and an executable CI gate. |
| + Full actual CI passes, including private dependency download and race tests. |
| + Frozen design7d0b3b6 is preserved; backend draft work was authorized without |
| + waiving independent review. No UI management or OAuth/Home revocation claim. |
| +- Keymail's baseline Litestream shutdown race was reproduced independently. |
| + Targeted private v0.5.14 backport ac602783 joins snapshot producers and |
| + monitors before database closure. Original regressions fail on baseline; |
| + patched focused and full upstream/Keymail race runs pass. Remote replacement |
| + amadan.net/oficina/litestream.git v0.0.0-20260907233401-ac60278360c7 is pinned |
| + with checksums; no committed filesystem replacement or public upstream push. |
| + Dependency and full backend Fable reviews are now separately queued. |
| +- Fresh Keymail synthetic canary revocation-0809a runs pristine old45c1a68 |
| + on dev instance i-026386726a440d140, loopback21357, persistent private unit. |
| + Actual mapped executable hash, configured arguments, listener ownership and |
| + open SQLite inode pass read-only operator attestation. Committed WebKit gate |
| + passes /, /import, /claim and /docs through session-owned SSM tunnel. |
| + No claim/account ceremony or old/new/old/new transition has occurred yet. |
| + Private four-phase driver is prepared; candidate build and encrypted claim |
| + transfer preparation are underway. These are not completed rollback evidence. |
| +- Fable timer remains active at01:51 Dublin with12 jobs, guarded source heads |
| + and artifact hashes. Queueing is not approval; no automatic merge/deploy. |
| +- Meet owner reports Paul approved written form, revision8d4186e7 merged to |
| + main and first implementation slice started under original ownership. Root |
| + recorded native clients as following web delivery and depending on Home |
| + assertions. Web callback scope remains unchanged; media completion unproven. |