oficina / suite Public

Record Home availability gap and maintenance integration progress

Paul Campbell pushed by paul@keymail.dev 7002da5380f2e6bb9a79e8e1efadd85fc8017998 parent 5417818
1 file changed, +81 −15
  • implementation/maintenance-integration-state.json +81 −15

No CI script — run details

CI log
amadan: no CI script — add an executable .amadan/ci or a `ci` target to the Makefile
diff --git a/implementation/maintenance-integration-state.json b/implementation/maintenance-integration-state.json
index dfe6748..da2c8b6 100644
--- a/implementation/maintenance-integration-state.json
+++ b/implementation/maintenance-integration-state.json
@@ -11,26 +11,92 @@
"litestream_shutdown": "b39d75dc149a2c2a3598d6955203aab0889588a6",
"home_operator_and_local_preparation": "7e282e2a363b9cc90cd74dd97809e6613a699af8",
"docs_team_authorization": "acbb192c0c5b27adc3de71c73c87d86013e4d21b",
- "independent_review": "outstanding; validation does not authorize merge/deployment"
+ "independent_review": "outstanding; validation does not authorize merge/deployment",
+ "private_file_io": "c46a201663715f420f7b911db3bd512d9205af61"
},
"remaining_work": [
- {"area":"Private local files", "state":"implementing reusable strict IO", "remaining":"Pending request schema, durable recipient key before upload, exact resend and private result retrieval; tested non-Linux privacy support is unresolved"},
- {"area":"Public maintenance API and CLI", "state":"not mounted", "remaining":"Exact-selector prepare/status/result/retry/resume and immutable operation records"},
- {"area":"Owner approval", "state":"not mounted", "remaining":"Session, CSRF, current-owner indistinguishable refusal, then fresh authentication; bound approval expiry and reapproval rules"},
- {"area":"Eligibility and pins", "state":"not implemented end to end", "remaining":"Single-primary topology, exact released artifact/environment/record snapshot and existing database preflight"},
- {"area":"Host guards and app lifecycle claims", "state":"core code validated but unmounted", "remaining":"Complete record-writer/deletion inventory and actual serving, mutation, trash, restore and purge enforcement"},
- {"area":"Signed runtime contracts", "state":"design0e768aa awaiting review", "remaining":"Exact manifest signature binding, all pointer writers/readers, staged proofs and old-binary refusal before serving"},
- {"area":"Worker launch", "state":"initial launch design approved; caf47fb delta pending", "remaining":"Retained verified executable descriptor, private launch context/environment/input, strict containment and authenticated outcome"},
- {"area":"Lease checkpoints", "state":"integrated code validated with test-only dependency patch", "remaining":"Reviewed/published dependency adoption, actual worker ownership and deployed restore/deadline evidence"},
- {"area":"Resume", "state":"not implemented", "remaining":"Opaque retained-lease resume permit, exact artifact/environment/database, behind-fence health/version checks and matched durable references"},
- {"area":"Home operator dispatch and collectors", "state":"native core/local preparation validated", "remaining":"Supported maintenance transport, checked outcomes and deployment/alias/consumer evidence; verification and activation CLI paths remain unavailable"},
- {"area":"Actual team flow", "state":"not deployed", "remaining":"Real team label, isolated team instances, keys/consumers/roster activation and full sign-in/chooser/return/removal/deep-link acceptance"},
- {"area":"Bare production app entry", "state":"not a gateway", "remaining":"Preserve existing aliases/data/deep links while introducing the accepted team routing; do not present production Docs/Sheets as team gateways yet"}
+ {
+ "area": "Private local files",
+ "state": "Linux IO validated at c46a201; independent review pending",
+ "remaining": "Pending request schema, durable recipient key before upload, exact resend and private result retrieval; tested non-Linux privacy support is unresolved"
+ },
+ {
+ "area": "Public maintenance API and CLI",
+ "state": "not mounted",
+ "remaining": "Exact-selector prepare/status/result/retry/resume and immutable operation records"
+ },
+ {
+ "area": "Owner approval",
+ "state": "not mounted",
+ "remaining": "Session, CSRF, current-owner indistinguishable refusal, then fresh authentication; bound approval expiry and reapproval rules"
+ },
+ {
+ "area": "Eligibility and pins",
+ "state": "not implemented end to end",
+ "remaining": "Single-primary topology, exact released artifact/environment/record snapshot and existing database preflight"
+ },
+ {
+ "area": "Home always-awake topology",
+ "state": "live deployment contradicts Home design section 2.1; tracked oficina/home discussion 44",
+ "remaining": "Provide supported always-awake process ownership and checked maintenance for that topology. Live Home/preview hibernate=true fits only the first maintenance slice shape, not Home readiness. Disabling hibernate alone stops activator ownership and is not a fix."
+ },
+ {
+ "area": "Host guards and app lifecycle claims",
+ "state": "core code validated but unmounted",
+ "remaining": "Writer inventory complete with eight integration gaps; record projection and local scheduled-token fence integration underway; actual durable serving/mutation and full trash/restore/purge ownership remain"
+ },
+ {
+ "area": "Signed runtime contracts",
+ "state": "design0e768aa awaiting review",
+ "remaining": "Exact manifest signature binding, all pointer writers/readers, staged proofs and old-binary refusal before serving"
+ },
+ {
+ "area": "Worker launch",
+ "state": "initial launch design approved; caf47fb delta pending",
+ "remaining": "Retained verified executable descriptor, private launch context/environment/input, strict containment and authenticated outcome"
+ },
+ {
+ "area": "Lease checkpoints",
+ "state": "integrated code validated with test-only dependency patch",
+ "remaining": "Reviewed/published dependency adoption, actual worker ownership and deployed restore/deadline evidence"
+ },
+ {
+ "area": "Resume",
+ "state": "not implemented",
+ "remaining": "Opaque retained-lease resume permit, exact artifact/environment/database, behind-fence health/version checks and matched durable references"
+ },
+ {
+ "area": "Home operator dispatch and collectors",
+ "state": "native core/local preparation validated",
+ "remaining": "Supported maintenance transport, checked outcomes and deployment/alias/consumer evidence; verification and activation CLI paths remain unavailable"
+ },
+ {
+ "area": "Actual team flow",
+ "state": "not deployed",
+ "remaining": "Real team label, isolated team instances, keys/consumers/roster activation and full sign-in/chooser/return/removal/deep-link acceptance"
+ },
+ {
+ "area": "Bare production app entry",
+ "state": "not a gateway",
+ "remaining": "Preserve existing aliases/data/deep links while introducing the accepted team routing; do not present production Docs/Sheets as team gateways yet"
+ }
],
"evidence": {
"platform": "/home/paulca/.cache/oficina-maintenance-integration",
"dependency": "/home/paulca/.cache/oficina-litestream-close-proof",
- "review_queue": "/home/paulca/.cache/oficina-review-queue.json"
+ "review_queue": "/home/paulca/.cache/oficina-review-queue.json",
+ "writer_inventory": "/home/paulca/.cache/oficina-maintenance-writer-audit/inventory.json",
+ "live_home_shape": "/home/paulca/.cache/oficina-home-maintenance-eligibility"
},
- "deployment": "No candidate above has been deployed; broader suite readiness work remains in the original overnight plan"
+ "deployment": "No candidate above has been deployed; broader suite readiness work remains in the original overnight plan",
+ "in_progress_candidates": {
+ "scheduled_token_fence": {
+ "sha": "b6e5c2f30456fb8f089805a871127469bd689d2a",
+ "state": "native, race, five cross-builds and three mutation controls passed; exact CI running; independent review pending"
+ },
+ "record_projection": {
+ "branch": "carlos/platform:feat-maintenance-record",
+ "state": "four parser integration and protected writer fields implemented; gates running"
+ }
+ }
}