amadan
Record roster publication and maintenance boundary refinements
1 file changed,
+9
−0
implementation/overnight-2026-09-07.md+9 −0
No CI script — run details
CI log
amadan: no CI script — add an executable .amadan/ci or a `ci` target to the Makefile
diff --git a/implementation/overnight-2026-09-07.md b/implementation/overnight-2026-09-07.md| index 2416580..82b1b1e 100644 |
| --- a/implementation/overnight-2026-09-07.md |
| +++ b/implementation/overnight-2026-09-07.md |
| @@ -805,3 +805,12 @@ Home consumer manifest was changed only in credential environment overnight-home |
| - Platform117 is unclaimed and implementable, not an external impasse: fresh source audit /tmp/oficina-team-provision-audit/recommendation.txt, Home35. Platform main remainsdcf0cad; infra origin/main259913017c2aeb99554e2c1384c2117d279f6e2a fetched at /home/paulca/github.com/carlosframework/platform-infrastructure, immutable relevant specs under /tmp/oficina-team-provision-audit/infra. Existing move/lease/quiescence machinery is not a usable maintenance command and must not be invoked as one. |
| - Root claimed platform117/task14 and pushed draft e899a4763da39fb74ee1a14e6fb1b3507d3a3e31 on design-maintenance-exec in /home/paulca/amadan.net/carlos/platform/.claude/worktrees/overnight-maintenance-design. implementation/maintenance-exec.md proposes exact hibernating-exec primary, human-owner fresh approval, immutable artifact/config/existing-DB bindings, durable fence/state/receipts,64KiB private stdin/captured stdout and discarded stderr, continuous lease/checkpoint, bounded process tree and explicit checked resume. No maintenance code or live mutation. Architecture review active /tmp/oficina-maintenance-design-review, specifically asked NOT to approve unresolved promises: complete parser/admission inventory, checked stop evidence, lease-retaining checkpoint, parent-death/cgroup proof, environment binding and precise resume handoff need final decisions. Shared platform .git/config.lock existed; no lock removed. Initial worktree creation failed upstream-config write, then successfully attached already-created branch without touching config/owners. |
| - docs_link_store owns Home37 design-home-operator-seed from171: fixed Home operator command, private input/result, credential owner receipt, independently attested initial generation, atomic team+owner creation and signed scoped consumer records, separate verified activation. Parent directory/roster contracts cited; no first-visitor owner or empty-table-as-never-restored inference. Team sqid must encode integer ID; no pinned codec known yet, agent checking/proposing explicit standard dependency. Transport aligned to bounded private stdin/stdout, no public output. These pipelines advance real team provisioning while preserving existing DBs/keys; public production aliases remain unchanged. |
| + |
| +## Implementation continues during reviewer quota pause — 2026-09-08 |
| + |
| +- Previous turn was progress: Home canary merge/main CI completed and the missing platform work was claimed. Current turn advances approved code and resolves concrete maintenance design seams. Configured Fable maintenance R1 ended provider429/exit5 with NO verdict; operator R1 likewise no verdict. Shared five-hour quota resets2026-09-08T12:55:31.309Z. No reviewer switch, quota purchase or approval inference. |
| +- Shared roster amendment74dda570e0cf7c68278e40b48de1007dc76c82cc received explicit Fable APPROVE and green exact CI, then published amadan.net/oficina/home/roster v0.0.0-20260908123429-74dda570e0cf (Home36). Docs implementation checkpoint7b52265 on feat-team-mode is unmounted: optional-address Actor, strict Team config, mandatory-mode fingerprint and SQLite evidence pass internal/docs tests, focused race, nil-address mutation and actual old/new/old/new principal data probes (/tmp/oficina-team-principal-compat-7b52265/verified.json). Unified permissions, late writes and stream enforcement remain in progress; data compatibility is not authorization-safe rollback proof. |
| +- Root maintenance design advanced e899 ->69b8aa9 -> frozen0c59ea20c93a3d102fd34951845c718a1ecd0c2a. Source-backed decisions now cover public-key-only console/private result recipient, private environment snapshot binding, checked stop results, same-Held checkpoint, conservative monotonic lease deadline, strict cgroup containment without normal accounting fallback, deployed systemd process-death proof, outside-app guard surviving prefix purge, conditional record deletion and durable signed runtime-contract floor for future compatible deploys. These are unapproved proposals, not implemented platform APIs. R2 full revised prompt prepared /tmp/oficina-maintenance-design-review/r2-prompt.txt; confirmed active timer oficina-maintenance-design-review-r2-20260908.timer schedules invocation12:55:40UTC after reset. Preserve frozen source while scheduled/running. |
| +- Narrow local SQLite proof /tmp/oficina-maintenance-vacuum-proof/results.json uses the same modernc.org/sqlite v1.55.0 as Docs87662f5 and its checkpoint/VACUUM/checkpoint SQL sequence: retained device/inode/10 rows, integrity ok, file4.6MB ->57KB. Not full Docs command, crash, restore or deployed-fence evidence. Added to pending reviewer context without changing source. |
| +- Home HTTP/signing design5fbfdf0 approved; author continues implementation from mechanical stack4b0048a with new roster pin, serving remains disabled live. Home operator combined core/companion design898fe21 pending reset/review: local native Linux encrypted registry plus independent signed floor, actual trusted fresh-owner baseline attestation, concrete evidence collectors and no unsupported config revision claims. Typed external proof cannot be fabricated from a platform receipt string; actual maintenance environment binding/app checker and current alias State=live/TLS/version are required. |
| +- Provisioning design found an activation cycle: pending instances need actual roster standing to test TeamMode, but producer currently serves only live instances. A proposed audited exact-consumer preflight window (immutable600s plus residual60s cached lease ceiling, no retry extension, no chooser visibility, retained history) requires explicit review/schema amendment; it grants real temporary app standing and is not described as a harmless read-only exception. Agents coordinate this contract. No temporary relaxation or live bootstrap has been implemented. |