amadan
Record exact-input merge and complete Docs editing evidence
1 file changed,
+10
−0
implementation/overnight-2026-09-07.md+10 −0
No CI script — run details
CI log
amadan: no CI script — add an executable .amadan/ci or a `ci` target to the Makefile
diff --git a/implementation/overnight-2026-09-07.md b/implementation/overnight-2026-09-07.md| index fe961f8..92a34ad 100644 |
| --- a/implementation/overnight-2026-09-07.md |
| +++ b/implementation/overnight-2026-09-07.md |
| @@ -843,3 +843,13 @@ Home consumer manifest was changed only in credential environment overnight-home |
| - Root now implements bounded exact-byte private input framing on feat-maintenance-payload, platform task19. Agent team_directory_design owns shared guard/lifecycle package. Guard identity derives from validated account/app/host/nonzero UTC CreatedAt with domain-separated canonical framing, original record revision retained separately. Global guard and app lifecycle claim prevent delete/recreate while bound; metadata digest alone does not establish owner authority. Permanent nonsecret request/attempt/receipt references remain separate from24h expiring encrypted payloads. Unmanaged absent guard+projection remains ordinary admission; partial/mismatched managed references deny. No live maintenance operation is enabled. |
| - Canonical Rastrillo FromContextd9c28d is published v0.26.1-0.20260908132728-d9c28d708556 after Fable/full gate/exact CI. Docs isolated TeamMode7cf6417 full gate passed; checkpoint2a5de8b adds real TCP original-lease closure during actual SQLite session writer contention, plus healthy publication/reconnect. Compiled uncancellable-reader mutation fails the intended assertion. Six Chromium/WebKit snapshot/raw/since interrupted-body cases pass against the actual router and native TLS browser: partial body rejected, zero bytes applied, cursor retained, retry applies complete response after fresh admission. /tmp/oficina-team-browser/results.json. Whole-feature Fable and preview activation still pending. |
| - Home operator643ff56 integrates actual approved Home maincdf with full make and added operator/provisioner/directory race gates passed. Native journala1d7618 uses signed ciphertext-only records, independent floor and real process locks. Separate subprocess kills at prepared/floor/finalized boundaries recover single sequence/result; stale registry backup refuses against surviving floor. Pending reader64e3081 was independently approved and integrated. CLI, encrypted backup/restore, deployment collectors and supported live transport remain incomplete. |
| + |
| +## Exact private input merged; complete Docs editing checks — 2026-09-08 |
| + |
| +- Root private inputbc2c8de17d2badc1539ff75fbeb1768c360cb89e received Fable APPROVE after full gate/race/exact CI and four assertion-killing mutations (input bound, argv aggregate, JSON normalization, direction check). Merged platformmain9bf83ba6f7fbab826fc0e264a5362abd6ea3a7d5, actual main CI green; task19Done. Conditional35 merged874/mainCIgreen. All are unused primitives; no worker, public maintenance door or live capability. |
| +- Docs corrected frozenacbb192c0c5b27adc3de71c73c87d86013e4d21b has fullgate/exactCI/race and current native browser receipts. Actual120s two-editor canary initially found transient roster uncertainty becoming permanent404 after the lease recovered. Request-sticky observation and share-error preservation fix pass deterministic mutation; corrected run committed all480 batches within119.508s, two503 retries for one editor (0.83%), zero permanent refusals/refresh failures. Browser actual save-state404/503/retry and EventSource reconnect checks pass both engines. First whole-feature Fable review ended max_turns/exit8 with NO verdict; continuation max40 active /tmp/oficina-team-mode-code-review2. No Docs deployment yet. |
| +- Proposed launch4605a541c33e4d93f9bf78ca4618e89712524f3a received Fable APPROVE, /tmp/oficina-maintenance-launch-review/final.txt. Revised caf47fbf2df132543e6de69ec296ae53831e72b0 delta review active in r2-review.ndjson/serviceoficina-maintenance-launch-review-r2-20260908; exactCIrunning. Native worker passes private fd3context and retained verified fd4artifact, exact typed integers/selector matching, independent cancellation and one-spawn descriptor lifetime. Worker checks approved platform pins; Home checks signed exact stdin, its actual executable and actual opened DB. No fictitious expected environment digest or fence boolean. Task20active, branchdesign-maintenance-launch, worktreeplatform/.claude/worktrees/overnight-maintenance-launch. |
| +- Source audit found signed runtime floor still needs concrete crypto binding: current Manifest is unsigned, ChannelPointer signs version only, and retention permits reused version names. Proposed0e768aaaf67dec4d8e8f3000cb69fbe1cf53fd97 on design-runtime-contract-signing adds signed pointer account+exact raw manifest SHA256, bounded staged original-wrapper evidence, full artifact verification and retained descriptor execution. Actual existing pointer/grant model retained; signature is promoter approval of metadata, not immutable build provenance. Docs contract covers full mandatory authorization, not schema alone; same-manifest evidence may follow ladder channels without becoming selection authority. Independent Docs read-only audit incorporated; Fable active /tmp/oficina-runtime-contract-signing-review; exactCIgreen. Task21active; no implementation mount. |
| +- Actual local pinned litestream0.5.14 file-replica proof /tmp/oficina-maintenance-replica-proof/result.json restores exact post-VACUUM receipt/16rows; integrity-valid old replica is semantically rejected. Actual native Go fd4 execution proof /tmp/oficina-maintenance-execfd-proof/result.json runs verified original after pathname replacement while fresh-path control runs replacement. These are narrow local proof, not S3 lease, strict worker, deployed platform or restore rehearsal acceptance. |
| +- Guard e0f115d3b87eb00d45f109ddb2f3cdadc9a63096 frozen on feat-maintenance-guard with fullgate/race/eightmutations, Fable active /tmp/oficina-maintenance-guard-review. Root flagged allocation-before-length in exported ID/digest validators and pre-guard Record identity requirement potentially rejecting unmanaged zero-CreatedAt legacy records; agent will amend after frozen verdict. Agent next owns same-Held checkpoint/deadline implementation audit in separate branch. Runtime-contract validator API is committed ValidContract/ValidContracts/MaxContracts16. |
| +- Home native provisioner CLI e24577a backup/restore proofs pass stale-floor/truncated archive/link refusal. Fullgate caught logging-policy conflict; narrowly scoped structured-output exception at provisioner.Run plus slog errors fixed2ee3f74 and fullgate rerunning. Opened-DB design4770bc6 in home/overnight-operator-open-design is under Fable /tmp/oficina-home-open-design-review: actual modernc path-swap negative demonstrates naive path checks fail; proposed command-only actual writable-fd proof has not been approved or wired. New launch fd4 read-only artifact fits candidate exclusion but needs follow-up prose alignment. Production and deployed previews unchanged; no new deployment this phase. |