amadan
Record revised dependency and preparation evidence
1 file changed,
+8
−0
implementation/overnight-2026-09-07.md+8 −0
No CI script — run details
CI log
amadan: no CI script — add an executable .amadan/ci or a `ci` target to the Makefile
diff --git a/implementation/overnight-2026-09-07.md b/implementation/overnight-2026-09-07.md| index 06f0a7d..e4e7e81 100644 |
| --- a/implementation/overnight-2026-09-07.md |
| +++ b/implementation/overnight-2026-09-07.md |
| @@ -861,3 +861,11 @@ Home consumer manifest was changed only in credential environment overnight-home |
| - Result capturee1153d5eb854fdece8de8076322a8f1e3e16e5c4 passes exact CI, local full gate, race and four semantic mutation controls. Dedicated stdout pipe is owned and bounded by a live deadline and 64KiB cap; cancellation and overflow discard partial output. Encryption does not authenticate the worker. No worker/result endpoint mounted, no Fable verdict (task24). |
| - Home opened-DB connector and native operatora6057b1 pass full gate and exact CI; actual process-lock negative proves transient file-probe closure would release SQLite locks, corrected connector retains the main pin and checks siblings without opening them. New local provisioning state382858f is committed/pushed on feat-provisioner-state: signed encrypted immutable plans/operations, separate exact result records and role-specific accepted heads. Focused crash/rollback/privacy tests pass, full gate running; no accepted CLI completion or remote dispatch. |
| - Root isolated upstream Litestream patcha6ef81818569ecc73f657832438c470acd62abe0 stops store monitors before database close and joins snapshot producers after failed uploads. Both original-source regression controls fail their intended assertions. Full upstream race, vet and pre-commit pass; all platform lease race tests and ten actual checkpoint/VACUUM/restore/transfer runs pass with a test-only modfile replacement. Upstream main4ed7a308 retains the shutdown ordering defect. Required behavior suite is still running as session5605; /tmp/oficina-litestream-close-proof/candidate.json and snapshot-shutdown.patch preserve evidence. Task26 tracks review/integration. No real repository dependency change or upstream publication; independent review and upstream human review remain outstanding. |
| + |
| +## Revised dependency and local provisioning preparation — 2026-09-08 |
| + |
| +- Litestream dependency candidate b39d75dc149a2c2a3598d6955203aab0889588a6 is local, committed and unpublished. It corrects the cancellation cycle introduced by initiala6: cancel both store and database background contexts before joining store monitors, while retaining open database descriptors and the caller's final-sync context. Actual regression waits for the store monitor blocked in DB.IsOpen during remote initialization; earliera6 fails its cancellation assertion, revised code passes ten race runs. The preliminary execMu description was not the exact reproduced lock. |
| +- Failed upload now has a separate actual producer barrier regression using a synchronous log handler. Ten race runs pass; removing only the producer join fails the intended assertion. Revised production code passes full upstream race, full platform internal/lease race via test-only modfile, and pre-commit formatting/vet/staticcheck. All four final load tests run against a rebuilt candidate with an explicit20m timeout, session86662; do not promote priora6 behavior receipts to final-candidate proof. Exact evidence and queued review prompt are /tmp/oficina-litestream-close-proof. No real dependency replacement or Fable approval. |
| +- Activator candidate5ae8709816b60c46492a6058036a6a18c8f09aee adds MarkAnswered to intentional maintenance refusals and passes local gates; intermediate2c1a646 exact CI passed. Root audit flagged captured process handles returned alongside startup errors (main and sidecar) for checked cleanup; author is investigating before final review. Final integration must avoid activator/provision/maintenance import cycles, using the reviewed shared validator or a separate worker package. |
| +- Home382858f0058c973ddabf5e0db838b6d30de0111d full local gate passed after moving test scratch off the full /tmp volume. Remote CI retains its SQLITE_FULL failure; the supported authenticated writer UI can rerun that exact commit at https://amadan.net/oficina/home/-/ci/382858f0058c973ddabf5e0db838b6d30de0111d . No internal-token bypass or empty commit. |
| +- Homecaa16b5 on feat-provisioner-prepare adds local native preparation: exact saved signed bytes go only to a validated anonymous write pipe, metadata to stdout, failed pipe output retains exact retry state. Initial actions are initialize/existing-only owner-seed/seed-team/provision-consumer; verify/activate remain unavailable until the checked-record/evidence collectors exist. Focused subprocess/privacy/bounds tests pass; full gate running, no dispatch or review approval. Production and previews remain unchanged. |