oficina / suite Public

Record deployed Home membership transport and remaining integration gates

Paul Campbell pushed by paul@keymail.dev 1 month ago d5f6b3846d44f764a0a4ed6ba3567c32c89b2323 parent c8ef1d4

1 file changed, +10 −0

implementation/overnight-2026-09-07.md +10 −0

No CI script — run details

CI log

amadan: no CI script — add an executable .amadan/ci or a `ci` target to the Makefile

diff --git a/implementation/overnight-2026-09-07.md b/implementation/overnight-2026-09-07.md

index aa6835f..5dab83f 100644

--- a/implementation/overnight-2026-09-07.md

+++ b/implementation/overnight-2026-09-07.md

@@ -823,3 +823,13 @@ Home consumer manifest was changed only in credential environment overnight-home

- Platform maintenance R2 ended permission_denied after outside-directory SDK inspection, with no verdict despite exit0. R3 uses identical frozen0c59 git-archive source under /tmp/oficina-maintenance-design-review/r3-source, exact SDK DeleteObject source, infra2599130 and synthetic VACUUM receipts copied within its allowed directory. Same configured Fable5/plan permissions, no bypass. Active service oficina-maintenance-design-review-r3-20260908; r3-review.ndjson/r3-exit.json are authoritative. No maintenance implementation. Source-consumer-inventory.json records overinclusive24 record mutation,39 raw-delete,168 decode and20 replica-lifecycle callsites; it is preparation, not proof the inventory is closed.

- Docs checkpointdd1f126 adds unified permission scope, transactional write/commit guards, buffered response guards and TeamMode status handling; full local gate passed, remains unmounted. Actual SQLite queue revocation and post-insert expiry rollback tests pass; removing final guard is killed. Stream implementation found legacy Rastrillo Sessions.From has uncancellable QueryRow. Consumer agent now implements canonical Sessions.FromContext in isolated framework feat-session-context (discussion23/task22), preserving old API. Focused tests/race and actual writer-blocked cancellation/deadline proof pass; QueryRowContext-to-QueryRow mutation is killed, full framework make ci running. Docs will use one private direct struct conversion over canonical validation, with legacy-reader parity, not copy session parsing. Publication/focused Fable and whole Docs review still required.

- Live previews remain Home171, Docs1e and Sheets20c; production aliases unchanged. Current supported Home route listing confirms exact overnight-home/overnight-directory environments and ready/Asleep, which is not proof of the proposed maintenance preflight capability. No new deployment this phase. Next stage remains corrected Home HTTP with serving disabled, exact body/header/transport/browser verification and independent canary review, while approved operator and Docs runtime work proceeds.

+## Deployed Home roster transport stage — 2026-09-08

+- DEPLOYED9e9613d0a54c57e1e284904e26179ba9816eff4f to both https://overnight-home.bds.oncarlos.com/apps/docs and https://overnight-home-id.bds.oncarlos.com/signin, using the existing canary/overnight-home channel and unchanged named configuration. Roster serving remains disabled, no key/bootstrap/team records added. /tmp/oficina-roster-http-release/verified.json proves both actual API bodies and edge headers9e; ARM64 SHA2566ade682d1c7862dad5c8921ebb316cabdd0a63b47aad4e67e958cf7688ce29c2. Credential initially had body171/header9e while directory was already9e; exact-host supported restart reported asleep, ongoing supported deploy then completed and both bodies converged. No raw platform intervention.

+- Fable R1fd119 and corrected R2 explicit APPROVE, full corrected gate/race and exact9e CI green. R2 prose heading accidentally combined9e prefix with an old suffix; actual clean-source runner, prompt, CI and corrected header inspection identify9e. Original verdict preserved with annotation in /tmp/oficina-roster-http-release/candidate.json. Actual archived platform compressor proof passes28 cases across seven response statuses, known/streamed lengths and old/corrected headers. Old171/newfd119 compatibility remains explicitly scoped; the only9e production delta is Cache-Control:no-store,no-transform, with no schema/runtime/dependency change.

+- Six real-edge unsigned GET/HEAD checks pass at /tmp/oficina-roster-http-release/disabled-roster.json, and eight Chromium/WebKit x JS on/off x320/1280 live browser entry/sign-in cases pass at browser/results.json. No human email or authenticated deployed team-flow claim. User notified on directory adoption, then both hosts and completed browser checks. Fable canary evidence review is running from exact git-archive9e plus bounded receipts at /tmp/oficina-roster-http-canary-review/source; service oficina-roster-http-canary-review-20260908, review.ndjson/exit.json authoritative. Merge still pending that verdict; Home34 updated, implementation task37Done.

+- Platform design R3 at0c59 explicitly CHANGES REQUIRED: incomplete raw-purge/parser/registry consumer inventory, console omitted from maintenance-aware writer floor, missing awake-sidecar restart barrier, and post-whole-file-rewrite restore fidelity. Revised frozen6a81dacfe4949520efce8fb55dec1dbec8e43bfd addresses all four. Independent coordinator source audit also makes guard hostname-global (local DB and replica are host-only), and adds a non-expiring monotonic CAS lifecycle claim shared by maintenance/trash/restore/purge before any side effect. Whole-file rewrites require private scratch restore plus actual post-operation semantic receipt comparison; wrong-ETag store capability probe required. No platform code or operation. R4 active at /tmp/oficina-maintenance-design-review/r4-review.ndjson, service oficina-maintenance-design-review-r4-20260908, exact6a source snapshot; preserve frozen branch until terminal.

+- Pending-consumer staging design42529b5 explicitly Fable APPROVE at /tmp/oficina-pending-consumer-review/verdict.txt: exact consumer/bindings/owner/epoch, immutable600s expiry, no replay extension,60s residual lease ceiling, live-only chooser and transaction-bound activation. Producer agent now owns feat-roster-pending from9e, Home40/task41; operator author owns additive schema/writes. Existing roster_operator_receipts CHECK enum stays untouched.

+- Home operator implementation checkpoints f80ea16/cd598f6/89aadfc are pushed: signed input/owner receipt and actual Sqids vectors; immediate-transaction engine with sealed replay/results/FK proof; empty verification and consumer-pointer schema. Domain/staging/activation writes, fixed command and durable external provisioner remain underway; no readiness claim. No approved reserved-label vocabulary exists: use DNS shape, suitewide unique reservation, signed exact label and compiled canonical origin; actual host ownership/availability still required before activation.

+- Canonical framework FromContext correctiond9c28d7085567552668ead32fcf3651038b98e72 explicitly Fable APPROVE, /tmp/oficina-session-context-review2/final.txt; revised full gate finishing before push/exact CI/publication. Removed unrelated writing/ ignore diff, preserved writing artifacts under /tmp, bounded real-writer deadline observation, closed-DB parity and routine cancellation logging fixed. Docs adapter/stream integration follows publication: original opaque stream lease is never extended; nonblocking validity plus context-bounded session/grant checks precede each event, expiry/fencing closes and reconnect gets fresh admission. Full Docs runtime review/activation remain pending.