362 Commits

Author	SHA1	Message	Date
mosaic-coder	99af3066db	test(wake): T11 guard unshare-mount fault-injection unavailability (skip in non-privileged CI, like T9) ... #933 CI was RED: the non-privileged Woodpecker runner DENIES `unshare --mount` inside a user namespace ("unshare failed: Operation not permitted" / "can't mount none on /"), so T11's bind-mount-EBUSY cursor-write fault injection could not set up and the inner enqueue never ran — leaving T11's "diagnostic must name the cursor write" assertion checking an empty errfile and FAILING. T9 uses the same unshare+mount mechanism and survives only because its post-assertions are trivially true when nothing was injected; T11 lacked that tolerance. Fix (test-only): the inner (namespaced) script now drops a WITNESS marker AFTER the bind-mount is in place and immediately before the enqueue. When the injection cannot be constructed (unshare unavailable, or unshare/bind-mount denied so the marker is absent), T11 prints a clear `SKIP:` line and does NOT run the failure-path assertions — harness stays GREEN, matching T9's tolerance of the same unavailability. When the injection IS available (privileged/local), the marker is present and T11 runs the full assertion set UNCHANGED (fail-loud + cursor-naming diagnostic + observed.set/cursor consistency + intact consumed prefix). Verified: non-privileged node:24-alpine -> T11 SKIPS, store-ack 12 groups + full `pnpm run test:framework-shell` rc=0; privileged/local -> T11 runs full + passes. store.sh (product fix) and manifest are UNCHANGED. shellcheck clean; BusyBox-portable. Part of #892 Refs #917 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0158NZqN2n2ymKFeJAZ4GUCb	2026-07-26 09:55:57 -05:00
mosaic-coder	eb37eae1f8	fix(wake): #917 gate the final observed_seq cursor write + observed.set/cursor consistency (defense-in-depth) ... Defense-in-depth hardening of store.sh cmd_enqueue surfaced by the #915 review (obs#2): the final observed_seq cursor _atomic_write was the ONE durable write not wrapped in a failure check, and was cross-file non-atomic with the observed.set write immediately before it. Practically unreachable today, but a cursor-write failure after a successful observed.set write could (a) return spurious success while the allocation stayed uncommitted, and (b) leave observed.set advanced while the cursor lagged (cross-file inconsistent). Fix (additive; preserves #908 exactly): - GATE the final cursor write like the pending/observed.set writes (#908): a cursor-write failure is now FAIL-LOUD (non-zero + diagnostic), never swallowed. - On cursor-write failure, ROLL observed.set BACK to its pre-write snapshot, so observed.set and the cursor either BOTH advance or NEITHER does — never a stranded observed.set entry above the cursor. #908 invariants intact: single store-side allocator, atomic allocate+enqueue under flock, arrow-1 no-burn (pending write still FIRST, still aborts before any cursor advance), anti-swallow <=consumed fail-loud, W2 contiguous-prefix CONSUMED. The cursor stays the sole COMMIT point, so a pending-ahead state is exactly the one #908 already tolerates on its observed.set-failure path. On-disk format UNCHANGED (read-compatible). Test: new T11 in test-wake-store-ack.sh forces the final cursor _atomic_write to fail (bind-mount EBUSY over observed_seq inside an unshare mount+user namespace, seeded so the cursor READ still succeeds) after pending+observed.set succeed, and asserts fail-loud + observed.set/cursor consistency + intact consumed prefix. RED against pre-#917 code; all store-ack/race/reconcile/detector groups stay GREEN. manifest bumped 0.6.8 -> 0.6.9. Closes #917 Part of #892 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0158NZqN2n2ymKFeJAZ4GUCb	2026-07-26 09:18:59 -05:00
jason.woltje	17087efe15	fix(wake): #925 framework-ship canon fallback-wake (systemd timer + schema bound + A10 install/validate) — F7 out of the box (#931) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-26 13:44:51 +00:00
jason.woltje	0ea41e848b	fix(wake): #913 installer adoption gaps — _lib dep-check fail-loud + mosaic-wake.service systemd-search-path link+validate (#930) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-26 12:37:29 +00:00
jason.woltje	347c1d57c1	fix(wake): #924 route dead-letter quarantine alarm via WAKE_ALARM_SINK_CMD with per-observed_seq dedup (G2a) (#929) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-26 11:45:09 +00:00
jason.woltje	13e6ce5e5c	fix(wake): #927 enqueue TOCTOU — move stale-tmp cleanup off the hot enqueue path (no concurrent in-flight-write clobber) (#928) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-26 10:56:40 +00:00
jason.woltje	90265ef550	test(wake): #923 de-flake T10 concurrent-enqueue race (deterministic barrier) (#926) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-26 10:23:07 +00:00
jason.woltje	937a276208	fix(wake): #920 quarantine render-refused drain entry (no head-of-line block) + reconciler enumerations render orientation-tier (reconciled:true, render-tier not class=digest) (#922) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-26 08:45:51 +00:00
jason.woltje	712c770b7a	fix(wake): #912 exercise the digest/HMAC trust suite in real CI (fix runner divergence + openssl + hard-require) (#921) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-26 08:11:28 +00:00
jason.woltje	d967a4a926	fix(wake): #914 digest renderer — WAKE_AGENT-prefixed ack line + digest-class locator threading (#916) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-26 07:13:07 +00:00
jason.woltje	c585ac3326	test(wake): #918 de-flake T7 ack-no-network-block (sub-second timing) (#919) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-26 06:46:28 +00:00
jason.woltje	e2ec927b1c	fix(wake): #908 unify observed_seq on a single store-side allocator (dissolve detector-private-counter seam) (#915) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-26 06:02:02 +00:00
jason.woltje	2378665eaf	feat(wake): W7 A10 idempotent installer + mosaic-wake.service (component-manifest, Gate-A, blank-reset retire, snapshot-guard, fail-closed install-validate) (#911) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-26 04:19:09 +00:00
jason.woltje	003cdaa1a6	feat(wake): W6 — off-host dead-man beacon + pluggable alarm-sink adapter (#910) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-26 02:30:28 +00:00
jason.woltje	320f5bfb6f	feat(wake): W5 — synthetic-canary FN-oracle + source-parity reconciler (#909) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-26 02:04:19 +00:00
jason.woltje	5df47e735e	feat(wake): W4 — per-host delta-gated detector daemon (fail-loud source semantics, enqueues to W2 store) (#907) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-26 01:04:55 +00:00
jason.woltje	dd1391fd76	fix(wake): digest hard-locator gate covers top-level .claim entries (Closes #905) (#906) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-26 00:58:40 +00:00
jason.woltje	10d957d095	feat(wake): W3 — cumulative-state digest renderer + non-circular HMAC signer (#904) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-26 00:32:12 +00:00
jason.woltje	28f022d9c0	feat(wake): W2 — three-cursor durable store + RECEIVED/CONSUMED ack-wrapper + watch-list schema (#903) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-25 23:58:08 +00:00
jason.woltje	2726fab5e0	chore(framework): wire agent-send.test.sh into CI test:framework-shell (W1 follow-up) (#901) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-25 23:23:24 +00:00
jason.woltje	ab6e8e80dc	fix(framework): send-message.sh fail-loud submission verdict + regression tests (Patch 6) (#895) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-25 22:57:11 +00:00
jason.woltje	1933c6cb1d	feat(framework): accept digest message class in agent-send.sh (W1) (#894) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-25 22:56:46 +00:00
jason.woltje	48a0c86093	fix(lease-broker): recovery_runtime_unittest wait_ready() connect-probe (co-equal CI flake, cherry-pick #898) (#900) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-25 22:26:38 +00:00
jason.woltje	79c8647fd9	fix(lease-broker): wait_ready() polls real connect-readiness not socket-file existence (flaky CI race) (#898) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-25 22:10:15 +00:00
jason.woltje	2483dada33	fix(framework): pr-review.sh -r/--repo + -H/--host overrides + UA + repo preflight (Patches 5/5c) (#896) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-25 22:08:08 +00:00
jason.woltje	4c117afe03	docs(framework): add WAKE-DOCTRINE.md guide (W0) (#893) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-25 21:57:51 +00:00
jason.woltje	2698ddb7b5	feat(comms): P1 presence — minimal Synapse + fleet presence room + mosaic.presence heartbeat + liveness (#888) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-25 21:03:18 +00:00
jason.woltje	3c7890f17f	fix(framework): detect-platform get_gitea_token fail-loud on absent per-slot token (Patch 2b) (#890) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-25 20:51:19 +00:00
jason.woltje	529c177830	fix(update): mosaic update runs the install-ordering guard post-reseed (#882 --sync-only bypass) (#883) ... Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-23 22:18:34 +00:00
jason.woltje	a32ce4c8f9	feat(869-c4): activation version-coupling assertion (Part of #869) ... Part of #869 Mos (id-11) Gate-16 merge: independent APPROVE @90eb48fa (fail-closed identity locks byte-unchanged verified), author id2 != approver id11, clean mosaic-coder author, CI green wp1992. #869 Point-1 CODE COMPLETE (C1/C3/C5/C2/C4). Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-23 19:07:27 +00:00
jason.woltje	d351caad36	feat(869-c2): install-ordering enforcement-hook guard (Part of #869) ... Part of #869 Mos (id-11) Gate-16 merge: independent APPROVE @b6f36564 (8/8, verified vs real production settings template), author id2 != approver id11, clean mosaic-coder author, CI green wp1988. Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-23 18:48:33 +00:00
jason.woltje	76b86a246e	feat(869-c5): mosaic doctor activation-check (Part of #869) ... Part of #869 Mos (id-11) Gate-16 merge: independent APPROVE @e75e3238 (8/8), author id2 != approver id11, clean mosaic-coder author, CI green wp1987. Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-23 18:38:21 +00:00
jason.woltje	4422231bdb	feat: per-agent Gitea identity resolution (#873) ... Closes #873 Mos (id-11) Gate-16 merge: independent APPROVE @4b472a22 (author-blocker dissolved via (a) re-author, identical tree hash to tech-approved head), author id2 != approver id11, clean mosaic-coder commit-author, CI green wp1985. Framework train COMPLETE 6/6. Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-23 18:09:34 +00:00
jason.woltje	8504216964	fix(pr-review): case-insensitive _belongs slug compare (#875) ... Closes #875 Mos (id-11) Gate-16 merge: independent APPROVE @9d8d58ae, author id2 != approver id11, clean mosaic-coder commit-author, CI green wp1982. Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-23 17:53:26 +00:00
jason.woltje	7edc9b3121	fix(gitea): direct REST comment/review with fail-closed read-back (#865) ... Closes #865 Mos (id-11) Gate-16 merge: fresh confirmatory independent APPROVE @8ac7e70f (1241-case fuzz 0 fail-open), author id2 != approver id11, clean commit-author, CI green wp1966. Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-23 17:25:32 +00:00
jason.woltje	2f50c0876b	feat(869-c3): lease-broker supervisor unit (Part of #869) ... Part of #869 Mos (id-11) Gate-16 merge: independent APPROVE @75235ef8 (9/9, no live host mutation), author id2 != approver id11, CI green wp1971. Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-23 17:19:48 +00:00
jason.woltje	db90da347e	feat(869-c1): activation-capability probe (Part of #869) ... Part of #869 Mos (id-11) Gate-16 merge: independent 3-round APPROVE @c5a2bcc5, author id2 != approver id11, CI green wp1973. Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-23 17:14:57 +00:00
jason.woltje	48fd1df28a	fix(ci-queue-wait): treat absent branch (404) as queue-clear (#872) ... Closes #872 Mos (id-11) Gate-16 merge: independent review APPROVE @23cbdaf8, author jason.woltje(id2) != approver Mos(id11), CI green wp1974. Co-authored-by: jason.woltje <jason@diversecanvas.com> Co-committed-by: jason.woltje <jason@diversecanvas.com>	2026-07-23 17:08:57 +00:00
jason.woltje	b79336a8c1	feat(orchestrator): board-roll.sh — auto-roll LIVE board to LEDGER under byte cap (#868) ... feat(orchestrator): board-roll.sh - auto-roll LIVE board to LEDGER under byte cap Closes #868	2026-07-22 09:20:03 +00:00
jason.woltje	b0d78d8632	fix(mosaic): de-flake mutator-class lease gate TTL-expiry test (#861)	2026-07-20 10:32:45 +00:00
jason.woltje	344d86a635	fix(#812 follow-up): normalize detect-platform.sh host-match port comparison by scheme (#859)	2026-07-20 10:13:29 +00:00
jason.woltje	acd7d380f6	fix(framework): install deps on worktree bootstrap + legible deps-preflight at gate seam (#856) (#858)	2026-07-20 09:38:12 +00:00
jason.woltje	3b70c66c07	fix(framework): drop unsupported --comment from tea pr approve/reject; route review body via durable comment (#835) (#857)	2026-07-20 09:19:48 +00:00
jason.woltje	aa999daf1b	fix(framework): durable Gitea comment posting in pr-review.sh via REST + read-back verify (#812) (#852)	2026-07-20 06:45:48 +00:00
jason.woltje	77c9a82614	fix(lease-broker): de-flake recovery_runtime b2 broker-socket ConnectionRefused race (#849) (#851)	2026-07-20 06:44:37 +00:00
jason.woltje	627cf2bb38	docs(fleet): add operator configuration guide (#789)	2026-07-20 05:22:25 +00:00
jason.woltje	0582a8912b	WI-7 #834: T-C server-side branch-protection posture + R1 honesty amendment (#847)	2026-07-20 04:20:02 +00:00
jason.woltje	2509eb7646	WI-6 (#833): constrained recovery command + mosaic-context-refresh skill wrapper (#846)	2026-07-20 03:33:00 +00:00
jason.woltje	07553ead33	WI-5 #832: Receipt-challenge protocol (compaction-refresh, milestone 188) (#845)	2026-07-19 23:18:56 +00:00
jason.woltje	e522b22fa4	WI-4 (#831): verbatim-hashed normative fragments (B_payload/H_payload) (#844)	2026-07-19 20:34:20 +00:00