Compare commits

..
654 changed files with 881 additions and 127445 deletions

No files matched your search

-85
View File
@@ -5382,88 +5382,3 @@ Gander: after Duckworth-0100 design approval with C1-C5, prepared the two host-s
2026-10-23T02:21:06Z | Sage, rows 270+271 landing, 571 landing, MVP rows | Before: 270 (#1775) and 271 (#1776) were approved on gizmoduck/row270-271-r4 49cee846e and 2b964a082 after combined gate C2 run 5 GREEN on 53406f3e4 (bus 873, seat 202, cli 905, ten scripts, 38/38 mutants). After: 33 commits cherry-picked onto 767bb62c7 as 7328da8ca, range-diff all "=", 40 paths identical to the candidate; 270 manifest f4174458 matches, 271 manifest 3ab1f5c8 matches on 29 paths, the other 4 moved under 270 and match its manifest. Done revs 3396/3398, #1775 c30962 and #1776 c30964 closed, P19 463 c861. 571 (Gyro, Fenton APPROVE) picked as ee5f7b9ef, 6345aae3d, 767bb62c7 (blobs 9382f85b, 7ec0897b), 1ac76a417 left out; N7 911dad2aa (Fenton-0014) picked after. Rows 293-299 added (574, FED R6, R4, R7, GitHub grant, Q228, 573), queue commit 253346e3c. Correction: the push sync step checked out O..S paths over the canonical worktree without testing for uncommitted edits, so any pending SESSIONS or BUILD-LOG line in the canonical checkout at 02:06Z would have been overwritten; the sync now skips edited paths. Schema 3n is not live (LIVE 0cbe2e9b3 at 3m).
2026-10-23T03:59:52Z | Sage, row 293 (Vikunja 574) landing and 3m-3n live window | Before: live 0cbe2e9b3 at schema 3m; 574 approved by Filbert (c30982, cdda41f5) on gander/v574-r2 a9cae2bd6 after run 2 GREEN on 6bfab273b (four files 153/0, seat 202/0, cli 905/0, 312 flagged commits with 0 maintenance children). After: Darkwing's window put live on 464010fbe at 3n (activation 20261023T034557Z-464010fbe4c6, 26/97/5/28, Console 7332 200, W9b pm ra38826f3c6e2 left live, STATE darkwing/window-migrate-3n 8708927e5); 574's six commits cherry-picked onto 464010fbe as e51d11640, range-diff all =, patch-ids equal, only docs differ from a9cae2bd6. #1805 closed c31013, P19 386 c887 and 574 c888. Residual: queue store.mjs, discord git.mjs, harness tools.mjs commit without the maintenance flags; no whole-root test covers them yet.
2026-10-23T05:47:17Z | Sage, row 292 (#1797) landing, idle-stop race row 302, rows 300/301, row 294 rounds 2-3 | Before: refactor 4a9c536e8; 292's gate on 0d0021454 hit one red at compactions-launch.test.mjs:229, ['session-invalid',22,null] where ['stopped',0,null] was expected, product and test unchanged. Gizmoduck read it as a race: threadIdle releases the claim, then the launcher sends SIGTERM, and a runner call in between gets not-holder and exits 22. Mos (mos-1411) rejected loosening :229, let 292 count one whole unedited green cli rerun, and allowed one rerun for that exact signature on other gates until the race row lands (hits logged on Vikunja 588). The 10-run diagnostic passed 10/10, but one runner log (r846b8d083502) showed not-holder then exit 22. After: the cli rerun was 910/910. 292 LANDED 6aab979e6 05:18Z (7 cherry-picks, range-diff all =, patch-ids equal), done rev 3447, #1797 closed c31038, Vikunja 588 c891. Briefs 86d5ac69b (R6-N1 #1807, R6-N4 #1808, rows 300/301) and e3ef1eaf6/fdedc56e2 (race, #1809, row 302). Row 302 design d1/d2 approved by Dewey with D1 (role.claim refuses a released run), c31044. Mos ruled landRelease folded in, code launcher-released, and four old-test lines moved to exact values (mos-1414/1415/1416): threads.test:394, runner.test:771-772, land.test:464. Row 294 round 2 stopped at webui G5 granted-user.test:269: max(seq) over an empty events table is NULL. Round 3 is one line, coalesce(max(seq),0) (mos-1417), Duckworth APPROVE c31045 rev 3462, gate pending. Queue commit 756284e8e (revs 3448-3456). Correction: two review-request attempts this window ran without MOSAIC_GITEA_CREDENTIAL_FILE exported and failed (3450 Launchpad, 3451/3452 Sage); the posted request was 3453/3454.
2026-10-23T07:11:43Z | Sage, row 294 (#1800) rounds 3-4 and landing, row 219 edits 2-3, R9 transient and row 303 | Before: refactor 09d0d6faf; 294 run 3 on cb1648f3 stopped with 20 cli reds from two causes. A: the stack-release rehearsal fixture copies lacked cli access.mjs and transport.mjs, which 294's config.mjs now imports. B: the B1-B3 boot tests read warnings that now carry the fixture tracker line. Mos ruled A as two copy-list entries and B as a full pin, no filter: a TRACKER const and deepEqual (mos-1419). After: round 4 8616b9a4f, manifest a1ff5d67, Duckworth APPROVE c31053 rev 3469 with C1/C2. Run 4 from npm ci green: webui 365, cli 909, bus 873, 10 scripts, M1-M11 killed. Merged tree d3059c2c3 (11 cherry-picks, range-diff all =, patch-id 8371405a equal): stack-release-external 25/25, stack-upgrade 21/21. stack-release 223/224 on the first run, R9 at :2178: TypeError on join(r.dir) with r.dir null, so rehearse stopped before its directory and the output was lost. R9 passed 6/6 run alone on d3059c2c3, 09d0d6faf and 24b745447. Mos (mos-1422) allowed one unedited whole rerun: 224/224. 294 LANDED d3059c2c3 07:04Z, done rev 3471, #1800 closed c31068, P19 269 c895. Row 303 (#1810, Vikunja 589, brief ad6ca7930) adds an r.dir guard in R9 only. Queue commit 80793d824 (revs 3464-3473). Row 219: Rocko's second edit 7cbd839d0 (mos-1418, Dewey dewey-0883) restarted and went red at thread-launch C2-09a :489 on a legacy history path. The third edit 5f2ef92e5 (mos-1420, Dewey dewey-0885) reads the native session path. 219 now rebases onto 80793d824, because 294 overlaps its webui files. Correction: the first merged-tree check counted on the 292 drift and found an unrelated transient, and my P19 placeholder sed also rewrote the script's own guard line; the guard refused to post, and I restored the line before posting.
Row 299 (573, #1806, Gander, Filbert): before, the P10 band test timed a fault run minus a separate baseline run, and a loaded whole-suite run went red. Mos approved direct timing from host /proc/uptime stamps with ambient load only (mos-1409). After: rebased onto 80793d824 as ffa93b054 (range-diff 3/3 =, manifest 277ace0b unchanged). Gate 07:26Z-07:50Z: case1 whole 3x 53/0/0, cli whole 917/0/0 (59 files, load 1.54-7.17), P10 inner 2.27 s, outer 4.01 s, M1-M6 killed. M4's planned guard return then exact outer-reason failure counts as its kill (sage-3271, mos-1426). Filbert APPROVE c31084 rev 3485, N1 M1 margin 0.02 s. 299 LANDED ffb2fedfb 08:03Z, done rev 3487, #1806 closed c31087; queue commit 8a35ffadb (revs 3474-3487). Row 303: Duckworth APPROVE c31079 rev 3480 with C1, the whole-file gate. Rows 219 (bfa421b6c) and 295 r2 (b16cef1d0) rebases: Dewey static clean. Corrections: Launchpad and Gander have no token, and the CLI refuses another seat's token file, so I posted both requests as sage (c31082, c31083). My sage-3265 wording led Duckworth to poll queue show into Gander's slot (07:20Z-07:26Z); I ruled it ambient load (sage-3274).
2026-10-23T10:48:40Z | Sage, rows 302, 295 and 219 landings, the Docker pool diagnostic, rows for Vikunja 590 and 591 | Before: refactor 1ac655005. 302 (#1809, Gizmoduck, Dewey) LANDED 3ed9fd754 08:49Z: 7 commits onto 1ac655005, range-diff all =, tree = gated merge 783602e06; queue commit 07802dc57 (revs 3488-3494). Row 219's gate went 11/3 in test-release.sh: release activate's health check failed because Docker could not create sage-diag1437_default, since all predefined address pools were used up. Under mos-1437 I reproduced it on clean 07802dc57 (11/3, the same stderr). I then removed 18 unused gate _default networks, and the rerun went 14/0 with the run-task marker ok. Mos accepted the removal and ruled that a probe that can create something waits for the go and a removal waits for the report (mos-1438). 295 (#1801, Morgana, Dewey) round 2 gate on d68b4300d (manifest e94c9aeb) was green. It LANDED 2efd127ce 10:10Z: 9 commits onto 07802dc57, HEAD~1 tree = gated a86592ffc. Done rev 3502, #1801 c31105, P19 414 c911. 219 (#1720, Rocko, Dewey): the restart on the post-295 merge 054da642f (manifest 4a2271dd, my mos-1439 call) passed node 2523/0/2 and shells 449/0, with 24 mutants killed. It LANDED 5fdfd7275 10:40Z (8 row commits plus packet-only evidence, tree e86a84a85 = gated). Done rev 3509, #1720 c31110, P19 416 c913. Queue commit 90633c864 (revs 3495-3510). Brief docs/plans/2026-10-23_gate-env-rows.md names rows for 590 (claude-session slug) and 591 (compose network cleanup), and DEFERRED.md gets 219 N1 (U6). Row 272 (Huey) conflicts with 5fdfd7275 in code, so it moves back to in-progress for a rebase. Its new fallback is bounded to a session.list access-refused on an omitted-session route (sage-3357). Corrections: my network create probe ran before Mos's go, and the removal ran before the report. My first slot-order line put the diag start at 09:44Z; it was about 09:41Z. My 219 push piped its output through grep, but the after-fetch confirmed origin. Queue commit 90633c864 also carries Huey's rev 3510 (272 back to in-progress), and its message names only 3495-3509.
2026-10-23T11:03:46Z | Gyro Vikunja571 mos-1444 PRD d8 follow-on | Branch gyro/editor-571-d8 from origin/refactor c16e943b9. Both designs now keep library.convert outside ACTIONS/ROUTED and broker processing, retain REQ-WAIT-1/hard-wait test unchanged, constrain unmarked story eligibility to mapped book/playground scope, and add whole-host pre-import restore recovery from remote import manifests plus the Gitea archive commit. Lookups refuse until one current version is proven; VM1012 restore needs Jason present under Q185. W7 no longer owns hard-waits.test.mjs. Canonical queue next gyro returned nothing; direct Mos assignment governs. Static diff, exact replacement and append-only checks pass. No code, tests, build, browser, private-file or live action. Fenton re-check requested after authorized branch push.
2026-10-22 | Huey | Row 272 / 264e (#1777) preparation on huey/row272, base 2d0d407ba. Before: bus session metadata and launcher isolation exist, CLI/Console expose only the saved thread default. Draft: session CLI, Console chooser with isolated drafts/cursors/receipts, metadata counts and safe-clear operation receipts against Gizmoduck's 0260 contracts; narrow deferred B6 reply fence. Tests authored, not run: Gander row 253 holds Sage's slot; no Node, claim, HTTPS git, push or live changes. This entry records preparation after the first draft, not a green acceptance result.
2026-10-22 | Huey | Row 272 draft, 264d additive contract gizmoduck-0272 (78e14352f). Added confirmed cancellation through the human channel, cancelled receipt retirement distinction, named refusals and routed-message cancellation output. Before: cancelled was not recognized as terminal; after: draft CLI stops polling and Console shows the before/after retirement outcome. Acceptance remains unverified: no Node/tests/claim/commit/push under Sage's gate. No runtime/lifecycle authority expanded.
2026-10-23 | Huey | Row 272 / 264e sage-3141 local rebase. Before: uncommitted draft on 2d0d407ba. After: same draft on new huey/row272-b23783f39 at b23783f39, with 270/271 landed (7328da8ca) and schema 3n. Product changes auto-merged; both append-only logs retain the full new base and original Huey additions. Checked landed session.list and clear/cancel/operation envelopes against the wired draft: no incompatible contract change. Historical unavailable-dependency cases stay as stand-ins; actual base supplies counters and lifecycle state. No tests/Node/claim/commit/push while Gander holds row 574 run 2. Existing-test fixture/assertion delta is named in the packet for Mos's ruling via Sage before execution.
2026-10-23 | Huey | Row 272 sage-3145 preservation correction. refs/stash is shared, so it was unsafe as sole draft storage. Pinned exact stash commit 07dc9d2f7944b4781b5e80dfa18425f4749f7a45 to local huey/row272-stash-keep and left the entry untouched. Sage explicitly directed committing the rebased draft before testing to preserve it: an untested local checkpoint, no acceptance claim. No Node/test/queue/network/live action. Separate claims and test CLEARs remain pending; old-test delta is with Mos via sage-3144.
2026-10-23 | Huey | Row 272 early static review follow-up, scrooge-272-early-read-huey-1. Before: a bad-session 404 erased sibling draft/recovery caches, malformed clear/cancel write receipts omitted the audit line, and another session's op key produced an ambiguous error. Draft after: purge only on named thread-level refusals, write one redacted malformed-receipt audit line, and identify key reuse without a write. New browser/HTTP/CLI tests authored, unrun under test hold; approved old-test hunks unchanged. Published 850b22680/round-1 manifest unchanged; follow-up is uncommitted, no acceptance claim.
2026-10-23 | Huey | Row 272 round 2 on row 219 landing 5fdfd7275, after 295. Replayed round 1 and B1/N1/N2; seven conflicts resolved retaining both log histories, both test sets, 219 instance chooser and 295 owner-settings-only transport. Static comparison confirms old tests differ only by mos-1388 approved hunks. Sage3357/Mos1442 authorize bounded granted-user legacy fallback: only session.list access-refused and omitted-session route; no new session grants or owner routing. RED first under3358 on new file only: 1 expected legacy assertion failure, 3 guards pass, 3.504s, TMPDIR mktemp/no underscore, no compose network; slot returned as huey0035. Then implemented fallback and added timeout/bus/malformed guards plus isolated-copy mutant runner, all unrun afterward. Candidate commit/push precedes Sage's full gate by3354; no green claim.
2026-10-23 | Huey | Row 272 round 3 per mos-1455 / sage-3435. Gate run 1 on b44332a93 RED: bus 891/0, business 231/0, CLI 940/1, plugins 110/1, webui 372/20; no mutants. Fixed only new CLI fixture role authority and three null-old render guards. Catching browser tests unchanged. manifest.r3 freezes the same 17 paths. Authorized pre-gate follow-up commit/push; no local tests, Node or queue writes; separate compactions dependency and Sage gate remain pending.
2026-10-23 | Sage (1ef1e4f8) | Row 272 landing (#1777, 264e) | Gate r4 on bea0c8e1c over 1e629c892: bus 891/0, cli 941/0, webui 392/0, business 231/0; plugins 110/1, the single red being row 65 harness.test.mjs:192 naming compactions.mjs, which row 307 owned and fixed. M1-M6 and F1-F4 killed, restore clean. Landed d33989230, queue commit 8dc132bec.
2026-10-23 | Sage (1ef1e4f8) | Row 307 landing (#1814, Vikunja 598) | Six first-parent commits replayed onto 8dc132bec with matching patch-ids, 16 paths equal to 6fdfe3790, manifest digest 17c9f8d9 rebuilt from git. Gate green 14:37:21Z: bus 891/0, cli 941/0, plugins 119/0, webui 392/0, business 231/0, every other package 0 failed 0 skipped, every scripts/test-*.sh passed (skips: test-queue canonical root, test-task live provider x2). M1-M4 killed, restore clean. Landed d243f6b25, DEFERRED 307 N1 0621c439e, queue commit fe4ee8c7b. Correction: my first note said Vikunja 598 done when I had only commented (951); Mos closed it (952).
2026-10-23T17:29:46Z | Gyro Vikunja571 sage-3542 Connections amendment | Branch gyro/editor-connections-design cut exactly from landed PRD1.17 30e6bb680; read REQ-LIB-5 in that PRD. Replaced stale J-b waits in parent and W4. Proposed W8 owns current authorized Markdown/DOCX links/backlinks list, labels, versioned refresh, leakage refusals and fixture tests. Build order under mos-1470/comment961 is W7 closed routing candidate, W8 landing, then W7 human first-real-import opening. No REQ-LIB-8 condition or acceptance change. Q234/mos-1363/S0 M1-M14 and post-10-27/MVP priority fixed. Static diff, twelve brief sections and append-only checks pass. No repo Node, tests, build, browser, queue mutation or live action. Fenton reviews after authorized docs branch push; Sage lands on approval.
2026-10-23T17:32:37Z | Gyro sage-3544 fenton-0016 N1/N2 delta | Before: W7 Gate/final real-conversion list omit the W8 build-order cross-reference and W8 human-view filtering cites agent settings. After: both locations explicitly put W8 landing before human opening as mos-1470 build order, not acceptance; comment/tracked-deletion links are not current story links and never appear in the human Connections view regardless of agent settings. New commit atop approved 5af060fb5, no amend. Static diff and append-only checks pass. Docs only, no repo Node/tests/live action. Fenton checks only this delta.
2026-10-23 | Gladstone | Gitea #1816 / Vikunja 614 hostcheck item 5 and bundle verification | Before: dpkg's correct 750 form falsely fails item 5, and two run-sheet bundle verifies require a missing repository. Draft after: exact root/mosaic/path with octal 0750 equivalence; stat/output unchanged; both verifies use cleaned-up bare scratch repos. Three additive-only test blocks, two planned mutants. Untested under Sage-3738; Sage-3740 authorizes untested branch push for static review. Queue row pending; Sage owns gate and landing.
2026-10-23 | Gladstone | #1816 / Vikunja 614 scope amendment mos-1534, sage-3741 | F1 narrowed to exact 750/0750 and single spaces; F3 allows @ in absolute unit paths with unsafe-character refusals retained; F4 moves copy_tree to / after path resolution. AS_USER audit found git -C and stack-release's existing checkout cd cover the other steps. Added new unit and unreadable-cwd copy tests only. Untested under Sage's no-Node hold; no live action.
2026-10-23 | Gladstone | #1816 / Vikunja 614 F5 draft (mos-1536) | Before: the run sheet omits the explicit notify decision and precheck misses a bus-start refusal. After: section 9a creates a private null-binding decision as mosaic; precheck directly reuses readNotifyConfig and private_dir, and new tests cover accepted and refused decisions. Existing fixture setup additions await Mos approval through Sage; installer unchanged. Untested under no-Node hold.
2026-10-23 | Gladstone | #1816 / Vikunja 614 fixture ruling mos-1537 | Added only three setup lines each to host(t)/world(t) for the explicit null notifier decision. Existing assertions/fakes/lines intact. New install test checks decision bytes/mode preserved and missing decision remains absent. F5 missing-file fault removes the setup file. Untested under Sage's hold; separate follow-up atop 33950cf9b.
2026-10-23 | Gladstone | #1816 / Vikunja 614 F6 and notify parent (mos-1537) | Before: the run sheet's copy check lacks its required CLI wrapper; mkdir -p -m does not guarantee the notify parent mode. After: a separately Mos-gated wrapper --create step follows install and precedes check, as mosaic from cwd /; section 9a explicitly creates both notify directories at 0700. Docs only, no live action; Node/tests still held.
2026-10-23 | Gladstone | Row320 / #1816 first review CHANGES (morgana-0217) | Reviewer run: hostcheck19/19, unit47/47, install24/24, copy17/18; seven of eight mutants killed, M4 survived because both base/mutant failed only cleanup. Fixed this row's F4 test to enter cwd then chmod000, assert no read/search, pass an absolute outside bundle, and restore0700 in finally. Existing tests/setup and production scripts unchanged. Correction untested locally pending Morgana's focused rerun; no acceptance claim.
2026-10-23 | Boyd | Row 298 (#1804, Q228), before implementation completion | Took over Megavolt 7a141269c on boyd/row298 at 45dca69f6 under mos-1496/1502. Approved D1-D6 govern human-only grants.scope.set, empty fallback, in-scope close/evidence and spend recheck. All inherited code UNTESTED; no Node/tests until Sage CLEAR. Plan and static gaps recorded in agents/boyd/work/queue-298/BUILD.md; no live grant or credential access.
2026-10-23 | Boyd | Row 298 (#1804, Q228), targeted verification | On sage-3642 T1 lane B, five whole files serial: business scope 7/0, bus scope 14/0, scope runtime 1/0, CLI scope 4/0, project runtime 3/0 (29/0, no skips). Initial bus fixture typo recorded and corrected. M1-M10 killed by named assertions, source restored and final files green. Dewey dewey-0933 positive control and notes addressed; manifest and evidence in agents/boyd/work/queue-298/BUILD.md. Full package/script gate remains Sage's. No live scope set.
2026-10-23T22:41:07Z | Boyd | Row 298 (#1804), rebase after row 239 | Rebased onto 833ec1cc8d7c11842efb82e57c1a0b256c8d22d7 on boyd/row298-r2 without altering published boyd/row298. Only append-log conflicts; upstream bytes preserved and Boyd suffixes appended. Product merges automatic; row 239 writer-lock revoke and post-revoke error handling preserved, organization.mjs unchanged from new base. Static checks only; UNTESTED on new base pending Sage CLEAR. Details in Boyd BUILD.md.
2026-10-23 | Goldie | Row 322 / #1818 F8/F9 before | The library installer runs the clone importer, whose yaml dependency is absent on fresh clones, and tail -n 1 hides uncaught errors behind Node's version banner. Plan: run the same-commit copy importer, include it in COPY_PATHS, keep the first error line with last-line fallback, append isolated regression coverage. Mos-1550 approves setup-only world(t) additions and the one-path copy-file pin addition. No tests run yet; Sage slot required.
2026-10-23 | Goldie | Row 322 / #1818 F8/F9 after | Importer now runs from the same-commit dependency-equipped copy; COPY_PATHS includes it. One-line refusal selects an actual Error/ERR_ line, avoiding Node's source excerpt/banner, with last-line fallback. Mos-1550-approved fixture setup and one-file pin changes; two append-only regression tests. Under sage-3808 CLEAR, serialized timeout -k 10 runs in /mnt/storage/scratch/tmp/goldieuQ2664: install26/26, copy18/18, pinned-copy10/10; new tests2/2 first run and restored; N installer expected-red2/2, F8 and F9 mutants killed, installer SHA256 restored each time. No unexpected red. Evidence and exact old-test changes in agents/goldie/work/queue-322/BUILD.md; full gate and Morgana review belong to Sage.
2026-10-23 | Goldie | Row 324 / #1820 before (Q247, mos-1555) | New branch goldie/row324 at row298 approved860afc2b6. Design/readers audit in agents/goldie/work/queue-324/BUILD.md: normalize omitted tracker to null, preserve present validation, guard sync readers/adapter config; runtime/instance-settings/broker checks already optional. Existing business.test.mjs98 explicitly requires tracker, so implementation held for Mos approval of removing that one list entry; no old test or product edit, no tests run.
2026-10-23 | Goldie | Row 324 / #1820 draft built (sage-3836, mos-1556) | Claim rev3759. Omitted tracker normalizes null; present including null/malformed stays validated. Loader, business validate, bootConfig trackerFor and Console sync reader handle absence. Row298's guarded runtime/instance-settings/broker paths preserved. Two new test files (9 planned tests); sole old-test edit drops tracker from required-key list under mos-1556. node --check6/6 and diff check pass. No tests run: untested branch push expressly ordered before CLEAR; Duckworth review and Sage gate pending.
2026-10-23 | Goldie | Row 324 / #1820 rebased verification (sage-3850) | Rebased onto3569bf54f as7e59ba8b3; only append-log conflicts, eight manifest files byte-equal. Serialized timeout-k10 scratch TMPDIR goldieOdgIjr: new business5/5, new CLI4/4 (includes Console absent read), existing business21/21; presence mutant killed, bytes restored, new files rerun5/5 and4/4. No unexpected red. Published rebased branch goldie/row324-r2 preserves original remote draft without force-push. Evidence/mutant diff/reader list in BUILD.md; review/full gate pending.
2026-10-23 | Goldie | Row 323 / #1819 before | Case 1 lacks a committed business file. Brief requires actual .53 values and refuses guessing. New branch goldie/row323 from local refactor da537e7d1; source review shows project root, literal human id, tracker sync identity/reference metadata and launch model values absent from DESIGN, plus nonempty launch.instances requires another role. Asked Sage (goldie-0008); no config or test written, no test run. Details agents/goldie/work/queue-323/BUILD.md.
2026-10-23 | Goldie | Row 323 / #1819 static blocker (sage-3823) | Mos-1554 requires no bot and an absent, never-created tracker token path. Static tracing confirms this refuses install validation (business cli84-97, credentials78-83) and bus boot (runtime131/157, bus credentials225-228), even without tracker.baseUrl; unset env also refuses at bus credentials278. Reported Sage goldie-0009; no JSON/test/credential written, no tests. Accepted source values/role and refusal-test rulings are recorded in BUILD.md; waiting for product-boundary resolution.
2026-10-24 | Goldie | Row 323 / #1819 resumed draft (sage-3859) | Rebasing prior notes onto Q247 landing dd6cb5872 resolved only append logs. Added trackerless .53 factory JSON: jason, approved project root, chief+assistant for required nonempty launch.instances, claude-code/Opus5.5/high, tester on. No credentials or token placeholder. Seven new tests prepare exact-doc loading plus scratch real validate/install/boot and three refusal paths; one restoring tester-switch mutant prepared. No old test edits; no tests before Sage CLEAR. Source choices/rulings in BUILD.md.
2026-10-24 | Goldie | Row 323 / #1819 pre-test commit (sage-3861 CLEAR) | Sage explicitly requests commit before runs; JSON/new7-case test/restoring mutant and field provenance committed untested before slot work. Exact sources distinguish mos-1554 human/no-bot intent, sage-3820 roles, sage-3822 project/model, and Q247 tracker omission. No old test edits. Next runs: new file, business whole, CLI whole, mutant/restored file, serialized scratch TMPDIR timeout-k10.
2026-10-24 | Goldie | Row 323 / #1819 first slot STOP (sage-3861) | On committed571376c30: new file7/7 and business261/261 green; whole CLI hit unchanged revoke-window.test.mjs170 (test579, row306 R4), no RESULT after20.1s at ask167/Promise.all194. Stopped suite on observing red, cleaned only positively identified own scratch fixture. Partial631 pass/1 fail before termination, not full-suite green. No mutant/restored run, no old-test edit/rerun. Manifest unchanged; Sage notified goldie-0016 and slot returned. Evidence local under queue-323, awaits ruling.
2026-10-24 | Goldie | Row 323 / #1819 second red STOP (mos-1560, sage-3864) | Isolated revoke-window whole-file run1 on unchanged571376c30 failed0/1 after20.126s, same no RESULT at ask167/test194. Start00:24:22Z, load1.46/1.68/2.70, busyhelperCLEAR, fresh scratch goldieBObDQ9. No run2/3/CLI retry/mutant/restored run; no source/old-test edit. Sage goldie-0018 has log/load/error; slot returned, awaits base-dd6cb5872 root cause. Remote remains unverified571.
2026-10-24 | Goldie | Row 323 / #1819 accepted evidence (mos-1561, sage-3869) | Sage traced revoke-window reds to37-byte TMPDIR making109-byte tools.sock >107 limit (session.mjs278), not Codex. Fresh31-byte /scratch/tmp/XXXXXX confirmation passes1/1 in0.84s. On unchanged571376c30 serialized timeout-k10: business261/261, new7/7, tester-switch mutant killed/restored SHA85e6b9ac, restored new7/7. Every log starts UTC/load/helperCLEAR; all positive runs0 fail/skip/cancel. CLI whole acceptance comes from Sage gate under mos-1561; no local CLI rerun. Evidence-only notes/log commit follows, no old test/source changes.
2026-10-24 | Goldie | Row325 / #1821 before (mos-1563/1564) | Real .mosaic/project.json idstack disagrees with Case1 project's mosaic-stack key; row323 scratch fixture omitted project file and only warned. New goldie/row325 at99930362e changes only that JSON key and expressly authorized old assertion key; new real-byte project-copy validation tests require valid and reject old key. Mutant prepared; no tests before Sage CLEAR, no queue writes/host actions.
2026-10-24 | Goldie | Row325 / #1821 after (sage-3882 CLEAR) | Only Case1 projects key becomesstack; only old test70 expected key updated under mos-1564. New3-case test copies real .mosaic/project.json bytes, requires CLI project valid, rejects old key. Serialized shortTMP timeout-k10: new3/3, business264/264, old-key mutant killed/restored SHA9e43bfef, restored new3/3; all positive0 fail/skip/cancel. Manifest4/4 verifies including unchanged project document. Logs/load lines and mutant diff in BUILD.md; no queue writes/host action, Gladstone review/Sage gate pending.
2026-10-24 | Bentina | Row157 / #1652 before (sage-3906, Q246, mos-1566) | Recovered seat/brief/design at ec86f2c84 on bentina/row157. Canonical queue next flags stale brief pin. Outbound audit finds broker gitea-grant node:https and web DNS-pinned node:https paths, triggering I2 explicit stop rule. Sage notified bentina-0001; BUILD.md records shifted cited sites. No implementation/test/Docker/credential/live-state action; awaiting lead re-pin and transport ruling.
2026-10-24 | Bentina | Row157 / #1652 first slot STOP (sage-3910) | New config/helper31/31 and proxy11/11 green. test-config exit1:55 pass/1 old output regression; new install20/20 green. Validator added absent install key to JSON. Stopped before Docker/install suite; slot returned Sage bentina-0004. sage-3916 authorizes preserving absent output shape/defaulting env to local: fixed own loader/new test only, no rerun before next CLEAR. test-config diff +4/-0. No commit/push; seat BUILD and01/02/03 logs.
2026-10-24 | Bentina | Row157 / #1652 after (sage-3919, sage-3923) | Absent install JSON shape preserved; helper defaults local. Existing config56/56, helper/config31/31, final proxy12/12, final test-install exit0 with three release0.0.12 rootless builds/pins, internal TLS/deny/DNS checks and real Vikunja publicGET200/notifier REST dummyGET401 through services proxy. Upstream-reset correction verified. Slot returned bentina-0007; no broader suites by Sage direction. Boyd then Darkwing review, Mos provider-host measurement and Sage landing gate pending. Evidence in seat BUILD and04-08 logs; only bentina/row157 candidate push authorized.
2026-10-24 | Bentina | Row157 / #1652 round2 before (boyd-0023, sage-3933) | Read reproduced B1 half-open refusal socket retention and B2 same-PID exec inherited cache bypass. Added two new regression files; no existing assertion edits. Proxy drains then destroys refused sockets with1s fallback; helper clears inherited cache/export attributes at source. No tests before CLEAR; Goldie holds slot. Source/causes recorded in seat BUILD.
2026-10-24 | Bentina | Row157 / #1652 round2 after (sage-3936) | B1 refused sockets now drain/destroy with1s bound; B2 source clears inherited cache/export attributes. Archived a14+new regressions red as intended (5controls pass/7defects fail), fixed12/12, helper/config33/33, egress22/22, rootless install exit0 incl image pins/network/services dummyGET. Logs09-13 in seat work. No existing test/assertion edit for round2. Slot returned bentina-0014; followup own-branch commit/manifest for Boyd re-review; Mos and Sage landing gates pending.
-10
View File
@@ -76,16 +76,6 @@ Rules enforced by `scripts/mosaic-config.mjs`:
Run paths (`build/hello/verify/reset`) fail closed when configuration is missing or invalid; they never invent it.
The optional `install` key selects the containerized install explicitly:
`"install": {"mode":"containerized","endpoint":"unix:///run/user/1000/docker.sock"}`.
An absent key defaults to local mode and remains absent in validation output.
Local mode forbids `endpoint`;
containerized mode requires a Unix socket endpoint without whitespace
(the actual pattern is `^unix:///[^\s]+\.sock$`). Unknown install keys or
modes refuse with exit 2 without changing the config. Validation contacts no
daemon; the endpoint helper checks rootless status before engine use. Keep
existing live configs unchanged until the install rollout is authorized.
## Missions & tasks (M2)
Missions and tasks are validated JSON data (strict schemas, version-pinned). The M2 layer is host-side only: mission directives are recorded for provenance but do not yet reach the runtime system prompt (capability/policy layer comes later).
-8
View File
@@ -47,14 +47,6 @@ its launch configuration remains fixed, including on resume. Use Filbert's
wrapper to select that configuration; a direct shared-helper invocation uses
its own supplied flags or the system defaults.
Any run that includes the webui suite, whether a seat's slot run or a landing
gate, sets `MOSAIC_REQUIRE_EDITOR_BUILD=1`, so a missing editor toolchain fails
the run instead of skipping the rebuild test. A worktree that links the
canonical `node_modules` also runs `npm ci --ignore-scripts --no-audit --no-fund`
in its own `packages/webui` first. The root install carries esbuild 0.28.1
through pi-coding-agent, and the rebuild needs the 0.28.2 that
`packages/webui/package-lock.json` pins (Vikunja 597, mos-1453).
All agents follow repository governance and current user direction. Team
leadership does not add deployment or push authority. Coordinate overlapping
work with Sage and preserve other sessions' changes.
-8
View File
@@ -1,8 +0,0 @@
# Beakley
Builder seat, Codex gpt-6.1-sol, started by Mos under Q245 (mos-1506). Owns row 217 (C2-06, handed over from Launchpad).
No launcher in this directory. The seat runs as a T3 thread (thread 88b97f65) and works in its own worktree. It has no
credentials of its own; it pushes only its own `beakley/*` branches through the repository credential helper (mos-0981),
never `refactor`, `main` or another seat's branch. Claude seats orchestrate and review (Q245). Registered by Sage on
2026-10-23 so the queue can name the seat as row owner (store.mjs isSeatDir).
-10
View File
@@ -1,10 +0,0 @@
# Bentina
Builder seat, Codex gpt-6.1-sol, started by Sage under Q246 and mos-1566. Owns row 157, I2: the install images, the
install config key, the endpoint helper and the egress proxy (docs/plans/2026-10-18_containerized-install-rows.md),
reassigned from Researcher so the coding runs on Codex.
No launcher in this directory. The seat runs as a T3 thread and works in its own worktree. It has no credentials of its
own; it pushes only its own `bentina/*` branches through the repository credential helper (mos-0981), never `refactor`,
`main` or another seat's branch. Claude seats orchestrate and review the install path (mos-1542 rule 4). Registered by
Sage on 2026-10-24 so the queue can name the seat as row owner (store.mjs isSeatDir).
@@ -1,43 +0,0 @@
2026-10-24T04:05:53Z
23:05:53 up 10 days, 14:25, 2 users, load average: 2.29, 2.31, 1.89
CLEAR sage-3910 TMPDIR=/mnt/storage/scratch/tmp/lEvgx1
✔ install: absent (28.959485ms)
✔ install: local (24.660305ms)
✔ install: local endpoint (26.210523ms)
✔ install: containerized missing endpoint (25.495263ms)
✔ install: bad endpoint "tcp://localhost:2375" (28.62092ms)
✔ install: bad endpoint "ssh://host/run/docker.sock" (32.126399ms)
✔ install: bad endpoint "run/docker.sock" (26.69995ms)
✔ install: bad endpoint "unix://relative.sock" (33.36326ms)
✔ install: bad endpoint "unix:///a b.sock" (30.579866ms)
✔ install: bad endpoint "unix:///a.sock\n" (40.844622ms)
✔ install: bad endpoint "unix:///a" (36.371215ms)
✔ install: bad endpoint "" (31.603044ms)
✔ install: bad endpoint null (29.645166ms)
✔ install: bad endpoint 4 (30.638453ms)
✔ install: valid endpoint (28.088952ms)
✔ install: unknown mode (28.182929ms)
✔ install: missing mode (26.297287ms)
✔ install: unknown key (27.205488ms)
✔ install: null (29.189475ms)
✔ install: array (30.347371ms)
✔ helper refuses rootful (76.082505ms)
✔ helper refuses missing (58.354463ms)
✔ helper refuses substring (86.830586ms)
✔ helper refuses object (108.0825ms)
✔ helper refuses invalid JSON (85.203357ms)
✔ helper refuses null success (85.225204ms)
✔ helper refuses rootless output but failed (67.840402ms)
✔ helper checks once and explicitly names host for both calls (119.763305ms)
✔ local mode refuses before Docker null (35.42747ms)
✔ local mode refuses before Docker {"mode":"local"} (30.531767ms)
✔ invalid config refuses before Docker (30.092363ms)
ℹ tests 31
ℹ suites 0
ℹ pass 31
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 833.790665
EXIT=0
@@ -1,23 +0,0 @@
2026-10-24T04:06:01Z
23:06:01 up 10 days, 14:25, 2 users, load average: 2.27, 2.30, 1.89
CLEAR sage-3910 TMPDIR=/mnt/storage/scratch/tmp/lfgV9z
✔ allows exact host and port, fragmented headers, and preserves tunnel head (21.273322ms)
✔ unlisted host (1.324735ms)
✔ unlisted port (1.081626ms)
✔ GET (0.948442ms)
✔ invalid port (0.95243ms)
✔ userinfo (0.874803ms)
✔ bad header (0.782898ms)
✔ slow client has a total header deadline (81.829907ms)
✔ oversized header refuses (1.267008ms)
✔ missing, invalid and unknown lists fail closed (0.491274ms)
✔ refused upstream returns 502 while retaining one allowed decision (1.716299ms)
ℹ tests 11
ℹ suites 0
ℹ pass 11
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 156.342618
EXIT=0
@@ -1,90 +0,0 @@
2026-10-24T04:06:08Z
23:06:08 up 10 days, 14:25, 2 users, load average: 2.53, 2.36, 1.91
CLEAR sage-3910 TMPDIR=/mnt/storage/scratch/tmp/6eJjJz
OK absent adapter defaults to pi
OK adapter mock validates (exit 0)
OK unsupported adapter exits 2 (exit 2)
OK env exports adapter
OK bootstrap creates default when absent (exit 0)
OK bootstrap wrote config file
OK bootstrap is idempotent on existing config (exit 0)
OK bootstrap did not rewrite existing config
OK validate missing config exits 3 (exit 3)
OK malformed JSON exits 2 (exit 2)
OK unsupported configVersion exits 2 (exit 2)
OK unknown top-level key exits 2 (exit 2)
OK unknown execution key exits 2 (exit 2)
OK unsupported backend exits 2 (exit 2)
OK unsupported environment exits 2 (exit 2)
OK relative dataRoot exits 2 (exit 2)
OK non-canonical dataRoot exits 2 (exit 2)
OK filesystem root dataRoot exits 2 (exit 2)
OK home directory dataRoot exits 2 (exit 2)
OK dataRoot containing config dir exits 2 (exit 2)
OK control character in provider exits 2 (exit 2)
OK symlinked config file exits 2 (exit 2)
OK env exports resolve correctly
OK valid console.sso loads and is in the output
OK console.sso HS256 alg exits 2 naming the path (exit 2)
OK console.sso alg none exits 2 naming the path (exit 2)
OK console.sso missing slot field exits 2 naming the path (exit 2)
OK console.sso slot name outside the pattern exits 2 naming the path (exit 2)
OK unknown key under console exits 2 naming the path (exit 2)
OK valid federation key loads and is in the output
OK federation unknown sub-key exits 2 naming the key (exit 2)
OK federation peer unknown sub-key exits 2 naming the key (exit 2)
OK federation peer origin over http exits 2 naming the key (exit 2)
OK federation peer origin with a path exits 2 naming the key (exit 2)
OK federation peer origin with userinfo exits 2 naming the key (exit 2)
OK federation peer id equal to self exits 2 naming the key (exit 2)
OK federation peer label empty exits 2 naming the key (exit 2)
OK federation not an object exits 2 naming the key (exit 2)
OK federation self pattern exits 2 naming the key (exit 2)
OK federation peers not an array exits 2 naming the key (exit 2)
OK federation peer not an object exits 2 naming the key (exit 2)
OK federation peer id pattern exits 2 naming the key (exit 2)
OK federation peer label over 80 characters exits 2 naming the key (exit 2)
OK federation duplicate peer id exits 2 naming the key (exit 2)
OK federation peer origin with a trailing slash exits 2 naming the key (exit 2)
OK federation self missing exits 2 naming the key (exit 2)
OK federation peer id missing exits 2 naming the key (exit 2)
OK federation peer label missing exits 2 naming the key (exit 2)
OK config without federation loads and has no federation output
FAIL config without console loads with unchanged output
OK compactionReadBytes 8388608 loads and is in the output as written
OK compactionReadBytes "x" loads and is in the output as written
OK compactionStreams 2048 loads and is in the output as written
OK compactionStreams "x" loads and is in the output as written
OK failed validation modified nothing
✔ install: absent (28.022711ms)
✔ install: local (26.314077ms)
✔ install: local endpoint (27.030768ms)
✔ install: containerized missing endpoint (26.036164ms)
✔ install: bad endpoint "tcp://localhost:2375" (29.311242ms)
✔ install: bad endpoint "ssh://host/run/docker.sock" (28.012086ms)
✔ install: bad endpoint "run/docker.sock" (26.941261ms)
✔ install: bad endpoint "unix://relative.sock" (26.90999ms)
✔ install: bad endpoint "unix:///a b.sock" (23.646272ms)
✔ install: bad endpoint "unix:///a.sock\n" (26.383344ms)
✔ install: bad endpoint "unix:///a" (24.914913ms)
✔ install: bad endpoint "" (24.320663ms)
✔ install: bad endpoint null (25.688262ms)
✔ install: bad endpoint 4 (26.934437ms)
✔ install: valid endpoint (27.504294ms)
✔ install: unknown mode (27.111833ms)
✔ install: missing mode (26.365767ms)
✔ install: unknown key (26.974983ms)
✔ install: null (25.910901ms)
✔ install: array (25.507423ms)
ℹ tests 20
ℹ suites 0
ℹ pass 20
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 584.03015
OK install configuration cases
selftest: 55 passed, 1 failed
EXIT=1
@@ -1,43 +0,0 @@
2026-10-24T04:08:52Z
23:08:52 up 10 days, 14:28, 2 users, load average: 2.16, 2.49, 2.04
CLEAR sage-3919 TMPDIR=/mnt/storage/scratch/tmp/o2n7Db
✔ install: absent (31.8592ms)
✔ install: local (29.807282ms)
✔ install: local endpoint (24.009896ms)
✔ install: containerized missing endpoint (26.296453ms)
✔ install: bad endpoint "tcp://localhost:2375" (26.404525ms)
✔ install: bad endpoint "ssh://host/run/docker.sock" (27.486365ms)
✔ install: bad endpoint "run/docker.sock" (24.280876ms)
✔ install: bad endpoint "unix://relative.sock" (24.363468ms)
✔ install: bad endpoint "unix:///a b.sock" (24.920898ms)
✔ install: bad endpoint "unix:///a.sock\n" (25.784031ms)
✔ install: bad endpoint "unix:///a" (27.89803ms)
✔ install: bad endpoint "" (28.939674ms)
✔ install: bad endpoint null (26.129602ms)
✔ install: bad endpoint 4 (27.601233ms)
✔ install: valid endpoint (29.310223ms)
✔ install: unknown mode (30.307014ms)
✔ install: missing mode (26.432375ms)
✔ install: unknown key (29.208115ms)
✔ install: null (29.793ms)
✔ install: array (28.956899ms)
✔ helper refuses rootful (88.440017ms)
✔ helper refuses missing (49.868469ms)
✔ helper refuses substring (76.03165ms)
✔ helper refuses object (77.494513ms)
✔ helper refuses invalid JSON (78.525159ms)
✔ helper refuses null success (79.166999ms)
✔ helper refuses rootless output but failed (52.195589ms)
✔ helper checks once and explicitly names host for both calls (124.380922ms)
✔ local mode refuses before Docker null (28.199092ms)
✔ local mode refuses before Docker {"mode":"local"} (29.618143ms)
✔ invalid config refuses before Docker (27.543884ms)
ℹ tests 31
ℹ suites 0
ℹ pass 31
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 762.528877
EXIT=0
@@ -1,90 +0,0 @@
2026-10-24T04:09:01Z
23:09:01 up 10 days, 14:28, 2 users, load average: 2.28, 2.50, 2.05
CLEAR sage-3919 TMPDIR=/mnt/storage/scratch/tmp/hYypHU
OK absent adapter defaults to pi
OK adapter mock validates (exit 0)
OK unsupported adapter exits 2 (exit 2)
OK env exports adapter
OK bootstrap creates default when absent (exit 0)
OK bootstrap wrote config file
OK bootstrap is idempotent on existing config (exit 0)
OK bootstrap did not rewrite existing config
OK validate missing config exits 3 (exit 3)
OK malformed JSON exits 2 (exit 2)
OK unsupported configVersion exits 2 (exit 2)
OK unknown top-level key exits 2 (exit 2)
OK unknown execution key exits 2 (exit 2)
OK unsupported backend exits 2 (exit 2)
OK unsupported environment exits 2 (exit 2)
OK relative dataRoot exits 2 (exit 2)
OK non-canonical dataRoot exits 2 (exit 2)
OK filesystem root dataRoot exits 2 (exit 2)
OK home directory dataRoot exits 2 (exit 2)
OK dataRoot containing config dir exits 2 (exit 2)
OK control character in provider exits 2 (exit 2)
OK symlinked config file exits 2 (exit 2)
OK env exports resolve correctly
OK valid console.sso loads and is in the output
OK console.sso HS256 alg exits 2 naming the path (exit 2)
OK console.sso alg none exits 2 naming the path (exit 2)
OK console.sso missing slot field exits 2 naming the path (exit 2)
OK console.sso slot name outside the pattern exits 2 naming the path (exit 2)
OK unknown key under console exits 2 naming the path (exit 2)
OK valid federation key loads and is in the output
OK federation unknown sub-key exits 2 naming the key (exit 2)
OK federation peer unknown sub-key exits 2 naming the key (exit 2)
OK federation peer origin over http exits 2 naming the key (exit 2)
OK federation peer origin with a path exits 2 naming the key (exit 2)
OK federation peer origin with userinfo exits 2 naming the key (exit 2)
OK federation peer id equal to self exits 2 naming the key (exit 2)
OK federation peer label empty exits 2 naming the key (exit 2)
OK federation not an object exits 2 naming the key (exit 2)
OK federation self pattern exits 2 naming the key (exit 2)
OK federation peers not an array exits 2 naming the key (exit 2)
OK federation peer not an object exits 2 naming the key (exit 2)
OK federation peer id pattern exits 2 naming the key (exit 2)
OK federation peer label over 80 characters exits 2 naming the key (exit 2)
OK federation duplicate peer id exits 2 naming the key (exit 2)
OK federation peer origin with a trailing slash exits 2 naming the key (exit 2)
OK federation self missing exits 2 naming the key (exit 2)
OK federation peer id missing exits 2 naming the key (exit 2)
OK federation peer label missing exits 2 naming the key (exit 2)
OK config without federation loads and has no federation output
OK config without console loads with unchanged output
OK compactionReadBytes 8388608 loads and is in the output as written
OK compactionReadBytes "x" loads and is in the output as written
OK compactionStreams 2048 loads and is in the output as written
OK compactionStreams "x" loads and is in the output as written
OK failed validation modified nothing
✔ install: absent (33.602997ms)
✔ install: local (27.76628ms)
✔ install: local endpoint (28.360207ms)
✔ install: containerized missing endpoint (26.872508ms)
✔ install: bad endpoint "tcp://localhost:2375" (27.729466ms)
✔ install: bad endpoint "ssh://host/run/docker.sock" (29.663768ms)
✔ install: bad endpoint "run/docker.sock" (28.875798ms)
✔ install: bad endpoint "unix://relative.sock" (27.427064ms)
✔ install: bad endpoint "unix:///a b.sock" (30.77649ms)
✔ install: bad endpoint "unix:///a.sock\n" (34.03786ms)
✔ install: bad endpoint "unix:///a" (31.459666ms)
✔ install: bad endpoint "" (26.221924ms)
✔ install: bad endpoint null (31.982463ms)
✔ install: bad endpoint 4 (34.408275ms)
✔ install: valid endpoint (30.184118ms)
✔ install: unknown mode (26.58596ms)
✔ install: missing mode (26.563043ms)
✔ install: unknown key (28.663535ms)
✔ install: null (26.567284ms)
✔ install: array (24.756494ms)
ℹ tests 20
ℹ suites 0
ℹ pass 20
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 640.201326
OK install configuration cases
selftest: 56 passed, 0 failed
EXIT=0
@@ -1,245 +0,0 @@
2026-10-24T04:09:14Z
23:09:14 up 10 days, 14:29, 2 users, load average: 2.58, 2.56, 2.08
CLEAR sage-3919 TMPDIR=/mnt/storage/scratch/tmp/7xUNh5
✔ install: absent (28.837858ms)
✔ install: local (28.328967ms)
✔ install: local endpoint (26.178892ms)
✔ install: containerized missing endpoint (25.578947ms)
✔ install: bad endpoint "tcp://localhost:2375" (24.988885ms)
✔ install: bad endpoint "ssh://host/run/docker.sock" (25.850327ms)
✔ install: bad endpoint "run/docker.sock" (26.499708ms)
✔ install: bad endpoint "unix://relative.sock" (42.276491ms)
✔ install: bad endpoint "unix:///a b.sock" (32.161423ms)
✔ install: bad endpoint "unix:///a.sock\n" (26.834457ms)
✔ install: bad endpoint "unix:///a" (30.552354ms)
✔ install: bad endpoint "" (28.938768ms)
✔ install: bad endpoint null (27.00598ms)
✔ install: bad endpoint 4 (29.63046ms)
✔ install: valid endpoint (28.707851ms)
✔ install: unknown mode (25.507911ms)
✔ install: missing mode (27.101142ms)
✔ install: unknown key (32.316453ms)
✔ install: null (27.273355ms)
✔ install: array (25.503395ms)
✔ helper refuses rootful (81.447175ms)
✔ helper refuses missing (49.32616ms)
✔ helper refuses substring (80.299191ms)
✔ helper refuses object (96.465808ms)
✔ helper refuses invalid JSON (89.854499ms)
✔ helper refuses null success (79.934412ms)
✔ helper refuses rootless output but failed (61.053445ms)
✔ helper checks once and explicitly names host for both calls (120.469053ms)
✔ local mode refuses before Docker null (28.252291ms)
✔ local mode refuses before Docker {"mode":"local"} (32.631557ms)
✔ invalid config refuses before Docker (28.529643ms)
ℹ tests 31
ℹ suites 0
ℹ pass 31
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 798.423992
✔ allows exact host and port, fragmented headers, and preserves tunnel head (18.932222ms)
✔ unlisted host (1.309946ms)
✔ unlisted port (1.067401ms)
✔ GET (0.988233ms)
✔ invalid port (0.919738ms)
✔ userinfo (0.832286ms)
✔ bad header (0.761085ms)
✔ slow client has a total header deadline (80.345593ms)
✔ oversized header refuses (1.044536ms)
✔ missing, invalid and unknown lists fail closed (0.486134ms)
✔ refused upstream returns 502 while retaining one allowed decision (1.562662ms)
ℹ tests 11
ℹ suites 0
ℹ pass 11
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 149.849801
#0 building with "default" instance using docker driver
#1 [internal] load build definition from Dockerfile
#1 transferring dockerfile: 454B done
#1 DONE 0.0s
#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
#2 DONE 1.6s
#3 [internal] load .dockerignore
#3 transferring context: 2B done
#3 DONE 0.0s
#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
#4 ...
#5 [internal] load build context
#5 transferring context: 31.36MB 0.1s done
#5 DONE 0.2s
#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
#4 sha256:08489011619dfda982191cb9cc0418dc48ea3b1341588aeef534e4db0ab4d3d0 447B / 447B 0.1s done
#4 sha256:1a0cf4b1ffc8dd659bb8c6e90471bc8fec24620e4fdb68bb2b6faa56154ae146 0B / 1.71MB 0.2s
#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 0B / 50.86MB 0.2s
#4 sha256:517d640e32835287653c4b15eb5d9f6bcf48e103baea4f7e29bac937002f649b 3.31kB / 3.31kB 0.2s done
#4 sha256:1a0cf4b1ffc8dd659bb8c6e90471bc8fec24620e4fdb68bb2b6faa56154ae146 1.71MB / 1.71MB 0.3s done
#4 sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39 3.15MB / 28.25MB 0.3s
#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 6.29MB / 50.86MB 0.5s
#4 sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39 11.53MB / 28.25MB 0.5s
#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 14.68MB / 50.86MB 0.6s
#4 sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39 19.92MB / 28.25MB 0.6s
#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 24.12MB / 50.86MB 0.8s
#4 sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39 28.25MB / 28.25MB 0.8s done
#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 49.28MB / 50.86MB 1.1s
#4 extracting sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39
#4 sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 50.86MB / 50.86MB 1.1s done
#4 extracting sha256:7fd1ebe418b5079d4aa36f416af9b143d127bc75b0155d71cb5fd559b5e04d39 0.7s done
#4 DONE 1.6s
#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
#4 extracting sha256:517d640e32835287653c4b15eb5d9f6bcf48e103baea4f7e29bac937002f649b 0.0s done
#4 extracting sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a
#4 extracting sha256:11ffcabe0f772f0f1a9c80b4b290b5ec0de54f11c671f0fa10e5844f9b52d17a 1.0s done
#4 DONE 2.6s
#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
#4 extracting sha256:1a0cf4b1ffc8dd659bb8c6e90471bc8fec24620e4fdb68bb2b6faa56154ae146 0.0s done
#4 extracting sha256:08489011619dfda982191cb9cc0418dc48ea3b1341588aeef534e4db0ab4d3d0 done
#4 DONE 2.7s
#6 [2/9] WORKDIR /opt/mosaic
#6 DONE 0.0s
#7 [3/9] COPY package.json package-lock.json ./
#7 DONE 0.0s
#8 [4/9] RUN npm ci --omit=dev --ignore-scripts --no-audit --no-fund && npm cache clean --force
#8 1.008 npm warn deprecated [email protected]: Use your platform's native DOMException instead
#8 2.464
#8 2.464 added 128 packages in 2s
#8 2.465 npm notice
#8 2.465 npm notice New major version of npm available! 11.19.0 -> 12.2.1
#8 2.465 npm notice Changelog: https://github.com/npm/cli/releases/tag/v12.2.1
#8 2.465 npm notice To update run: npm install -g [email protected]
#8 2.465 npm notice
#8 2.562 npm warn using --force Recommended protections disabled.
#8 DONE 2.7s
#9 [5/9] COPY packages/ packages/
#9 DONE 0.1s
#10 [6/9] COPY scripts/ scripts/
#10 DONE 0.0s
#11 [7/9] COPY contracts/ contracts/
#11 DONE 0.0s
#12 [8/9] COPY roles/ roles/
#12 DONE 0.0s
#13 [9/9] COPY RELEASE ./
#13 DONE 0.0s
#14 exporting to image
#14 exporting layers
#14 exporting layers 3.3s done
#14 exporting manifest sha256:b288643bbe89b43f6ffe7890598fe70801933c9e1e5d64efbfc6d87bbc502389 done
#14 exporting config sha256:c8e137b79bfd807d4d9fc37d5ac211476decc3cc3c8db1e39b2e5dedf5471191 done
#14 exporting attestation manifest sha256:5f2e757dd0fc2a424c78eb4bdd2ddd3039067afb54bc76bc03d6a6f9f1e2ac75 done
#14 exporting manifest list sha256:7b4fa741d785225148156d1962a1770b40ab84b55ce8ffde5a3485b316f93b3a done
#14 naming to docker.io/library/mosaic-core:0.0.12 done
#14 unpacking to docker.io/library/mosaic-core:0.0.12
#14 unpacking to docker.io/library/mosaic-core:0.0.12 1.6s done
#14 DONE 4.9s
#0 building with "default" instance using docker driver
#1 [internal] load build definition from Dockerfile
#1 transferring dockerfile: 424B done
#1 WARN: InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
#1 DONE 0.0s
#2 [internal] load metadata for docker.io/library/mosaic-core:0.0.12
#2 DONE 0.0s
#3 [internal] load .dockerignore
#3 transferring context: 2B done
#3 DONE 0.0s
#4 [1/2] FROM docker.io/library/mosaic-core:0.0.12@sha256:7b4fa741d785225148156d1962a1770b40ab84b55ce8ffde5a3485b316f93b3a
#4 resolve docker.io/library/mosaic-core:0.0.12@sha256:7b4fa741d785225148156d1962a1770b40ab84b55ce8ffde5a3485b316f93b3a done
#4 DONE 0.0s
#5 [2/2] RUN npm install -g --no-audit --no-fund @anthropic-ai/[email protected] @earendil-works/[email protected] && npm cache clean --force && rm -rf /root/.npm /tmp/*
#5 1.716 npm warn deprecated [email protected]: Use your platform's native DOMException instead
#5 6.031
#5 6.031 added 167 packages in 6s
#5 6.032 npm warn install-scripts 4 packages have install scripts not yet covered by allowScripts:
#5 6.032 npm warn install-scripts @anthropic-ai/[email protected] (postinstall: node install.cjs)
#5 6.032 npm warn install-scripts @google/[email protected] (preinstall: echo 'preinstall: no-op')
#5 6.032 npm warn install-scripts [email protected] (postinstall: node install.js)
#5 6.032 npm warn install-scripts [email protected] (postinstall: node scripts/postinstall)
#5 6.032 npm warn install-scripts
#5 6.032 npm warn install-scripts Run `npm install -g --allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs` to allow these scripts once, or `npm config set allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs --location=user` to allow them for all global installs.
#5 6.119 npm warn using --force Recommended protections disabled.
#5 DONE 6.3s
#6 exporting to image
#6 exporting layers
#6 exporting layers 18.7s done
#6 exporting manifest sha256:16af90e8e3291626f37fb5b2e78904d87126d875e7bcc240dd2ba453ca62bc10 done
#6 exporting config sha256:ad269f0a84c0b1c5833b787793a45df782c1aae86e37f6216782a12a01f4557b done
#6 exporting attestation manifest sha256:436490e0d139cb0db83f260c42ac3364377971160b2418cd03ee07c18873a5f6 done
#6 exporting manifest list sha256:bc95495952e58a005c275a9d00842242c17965d0d9c2a83c476048cbfc110946 done
#6 naming to docker.io/library/mosaic-session:0.0.12 done
#6 unpacking to docker.io/library/mosaic-session:0.0.12
#6 unpacking to docker.io/library/mosaic-session:0.0.12 5.3s done
#6 DONE 24.0s
1 warning found (use docker --debug to expand):
 - InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
#0 building with "default" instance using docker driver
#1 [internal] load build definition from Dockerfile
#1 transferring dockerfile: 299B done
#1 DONE 0.0s
#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
#2 DONE 0.0s
#3 [internal] load .dockerignore
#3 transferring context: 2B done
#3 DONE 0.0s
#4 [1/4] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
#4 DONE 0.0s
#5 [2/4] WORKDIR /opt/mosaic
#5 CACHED
#6 [internal] load build context
#6 transferring context: 459B 0.0s done
#6 DONE 0.0s
#7 [3/4] COPY packages/egress/ packages/egress/
#7 DONE 0.0s
#8 [4/4] COPY contracts/egress.json contracts/egress.json
#8 DONE 0.0s
#9 exporting to image
#9 exporting layers 0.0s done
#9 exporting manifest sha256:f3f318ddc871b5a5f953aa0709cf69194260e633e26b15daafefe40572a36f27 done
#9 exporting config sha256:c315f86a3be49d29aa7cad287a1653424206adb43683a34b91633b9bb8a14c6b done
#9 exporting attestation manifest sha256:d41ee39a55170821cf46236fbf6069519e52c7386e27259ee17113777fa348e1 done
#9 exporting manifest list sha256:af29f552efea177d706779ed9afb43c89763b58de913da0a570208cdda619d50 done
#9 naming to docker.io/library/mosaic-egress:0.0.12 done
#9 unpacking to docker.io/library/mosaic-egress:0.0.12 0.0s done
#9 DONE 0.1s
internal network: listed TLS reached, unlisted host/port refused, external DNS refused
Vikunja client public GET 200; notifier REST dummy-token GET 401
test-install: PASS (provider-host measurement remains Mos gate)
EXIT=0
@@ -1,24 +0,0 @@
2026-10-24T04:13:52Z
23:13:52 up 10 days, 14:33, 2 users, load average: 2.19, 2.69, 2.26
CLEAR sage-3923 TMPDIR=/mnt/storage/scratch/tmp/5Tw4Jn
✔ allows exact host and port, fragmented headers, and preserves tunnel head (17.065009ms)
✔ unlisted host (1.179696ms)
✔ unlisted port (4.182798ms)
✔ GET (0.916554ms)
✔ invalid port (0.897474ms)
✔ userinfo (0.772938ms)
✔ bad header (0.737254ms)
✔ slow client has a total header deadline (81.64527ms)
✔ oversized header refuses (1.073337ms)
✔ missing, invalid and unknown lists fail closed (0.464571ms)
✔ refused upstream returns 502 while retaining one allowed decision (1.555082ms)
✔ upstream reset after CONNECT closes the tunnel without a second HTTP response (21.757224ms)
ℹ tests 12
ℹ suites 0
ℹ pass 12
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 173.90579
EXIT=0
@@ -1,207 +0,0 @@
2026-10-24T04:13:56Z
23:13:56 up 10 days, 14:33, 2 users, load average: 2.18, 2.67, 2.26
CLEAR sage-3923 TMPDIR=/mnt/storage/scratch/tmp/Yb2lkZ
✔ install: absent (26.874578ms)
✔ install: local (25.86789ms)
✔ install: local endpoint (24.545469ms)
✔ install: containerized missing endpoint (26.458263ms)
✔ install: bad endpoint "tcp://localhost:2375" (24.315713ms)
✔ install: bad endpoint "ssh://host/run/docker.sock" (27.113397ms)
✔ install: bad endpoint "run/docker.sock" (24.399221ms)
✔ install: bad endpoint "unix://relative.sock" (26.259544ms)
✔ install: bad endpoint "unix:///a b.sock" (24.051655ms)
✔ install: bad endpoint "unix:///a.sock\n" (23.493287ms)
✔ install: bad endpoint "unix:///a" (25.527734ms)
✔ install: bad endpoint "" (24.647712ms)
✔ install: bad endpoint null (24.029319ms)
✔ install: bad endpoint 4 (22.545369ms)
✔ install: valid endpoint (24.217907ms)
✔ install: unknown mode (22.578207ms)
✔ install: missing mode (26.668685ms)
✔ install: unknown key (25.239503ms)
✔ install: null (26.507504ms)
✔ install: array (23.325961ms)
✔ helper refuses rootful (83.142099ms)
✔ helper refuses missing (48.938896ms)
✔ helper refuses substring (74.574145ms)
✔ helper refuses object (69.21506ms)
✔ helper refuses invalid JSON (71.320245ms)
✔ helper refuses null success (70.397988ms)
✔ helper refuses rootless output but failed (50.077162ms)
✔ helper checks once and explicitly names host for both calls (116.70882ms)
✔ local mode refuses before Docker null (26.523468ms)
✔ local mode refuses before Docker {"mode":"local"} (26.276186ms)
✔ invalid config refuses before Docker (26.092328ms)
ℹ tests 31
ℹ suites 0
ℹ pass 31
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 707.332707
✔ allows exact host and port, fragmented headers, and preserves tunnel head (15.694598ms)
✔ unlisted host (1.162772ms)
✔ unlisted port (1.047448ms)
✔ GET (0.913924ms)
✔ invalid port (0.930799ms)
✔ userinfo (0.750312ms)
✔ bad header (0.739214ms)
✔ slow client has a total header deadline (81.348784ms)
✔ oversized header refuses (0.992296ms)
✔ missing, invalid and unknown lists fail closed (0.441271ms)
✔ refused upstream returns 502 while retaining one allowed decision (1.4408ms)
✔ upstream reset after CONNECT closes the tunnel without a second HTTP response (21.481904ms)
ℹ tests 12
ℹ suites 0
ℹ pass 12
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 169.285852
#0 building with "default" instance using docker driver
#1 [internal] load build definition from Dockerfile
#1 transferring dockerfile: 454B done
#1 DONE 0.0s
#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
#2 DONE 0.0s
#3 [internal] load .dockerignore
#3 transferring context: 2B done
#3 DONE 0.0s
#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
#4 DONE 0.0s
#5 [internal] load build context
#5 transferring context: 31.37MB 0.1s done
#5 DONE 0.1s
#6 [3/9] COPY package.json package-lock.json ./
#6 CACHED
#7 [2/9] WORKDIR /opt/mosaic
#7 CACHED
#8 [4/9] RUN npm ci --omit=dev --ignore-scripts --no-audit --no-fund && npm cache clean --force
#8 CACHED
#9 [5/9] COPY packages/ packages/
#9 DONE 0.1s
#10 [6/9] COPY scripts/ scripts/
#10 DONE 0.0s
#11 [7/9] COPY contracts/ contracts/
#11 DONE 0.0s
#12 [8/9] COPY roles/ roles/
#12 DONE 0.0s
#13 [9/9] COPY RELEASE ./
#13 DONE 0.0s
#14 exporting to image
#14 exporting layers
#14 exporting layers 0.4s done
#14 exporting manifest sha256:065dd55d59585806e540929e2ea66df397d47292cc84160bb7be491ecd2b9d59 done
#14 exporting config sha256:3d97362dc6b6242fc540f08f538068b91ec28b1d3c9a34d7bc2bebff137a7a40 done
#14 exporting attestation manifest sha256:f66bf47e4ec5b67db64f44d8554192f646111116e165ec3bc017b5a2b011204b done
#14 exporting manifest list sha256:d840b0ec16ce6548549d18fb8bfc6b13c76ee77e9131a317582f919c61dcaf7f done
#14 naming to docker.io/library/mosaic-core:0.0.12 done
#14 unpacking to docker.io/library/mosaic-core:0.0.12
#14 unpacking to docker.io/library/mosaic-core:0.0.12 0.2s done
#14 DONE 0.6s
#0 building with "default" instance using docker driver
#1 [internal] load build definition from Dockerfile
#1 transferring dockerfile: 424B done
#1 WARN: InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
#1 DONE 0.0s
#2 [internal] load metadata for docker.io/library/mosaic-core:0.0.12
#2 DONE 0.0s
#3 [internal] load .dockerignore
#3 transferring context: 2B done
#3 DONE 0.0s
#4 [1/2] FROM docker.io/library/mosaic-core:0.0.12@sha256:d840b0ec16ce6548549d18fb8bfc6b13c76ee77e9131a317582f919c61dcaf7f
#4 resolve docker.io/library/mosaic-core:0.0.12@sha256:d840b0ec16ce6548549d18fb8bfc6b13c76ee77e9131a317582f919c61dcaf7f done
#4 DONE 0.0s
#5 [2/2] RUN npm install -g --no-audit --no-fund @anthropic-ai/[email protected] @earendil-works/[email protected] && npm cache clean --force && rm -rf /root/.npm /tmp/*
#5 1.700 npm warn deprecated [email protected]: Use your platform's native DOMException instead
#5 5.518
#5 5.518 added 167 packages in 5s
#5 5.519 npm warn install-scripts 4 packages have install scripts not yet covered by allowScripts:
#5 5.519 npm warn install-scripts @anthropic-ai/[email protected] (postinstall: node install.cjs)
#5 5.519 npm warn install-scripts @google/[email protected] (preinstall: echo 'preinstall: no-op')
#5 5.519 npm warn install-scripts [email protected] (postinstall: node install.js)
#5 5.519 npm warn install-scripts [email protected] (postinstall: node scripts/postinstall)
#5 5.519 npm warn install-scripts
#5 5.519 npm warn install-scripts Run `npm install -g --allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs` to allow these scripts once, or `npm config set allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs --location=user` to allow them for all global installs.
#5 5.590 npm warn using --force Recommended protections disabled.
#5 DONE 5.7s
#6 exporting to image
#6 exporting layers
#6 exporting layers 16.9s done
#6 exporting manifest sha256:d4c83e350da6f18bfa7f3dbcef9ab078d72ef7f1f957a2926726e17973969e6a done
#6 exporting config sha256:8afa310f48e06614963dcbcdc9c3ac497d9e4bad4ddd0524062ba8a52bc3cda2 done
#6 exporting attestation manifest sha256:b7f082a8cd17d2c90eb27a81359aea66186b80d56a6d0c5e89d29187a2f78ed4 done
#6 exporting manifest list sha256:2b6299e5a329adf85ea36038cb0407f2328e72e848dbfe95a17bd1fefbf9cf92 done
#6 naming to docker.io/library/mosaic-session:0.0.12 done
#6 unpacking to docker.io/library/mosaic-session:0.0.12
#6 unpacking to docker.io/library/mosaic-session:0.0.12 4.7s done
#6 DONE 21.7s
1 warning found (use docker --debug to expand):
 - InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
#0 building with "default" instance using docker driver
#1 [internal] load build definition from Dockerfile
#1 transferring dockerfile: 299B done
#1 DONE 0.0s
#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
#2 DONE 0.0s
#3 [internal] load .dockerignore
#3 transferring context: 2B done
#3 DONE 0.0s
#4 [1/4] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
#4 DONE 0.0s
#5 [internal] load build context
#5 transferring context: 459B 0.0s done
#5 DONE 0.0s
#6 [2/4] WORKDIR /opt/mosaic
#6 CACHED
#7 [3/4] COPY packages/egress/ packages/egress/
#7 DONE 0.0s
#8 [4/4] COPY contracts/egress.json contracts/egress.json
#8 DONE 0.0s
#9 exporting to image
#9 exporting layers 0.0s done
#9 exporting manifest sha256:e47c86064470f291d2ea468a1002f1e5f9b2e682e42940d06bd33d4e39945a6e done
#9 exporting config sha256:ba520eadeb66ccfa2dbd3170744fca08affb4dac377d6cf2d26ec27d98d4ee25 done
#9 exporting attestation manifest sha256:93cbd2f8a7fb1afb858b7b1a35a3020af8e9623e3a98be71d04e9d746c25d148 done
#9 exporting manifest list sha256:a55e9d5ec6da74933bbefac6816efd0ea5246e825f61eaa4297e7baf7b09501c done
#9 naming to docker.io/library/mosaic-egress:0.0.12 done
#9 unpacking to docker.io/library/mosaic-egress:0.0.12 0.0s done
#9 DONE 0.1s
internal network: listed TLS reached, unlisted host/port refused, external DNS refused
Vikunja client public GET 200; notifier REST dummy-token GET 401
test-install: PASS (provider-host measurement remains Mos gate)
EXIT=0
@@ -1,165 +0,0 @@
2026-10-24T04:29:25Z
23:29:25 up 10 days, 14:49, 2 users, load average: 2.63, 2.97, 2.72
CLEAR sage-3936 TMPDIR=/mnt/storage/scratch/tmp/jcNy2F archived=a14fdc443 expected RED
✔ refusal 408 releases server socket (allowHalfOpen=false) (62.262337ms)
✖ refusal 408 releases server socket (allowHalfOpen=true) (552.049114ms)
✔ refusal 400 releases server socket (allowHalfOpen=false) (12.304169ms)
✖ refusal 400 releases server socket (allowHalfOpen=true) (509.122366ms)
✔ refusal 403 releases server socket (allowHalfOpen=false) (11.566877ms)
✖ refusal 403 releases server socket (allowHalfOpen=true) (508.134074ms)
✔ refusal 431 releases server socket (allowHalfOpen=false) (11.339612ms)
✖ refusal 431 releases server socket (allowHalfOpen=true) (507.396552ms)
✔ refusal 502 releases server socket (allowHalfOpen=false) (11.812225ms)
✖ refusal 502 releases server socket (allowHalfOpen=true) (509.521901ms)
✖ inherited cache is discarded; private cache stays unexported (rootless=false) (49.005306ms)
✖ inherited cache is discarded; private cache stays unexported (rootless=true) (42.961333ms)
ℹ tests 12
ℹ suites 0
ℹ pass 5
ℹ fail 7
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 2739.328587
✖ failing tests:
test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:11:79
✖ refusal 408 releases server socket (allowHalfOpen=true) (552.049114ms)
AssertionError [ERR_ASSERTION]: refused peer must not retain a server socket
1 !== 0
at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:30:10)
at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
at async Test.run (node:internal/test_runner/test:1409:7)
at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
generatedMessage: false,
code: 'ERR_ASSERTION',
actual: 1,
expected: 0,
operator: 'strictEqual',
diff: 'simple'
}
test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:11:79
✖ refusal 400 releases server socket (allowHalfOpen=true) (509.122366ms)
AssertionError [ERR_ASSERTION]: refused peer must not retain a server socket
1 !== 0
at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:30:10)
at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
at async Test.run (node:internal/test_runner/test:1409:7)
at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
generatedMessage: false,
code: 'ERR_ASSERTION',
actual: 1,
expected: 0,
operator: 'strictEqual',
diff: 'simple'
}
test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:11:79
✖ refusal 403 releases server socket (allowHalfOpen=true) (508.134074ms)
AssertionError [ERR_ASSERTION]: refused peer must not retain a server socket
1 !== 0
at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:30:10)
at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
at async Test.run (node:internal/test_runner/test:1409:7)
at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
generatedMessage: false,
code: 'ERR_ASSERTION',
actual: 1,
expected: 0,
operator: 'strictEqual',
diff: 'simple'
}
test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:11:79
✖ refusal 431 releases server socket (allowHalfOpen=true) (507.396552ms)
AssertionError [ERR_ASSERTION]: refused peer must not retain a server socket
1 !== 0
at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:30:10)
at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
at async Test.run (node:internal/test_runner/test:1409:7)
at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
generatedMessage: false,
code: 'ERR_ASSERTION',
actual: 1,
expected: 0,
operator: 'strictEqual',
diff: 'simple'
}
test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:11:79
✖ refusal 502 releases server socket (allowHalfOpen=true) (509.521901ms)
AssertionError [ERR_ASSERTION]: refused peer must not retain a server socket
1 !== 0
at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/packages/egress/tests/refusal.test.mjs:30:10)
at process.processTicksAndRejections (node:internal/process/task_queues:104:5)
at async Test.run (node:internal/test_runner/test:1409:7)
at async Test.processPendingSubtests (node:internal/test_runner/test:974:7) {
generatedMessage: false,
code: 'ERR_ASSERTION',
actual: 1,
expected: 0,
operator: 'strictEqual',
diff: 'simple'
}
test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/scripts/install-tests/review-cache.test.mjs:10:36
✖ inherited cache is discarded; private cache stays unexported (rootless=false) (49.005306ms)
AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
0 !== 2
at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/scripts/install-tests/review-cache.test.mjs:19:10)
at Test.runInAsyncScope (node:async_hooks:226:14)
at Test.run (node:internal/test_runner/test:1402:25)
at Test.start (node:internal/test_runner/test:1262:17)
at startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17) {
generatedMessage: true,
code: 'ERR_ASSERTION',
actual: 0,
expected: 2,
operator: 'strictEqual',
diff: 'simple'
}
test at ../../../../../../mnt/storage/scratch/tmp/jcNy2F/legacy/scripts/install-tests/review-cache.test.mjs:10:36
✖ inherited cache is discarded; private cache stays unexported (rootless=true) (42.961333ms)
AssertionError [ERR_ASSERTION]: Expected values to be strictly deep-equal:
+ actual - expected
[
'--host',
+ 'unix:///inherited.sock',
+ 'ps'
- 'unix:///configured.sock',
- 'info',
- '--format',
- '{{json .SecurityOptions}}'
]
at TestContext.<anonymous> (file:///mnt/storage/scratch/tmp/jcNy2F/legacy/scripts/install-tests/review-cache.test.mjs:20:10)
at Test.runInAsyncScope (node:async_hooks:226:14)
at Test.run (node:internal/test_runner/test:1402:25)
at Test.processPendingSubtests (node:internal/test_runner/test:974:18)
at Test.postRun (node:internal/test_runner/test:1542:19)
at Test.run (node:internal/test_runner/test:1467:12)
at async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3) {
generatedMessage: true,
code: 'ERR_ASSERTION',
actual: [ '--host', 'unix:///inherited.sock', 'ps' ],
expected: [ '--host', 'unix:///configured.sock', 'info', '--format', '{{json .SecurityOptions}}' ],
operator: 'deepStrictEqual',
diff: 'simple'
}
EXIT=1 (expected 1 for reproduced defects)
@@ -1,24 +0,0 @@
2026-10-24T04:29:39Z
23:29:39 up 10 days, 14:49, 2 users, load average: 2.20, 2.85, 2.69
CLEAR sage-3936 TMPDIR=/mnt/storage/scratch/tmp/0gZQZl
✔ refusal 408 releases server socket (allowHalfOpen=false) (53.837502ms)
✔ refusal 408 releases server socket (allowHalfOpen=true) (42.030239ms)
✔ refusal 400 releases server socket (allowHalfOpen=false) (1.261482ms)
✔ refusal 400 releases server socket (allowHalfOpen=true) (0.904817ms)
✔ refusal 403 releases server socket (allowHalfOpen=false) (0.917847ms)
✔ refusal 403 releases server socket (allowHalfOpen=true) (0.804008ms)
✔ refusal 431 releases server socket (allowHalfOpen=false) (0.718814ms)
✔ refusal 431 releases server socket (allowHalfOpen=true) (0.668466ms)
✔ refusal 502 releases server socket (allowHalfOpen=false) (1.344911ms)
✔ refusal 502 releases server socket (allowHalfOpen=true) (0.979004ms)
✔ inherited cache is discarded; private cache stays unexported (rootless=false) (82.339935ms)
✔ inherited cache is discarded; private cache stays unexported (rootless=true) (112.830463ms)
ℹ tests 12
ℹ suites 0
ℹ pass 12
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 245.761199
EXIT=0
@@ -1,45 +0,0 @@
2026-10-24T04:29:49Z
23:29:49 up 10 days, 14:49, 2 users, load average: 2.09, 2.81, 2.68
CLEAR sage-3936 TMPDIR=/mnt/storage/scratch/tmp/tUdE4l
✔ install: absent (26.366604ms)
✔ install: local (22.63247ms)
✔ install: local endpoint (22.799393ms)
✔ install: containerized missing endpoint (25.600693ms)
✔ install: bad endpoint "tcp://localhost:2375" (23.03486ms)
✔ install: bad endpoint "ssh://host/run/docker.sock" (23.131519ms)
✔ install: bad endpoint "run/docker.sock" (24.109097ms)
✔ install: bad endpoint "unix://relative.sock" (23.350143ms)
✔ install: bad endpoint "unix:///a b.sock" (25.171936ms)
✔ install: bad endpoint "unix:///a.sock\n" (23.993281ms)
✔ install: bad endpoint "unix:///a" (23.480143ms)
✔ install: bad endpoint "" (24.103262ms)
✔ install: bad endpoint null (22.669641ms)
✔ install: bad endpoint 4 (24.019575ms)
✔ install: valid endpoint (24.603314ms)
✔ install: unknown mode (24.602796ms)
✔ install: missing mode (23.797819ms)
✔ install: unknown key (22.998491ms)
✔ install: null (25.129192ms)
✔ install: array (24.482115ms)
✔ helper refuses rootful (69.872106ms)
✔ helper refuses missing (48.024972ms)
✔ helper refuses substring (75.261764ms)
✔ helper refuses object (69.618809ms)
✔ helper refuses invalid JSON (69.071543ms)
✔ helper refuses null success (72.882659ms)
✔ helper refuses rootless output but failed (53.345431ms)
✔ helper checks once and explicitly names host for both calls (102.552473ms)
✔ local mode refuses before Docker null (26.011087ms)
✔ local mode refuses before Docker {"mode":"local"} (28.185416ms)
✔ invalid config refuses before Docker (27.514422ms)
✔ inherited cache is discarded; private cache stays unexported (rootless=false) (75.055951ms)
✔ inherited cache is discarded; private cache stays unexported (rootless=true) (109.227515ms)
ℹ tests 33
ℹ suites 0
ℹ pass 33
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 690.153576
EXIT=0
@@ -1,34 +0,0 @@
2026-10-24T04:29:59Z
23:29:59 up 10 days, 14:49, 2 users, load average: 1.93, 2.75, 2.66
CLEAR sage-3936 TMPDIR=/mnt/storage/scratch/tmp/TviERP
✔ allows exact host and port, fragmented headers, and preserves tunnel head (23.927026ms)
✔ unlisted host (1.732173ms)
✔ unlisted port (1.604846ms)
✔ GET (1.184716ms)
✔ invalid port (1.343703ms)
✔ userinfo (1.188622ms)
✔ bad header (1.150055ms)
✔ slow client has a total header deadline (81.793054ms)
✔ oversized header refuses (1.244104ms)
✔ missing, invalid and unknown lists fail closed (0.57805ms)
✔ refused upstream returns 502 while retaining one allowed decision (1.746501ms)
✔ upstream reset after CONNECT closes the tunnel without a second HTTP response (22.237884ms)
✔ refusal 408 releases server socket (allowHalfOpen=false) (55.691211ms)
✔ refusal 408 releases server socket (allowHalfOpen=true) (43.646383ms)
✔ refusal 400 releases server socket (allowHalfOpen=false) (1.568816ms)
✔ refusal 400 releases server socket (allowHalfOpen=true) (1.105107ms)
✔ refusal 403 releases server socket (allowHalfOpen=false) (1.202959ms)
✔ refusal 403 releases server socket (allowHalfOpen=true) (1.016559ms)
✔ refusal 431 releases server socket (allowHalfOpen=false) (0.914639ms)
✔ refusal 431 releases server socket (allowHalfOpen=true) (0.889516ms)
✔ refusal 502 releases server socket (allowHalfOpen=false) (1.698346ms)
✔ refusal 502 releases server socket (allowHalfOpen=true) (1.234793ms)
ℹ tests 22
ℹ suites 0
ℹ pass 22
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 183.862745
EXIT=0
@@ -1,219 +0,0 @@
2026-10-24T04:30:08Z
23:30:08 up 10 days, 14:49, 2 users, load average: 1.79, 2.69, 2.64
CLEAR sage-3936 TMPDIR=/mnt/storage/scratch/tmp/qmqk7B
✔ install: absent (25.729884ms)
✔ install: local (27.889152ms)
✔ install: local endpoint (24.35751ms)
✔ install: containerized missing endpoint (32.226985ms)
✔ install: bad endpoint "tcp://localhost:2375" (36.932763ms)
✔ install: bad endpoint "ssh://host/run/docker.sock" (30.311354ms)
✔ install: bad endpoint "run/docker.sock" (25.198808ms)
✔ install: bad endpoint "unix://relative.sock" (26.143708ms)
✔ install: bad endpoint "unix:///a b.sock" (26.182728ms)
✔ install: bad endpoint "unix:///a.sock\n" (24.78053ms)
✔ install: bad endpoint "unix:///a" (25.183076ms)
✔ install: bad endpoint "" (26.038913ms)
✔ install: bad endpoint null (28.122111ms)
✔ install: bad endpoint 4 (25.273681ms)
✔ install: valid endpoint (24.978162ms)
✔ install: unknown mode (25.362867ms)
✔ install: missing mode (30.700943ms)
✔ install: unknown key (25.157537ms)
✔ install: null (25.311198ms)
✔ install: array (22.791684ms)
✔ helper refuses rootful (73.335956ms)
✔ helper refuses missing (58.142601ms)
✔ helper refuses substring (76.536037ms)
✔ helper refuses object (71.066459ms)
✔ helper refuses invalid JSON (75.615304ms)
✔ helper refuses null success (74.72487ms)
✔ helper refuses rootless output but failed (56.316538ms)
✔ helper checks once and explicitly names host for both calls (116.375519ms)
✔ local mode refuses before Docker null (33.189488ms)
✔ local mode refuses before Docker {"mode":"local"} (33.416869ms)
✔ invalid config refuses before Docker (33.260841ms)
✔ inherited cache is discarded; private cache stays unexported (rootless=false) (77.918846ms)
✔ inherited cache is discarded; private cache stays unexported (rootless=true) (125.24254ms)
ℹ tests 33
ℹ suites 0
ℹ pass 33
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 751.025142
✔ allows exact host and port, fragmented headers, and preserves tunnel head (21.619769ms)
✔ unlisted host (1.449654ms)
✔ unlisted port (1.146495ms)
✔ GET (1.037357ms)
✔ invalid port (0.994228ms)
✔ userinfo (0.84581ms)
✔ bad header (0.834734ms)
✔ slow client has a total header deadline (81.37968ms)
✔ oversized header refuses (1.096351ms)
✔ missing, invalid and unknown lists fail closed (0.499339ms)
✔ refused upstream returns 502 while retaining one allowed decision (1.730862ms)
✔ upstream reset after CONNECT closes the tunnel without a second HTTP response (21.825124ms)
✔ refusal 408 releases server socket (allowHalfOpen=false) (55.028256ms)
✔ refusal 408 releases server socket (allowHalfOpen=true) (42.613145ms)
✔ refusal 400 releases server socket (allowHalfOpen=false) (1.348936ms)
✔ refusal 400 releases server socket (allowHalfOpen=true) (1.104981ms)
✔ refusal 403 releases server socket (allowHalfOpen=false) (1.097498ms)
✔ refusal 403 releases server socket (allowHalfOpen=true) (0.965577ms)
✔ refusal 431 releases server socket (allowHalfOpen=false) (0.806917ms)
✔ refusal 431 releases server socket (allowHalfOpen=true) (0.752832ms)
✔ refusal 502 releases server socket (allowHalfOpen=false) (1.582846ms)
✔ refusal 502 releases server socket (allowHalfOpen=true) (1.14509ms)
ℹ tests 22
ℹ suites 0
ℹ pass 22
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 181.752441
#0 building with "default" instance using docker driver
#1 [internal] load build definition from Dockerfile
#1 transferring dockerfile: 454B done
#1 DONE 0.0s
#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
#2 DONE 0.7s
#3 [internal] load .dockerignore
#3 transferring context: 2B done
#3 DONE 0.0s
#4 [1/9] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
#4 DONE 0.0s
#5 [internal] load build context
#5 transferring context: 31.38MB 0.1s done
#5 DONE 0.1s
#6 [2/9] WORKDIR /opt/mosaic
#6 CACHED
#7 [3/9] COPY package.json package-lock.json ./
#7 CACHED
#8 [4/9] RUN npm ci --omit=dev --ignore-scripts --no-audit --no-fund && npm cache clean --force
#8 CACHED
#9 [5/9] COPY packages/ packages/
#9 DONE 0.1s
#10 [6/9] COPY scripts/ scripts/
#10 DONE 0.0s
#11 [7/9] COPY contracts/ contracts/
#11 DONE 0.0s
#12 [8/9] COPY roles/ roles/
#12 DONE 0.0s
#13 [9/9] COPY RELEASE ./
#13 DONE 0.0s
#14 exporting to image
#14 exporting layers
#14 exporting layers 0.4s done
#14 exporting manifest sha256:cfd93bac400adc7580134f6177efd9d748e4b4ad65b0ff22515ca3b3ffafa530 done
#14 exporting config sha256:bda6c7420c2df9510f081d28f50d205083867d0ce907c12290fff226c020fe38 done
#14 exporting attestation manifest sha256:79c61e7daf7794a3db88121ce6260fafab69f182ef89773914c41ca75a44574c done
#14 exporting manifest list sha256:82fc7a3df060c3e58799cca4f89dbd57dc007c5534fdedce54d3de637cc83b67 done
#14 naming to docker.io/library/mosaic-core:0.0.12 done
#14 unpacking to docker.io/library/mosaic-core:0.0.12
#14 unpacking to docker.io/library/mosaic-core:0.0.12 0.2s done
#14 DONE 0.7s
#0 building with "default" instance using docker driver
#1 [internal] load build definition from Dockerfile
#1 transferring dockerfile: 424B done
#1 WARN: InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
#1 DONE 0.0s
#2 [internal] load metadata for docker.io/library/mosaic-core:0.0.12
#2 DONE 0.0s
#3 [internal] load .dockerignore
#3 transferring context: 2B done
#3 DONE 0.0s
#4 [1/2] FROM docker.io/library/mosaic-core:0.0.12@sha256:82fc7a3df060c3e58799cca4f89dbd57dc007c5534fdedce54d3de637cc83b67
#4 resolve docker.io/library/mosaic-core:0.0.12@sha256:82fc7a3df060c3e58799cca4f89dbd57dc007c5534fdedce54d3de637cc83b67 done
#4 DONE 0.0s
#5 [2/2] RUN npm install -g --no-audit --no-fund @anthropic-ai/[email protected] @earendil-works/[email protected] && npm cache clean --force && rm -rf /root/.npm /tmp/*
#5 1.920 npm warn deprecated [email protected]: Use your platform's native DOMException instead
#5 6.054
#5 6.054 added 167 packages in 6s
#5 6.055 npm warn install-scripts 4 packages have install scripts not yet covered by allowScripts:
#5 6.055 npm warn install-scripts @anthropic-ai/[email protected] (postinstall: node install.cjs)
#5 6.055 npm warn install-scripts @google/[email protected] (preinstall: echo 'preinstall: no-op')
#5 6.055 npm warn install-scripts [email protected] (postinstall: node install.js)
#5 6.055 npm warn install-scripts [email protected] (postinstall: node scripts/postinstall)
#5 6.055 npm warn install-scripts
#5 6.055 npm warn install-scripts Run `npm install -g --allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs` to allow these scripts once, or `npm config set allow-scripts=@anthropic-ai/claude-code,@google/genai,esbuild,protobufjs --location=user` to allow them for all global installs.
#5 6.127 npm warn using --force Recommended protections disabled.
#5 DONE 6.3s
#6 exporting to image
#6 exporting layers
#6 exporting layers 19.5s done
#6 exporting manifest sha256:8b6b7de22cf08845f8fc02961c9677afb9faf0ddc4efe04ab4073a822a60518b done
#6 exporting config sha256:94013fda37e404bc26b7b15281138cd60afbfea672cae2d2187acc0a7c3a0d7e done
#6 exporting attestation manifest sha256:127fcf7ecd51a985d22f5a33d5c441d8fa1e246f88dc6e990c01197b46a61427 done
#6 exporting manifest list sha256:9a272acf49ab376fa9739f66453979487ea8ab259bc43e56f6553e2da7b20835 done
#6 naming to docker.io/library/mosaic-session:0.0.12 done
#6 unpacking to docker.io/library/mosaic-session:0.0.12
#6 unpacking to docker.io/library/mosaic-session:0.0.12 5.2s done
#6 DONE 24.8s
1 warning found (use docker --debug to expand):
 - InvalidDefaultArgInFrom: Default value for ARG ${CORE_IMAGE} results in empty or invalid base image name (line 2)
#0 building with "default" instance using docker driver
#1 [internal] load build definition from Dockerfile
#1 transferring dockerfile: 299B done
#1 DONE 0.0s
#2 [internal] load metadata for docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
#2 DONE 0.0s
#3 [internal] load .dockerignore
#3 transferring context: 2B done
#3 DONE 0.0s
#4 [1/4] FROM docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20
#4 resolve docker.io/library/node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20 done
#4 DONE 0.0s
#5 [internal] load build context
#5 transferring context: 517B 0.0s done
#5 DONE 0.0s
#6 [2/4] WORKDIR /opt/mosaic
#6 CACHED
#7 [3/4] COPY packages/egress/ packages/egress/
#7 DONE 0.0s
#8 [4/4] COPY contracts/egress.json contracts/egress.json
#8 DONE 0.0s
#9 exporting to image
#9 exporting layers 0.0s done
#9 exporting manifest sha256:db3e8991a9330374257298a4a5d4ff36779e8c8d0b00c8b8ead47fc82e32fada done
#9 exporting config sha256:e7d66f4f785e49a6529b3ed4b708e3b985f4e737d03a66a2c861666288d435d9 done
#9 exporting attestation manifest sha256:8d2362ebe73a0b71b175ea4d9571ab841c6f5b0913e8fa265d1f4544307987d2 done
#9 exporting manifest list sha256:36d0bbeb3abc92fc099d95e1fac416df5cc29edf147fcfc4d8743cbe1d60e592 done
#9 naming to docker.io/library/mosaic-egress:0.0.12 done
#9 unpacking to docker.io/library/mosaic-egress:0.0.12 0.0s done
#9 DONE 0.1s
internal network: listed TLS reached, unlisted host/port refused, external DNS refused
Vikunja client public GET 200; notifier REST dummy-token GET 401
test-install: PASS (provider-host measurement remains Mos gate)
EXIT=0
-363
View File
@@ -1,363 +0,0 @@
# Row 157 / I2 / #1652 — Bentina build record
## 2026-10-24 — recovery and pre-build hold
Authority: Sage sage-3906 under Q246 / mos-1566. Seat thread:
`d1ae468e-51ba-40c4-9513-b39ebbb40450`. Branch `bentina/row157`,
base `ec86f2c84` (required registration commit), initially clean.
Read root AGENTS.md, agents/bentina/README.md, the I2 brief and its shared
rules, and the approved containerized-install design. CURRENT.md is a
historical narrative; queue and Sage's assignment select this row. Goal
order recovered from 2026-09-27_goals-review.md. Boyd first review, then
Darkwing install-path review, per Sage's newer assignment.
### Queue boundary
The initial worktree `scripts/mosaic queue next bentina` refused because
queue commands require the canonical checkout. Retried the same read using
`/mnt/storage/src/mosaic-stack/scripts/mosaic` in that checkout (the documented
queue location, without changing its configuration):
```
start row 157: I2 install images, the install config key, the endpoint helper and the egress proxy; brief docs/plans/2026-10-18_containerized-install-rows.md § I2 install images, the install config key, the endpoint helper and the egress proxy; brief differs from pinned blob; ask the lead to re-pin
```
No claimant move until Sage resolves the stale brief pin. No other queue
write authorized. Sent Sage bentina-0001 with this refusal and the outbound
path findings below. Implementation has not started.
### Re-read of the I2 brief's cited files at ec86f2c84
| Cited file / old site | Current observation |
|---|---|
| scripts/hello.sh:24 | Calls processing-control/src/container-cli.mjs:25; Docker moved behind processing control. |
| scripts/build.sh:13 | Still ambient `docker compose build`:13. |
| scripts/release.sh:39,122 | Still ambient image inspect:39 and compose build:122. |
| scripts/agent.sh:208 | Now execs processing-control/src/container-cli.mjs --tty:209. |
| scripts/verify.sh:36,39,45 | Ambient image inspect:37 and compose build:40; request now uses processing-control container CLI:46. |
| scripts/land-work.sh:87-88 | Ambient network inspect/remove unchanged at 87-88. |
| scripts/test-release.sh:58 | Docker probes now at 78,129; cleanup network rm:25; network checks:131,133. |
| scripts/test-task.sh:139,395,442,517 | Docker probes now at 166,422,470,513,557,579; cleanup network rm:21 and network checks:581,583. |
| scripts/mosaic-task.mjs:396 | Now calls runContainer:402, imported from processing control, rather than directly spawning Docker. |
| packages/cli/src/git-socket.mjs:243 | dropNetwork now spawns ambient docker network rm:266; I6 retains ownership. |
| scripts/mosaic-config.mjs:109-160 / :115 | Loader expanded for instances, Console, federation and compaction settings. validate starts:293; allowed-key expression:304 retains a prefix used by stack-release-fixture.mjs. No install key yet. |
The design says to read via scripts/load_config; this is a function, not a
file. Actual entry is scripts/common.sh:16 `load_config`, invoking
mosaic-config.mjs env, then exporting four existing variables. No install
mode/endpoint exports yet. No modification made.
Design sections 3/4/7 re-read: exact base digest
`node@sha256:d6aa754f16b3197301076f047b5def2f02ea1dbbc2ca920407d46d7ec7f87b20`;
three release-tagged images; optional install with local default; exact
rootless SecurityOptions array element check; baked agents/services CONNECT
lists; JSON decision log. Spike proxy source re-read: one-chunk request
parsing, no slow-client bound, environment allowlist; it needs the reviewed
implementation required by I2, not a direct copy. package.json pins pi
0.85.1; spike Dockerfile.clis pins Claude Code 2.1.296 (current session-code
pin still needs checking before implementation).
### Outbound stop condition (brief What ships; design section 7)
The brief explicitly says: “If one doesn't, stop and tell Sage before
adding a dependency.” Not all broker outbound paths use fetch at this base:
- packages/bus/src/gitea-grant.mjs:11 imports node:https request;
send():91-140 calls httpsRequest:115 with `agent: false`, auth header,
optional CA, timeout and bounded response. It is not the measured fetch
path. runtime.mjs imports and wires the grant executor.
- packages/bus/src/web.mjs delegates to packages/discord/src/web.mjs.
That implementation imports node:https/node:http:23-24, resolves public
addresses and pins the connection to a vetted address (:161 onward).
Changing it to fetch without preserving that fence would be a boundary
change. Its arbitrary public destinations also need reconciliation with
the design's fixed services host list; do not widen the list speculatively.
- packages/tasks/src/vikunja.mjs:30,41 uses injected/default global fetch,
redirect:error, and processing cancellation/deadline.
- packages/cli/src/notifier-process.mjs:41-46 supplies global fetch to
openDirect. packages/discord/src/notify.mjs:17 builds REST only; it
explicitly does not run the gateway. packages/discord/src/rest.mjs:45
calls injected fetch. The separate Discord connector gateway uses native
WebSocket (gateway.mjs:193); do not claim the notifier needs that gateway.
- No NODE_USE_ENV_PROXY or HTTPS_PROXY setup found in host.mjs,
notifier-process.mjs or bus/process.mjs. I6 owns container startup;
I2's eventual image/process verification must demonstrate the actual path
with dummy credentials, after the transport ruling and a CLEAR slot.
Recommendation sent to Sage: re-pin the approved brief and rule on the
bounded handling/ownership of non-fetch paths before implementation. No new
dependency, host-list expansion, or replacement of DNS pinning authorized.
### Environment and evidence limits
`/run/user/1000/docker.sock` exists as a Unix socket owned by jwoltje.
Existence is not a rootless attestation. No Docker command or endpoint probe
has been run. All test execution requires Sage CLEAR; none requested yet
because there is no implementation candidate. No test, image build,
credential read, live config/data access, daemon/volume/unit change, commit
or push. Once unblocked, implement within the owned file list, add required
acceptance cases, then request a concrete CLEAR with paths and suites;
use fresh /mnt/storage/scratch/tmp/XXXXXX TMPDIR and timeout -k 10 for each
scripts/test-*.sh. Old-test changes require Sage authorization before edits.
Provider-host measurement ships with expected output for Mos; no real token
will be used here.
## sage-3907 — stop resolved; implementation draft
Sage confirms only I6 changed since the brief pin, and will re-pin row 157.
I2 must not change non-fetch security transports or add a dependency. Record
all gaps, retain each named service host and code path in the contract with
an explicit note, and build the rest. Sage owns the transport ruling before
broker rollout in later rows. This supersedes the pre-build transport hold;
the queue claim still awaits a current pin. No queue move attempted.
Additional non-fetch broker paths found:
- runtime.mjs:511 calls seat/src/working.mjs:461 publishRemote, which runs
git ls-remote/push at :479/:490 with credential helper input on fd 3.
checkout.mjs:80 gitEnv emits a fixed environment without HTTPS_PROXY.
This is Git HTTPS, not fetch; core's no-git design also prevents it from
working today. The Gitea host entry retains this caveat.
- runtime.mjs:292 wires hostGrant; host-grant.mjs:174 spawns ssh-keyscan
to read public host keys at the registered address/port. It uses fixed
PATH-only env, not fetch or HTTP CONNECT. runtime.mjs:435 wires
hostExecutor; host-run.mjs:30-45 sshArgs explicitly sets
ProxyCommand=none and ProxyJump=none, then ssh to run authorized commands
using a pinned host key and private agent. Neither routes through an env
HTTP proxy. Hosts/ports are per registry and may be SSH, so no fabricated
:443 allowlist entry or network expansion was added.
- Search-source plug-ins delegate to discord/src/web.mjs. searxng-url
sends search GETs to the operator's configured host; searxng-bundled points
at 127.0.0.1:8888. Both are non-fetch and depend on the existing DNS checks.
No fixed host can be truthfully named for arbitrary web.fetch or operator
search; no wildcard entry was added. These are documented gaps, not
claims of proxy coverage.
- Separate Discord connector gateway uses native WebSocket; retained
gateway.discord.gg:443 with a NOT PROXIED note, as Sage directs. Notifier
is REST-only; no gateway test or live connector run added.
Choices: dependency-free net proxy; exact list lookup; 8192-byte/5s total
header bounds, 10s upstream connect/120s tunnel idle bounds. JSON allowed
means the contract permitted the destination, not that upstream succeeded.
Images use exact I1 base, core has NODE_USE_ENV_PROXY=1, session globally
installs Claude 2.1.296 and package.json pi pin. Source context includes only
tracked runtime paths plus explicit new I2 runtime paths, never agent work
or host node_modules/.git. Tags derive from RELEASE. Core receives no git.
The zai host candidate api.z.ai is confirmed by the pinned dependency's
providers/zai.js:9 in canonical node_modules; real-token measurement remains
Mos's gate. OpenAI candidate is from S6 and is only measured when configured.
No live model-table config was read.
New tests cover config exit/immutability; helper rootful, null/nonzero,
substring, wrong type/JSON, exact rootless and hostile DOCKER_HOST; proxy
fragmentation/pipelined data, deny/port/malformed/slow/oversize and JSON logs.
test-install additionally builds, inspects pins and exercises an internal
network plus actual Vikunja/public GET and notifier REST/dummy GET with
proxy log evidence. The generic S5 fetch test is not repeated.
Old-suite change is prepared as test-config.patch (adds new config cases
before the existing summary). It has NOT been applied: Sage's old-test
change rule requires approval first. No old tests changed. No tests run.
## sage-3910 — first CLEAR
Authorized four serialized runs exactly as requested, plus applying the
addition-only test-config.patch. No broader suites; Sage supplies the
landing gate. Return slot on run 4 completion or an actual stop.
Additional paths retained under Sage's explicit ruling:
- scripts/install-tests/config.test.mjs: table of install schema/exit/byte
preservation cases, reused by test-config.sh and test-install.sh.
- scripts/install-tests/helper.test.mjs: fake Docker executable to assert
exact argv and rootless refusal before the requested call, without a daemon.
- scripts/install-tests/network-probe.mjs: actual internal-network tunnel,
TLS, unlisted host/port and external DNS refusal in a core image.
- scripts/install-tests/services-probe.mjs: actual Vikunja and notifier REST
client functions, public GET plus invalid dummy token, with proxy log proof.
All are new files; no old assertion changes.
## First CLEAR result and sage-3916 correction
Run 1: exit 0, config/helper 31/31, zero fail/skip/cancel,
01-install-unit.log. Run 2: exit 0, proxy 11/11, zero fail/skip/cancel,
02-egress.log. Run 3: exit 1, config selftest 55 pass / 1 fail; new install
cases 20/20, 03-config.log. Each log records UTC/load/CLEAR/fresh scratch TMPDIR.
Run 4 NOT RUN: no Docker command, probe or build. Slot returned to Sage in
bentina-0004 before any rerun.
Old red: config without console loads with unchanged output
(test-config.sh:266; log:53). Cause: this implementation unconditionally
added install:{mode:local} to resolved JSON. Sage-3916 approves the source-only
fix: omit output key when input omits it (optional-key convention), default
env export to local. Applied this fix to mosaic-config.mjs and adjusted only
the new absent-key case. No old assertion changed. No verification after fix:
Poe has the current slot, Bentina runs next only on a new CLEAR. Run order
will be 1, 3, 4; no reason to rerun unchanged proxy unit tests separately.
The approved test-config patch is addition-only: git diff --numstat reports
4 added, 0 removed lines for scripts/test-config.sh. No existing line or
assertion changed. git diff --stat before first run:
```
BUILD-LOG.md | 2 ++
README.md | 9 +++++++++
docs/SESSIONS.md | 2 ++
docs/TOOLS.md | 38 ++++++++++++++++++++++++++++++++++++++
scripts/mosaic-config.mjs | 20 +++++++++++++++++++-
scripts/test-config.sh | 4 ++++
6 files changed, 74 insertions(+), 1 deletion(-)
```
New untracked paths are not included by git diff --stat; see explicit paths
above. Claim bentina-0003 initially refused queue-lock-held; same op retried.
Sage reports re-pin rev 3808 (sage-3913).
## sage-3919 — corrected acceptance green, slot returned
Run 1 exit 0, helper/config 31/31 (04-install-unit-fixed.log); run 3 exit 0,
config selftest 56/56 plus new install 20/20 (05-config-fixed.log); run 4
exit 0 (06-install.log), helper/config 31/31 and proxy 11/11, images built
at RELEASE 0.0.12, rootless endpoint explicitly attested, image version
checks passed, internal-network TLS to listed host reached, unlisted host
and port refused, external DNS refused. Actual Vikunja public GET returned
200 and notifier REST dummy-token GET returned 401; services proxy logs
show both host decisions. No real token or broker started. Test-owned
networks/containers cleaned by suite. Slot returned bentina-0005. No broader
suites: Sage's landing gate supplies them. Claim bentina-0003 acknowledged
rev 3812 briefed -> in-progress. No queue files changed in this worktree.
Post-pass source review found one small correctness defect before handoff:
upstream errors after a successful CONNECT would append a plaintext 502 to
an established TLS tunnel. Corrected to close an established tunnel and
reserve 502 for establishment errors. Added a local reset-after-CONNECT
regression alongside the existing establishment-error test. This creates
a new verification need: request a new CLEAR for egress units and install
rebuild/probe before committing. Existing green logs above predate this fix;
do not claim them for the final proxy bytes.
## sage-3923 — final proxy and install evidence
07-egress-final.log: exit 0, 12/12, zero fail/skip/cancel, including upstream
reset after a CONNECT200 closes the tunnel without a second HTTP response.
08-install-final.log: exit 0, 31/31 config/helper and 12/12 proxy,
zero fail/skip/cancel, three images rebuilt, version checks passed,
internal-network listed TLS200/unlisted host403/unlisted port403/external
DNS refused, Vikunja public GET200 and notifier REST dummy-token GET401
through services proxy; JSON log decisions verified. Explicit endpoint
unix:///run/user/1000/docker.sock passed rootless check. Suite removed only
its named i2 containers/networks. Slot returned to Sage in bentina-0007.
No runtime source change after these final reruns. Mos-only measurement
runner was statically hardened to report a fixed message on malformed
credential JSON, avoiding JSON.parse's error snippet echoing private input.
The runner and provider script have not been executed here: Mos owns the
real-token/provider-model-table check and its output must land on #1652.
No claim of completed provider-host measurement or final host-list approval.
Acceptance accounting:
- Install validator cases and unchanged config bytes: new 20 cases green;
entire existing config suite 56/56 (05-config-fixed.log); absent output
shape preserved; env/helper default local proven by helper's absent test.
- Rootless guard: exact argv/array membership/status/type/refusal fake
cases plus real rootless check in 08-install-final.log. No ambient Docker
context used by new code. Other scripts' migration remains I6.
- Images: exact base digest in Dockerfiles, release 0.0.12 tags, core node
24.21.0/no-git/RELEASE assertion; session Claude2.1.296/pi0.85.1 assertions;
all built through the helper on the explicit rootless endpoint.
- Proxy: allow/deny/port/malformed/slow/fragmented/header-bound/upstream-error
and structured logs verified in final unit suite; actual TLS tunnel and
internal-network denials plus services client fetch paths verified by
install suite. The generic S5 fetch probe was not repeated.
- Non-fetch broker/gateway/SSH/Git/web paths remain documented gaps under
sage-3907, not modified or silently claimed to be covered. All fixed
service hosts retain entries and code-path notes. No dependency added.
- Full suites: not run here per sage-3910; Sage's landing gate supplies
broader coverage. Reviewer and Mos gates still pending.
Static source diff whitespace check passed (excluding captured .log files
and unified .patch context). Raw build logs retain Docker/npm output
including whitespace; no evidence was normalized or rewritten. Old-suite
change remains +4/-0 and every prior assertion byte-identical. No queue
file changed here. No secret read, token test, live state/unit operation,
daemon/volume/restart action, protected-branch push, or integration.
Candidate handoff: base ec86f2c84; commit only this I2 work and receipts on
bentina/row157, push through configured repository helper, then send Sage
and Boyd the tip/base/manifest for first review. Darkwing follows Boyd.
The manifest lists each changed path except its own self-reference.
## Round 2 — Boyd B1/B2 (boyd-0023; Sage sage-3933)
First candidate a14fdc443, manifest b0ed8395, CHANGES on #1652 comment31494.
Read Boyd's exact scratch harnesses and logs under /mnt/storage/scratch/tmp/IyNqMs.
B1 reproduction: normal peer control releases its socket, allowHalfOpen peer
receives408 but getConnections still reports1 after100ms (assertion1 != 0).
Root cause: refusal end sends FIN but clears the only deadline and leaves the
read side open. B2 reproduction: same-PID exec inherits exported checked_pid
and endpoint; fake rootful Docker sees ps on inherited.sock, no info; rc0 vs
expected2. Root cause: source initializes neither cache validity nor endpoint.
These findings agree with source inspection and require no design departure.
No local tests were run while Goldie holds the slot.
Added tests before fixes, adapted from the reviewer with explicit cleanup:
- packages/egress/tests/refusal.test.mjs: real loopback sockets, normal and
half-open controls for every400/403/408/431 refusal; asserts server socket
count reaches0, one denial log, expected response. Removing destruction
after flush should fail half-open cases while normal controls still pass.
- scripts/install-tests/review-cache.test.mjs: same-PID exec with inherited
exported cache, fake rootful/rootless Docker, actual loader/helper; asserts
first call is info at configured.sock, refusal or exact once-per-process
cache behavior, and no cache keys in Docker's child environment. Removing
source-time reset should fail; no real engine, config or credentials used.
No existing test file or assertion edited.
Minimal fixes: proxy uses endAndClose for all refusal responses, including
upstream establishment502: destroy after the small response flushes, plus a
fixed1s drain deadline cleared on close. Established-tunnel reset behavior
stays unchanged. Helper unsets checked_pid/endpoint/mode on every source,
clearing inherited export attributes; ordinary function calls still reuse
only an attestation obtained in the current process. No dependency, contract,
host-list or authority change. Request CLEAR for new regression red/green,
full targeted units and test-install rebuild before commit. Old-test red
still stops and returns slot. Sage's broader landing gate remains separate.
Sage-3935 approves the five-run plan including archived red-first proof;
Goldie holds the slot and Bentina is next. Still no node/docker test run.
The new refusal test also includes normal/half-open502 establishment failures
on a closed loopback port, exercising the shared termination helper on that
path (allowed log stays true for an approved destination whose upstream fails).
This stays within the named new regression file and approved commands.
## Round 2 verified — sage-3936 slot returned
Claimant move bentina-0012 acknowledged rev3825 in-review -> in-progress,
before the correction commit. Five serialized runs, each fresh short scratch
TMPDIR/UTC/load/CLEAR and timeout -k10:
| Run | Log (this directory) | Exit | Evidence |
|---|---|---|---|
| 1 old archived runtime + new tests | 09-r2-archived-red.log | 1 expected | 12 tests:5 normal-peer controls pass;7 intended failures (five half-open400/403/408/431/502 cases, two inherited-cache cases);0skip/cancel |
| 2 fixed regressions | 10-r2-regressions-green.log | 0 | 12/12,0fail/skip/cancel |
| 3 install unit suite | 11-r2-install-units.log | 0 | 33/33,0fail/skip/cancel |
| 4 egress suite | 12-r2-egress-suite.log | 0 | 22/22,0fail/skip/cancel |
| 5 install images/network/services | 13-r2-install.log | 0 | 33+22 unit tests green;three images rebuilt/version pins checked;explicit rootless guard;listed TLS200,unlisted host/port403,external DNS refused;Vikunja publicGET200/notifier REST dummyGET401;JSON decisions verified |
Run1 unpacked git archive of a14fdc443 into its own scratch directory and
overlaid only the two new tests; it did not revert or modify the builder
worktree. Failures were exact behavioral assertions, not infrastructure or
syntax errors. All test sockets cleaned in t.after; the install suite
removed only its i2-prefixed containers/networks. Slot returned to Sage in
bentina-0014. No existing test file/assertion changed for round2. No code
change after verification. Earlier config56/56 evidence remains in05 log;
loader/config unchanged for this review. No broader suites authorized here.
The round2 manifest MANIFEST-r2.sha256 covers the full candidate delta from
original base ec86f2c84, including the unchanged historical round1 manifest;
it excludes only its own self-reference (its hash is supplied in the review
message). Historical round1 manifest still describes a14fdc443 and is not
rewritten to describe later source. New manifest, candidate tip/base and
receipts go to Sage and Boyd, then Darkwing follows Boyd's approve. The
owner's automated review-request credential boundary still belongs to Sage;
no token read or identity substitution is authorized. Mos provider evidence
and Sage's broader landing gate remain required. No protected-branch push,
real-token test, live config/state/unit action or daemon/volume operation.
@@ -1,44 +0,0 @@
58e473e1783a9f64f6b1a696f747925b9a444d85dbe72e48e7a0dcbd62a2d4e5 BUILD-LOG.md
67bd811b3030ba0355af2316d02e8b2931b4b2c5a74c5be904b5311de6ef81dd README.md
6161cc0505bf0be33ba0e7c7f0f07382cca0ec2b5ace65ac54e16c4d1e3424fc agents/bentina/work/queue-157/01-install-unit.log
f13213941dab22955841108d85e62f67ede2ddbc95c25a7b351f30070b035a85 agents/bentina/work/queue-157/02-egress.log
b46c3fb5f252100f3e2de5b97bd0efc0c1fbbef26230252945f7bb309d359f5e agents/bentina/work/queue-157/03-config.log
fc76e5f9b19a31b494ebf4a128ef5f171f1f0712dc3928bebb6556815577015c agents/bentina/work/queue-157/04-install-unit-fixed.log
c9a46d969c5d28814addccd7cafe8e734d15c02a407ee80434d4e3e70a3fa4b7 agents/bentina/work/queue-157/05-config-fixed.log
1d5505a6aba0078e7cf9936fb683e06ac900af12e9e8faf224099a5e2d825fc7 agents/bentina/work/queue-157/06-install.log
c684dfdd8a460a915e15291fc0f92c9ba30f38d3d3dfa5fa190e7835fbcd448f agents/bentina/work/queue-157/07-egress-final.log
5c3efacdbcda5628882045644c32169b7020a6e49d6b89b273aba20ae042898b agents/bentina/work/queue-157/08-install-final.log
d2f7bd37b5ac8cc781fae1308a5b047e0ed0d1b63f8d5e22d56e0efa328c4883 agents/bentina/work/queue-157/09-r2-archived-red.log
4230f9fcc91d1670df0d975e9c5794edb7aa9b21b24c4f415d1594373e769da4 agents/bentina/work/queue-157/10-r2-regressions-green.log
3e5cd8d154b01ede9a9533f4ff40ac29b4e8193131fd63ba04707df51217d0bb agents/bentina/work/queue-157/11-r2-install-units.log
4d23ae4a6d3247a498bd446960c075235f632474fba9e8db374a32aaf4760219 agents/bentina/work/queue-157/12-r2-egress-suite.log
a4652f0eb6dfcc177c24c5d85d7ec08096e9f49304085f817828d7ef451acd64 agents/bentina/work/queue-157/13-r2-install.log
5b595798fa8184b15412276d070a0891fdf5cb629eabb8b7bb5f6b3d2b69b3a5 agents/bentina/work/queue-157/BUILD.md
b0ed8395108ad398f5c9c08fbac8a1b5ca02f579a5d7b709d19d3aaf0860f9ae agents/bentina/work/queue-157/MANIFEST.sha256
21f9783dcfe2cac00a49d0d7930a57134bc59ec19dd7bf2e96950f79fae5b1b1 agents/bentina/work/queue-157/PROVIDER-EXPECTED.md
6518c574291db5816057fbbc438435d0571e088c8f26d1a47ec03ff3047a5efa agents/bentina/work/queue-157/provider-hosts.sh
6dbef8d20ede98a9311ba47137b587c07cbc03e921b2a8429652fe362aeb4b85 agents/bentina/work/queue-157/provider-runner.mjs
e7cb4d0c67eadec557a25385b4ea9803970818354a9e8b0780ac4de07cf34911 agents/bentina/work/queue-157/test-config.patch
cb2b251342f0020764b7b757b22567d52380053fc15f0e1c7e665a5ec1838f24 contracts/egress.json
58107cfa274b7551ae163ea77c56d08df530e7f08e06539ddd2999c22252d749 docs/SESSIONS.md
edcaa526bf0a518716d4e87895d49920b8912295688809a25102ce6b9d6ebdc3 docs/TOOLS.md
6bd1dc7c244cfb4134d813e0b149ef1182a810eb99f01a95d548f0885b216437 images/README.md
9c6c3d5736f1ed7eb6dcdb893761b937b7108e29730daf28fe8dd0064df73740 images/core/Dockerfile
0179d84a7b9321832efb1d90c0290c8f2f6de03db3b2b6d8379672aca598c2a0 images/egress/Dockerfile
e246e3e3da1065f3c8cf24cc1f7ae15290f3e4c6508f0c6f17a4889a77f2d591 images/session/Dockerfile
3930764cf5848571507eec3e5b3eda2ebb8aa2d9642f83615b462bf5035e0e75 packages/egress/README.md
2c45bfed1f19f8a42e05552f8a10584feed8d25ccc506252d55a9a3b6c90a21c packages/egress/package.json
257058faee55a429d98955b6253d6b8a0bb058c50446764566586b06a8f76b61 packages/egress/src/cli.mjs
ce3adb0515ca7e9041f36d7a82df355a3fc97e2a96fc6811ea3b9b47e464787b packages/egress/src/proxy.mjs
5c4e778ec9ec5b93ab681d615a2240cd342d09adfe4df1634f3d6abbf16a405b packages/egress/tests/proxy.test.mjs
258e954ad7e441a7dd7d25ca9208691ea167e9cb7f34d7d689ed11005adeb4b4 packages/egress/tests/refusal.test.mjs
86e0152120b04fcfe2a4081b7686f179a139c5370027828c79572033f3cf81c3 scripts/images.sh
3647b06df02b4d9c0a74b62c774ecdff9272e68a84c06cd85861d7bf18655d5a scripts/install-tests/config.test.mjs
21e05bc3e0639427f5a9d4cf166d2991964134845272df76c712ad00ea8033b6 scripts/install-tests/helper.test.mjs
aa5328566d3e5b46fee587657dac146712735dca0aca90d3d0ad84bc20e313e1 scripts/install-tests/network-probe.mjs
45274f6745cf931f3002e6c36dcfc46a96c8f09e01e6243c18659749673752fd scripts/install-tests/review-cache.test.mjs
72ae66696ad2faaf258c832fdfdf680efc8fca7099359e58da1ee01a88541d8a scripts/install-tests/services-probe.mjs
79a8ecfc5ab279111031d5a44906450b732b517fe98511992cafd873ab7a84d3 scripts/lib/docker.sh
7398bb289d2f28ed15a2984bdeee7e30a704890a33b5e2a5c9f7554115aca8f9 scripts/mosaic-config.mjs
dcf1799238141689c9d80adc6680694a609e5fb9deef7b78d6b3f4765163e3fe scripts/test-config.sh
08be25f67d8fc6676218b1014d34a2ce36a939231f58b657972d856ee26169b2 scripts/test-install.sh
@@ -1,36 +0,0 @@
6995aa3bcdf50e2441142cc9b6fc9ec84853e353e7a408bbc877ee7e188e73c4 BUILD-LOG.md
67bd811b3030ba0355af2316d02e8b2931b4b2c5a74c5be904b5311de6ef81dd README.md
6161cc0505bf0be33ba0e7c7f0f07382cca0ec2b5ace65ac54e16c4d1e3424fc agents/bentina/work/queue-157/01-install-unit.log
f13213941dab22955841108d85e62f67ede2ddbc95c25a7b351f30070b035a85 agents/bentina/work/queue-157/02-egress.log
b46c3fb5f252100f3e2de5b97bd0efc0c1fbbef26230252945f7bb309d359f5e agents/bentina/work/queue-157/03-config.log
fc76e5f9b19a31b494ebf4a128ef5f171f1f0712dc3928bebb6556815577015c agents/bentina/work/queue-157/04-install-unit-fixed.log
c9a46d969c5d28814addccd7cafe8e734d15c02a407ee80434d4e3e70a3fa4b7 agents/bentina/work/queue-157/05-config-fixed.log
1d5505a6aba0078e7cf9936fb683e06ac900af12e9e8faf224099a5e2d825fc7 agents/bentina/work/queue-157/06-install.log
c684dfdd8a460a915e15291fc0f92c9ba30f38d3d3dfa5fa190e7835fbcd448f agents/bentina/work/queue-157/07-egress-final.log
5c3efacdbcda5628882045644c32169b7020a6e49d6b89b273aba20ae042898b agents/bentina/work/queue-157/08-install-final.log
f4755f24d626dc69b8159c6934e4213a907659dbb4d46d29d82efc0405b50152 agents/bentina/work/queue-157/BUILD.md
21f9783dcfe2cac00a49d0d7930a57134bc59ec19dd7bf2e96950f79fae5b1b1 agents/bentina/work/queue-157/PROVIDER-EXPECTED.md
6518c574291db5816057fbbc438435d0571e088c8f26d1a47ec03ff3047a5efa agents/bentina/work/queue-157/provider-hosts.sh
6dbef8d20ede98a9311ba47137b587c07cbc03e921b2a8429652fe362aeb4b85 agents/bentina/work/queue-157/provider-runner.mjs
e7cb4d0c67eadec557a25385b4ea9803970818354a9e8b0780ac4de07cf34911 agents/bentina/work/queue-157/test-config.patch
cb2b251342f0020764b7b757b22567d52380053fc15f0e1c7e665a5ec1838f24 contracts/egress.json
d6239336e48b6a78b80680c88e83ba4b67f8cbed99bf2ee3a697b1b0611e54e9 docs/SESSIONS.md
edcaa526bf0a518716d4e87895d49920b8912295688809a25102ce6b9d6ebdc3 docs/TOOLS.md
6bd1dc7c244cfb4134d813e0b149ef1182a810eb99f01a95d548f0885b216437 images/README.md
9c6c3d5736f1ed7eb6dcdb893761b937b7108e29730daf28fe8dd0064df73740 images/core/Dockerfile
0179d84a7b9321832efb1d90c0290c8f2f6de03db3b2b6d8379672aca598c2a0 images/egress/Dockerfile
e246e3e3da1065f3c8cf24cc1f7ae15290f3e4c6508f0c6f17a4889a77f2d591 images/session/Dockerfile
3930764cf5848571507eec3e5b3eda2ebb8aa2d9642f83615b462bf5035e0e75 packages/egress/README.md
2c45bfed1f19f8a42e05552f8a10584feed8d25ccc506252d55a9a3b6c90a21c packages/egress/package.json
257058faee55a429d98955b6253d6b8a0bb058c50446764566586b06a8f76b61 packages/egress/src/cli.mjs
2ec533e8a2c9ace2d2dc17ac9efe75a9930ae50e93f6700e3de8aa0475b42295 packages/egress/src/proxy.mjs
5c4e778ec9ec5b93ab681d615a2240cd342d09adfe4df1634f3d6abbf16a405b packages/egress/tests/proxy.test.mjs
86e0152120b04fcfe2a4081b7686f179a139c5370027828c79572033f3cf81c3 scripts/images.sh
3647b06df02b4d9c0a74b62c774ecdff9272e68a84c06cd85861d7bf18655d5a scripts/install-tests/config.test.mjs
21e05bc3e0639427f5a9d4cf166d2991964134845272df76c712ad00ea8033b6 scripts/install-tests/helper.test.mjs
aa5328566d3e5b46fee587657dac146712735dca0aca90d3d0ad84bc20e313e1 scripts/install-tests/network-probe.mjs
72ae66696ad2faaf258c832fdfdf680efc8fca7099359e58da1ee01a88541d8a scripts/install-tests/services-probe.mjs
e524a285dcebe2a6350e7690650c2796e54661225ce00a67b4559e519f9e3fea scripts/lib/docker.sh
7398bb289d2f28ed15a2984bdeee7e30a704890a33b5e2a5c9f7554115aca8f9 scripts/mosaic-config.mjs
dcf1799238141689c9d80adc6680694a609e5fb9deef7b78d6b3f4765163e3fe scripts/test-config.sh
08be25f67d8fc6676218b1014d34a2ce36a939231f58b657972d856ee26169b2 scripts/test-install.sh
@@ -1,37 +0,0 @@
# Mos provider-host gate (not run by Bentina)
Run only after candidate images build and Mos authorizes the real-token calls.
Use a scratch config with install.mode containerized and the rootless endpoint;
do not change the live config. Provide one JSON object on stdin with
`claudeOAuth` and `zai`, plus optional `anthropic` / `openai` keys if those
providers are in the actual model table. The script opens no host token file.
Never paste the input or raw CLI output on the issue. It prints success flags
and the proxy's host decisions only. Wrap in `timeout -k 10 600`.
From the checkout:
```
Mos-private-json-producer | MOSAIC_CONFIG=/path/to/scratch-config.json agents/bentina/work/queue-157/provider-hosts.sh
```
Expected required output (with just Claude Code and pi/zai):
```
{"case":"claude","ok":true}
{"case":"pi-zai","ok":true}
{"hosts":["api.anthropic.com:443","api.z.ai:443"],"denied":[]}
```
Optional pi/anthropic adds `{"case":"pi-anthropic","ok":true}` and no
host. Optional pi/openai adds `{"case":"pi-openai","ok":true}` and
`api.openai.com:443` to sorted hosts. All cases must return ok true, exit 0,
and denied empty. Model names are explicit candidates; Mos must reconcile
them to the actual model table without broadening a host list on failure.
A new host, refusal, failure, or different model requirement returns to Sage;
there is no wildcard or automatic discovery/update. The baked agents list
remains provisional until Mos posts matching output on #1652.
Each resource name begins i2-provider; cleanup removes only this run's two
networks and two containers. No volumes, daemon or restart operations. The
measurement uses container root as the design requires; I5 still owns the
full root filesystem re-measurement and final session limits.
@@ -1,36 +0,0 @@
#!/usr/bin/env bash
# Mos runs this explicitly with a caller-supplied scratch MOSAIC_CONFIG and
# credential JSON on stdin. This script reads no host credential file.
set -euo pipefail
REPO="$(cd "$(dirname "${BASH_SOURCE[0]}")/../../../.." && pwd)"
cd "$REPO"
source scripts/lib/docker.sh
mosaic_docker version >/dev/null
release="$(tr -d '[:space:]' < RELEASE)"
prefix="i2-provider-$(date -u +%s)-$$"
nets=("$prefix-internal" "$prefix-egress")
cleanup(){
rc=$?; trap - EXIT
mosaic_docker container rm -f "$prefix-session" "$prefix-proxy" >/dev/null 2>&1 || true
for net in "${nets[@]}"; do mosaic_docker network rm "$net" >/dev/null 2>&1 || true; done
exit "$rc"
}
trap cleanup EXIT
mosaic_docker network create --internal "${nets[0]}" >/dev/null
mosaic_docker network create "${nets[1]}" >/dev/null
mosaic_docker create --name "$prefix-proxy" --network "${nets[1]}" --read-only --cap-drop ALL --security-opt no-new-privileges --pids-limit 64 --memory 128m --memory-swap 128m --cpus 0.5 "mosaic-egress:$release" agents >/dev/null
mosaic_docker network connect --alias proxy "${nets[0]}" "$prefix-proxy"
mosaic_docker start "$prefix-proxy" >/dev/null
ready=0
for attempt in {1..50}; do
if mosaic_docker exec "$prefix-proxy" node -e 'const s=require("node:net").connect(3128,"127.0.0.1");s.on("connect",()=>{s.destroy();process.exit(0)});s.on("error",()=>process.exit(1))'; then ready=1; break; fi
sleep 0.1
done
[ "$ready" = 1 ] || { echo proxy-not-ready >&2; exit 1; }
rc=0
# Token travels only in stdin and the CLI child's env; never an engine env or log.
mosaic_docker run --rm --init -i --name "$prefix-session" --network "${nets[0]}" --log-driver none --read-only --tmpfs /root:rw,nosuid --tmpfs /tmp:rw,noexec,nosuid --cap-drop ALL --security-opt no-new-privileges --pids-limit 512 --memory 4g --memory-swap 4g --cpus 2 \
--mount "type=bind,src=$REPO/agents/bentina/work/queue-157/provider-runner.mjs,dst=/opt/mosaic/provider-runner.mjs,readonly" \
"mosaic-session:$release" node provider-runner.mjs || rc=$?
mosaic_docker logs "$prefix-proxy" | node -e 'let s="";process.stdin.on("data",c=>s+=c).on("end",()=>{const rows=s.trim().split("\n").filter(Boolean).map(JSON.parse);const deny=rows.filter(r=>r.host&&!r.allowed);console.log(JSON.stringify({hosts:[...new Set(rows.filter(r=>r.allowed).map(r=>r.host+":"+r.port))].sort(),denied:[...new Set(deny.map(r=>r.host+":"+r.port))].sort()}));if(deny.length)process.exitCode=1})' || rc=$?
exit "$rc"
@@ -1,17 +0,0 @@
// Mos-only real-token measurement. Reads one JSON object on stdin. Never logs CLI output.
import { execFile } from 'node:child_process';
import { promisify } from 'node:util';
const exec = promisify(execFile);
let input='';for await(const chunk of process.stdin){input+=chunk;if(input.length>65536)throw new Error('measurement-input-too-large');}
let keys;try{keys=JSON.parse(input);}catch{input='';process.stderr.write('measurement-input-invalid\n');process.exit(2);}input='';
if(!keys.claudeOAuth||!keys.zai)throw new Error('measurement-needs-claudeOAuth-and-zai');
const prompt='Reply with exactly I2_PROVIDER_OK and no other text.';
const env={PATH:process.env.PATH,HOME:'/root',HTTPS_PROXY:'http://proxy:3128',HTTP_PROXY:'http://proxy:3128',NODE_USE_ENV_PROXY:'1',CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC:'1'};
const pi=['--no-session','--no-tools','--no-approve','--no-extensions','--no-skills','--no-prompt-templates','--no-themes','--no-context-files'];
const cases=[['claude','claude',['-p',prompt,'--tools',''],{CLAUDE_CODE_OAUTH_TOKEN:keys.claudeOAuth}],['pi-zai','pi',[...pi,'--provider','zai','--model','glm-5.3-flash','-p',prompt],{ZAI_API_KEY:keys.zai}]];
if(keys.anthropic)cases.push(['pi-anthropic','pi',[...pi,'--provider','anthropic','--model','claude-sonnet-5-5','-p',prompt],{ANTHROPIC_API_KEY:keys.anthropic}]);
if(keys.openai)cases.push(['pi-openai','pi',[...pi,'--provider','openai','--model','gpt-5.4','-p',prompt],{OPENAI_API_KEY:keys.openai}]);
for(const [name,bin,args,secrets] of cases){
let ok=false;try{const {stdout}=await exec(bin,args,{env:{...env,...secrets},timeout:120000,killSignal:'SIGKILL',maxBuffer:1024*1024});ok=stdout.includes('I2_PROVIDER_OK');}catch{}
console.log(JSON.stringify({case:name,ok}));if(!ok)process.exitCode=1;
}
@@ -1,12 +0,0 @@
--- a/scripts/test-config.sh
+++ b/scripts/test-config.sh
@@ -291,5 +291,9 @@
fi
echo
+# I2: each install shape asserts its exit code and config-byte preservation.
+node --test scripts/install-tests/config.test.mjs
+check "install configuration cases" $?
+
echo "selftest: $PASS passed, $FAIL failed"
[ "$FAIL" -eq 0 ]
-8
View File
@@ -1,8 +0,0 @@
# Boyd
Builder seat, Codex gpt-6.1-sol, started by Mos under Q245 (mos-1506). Owns row 298 (the chief-of-staff grant scope, handed over from Megavolt).
No launcher in this directory. The seat runs as a T3 thread (thread 48a3ae38) and works in its own worktree. It has no
credentials of its own; it pushes only its own `boyd/*` branches through the repository credential helper (mos-0981),
never `refactor`, `main` or another seat's branch. Claude seats orchestrate and review (Q245). Registered by Sage on
2026-10-23 so the queue can name the seat as row owner (store.mjs isSeatDir).
-272
View File
@@ -1,272 +0,0 @@
# Row 298 (#1804, Q228): chief-of-staff grant scope
Owner Boyd (48a3ae38), reviewer Dewey. Branch `boyd/row298`, base `45dca69f6`.
Assignment: mos-1496/Q245. Handoff: Megavolt megavolt-0203, local `7a141269c`;
cherry-picked as `4de3cec27` (design) and `7cea739de` (UNTESTED code).
Brief: `docs/plans/2026-10-23_mvp-readiness-rows.md`, chief-of-staff grant scope.
Megavolt's original design remains in `agents/megavolt/work/queue-298/BUILD.md`.
## Authority and accepted design
Sage sage-3594, restated in sage-3612: launch.grantScope, lenient read with empty
fallback, strict human-only write. No general organization setter may write it.
Per-method agents/projects or agents/hosts/commands; host-enroll never in scope.
Host command arrays match whole tokens and exact lengths. `grants.scope.set`
from the human CLI is Approve; no Console page or chief-raised scope change.
Mos mos-1496/1502 requires the same human-shell guard as `mosaic access`.
The broker closes an in-scope request via scope and writes grant.scope.used;
missing evidence must refuse execution. Narrowing before spend fails
scope-changed. Empty scope ships; only Jason sets the live value (Q188).
No credential files read, no live grants, no deployment, no queue writes. Push
only boyd/*, additive commits, no amend/force-push or attribution trailers.
Sage owns queue, shared test slot and landing. No Node/tests before CLEAR.
## Implementation plan and ledger
Using writing-plans and executing-plans inline; the approved brief and D1-D6
are the spec. This packet is the requested plan/tracking location.
- [x] Read brief, roster, implementation and handoff; register session.
- [x] Bring Megavolt's two commits onto Boyd's branch without changing history.
- [x] Add independent CLI tests in `packages/cli/tests/grants-scope.test.mjs`:
scope read/set requests; agent-marker rejection before stdin/transport;
--tester rejection; missing revision, malformed/empty/oversize input.
- [x] Strengthen new business/bus grant-scope tests for exact commands,
scope evidence binding, host-enroll exclusion and spent scope-changed.
- [ ] On Sage CLEAR, observe targeted failures before fixes; fix inherited
implementation using the existing human proof and grant executors.
- [ ] Update bus/CLI docs, append BUILD-LOG before/after evidence, manifest.
- [ ] On Sage CLEAR run touched suites; record exact results and mutants.
- [ ] Commit UNTESTED until verified; push boyd/row298 only when slot permits;
report to Sage and Dewey, cc Mos for pushes/blockers. Dewey reviews manifest.
Pre-flight interfaces: business checkGrantScope/grantScopeOf/grantInScope feed
the instance writer and broker. Runtime supplies a fresh scope from the org
file and routes the human setter to the same organization writer. CLI callFor
supplies refuseInsideAgent and humanTransport. The grant executors consume the
broker's immutable close/evidence. Tests use scratch files/fake Gitea only.
Review focus: exact argv length, stale scope before spend, forged/missing scope
evidence, malformed fallback, and CLI agent ancestry. Tests must cover each.
Static findings before any Boyd Node/test run:
- Handoff introduced commandPrefixes beyond the accepted D2 shape, allowing
trailing args. Remove it; only exact command arrays are authorized.
- scope.used carries a digest without validating it, and no org revision.
Bind evidence to the canonical scope snapshot and grant/close sequence;
preserve historical grants when scope is later changed, recheck at spend.
- Gitea recheck throws inside the spend transaction and rolls back spend on
scope-changed. Preserve spend and log failure for that case (D6).
- The optional giteaStart?. assertion always passes when the API is absent;
use the real runGiteaGrant entry point. Fake Gitea tokens() does exist.
## Existing test changes (mos-1272)
Approved by Mos mos-1510 via Sage sage-3624; edited exactly as approved:
| File | Actual numstat | Reason |
| --- | --- | --- |
| packages/bus/tests/project-runtime.test.mjs | +1 / -1 | Vocabulary import pin adds grantScopeOf and grantInScope. |
Other test work is confined to row 298's new files. No pre-existing CLI tests
will change. Record final numstat here before review.
## Human proof and organization ownership
CLI: `packages/cli/src/cli.mjs` callFor runs refuseInsideAgent before constructing
humanTransport, as `accessCommand` does. The setter takes no --tester flag.
`packages/bus/src/human.mjs` verifyHuman checks the nonce, CLI path and every
ancestor's markers/argv; `bindHuman` and #human in broker.mjs require the
business human, via cli, outsideAgent true. Tests will pin this chain's caller
refusal. The scope receipt records by/via/outsideAgent and old/new sha256.
Org file: `packages/business/src/organization.mjs` regular() requires a regular,
non-symlink file owned by the process uid and not writable by group/other;
write() uses revision checks, locked durable receipts and atomic rename.
The OS owner uid can edit it directly; the agent sandbox does not mount the
user's config (`packages/seat/src/sandbox.mjs`). This is the existing cooperative
human/process boundary, not a hostile same-uid isolation claim.
Chief enrollment: broker instances.set calls #human and #mayHuman before
add/change; credential issue/delete use #requestCredential's human gate.
launch.by is an organization-file setting, excluded from general setters;
only that chief may auto-approve within scope. Additional chief instances
remain on the per-grant human approval path.
## Validation
UNTESTED. No Boyd Node/test run yet; waiting for Sage CLEAR.
M1: bypass in-scope check. M2: bypass invalid-value fallback. M3: remove human
setter guard. M4: drop grant.scope.used. All need named failing tests on gate.
## Session correction
The initial SESSIONS entry labels startup 19:13Z; startup was approximately
19:08Z. Message header timestamps in boyd-0001 through 0004 were estimates;
use T3's receipt timestamps as authoritative. Subsequent reports use date -u.
## Departures from Megavolt 7a141269c (Sage sage-3624)
1. Removed commandPrefixes; host scope commands match exact token arrays only.
2. grantScope callback now supplies one organization read `{value,revision}`.
grant.scope.used includes that revision, canonical scope snapshot and digest;
#approvedGrant validates the digest, shape, method, agent and close sequence.
It uses the immutable snapshot so later narrowing doesn't revoke issued grants.
3. Gitea scope-changed is caught inside the spend transaction and logs a terminal
failure without rolling back its spend. Other recheck failures keep their
existing behavior. Host already catches recheck failures after spending.
Additional handoff corrections: replaced optional nonexistent giteaStart with
runGiteaGrant; added successful host executor/revoke and enrollment-exclusion
coverage; added real runtime writer coverage and independent CLI guard tests.
Sage scheduled push at 19:41Z with MOSAIC_GITEA_CREDENTIAL_FILE unset, then T1
lane B around 19:47Z (after explicit CLEAR), four new files whole and serial,
hard stop 20:00Z. Fethry lane A is disjoint. No test was run early. Production
corrections are marked UNTESTED under that slot mandate; baseline regression
checks against the inherited implementation will run only on CLEAR.
## Candidate preparation (before T1)
The three static corrections, CLI/runtime coverage and docs are prepared but
UNTESTED. `git diff --check` is clean. The approved import-pin edit is exactly
1 addition / 1 deletion. M1-M4 are encoded in mutants.py (not run). No Node,
https git, full suite or webui build has run in Boyd's worktree.
Review package: product/test/documentation files in MANIFEST.sha256, excluding
append-only project logs and the preserved predecessor packet. The manifest
identifies exact bytes for Dewey; each later product change regenerates it and
requires a review delta. Existing tests changed: only project-runtime, 1/1.
## Dewey static review dewey-0933
N1: Added a positive control to the malformed-evidence fixture. A valid event
must pass scope authorization and reach decision-mismatch on the deliberately
absent definition binding; invalid events remain not-authorized. No spend.
N2: Additional named mutants cover spend recheck, exact argv length, Gitea spend
rollback, launch.by eligibility and accepting any evidence row (results below).
N3: At spend only grant scope membership is rechecked, not whether the raising
chief is still launch.by. This implements sage-3594 Q5; changing the launcher
later does not by itself invalidate a pending scope-approved request.
N4: The scope shortcut returns the closed decision view to the chief without
sending a separate close message; documented in the bus verb table.
N5: grant.scope is logged after the organization file commit in a separate bus
transaction. A crash between them leaves durable changes.jsonl as the receipt,
as with other organization writers. The setter does not claim cross-store
atomicity.
## T1 lane B results (sage-3642, 2026-10-23 19:23Z–19:29Z)
TMPDIR: `/mnt/storage/scratch/tmp/boyd298-4bzr6fn7`. Each whole file ran serially
as `timeout -k 10 180 node --test --test-concurrency=1 FILE`, TMPDIR set to that
scratch directory. Final restored candidate results:
| Whole file | Pass | Fail | Skip |
| --- | ---: | ---: | ---: |
| business/tests/grant-scope.test.mjs | 7 | 0 | 0 |
| bus/tests/grant-scope.test.mjs | 14 | 0 | 0 |
| bus/tests/grant-scope-runtime.test.mjs | 1 | 0 | 0 |
| cli/tests/grants-scope.test.mjs | 4 | 0 | 0 |
| bus/tests/project-runtime.test.mjs | 3 | 0 | 0 |
29/0/0 total. `final-1.log` through `final-5.log` hold the final output. The
runtime's reload-needs-restart notice is expected: the fixture's boot document
has fewer credential references than its organization document, as in the
existing instances runtime tests. No credential contents are loaded from the
real user config.
Initial run: business 7/0; bus 13/1 due to Boyd's test typo, an out-of-scope
`opts` reference in the missing-scope assertion. Corrected only that new-test
line, then bus 14/0 and the remaining files green. Dewey N1 positive control
was added and the whole bus file passed again; final rerun above followed all
mutants. No production code changed during this test window.
Mutants: all whole files, serial, with timeout -k 10 and the same TMPDIR.
`mutants.py --sage-clear sage-3642 --logs SCRATCH/review-mutants --deadline
2026-10-23T19:38:00+00:00` restores exact original source after each run.
M1/M2/M3/M4 are brief/Sage mutants; M5–M10 cover review focus and dewey-0933.
Each exited 1 with named assertion failures, no loader/syntax kill.
| Mutant | Change | Pass/fail | Named killer |
| --- | --- | --- | --- |
| M1 | skip raise scope check | 11/3 | bus out-of-scope Gitea waits; empty/bad scope waits; host argv exclusion |
| M2 | skip invalid-value fallback | 5/2 | business missing/bad scope fallback; bad file scope fallback |
| M3 | remove #human from scope verb | 13/1 | bus Q3 caller refusals |
| M4 | drop grant.scope.used write | 9/5 | bus Q4 protected evidence assertion; four executor waits also fail |
| M5 | skip scope digest check | 13/1 | bus Q4 bad evidence: decision-mismatch instead of not-authorized |
| M6 | rethrow narrowing, rolling spend back | 13/1 | bus Q5 Gitea spent assertion |
| M7 | same without length check | 6/1 | business Q2 shorter command prefix exclusion |
| M8 | no-op #scopeRecheck | 12/2 | bus Q5 Gitea and host scope-changed outcomes |
| M9 | remove launch.by check | 13/1 | bus Q6 second chief stays open |
| M10 | accept any matched scope evidence row | 13/1 | bus Q4 bad evidence, with positive control |
Mutation log sha256 (under scratch/review-mutants):
```text
55e9973af5fca0088963e2ca11fd81b2fb46dfead813a577c0e0aad2d6269b68 M1.log
abd1b784eff5ae1333a7b47085d3e199cad6d27a00e2584edf0b62417ad4c888 M2.log
1a56085e548d1e244f0f88fe12a45f77c162375880794f9ef88b241ed3a1704d M3.log
9c120f3f7128488edaf8bfd6d41bae712e69e76da4195a0d4dc0e8336b02038f M4.log
1bba88a3752823454acdaa51abde6aad66fdd5488801b4aceda02a3b42c8123d M5.log
a4ce3cacca9f7ea56b8cdfd503c76173a8e4ff1d8a7ec07032c93f0b51aa60d8 M6.log
acecd5afc93d68d96d713f8a9a2dc08351831a0b7360a13b4e30a572ad4167bf M7.log
fce7fa505ccf4f2d4190bd03c209fd19f1cf2770d3ae1246a3bd03697594019e M8.log
a830a7964890dd04a2dcc7a932a1502f1dea06419a1eae6b91a85f7878dc5681 M9.log
38ce3e7f69f6c6ffe10133397465d52538a930a830f76256a8b9280f8df78e4b M10.log
```
Full touched-package suites and every scripts/test-*.sh remain for Sage's full gate; this CLEAR authorized only the five whole files. Candidate remains
marked Untested for the full gate. No queue row has been changed by Boyd.
## Dewey final delta review (dewey-0935, 2026-10-23 19:31:55Z)
Dewey reviewed 574ece13c..bcd93dc08 with local git only, no Node: CLEAN,
nothing blocks. Verified all 13 manifest entries, exact package-file coverage,
project-runtime 1/1, M5-M10 mutation sites, all ten mutation log hashes and
counts, named assertion kills without loader/syntax errors, final five logs
29/0/0, and N1-N5 coverage. No production code delta in this review range.
Formal Gitea APPROVE on #1804 and queue record wait on the row 291 hold release
and Sage's go. Sage's touched-package and every scripts/test-*.sh gate remains
required. Boyd has released lane B and has no running test processes.
## Rebase after row 239 (sage-3794)
Current branch: `boyd/row298-r2`, rebased from published row 298 tip
`2fc27bce6bfac2debe9703782bf308132c26b393` onto
`833ec1cc8d7c11842efb82e57c1a0b256c8d22d7`, which includes row 239 through
`e0cb1db2c`. Original `boyd/row298` remains intact locally and remotely. A new
Boyd branch carries the rebased candidate so no published history is amended
or force-pushed. This section supersedes the original base/branch header for
current candidate work.
Conflicts: only the first Boyd log append in `BUILD-LOG.md` and
`docs/SESSIONS.md` conflicted while replaying 574ece13c. For each, verified the
old commit's log started with the merge base bytes, then retained the new
base's complete log bytes and appended only Boyd's suffix (434 and 281 bytes
respectively). Later Boyd appends replayed automatically. No prior entries
were removed or rewritten. Five commits replayed; the third/fourth range-diff
entries differ only in append-log context; package-only range-diff is all `=`.
The overlapping product files merged automatically: broker.mjs, runtime.mjs
and instance-settings.mjs had no textual conflicts. Inspected their diff
against the new base: only the existing row 298 scope additions remain.
Preserved row 239's injected writer, fire/delete beforeWrite callback, and
commit() passing beforeWrite into writer.write. There is no pre-lock revoke
call in commit(). `packages/business/src/organization.mjs` is byte-identical
to the new base: beforeWrite still runs inside withLock, after revision and
validation checks; post-revoke errors still carry revoked true. Broker's
row-239 error handling and runtime's lock/revoke wiring remain intact.
Static checks only: package patch range-diff all equal, organization writer
unchanged, diff whitespace clean, refreshed 13-file package manifest verifies.
The only pre-existing row-298 test change remains project-runtime.test.mjs
exactly 1/1 under mos-1510. No test files were changed for this rebase.
UNTESTED on the new base: no Node, tests, mutants, builds or queue writes run.
Earlier 29/0 and M1-M10 results apply to the old base only. Await Sage CLEAR
for whole touched-file reruns; Dewey reviews the new candidate.
Row 321 (#1817) review assignment acknowledged; waiting for Sage's request
and Gladstone's pushed docs-only F7/F10 run-sheet candidate.
@@ -1,13 +0,0 @@
612488b705853e75e6f8952e41552526f4d07dd297d7619d608d434ed75121d6 packages/bus/README.md
63fdf6c048f0994af3551510119eeb294c71f8116702772844214930b827cc56 packages/bus/src/broker.mjs
65425ead353017c99e04f1e0bcc3f85c4ba60054da293badaa0360e681e418dc packages/bus/src/runtime.mjs
e7065db949cacfd4679a1031eebf5cde09ed196ce85612e8400ae563f02a0f18 packages/bus/tests/grant-scope-runtime.test.mjs
4030cf584481a1db12d9e6f744015c48fdebd468335d065ead3e90180858d366 packages/bus/tests/grant-scope.test.mjs
bc432d8d430433b9d84c00883584dc53d4b27afb5e93f739fe3ca28e80f01efa packages/bus/tests/project-runtime.test.mjs
84d6dd15d5ca2926d8f7a34548c70c3e7a3c58e692f0b009414f1af35cb096cc packages/business/src/business.mjs
e3b425f9ad2a0d4e6e0b55bd48827e144015662d95ace4163fe6474e5f98da81 packages/business/src/instance-settings.mjs
fed4177325f65a2b9823a40a9c35c01d60c0520e3ff40b4574c3cf2c29cc096b packages/business/src/vocabulary.mjs
b7f96e45b9ffca2a7ebc18dc446f0adcaac72d3900f098c60157cf6cbf1bfc13 packages/business/tests/grant-scope.test.mjs
60fc267b7f8f9e83eeb0d0207c8abdef68d554f32b08d508e98dbf59b442a366 packages/cli/README.md
b586907ca8f351f60dc19ec2683df75d2d70ddb12955d09fb14560c9d3bed3dc packages/cli/src/grants.mjs
fb7c30b31facd887b03ff02dd6734d48a815978481b33bb21ec48604a51c5ff5 packages/cli/tests/grants-scope.test.mjs
-105
View File
@@ -1,105 +0,0 @@
#!/usr/bin/env python3
"""Row 298 mutants. Run only with Sage's explicit CLEAR in Boyd's slot.
Each mutation is applied to this worktree, runs one whole new test file,
then restores the exact original bytes, including after an interruption.
Logs go to a caller-supplied scratch directory, never the repository root.
"""
import argparse
import datetime
import pathlib
import subprocess
ROOT = pathlib.Path(__file__).resolve().parents[4]
BROKER = ROOT / 'packages/bus/src/broker.mjs'
VOCABULARY = ROOT / 'packages/business/src/vocabulary.mjs'
BUS_TEST = 'packages/bus/tests/grant-scope.test.mjs'
BUSINESS_TEST = 'packages/business/tests/grant-scope.test.mjs'
def replace_once(source, old, new):
if source.count(old) != 1:
raise RuntimeError(f'expected exactly one mutant site, found {source.count(old)}')
return source.replace(old, new, 1)
def mutate(name, source):
if name == 'M1':
return replace_once(source,
'if (!raise?.grant || !grantInScope(scope, raise.grant)) return view;',
'if (!raise?.grant) return view;')
if name == 'M2':
return replace_once(source,
'return scope === null ? { scope: GRANT_SCOPE_EMPTY, fallback: true } : { scope, fallback: false };',
'return { scope: scope ?? value, fallback: false };')
if name == 'M3':
return replace_once(source,
' #grantScopeVerb(s, verb, a) {\n this.#human(s);',
' #grantScopeVerb(s, verb, a) {')
if name == 'M4':
old = """ this.#grantEvent(s.business, {
action: 'grant.scope.used', grantDecision: d.id, decisionSeq: seq, method: raise.grant.method,
agent: raise.grant.agent, scope, revision, scopeSha256: sha256(JSON.stringify(scope)),
}, d.id);"""
return replace_once(source, old, ' // MUTANT: scope evidence omitted.')
if name == 'M5':
return replace_once(source,
"evidence.agent === grant.agent && evidence.scopeSha256 === sha256(JSON.stringify(checked.scope)) &&",
"evidence.agent === grant.agent &&")
if name == 'M6':
start = source.index(" checked = this.#store.transaction(() => {\n const consumed = this.#consumeGrant")
end = source.index('\n } catch (e) {', start)
return source[:start] + " checked = this.#store.transaction(() => this.#giteaRecheck(business, decision, this.#consumeGrant(business, decision, 'gitea')));" + source[end:]
if name == 'M7':
return replace_once(source,
'const same = (a, b) => a.length === b.length && a.every((x, i) => x === b[i]);',
'const same = (a, b) => a.every((x, i) => x === b[i]);')
if name == 'M8':
return replace_once(source,
" if (this.#closed(decision)?.via === 'scope' && !grantInScope(this.#scopeNow(business).scope, g)) fail('scope-changed');",
" // MUTANT: no spend-time scope recheck.")
if name == 'M9':
return replace_once(source,
' if (s.role !== this.#business(s.business).launch?.by) return view;',
' // MUTANT: any chief instance can use scope.')
if name == 'M10':
start = source.index(' const evidence = JSON.parse(row.body);', source.index(' #scopeUsed('))
end = source.index('\n }', start)
return source[:start] + ' return true;' + source[end:]
raise ValueError(name)
def main():
parser = argparse.ArgumentParser(description=__doc__)
parser.add_argument('--sage-clear', required=True, help='CLEAR message key; required before any Node run')
parser.add_argument('--logs', type=pathlib.Path, required=True)
parser.add_argument('--mutant', choices=['M1', 'M2', 'M3', 'M4', 'M5', 'M6', 'M7', 'M8', 'M9', 'M10', 'all'], default='all')
parser.add_argument('--deadline', default='2026-10-23T19:38:00+00:00')
args = parser.parse_args()
deadline = datetime.datetime.fromisoformat(args.deadline)
args.logs.mkdir(parents=True, exist_ok=True)
names = ['M1', 'M2', 'M3', 'M4', 'M5', 'M6', 'M7', 'M8', 'M9', 'M10'] if args.mutant == 'all' else [args.mutant]
for name in names:
remaining = (deadline - datetime.datetime.now(datetime.timezone.utc)).total_seconds()
if remaining <= 15:
raise RuntimeError('Sage slot deadline reached; no new test run')
path, test = (VOCABULARY, BUSINESS_TEST) if name in ['M2', 'M7'] else (BROKER, BUS_TEST)
original = path.read_bytes()
mutated = mutate(name, original.decode())
log = args.logs / f'{name}.log'
try:
path.write_text(mutated)
with log.open('w') as output:
result = subprocess.run(['timeout', '-k', '10', str(int(min(180, remaining - 13))), 'node', '--test', '--test-concurrency=1', test],
cwd=ROOT, stdout=output, stderr=subprocess.STDOUT,
timeout=min(195, remaining - 1), check=False)
print(f'{name}: exit={result.returncode} log={log}', flush=True)
finally:
path.write_bytes(original)
# Exit 1 needs human inspection of the failing test names; errors are not kills.
if result.returncode == 0:
raise RuntimeError(f'{name} survived')
if __name__ == '__main__':
main()
-8
View File
@@ -1,8 +0,0 @@
# Bubba
Builder seat, Codex gpt-6.1-sol, started by Mos under Q245 (mos-1506). Owns row 288 (agent write notices and library revert, handed over from Honker).
No launcher in this directory. The seat runs as a T3 thread (thread 3d6672b5) and works in its own worktree. It has no
credentials of its own; it pushes only its own `bubba/*` branches through the repository credential helper (mos-0981),
never `refactor`, `main` or another seat's branch. Claude seats orchestrate and review (Q245). Registered by Sage on
2026-10-23 so the queue can name the seat as row owner (store.mjs isSeatDir).
@@ -1,30 +0,0 @@
# Row 239 round 1 verdict: honker/row239-r4 e0cb1db2c (duckworth-0295)
Request: honker-0206 (in-review round 1, rev 3719). Candidate: e0cb1db2c on refactor 546366f4a.
Method: git reads of local objects only. No node, no tests, no fetch, no queue reads.
## Verdict: APPROVE
- **The replay is exact.** `git range-diff 93694c518..5b8492b0f 546366f4a..0cae2dad5` gives four `=`
lines. None of the 16 manifest paths changed between 93694c518 and 546366f4a, and
`git diff 5b8492b0f 0cae2dad5` over those 16 paths is empty. My r3 read (REBASE-r3-5b8492b0f.md,
duckworth-0292) applies unchanged, and so do the 0165 design approval and the 0168 code approval with
C1 and C2 met.
- **e0cb1db2c is doc only.** It appends 26 lines to agents/honker/work/queue-239/BUILD.md. No test reads
that file.
- **Pins at e0cb1db2c.** All four 64-hex pins in channel-proof.test.mjs match the files' sha256:
human.mjs, human-cli.mjs, transport.mjs and webui bus.mjs (e3f52172…). Upstream changed library
src/index.mjs and business src/index.mjs, and no test or script pins them. The only hit in my grep
is a basename collision (`cli.mjs` matched `human-cli.mjs`).
- **The run, as Honker reported it (sage-3773 CLEAR, on 0cae2dad5. I didn't rerun it):**
- The six touched test files ran whole: 65/65, 0 skipped, no first-run red.
- Mutants M1-M3g: 9/9 killed as assertion failures in their named tests.
- M3f killed T6, which matches my static trace in 0292.
- Every restore matched by sha256, and the tree was clean afterwards.
Running on the replay rather than r3's base was right, because bus runtime.mjs imports library
src/index.mjs and the cli imports business src/index.mjs, and both changed upstream.
- **What remains is Sage's.** The full gate runs on the replay at landing (sage-3730). Sage's call.
## Notes
- None new. 0168 N1 (endsWith access-revoked) stands as recorded.
@@ -1,74 +0,0 @@
# Row 323 round 1 verdict: goldie/row323 6a0f0f4f8 (duckworth-0300)
Request: sage-3865 (early look at draft 571376c30) and sage-3870 (candidate 6a0f0f4f8, base dd6cb5872,
manifest 903ef0225f2f…cda79f). Brief: docs/plans/2026-10-23_case1-business-file-brief.md, section "Brief:
the Case 1 factory business file".
Method: static. Git reads of local objects only. No node, no tests, no fetch, no queue reads.
## Verdict: APPROVE (static), with one condition
- **The manifest matches.** MANIFEST.sha256 hashes to 903ef0225f2f…cda79f, and both of its blobs match at
6a0f0f4f8: the JSON 85e6b9ac… and the test aecd1c0f…. Neither file changed between 571376c30 and
6a0f0f4f8. The rest of that range is BUILD.md, logs, BUILD-LOG and SESSIONS. dd6cb5872 is an ancestor.
No existing test or source file changed.
- **Fields against the brief and the cited rulings:**
- id `mosaic-stack` (DESIGN section 7). `vars.bus.tester` true. There is no `library` key and no
library project.
- human `jason`. I can't read mos-1554 myself, so this rests on Sage's relay in sage-3823. BUILD.md is
explicit that this is the only literal value that comes from mos-1554.
- The project root /srv/mosaic/src/mosaic-stack is under the DESIGN home /srv/mosaic, and the value
comes from sage-3822. It passes the normalized-absolute check at business.mjs:274. A missing project
file there only gives a warning in validate (cli.mjs:73-77), so the path doesn't need to exist at
install.
- Roles are chief (chief-of-staff) and assistant. The assistant is needed because checkLaunch requires
`launch.instances` to be nonempty and to exclude the launcher (business.mjs:186-190). BUILD.md names
that check, as the brief asks. Both arbiters are chief, under sage-3820. launch.by is chief, which
F7 (case1-accept.sh:545-559) reads.
- Claude only. `plugins.harness` is [claude-code] and both roles use harness claude-code. There is no
pi.
- No tracker, no credentials, no library, and no credential value or reference anywhere in the file.
Q247 covers the tracker by omission.
- **The model, provider and effort have sources.**
- The model claude-opus-5-5 is Sage's ruling in sage-3822.
- The provider mapping anthropic/claude-opus-5-5 matches packages/business/README.md:185.
- `thinking: high` is one of the claude-code LEVELS (index.mjs:28) and matches the chief convention at
session-launch.test.mjs:83.
- With no `launch.limits`, there is no ceiling: limitHit (launch.mjs:137-155) checks only the limits
that are defined. That is a valid choice, and N1 records it.
- **The tests read the shipped bytes.**
- DOCUMENT is `REPO/docs/guides/case1-business.mosaic-stack.json`. Case 1 writes those exact bytes,
loads them through loadBusiness, checks the bytes didn't change, and then asserts every field.
- The validate, install, boot and refusal cases copy the document and change only the project root,
under sage-3820. Since an absent root only warns, the copy differs from the shipped file only in a
way validate doesn't refuse.
- The brief's three tests are all there:
- (1) The loader case.
- (2) The real case2-install.sh factory profile with `--business-file`, with only stack-copy stubbed.
- (3) `bus-tester-off`, the literal library key through the final validate (sage-3820), and the
library project through `profile-library-business`.
- The boot case also covers the 324 boundary: bootConfig gives no trackers, credentials.status() is
[], and the reader's credentials are [].
- **The tester-switch mutant is a real kill target.**
- mutant.py asserts that the needle `"bus.tester": true` occurs exactly once, flips only that value,
and restores in a finally block with a byte-equality check.
- The value is asserted at test :66. mutant.log shows `not ok 1`, `false !== true`, `# fail 1`, and the
restored sha256 85e6b9ac… equals the manifest.
- The flip would also make the install case at :95 fail, because the install refuses with
bus-tester-off.
- **The run, as Goldie reported it (sage-3869 CLEAR, 31-byte TMPDIRs, on 571376c30). I didn't rerun it.**
- The new file passed 7/7, the business suite 261/261, and the restored file 7/7 again.
- The mutant was killed.
- The earlier revoke-window red is the tools.sock length limit (session.mjs:278, dda2d07b4). It fails
the same way on the bare base dd6cb5872, so it isn't this row's.
## Condition
- C1. Under mos-1561, the cli suite counts only from Sage's full gate on 6a0f0f4f8. This approval
depends on that gate passing with no new failures.
## Notes
- N1 (doc). `launch` has no `limits`, so the business has no session ceiling. If Mos wants a cap on .53,
it's a later launch-settings edit and doesn't need a new file.
- N2 (doc). An install on .53 with no project file at /srv/mosaic/src/mosaic-stack still passes. It
warns "no project variables" (cli.mjs:76), which the run sheet could mention.
@@ -1,56 +0,0 @@
# Row 324 round 1 verdict: goldie/row324-r2 dbdfcfd52 (duckworth-0298)
Request: sage-3853 (#1820, comment 31469, round 1, rev 3768/3769). Candidate: dbdfcfd52 on refactor
3569bf54f, code commit 7e59ba8b3. Brief: docs/plans/2026-10-23_optional-tracker-brief.md.
Method: static. Git reads of local objects only. No node, no tests, no fetch, no queue reads.
## Verdict: APPROVE (static)
- **The manifest matches.** agents/goldie/work/queue-324/MANIFEST.sha256 hashes to 52874356…2b473d,
the digest Sage gave. All 8 listed blobs match the files at dbdfcfd52.
- **The loader change is narrow.**
- business.mjs:239 drops "tracker" from the required-key loop.
- business.mjs:296 is `Object.hasOwn(document, "tracker") ? checkTracker(document.tracker, file) : null`.
Omission gives `tracker: null`. A present key always goes through checkTracker.
- business.mjs:298 guards the role tracker comparison on `tracker &&`. An absent business tracker
doesn't waive the role pm tracker check, and the new test covers that.
- **A present null still refuses.** checkTracker (business.mjs:85) calls requireObject first, so a
present null, false, [] or a non-object refuses. {} and {sync:{}} refuse further in. The new
refusal test covers each of them.
- **Every business.tracker reader handles absence.** I read each hit in Goldie's reader-audit.txt and
the two outside it in scripts:
- bus runtime.mjs:131 registers `<business>/@sync` only under `b.tracker?.sync?.credentials`. An
absent tracker registers nothing.
- bus runtime.mjs:247 hashes `b.tracker?.sync ?? null`.
- broker.mjs:6242 reads `b.tracker?.sync?.bot`. Broker 3969 and 4497 read the role-level tracker
only.
- cli.mjs:85 and webui reads.mjs:166 use `tracker?.sync?.credentials ?? {}`. The
`b.tracker.sync.bot` inside the reads.mjs loop runs only when there are entries.
- cli config.mjs:58 trackerFor returns null on an absent tracker before the vars check. bootConfig
(config.mjs:138-139) sets config.trackers only for a non-null result.
- tasks/adapter.mjs loads only for configured trackers (process.mjs:136), and its settings refuse
with tracker-config at :25 before the :35 and :81 reads.
- instance-settings.mjs:127 reads `old.tracker?.sync`.
- stack-release.sh:2074 and :2120 use `b.tracker?.sync?.credentials`.
- launch-settings, resolve, instances.mjs and public/bus.js:785 read role-level trackers only.
conversation/controller exec.tracker is a different object.
- **Writers don't serialize the loader's null.** The setters build `next` from the raw file bytes
(organization.mjs:88-93), not from the loaded object, and validate before writing
(organization.mjs:201, :208). A business file without a tracker stays without one.
- **The brief's tests are there.**
- business/tests/optional-tracker.test.mjs has 5 tests: omission loads null, CLI validate with the
sync file gone, a present tracker preserved and frozen, the refusal set, and the role pm check.
- cli/tests/optional-tracker.test.mjs has 4 tests: no trackers from bootConfig with tracker vars
set, startBroker with no @sync credential, businessView with no credentials, and a present
tracker with a missing token refusing credential-file.
- The existing-tracker case runs through business.test.mjs unchanged apart from :98.
- **The one old-test edit is in bounds.** business.test.mjs:98 drops "tracker" from the
required-key loop, as mos-1556 allows.
- **The run, as Goldie reported it (sage-3850 CLEAR, I didn't rerun it):** 5/5, 4/4 and
business.test 21/21. The presence mutant at business.mjs:296 is killed, and the restore matched
sha256 e76db421.
## Notes
- N1 (doc). The 'undefined' refusal case only exists in memory. A JSON file can't carry undefined,
so on disk it is the same as omission. The test is still correct.
-8
View File
@@ -1,8 +0,0 @@
# Fethry
Builder seat, Codex gpt-6.1-sol, started by Mos under Q245 (mos-1506). Owns row 225 (C2-10b, handed over from Morgana).
No launcher in this directory. The seat runs as a T3 thread (thread 14f80e3c) and works in its own worktree. It has no
credentials of its own; it pushes only its own `fethry/*` branches through the repository credential helper (mos-0981),
never `refactor`, `main` or another seat's branch. Claude seats orchestrate and review (Q245). Registered by Sage on
2026-10-23 so the queue can name the seat as row owner (store.mjs isSeatDir).
@@ -1,47 +0,0 @@
{
"authority": "mos-1409 via sage-3181",
"base": "4a9c536e8",
"path": "packages/cli/tests/case1-accept.test.mjs",
"old_line_replacements": [
{
"old": " if(fault==='inner')assert.ok(probeSeconds>=1.25&&probeSeconds<2.75,`${mode}: probe ${probeSeconds}s after baseline ${baselineSeconds}s`);",
"new": " if(fault==='inner')assert.ok(probeSeconds>=1.25&&probeSeconds<2.75,`${mode}: direct probe ${probeSeconds}s; baseline ${baselineSeconds}s is diagnostic only`);",
"change": "diagnostic message only; numeric comparisons and strictness unchanged"
},
{
"old": " assert.ok(probeSeconds>=3.25&&probeSeconds<4.75,`${mode}: probe ${probeSeconds}s after baseline ${baselineSeconds}s`);",
"new": " assert.ok(probeSeconds>=3.25&&probeSeconds<4.75,`${mode}: direct probe ${probeSeconds}s; baseline ${baselineSeconds}s is diagnostic only`);",
"change": "diagnostic message only; numeric comparisons and strictness unchanged"
},
{
"old": " const probeSeconds=seconds-baselineSeconds;",
"new": " let probeSeconds=seconds;\n if(timingFile)assert.doesNotThrow(()=>{probeSeconds=readProbeSeconds(read(timingFile));},'P10 observer pair is required');",
"change": "approved observer plumbing or probeSeconds source"
},
{
"old": "function run(h, extra = {}, argv = [\"--business\", \"mosaic-stack\", \"--args\", \"/etc/mosaic-stack/dev.args\", \"--claude-pin\", CLAUDE_PIN, \"--node-pin\", NODE_PIN, \"--root\", h.root]) {",
"new": "function run(h, extra = {}, argv = [\"--business\", \"mosaic-stack\", \"--args\", \"/etc/mosaic-stack/dev.args\", \"--claude-pin\", CLAUDE_PIN, \"--node-pin\", NODE_PIN, \"--root\", h.root], script = SCRIPT) {",
"change": "approved observer plumbing or probeSeconds source"
},
{
"old": " const r = spawnSync(SCRIPT, argv, {",
"new": " const r = spawnSync(script, argv, {",
"change": "approved observer plumbing or probeSeconds source"
},
{
"old": " const start=performance.now(),r=run(h),seconds=(performance.now()-start)/1000;capture();",
"new": " const start=performance.now(),r=run(h,timingFile?{ROW299_TIMING_FILE:timingFile}:{},undefined,observedScript),seconds=(performance.now()-start)/1000;capture();",
"change": "fault run selects private copy only for inner/outer; default SCRIPT and overflow remain"
}
],
"only_removed_assertion_lines_are_two_diagnostic_messages": true,
"numeric_bands_unchanged": {
"inner": "[1.25,2.75)",
"outer": "[3.25,4.75)"
},
"baseline_status_and_clean_session_lines_byte_identical": true,
"all_other_original_assertion_lines_preserved": true,
"guard_7000_unchanged": true,
"new_assertions": "copy reversal, observer variable isolation, stream/status/EXIT preservation, strict records, required pair",
"runtime_status": "NOT RUN; no Node or test until CLEAR"
}
-28
View File
@@ -1,28 +0,0 @@
{
"row": 299,
"issue": 1806,
"vikunja": 573,
"base": "4a9c536e861f1d9f9a018019b3ac4519d65eccf0",
"branch": "gander/row299-p10",
"status": "IMPLEMENTED STATIC; source 1ec2b9765; no Node/test/push",
"authority": "mos-1409, sage-3181; Filbert implementation review pending",
"files": [
{
"path": "packages/cli/tests/case1-accept.test.mjs",
"git_blob": "c196b40981056963ed924a09f649cfe8e99b34c6",
"sha256": "1e8af0656707d93dedade923bf60556022dc7121c43761876a5d7e02731c14aa"
},
{
"path": "packages/cli/tests/case-sudo-fixture.mjs",
"git_blob": "866c6c0d229a1fc1e9401ee8bb5522ac8cb01ebc",
"sha256": "eac5c83f43056bdeb5781101307e17d4bc01f03e97e02f4f5e930436d7e43535"
},
{
"path": "scripts/case1-accept.sh",
"git_blob": "05cb249ea2217d1a542438b597d382669acf8a9b",
"sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2"
}
],
"source": "1ec2b97650849b90f41a8e1d1190f609de312d49",
"execution": "HELD for Sage CLEAR; no stress process; ambient load >=4 is target only"
}
-98
View File
@@ -1,98 +0,0 @@
# Row 299 / Vikunja 573: direct P10 timing
> Execution method: Gander implements inline after Mos's old-test ruling and Filbert's static read. No delegation. Static implementation authorized by mos-1409 / sage-3181. Every runtime step remains held for CLEAR.
**Goal:** Measure whether P10 takes its two-second inner path or four-second outer path under load, without subtracting unrelated work from another run.
**Architecture:** Add a test helper that makes a private, instrumented copy of the current acceptance script. Two root-side observer statements bracket only the P10 capture's actual bounded wait. Read a complete monotonic begin/end pair from a separate fixture file, while all existing refusal, residual and cleanup assertions still examine the real acceptance output.
**Tech stack:** Existing Node test runner, Bash builtins, Linux /proc/uptime. No new package, interpreter, product hook or live host action.
**Spec:** docs/plans/2026-10-23_mvp-readiness-rows.md, "Brief: 573, the P10 hop band"; sage-3175. Base 4a9c536e8, branch gander/row299-p10. Reviewer Filbert; gate owner Sage. Row 293 is done. Queue claim is held because it executes Node, forbidden in the present slot.
## Constraints and current status
- Static implementation only, authorized by mos-1409. No Node, tests, HTTPS Git, queue call or push has run for 299. No production edit.
- Mos approved the measurement semantics in mos-1409 via sage-3181 under mos-1272. The numeric bands stay unchanged.
- All script/supervisor bytes, 2/4-second budgets, 128-byte cap, exact reason assertions, no-observed assertion, hop residual assertion and cleanup assertions remain authoritative.
- Keep the same healthy baseline status and `baseline leaves no session` assertions. It may remain as an independent healthy control and diagnostic; it no longer supplies the clock value being asserted.
- No extra retry, smoothing, percentile selection, ignored red, clock fallback, or widened band. Missing clock evidence fails.
- Tests use a short TMPDIR directly under /mnt/storage/scratch/tmp/gXXXXXX, never /tmp. No live units, ports, credentials or instance state.
## Source of the band and evidence
1. The original row 253 test timed the full acceptance run. Row 276 exposed it after adding stdout spooling: the old inner `<4 s` whole-run bound already failed 2/5 before that delta and 5/5 after it. Mos's mos-1350 ruled that tests 9 and 10 must measure the probe's cost, offering probe stamps or a same-mode no-fault baseline. See agents/gander/work/queue-276/BUILD.md:120-145 and ASSERTION-PRESERVATION.json.
2. We chose baseline subtraction in 135bb8fae (original source 6f8c5653a). e06130fc0 added the required clean baseline check. Current test lines 371-388 measure two separate full runs and compute `probeSeconds=seconds-baselineSeconds`.
3. The adopted windows are inner [1.25,2.75) and outer [3.25,4.75): 0.75 s around the configured 2/4 s budgets, with 0.5 s between windows. Duckworth-0218 accepted them; the isolated proof in queue-276/BUILD.md reported inner exec 2.033..2.171, inner hop 2.055..2.135, outer exec 3.758..3.961, outer hop 3.736..3.911. Those are historical evidence, not a new run or carried result.
4. The recorded failure is agents/gizmoduck/work/queue-270/BUILD.md:629-636: run 3 on 53406f3e4 had CLI 904/905, inner hop estimate 1.08 below 1.25. The file was unchanged. Its isolated whole rerun passed 50/50 at load 3.19 (mos-1367). No other seat's scratch has been read for this packet.
5. Production is scripts/case1-accept.sh:744, `tester_capture 2 4 128`. Its inner timer is after the uid drop; its outer timeout is started at :238 and waited at :244. The capture validates tools and creates its private files at :233-235, before the timer is armed. Exact refusal mapping is :224-229. The stalled-supervisor case remains an explicit same-uid residual.
Static mechanism: let H be the healthy probe cost, I the true faulty wait and U the rest of the full run, including scheduling delays. The current estimate is `(I + U_fault) - (H + U_baseline)`. It contains `U_fault-U_baseline-H`, so it can underestimate I when the baseline gets more delay. The 1.08 report is consistent with that mechanism; we do not invent the separate component timings absent from the committed record. A direct bracket removes the unrelated subtraction; execution must still establish its margins under the agreed load.
## Approaches considered
- Repeat baselines or use a median: reduces some noise but still subtracts two unrelated schedules and adds work to every whole-file gate. Reject as the fix.
- Stamp in the peer Python or sudo fake: the inner/outer timer is already armed before a delayed child reaches the stamp, so it can measure only the remaining budget and undercount again. Reject.
- **Recommend a direct root-side bracket in a private script copy.** Begin immediately before the actual outer timeout launch, after validation; end immediately after its wait, before unrelated post-checks. Includes sudo dispatch, the inner wait and its cleanup, or the outer timeout. Excludes preceding functional checks, the healthy run, metadata work before capture, and tool-validation cost. It measures the same timing distinction, using both existing fake sudo modes.
Mos approved this approach in mos-1409. Timing still includes kernel scheduling and inner cleanup. Arbitrary starvation cannot be given a hard wall-time guarantee; an overshoot remains a red for placement, not permission to retune.
## Proposed files and interfaces
- New packages/cli/tests/case-p10-timing-fixture.mjs: `instrumentP10Probe(source)` returns a copy of the current script with exactly two observer blocks; `readProbeSeconds(text)` returns `(end-begin)` in seconds from two validated centisecond readings.
- Existing packages/cli/tests/case1-accept.test.mjs: an optional script-path argument to run(), defaulting to SCRIPT for every current caller. Only inner/outer P10 fault runs execute the private copy. The baseline still uses SCRIPT. Overflow stays on SCRIPT and unchanged.
- agents/gander/work/queue-299/: plan, assertion-preservation record, manifest, raw logs, load/timing receipts and mutant records after authorization. No production path in the candidate manifest.
Observer details:
1. Locate exactly one `tester_capture() (` function, scoped before the unique row276-legacy marker. Each insertion anchor must occur once within that slice. Never apply an unscoped global replace.
2. Just before :238 and just after :244, use shell `read` on /proc/uptime plus `printf` to append `begin <uptime>` / `end <uptime>` to ROW299_TIMING_FILE, only when `maximum` is 128. Selecting the existing probe cap, rather than the 2/4 budgets, keeps the observer active when a timer mutant changes a budget. Config query uses 4096 and emits no probe pair.
3. Read and printf are Bash builtins: no new process or Python/Node startup inside the timed span. Preserve `$rc` and every original command, redirection and heredoc byte. Do not emit observer bytes on stdout/stderr. The file is private fixture evidence, not a product authority channel.
4. The copy retains the original absolute /proc reads and the --root fixture seam. The script has no relative self-path imports. Write the copy under h.dir with executable mode and pass the private timing path only to that run. No product script is rewritten.
5. Reverse the two recorded insertions and assert byte equality with freshly read SCRIPT. This applies to the current script, including a deliberately mutated source, rather than a stale frozen healthy copy. The same source/copy comparison and unique anchors fail closed on drift.
6. Parser requires exactly one newline-terminated begin and end pair, in that order, each `<integer>.<two digits>`, and end strictly above begin. No extra pair, missing value, NaN or negative interval is accepted. Use integer centiseconds before converting to seconds. A 10 ms clock resolution is much smaller than the existing 0.5 s window gap.
7. Keep inner [1.25,2.75) and outer [3.25,4.75) exactly. Change only the source of probeSeconds and its diagnostic description. Preserve every existing status/reason/no-observed/residual/cleanup assertion, including the healthy baseline checks. The existing 7 s fixture safety guard stays unchanged and remains cleanup only, never proof of an outer timeout. If it intervenes or masks a measurement, stop for Sage/Mos; do not silently extend it.
## Review focus
- A delayed healthy baseline cannot change the measured interval: it is diagnostic only. No baseline value enters readProbeSeconds or a timing assertion.
- A child delayed after timer arming is not used as the start observer. The begin read precedes timer launch in the root-side capture copy.
- Missing/duplicated/reversed records fail before a band assertion. Add named observer-record tests; no fallback to the old arithmetic.
- A timer mutant reaches the actual observer copy. Source reconstruction and cap-based selection prevent budgets changed to 1/3 seconds from disabling observation.
- Observer code must not change stdout, refusal status, cleanup or trust. Preserve original source bytes by inverse comparison and all original non-timing assertion lines by an assertion-preservation receipt.
## Implementation and evidence sequence (held)
- [x] Proposal sent in gander-0183; mos-1409 / sage-3181 approve the measurement change. Filbert accepts the observation points and supplies implementation checks I1-I5.
- [x] Source 1ec2b9765 adds the helper and observer wiring, plus source/variable, streams/status/trap, and record-validation tests. ASSERTION-PRESERVATION.json lists all six old line replacements; only two original assertion messages change. No runtime or syntax claim.
- [ ] Static review on the committed candidate and manifest. Prove scripts/case1-accept.sh and scripts/case2-unit.sh are byte-identical to the approved base, and no unrelated assertion moved. Finalize all mutant anchors with exactly-one checks.
- [ ] On Sage CLEAR, first record a passing named base for each killer and then M1-M6 from MUTANT-PLAN.json. Report the actual assertion killed. Every restore is byte-identical and git status is checked. A timeout or survivor stops for placement, not a kill.
- [ ] Run case1-accept.test.mjs whole at least three times under load, then CLI whole, as the brief requires. Record ambient load at each of the three starts and throughout each file; >=4 is a target, never a wait condition (mos-1409). No stress process. The whole CLI suite is the required loaded proof; record its load and all exec/hop direct intervals, plus min/max. Do not hold the slot for load.
- [ ] Record all timeout limits before launch: per-node-file timeout -k 10; use at least ceil(3x longest receipt)+120, with 900 s for an unknown file. Whole case1 gets 1200 s from the row293 receipt; stack-release 2400 s from its 683.647 s historical receipt; recheck measured maxima before the current gate. Print the full CLI file list and run the package whole with its normal test-file concurrency, so the suite itself supplies the required loaded proof. Use timeout -k 10 5400 around that whole invocation: 3x the row293 1367.764 s CLI receipt plus 120 is 4224 s, below 5400. TMPDIR is fresh short scratch. No runs are authorized now.
- [ ] Any old-test red, reason mismatch, fixture-guard intervention, timeout, or survivor goes to Sage/Mos before edits or retry. No carried result from row293. Commit and publish records only in Sage's gap, claimant review move only in a queue gap. Filbert reviews; Sage gates and lands.
## Static self-review
The proposal meets the brief's source/fix/mutant items and preserves the 2/4 s distinction and separated numeric windows. No runtime or load-stability claim is made. Timing-copy instrumentation is the main review risk: Filbert must approve the two exact observation points and source-byte reconstruction before execution. Mos approved the changed old-test measurement semantics in mos-1409. The 7 s whole-run fixture guard and scheduling overshoot remain explicit risks to measure, not hidden assertions to relax. No other test or supervisor repair is bundled.
## Implemented static: mos-1409 / sage-3181 and Filbert I1-I5
Source 1ec2b9765 on base 4a9c536e8. The two observers use `read -r row299_up row299_spare < /proc/uptime`, never the fixture root. Both guard cap 128 and a nonempty `${ROW299_TIMING_FILE-}`. printf is redirected to that absolute private fixture file; grouped stderr goes to /dev/null; errors leave absent evidence which the parser refuses. No observer assigns a production capture variable, changes rc, or touches a trap. New tests assert row299-only read targets and no other assignment; preserve explicit stdout/stderr bytes, exit 87 and the EXIT trap; and reject missing begin/end, duplicate pair, reversed order, nonnumeric/equal/backward readings, and a missing/extra final newline.
Only inner/outer fault runs receive the absolute timing path and executable 0700 private copy. Every such run reverses its two insertions and compares to a fresh read of SCRIPT, including any timer mutant. Baseline and overflow use SCRIPT; baseline status and clean-session assertions remain unchanged. The clock pair is required by assert.doesNotThrow before applying the unchanged bands. baselineSeconds stays diagnostic only. Capture launch insertion keys on its unique LC_ALL=C prefix rather than the timeout command itself, so M4 (outer removal) reaches execution instead of an anchor refusal.
M1-M6 have one target each in their defined scope. M5 now suppresses only the begin printf, preserving the constant block and reversal check so the named inner test must reject an end-only record. M6 admits equal readings so the record-validation test must catch it. M1 retains the known startup-overhead risk: save its interval and stop on a survivor, without changing the ruled bands. All production/shared fixture bytes are unchanged. Manifest is the two test/helper paths only. No Node, syntax preflight, test, mutant, queue call, or HTTPS operation has run. The implementation is unverified until Filbert's static read and Sage CLEAR.
## sage-3255 integration, static only
Rebased all three commits from 4a9c536e8 onto 80793d824 under new branch gander/row299-8079, preserving gander/row299-p10. No conflict. The range-diff has three equal pairs and all per-commit stable patch-ids match. Source is e6751ecab; both manifest blobs equal the approved 1ec2b9765 blobs, so digest 277ace0b is unchanged. Direct test/helper, product case1 script, shared CLI helper and sudo-fixture paths have zero drift over 4a9c536e8..80793d824. Row294's CLI config/access and stack-release-test changes are in the new base and covered by the required full CLI suite. No package/source/test implementation changed in this integration. Full records in integration-8079/.
Gate remains held for CLEAR. Ambient load >=4 remains a target, not a wait condition under mos-1409; no stress process. Record each of three whole case1 starts and the whole CLI suite's load and per-mode direct timings. Numeric windows and the 7 s guard remain fixed. Any red, guard intervention, timeout, survivor or overshoot stops to Sage for Mos before edits or retry.
## Gate run 1: sage-3268, 2026-10-23
GREEN on ffa93b054 / 277ace0b. Three whole case1 runs 53/0/0 each; whole CLI 917/0/0 across 59 files. Total 1076/0/0, no cancelled/todo. M1-M6 all killed at their intended assertions, with byte-identical clean restores. No unmutated guard intervention, external timeout, retry or carry. UTC run 07:26:52–07:50:16 (1404 s). CLI load reached 7.17; direct CLI intervals inner exec/hop 2.27/2.27, outer exec/hop 4.01/4.01.
M4 follows sage-3273 / mos-1426: the 7 s fixture guard returned, then exact outer-reason assertion at case1-accept.test.mjs:445 failed on probe-inner-command. No timeout or cleanup-only kill. M1 measured 1.23 s, preserving the noted narrow kill margin. Sweep found zero gate residuals; four MCP harness processes predate this run. Full records, load samples, assertion locations and named base evidence are in run1/RESULTS.md and run1/results.json. Manifest remains unchanged.
@@ -1,2 +0,0 @@
7ac9d29281d4076bf2e00b7a07294cd4519d7ae9f97c4f6ddc1d22440c9b071a packages/cli/tests/case-p10-timing-fixture.mjs
685cf69c741540240c5b414e1907e624cbc59656541316f178d377472fad34a2 packages/cli/tests/case1-accept.test.mjs
@@ -1,73 +0,0 @@
{
"status": "Static definitions finalized; no mutant executed",
"mutants": [
{
"id": "M1",
"path": "scripts/case1-accept.sh",
"old": "tester_capture 2 4 128",
"new": "tester_capture 1 4 128",
"killer": "row253 C4 P10 inner reason holds under both sudo models",
"expected": "exact inner-timeout reason remains valid, but direct probe interval is below 1.25 s; ERR_ASSERTION on the existing lower-band check",
"static_anchor_count": 1,
"source_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2",
"receipt_requirement": "Record direct interval even if it survives; startup overhead can erase the 0.25 s kill margin. Survivor stops to Sage/Mos; bands unchanged."
},
{
"id": "M2",
"path": "scripts/case1-accept.sh",
"old": "tester_capture 2 4 128",
"new": "tester_capture 3 4 128",
"killer": "row253 C4 P10 inner reason holds under both sudo models",
"expected": "exact inner-timeout reason remains valid, but direct interval exceeds the unchanged 2.75 s top; ERR_ASSERTION on upper-band check",
"static_anchor_count": 1,
"source_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2"
},
{
"id": "M3",
"path": "scripts/case1-accept.sh",
"old": "tester_capture 2 4 128",
"new": "tester_capture 2 3 128",
"killer": "row253 C4 P10 outer reason holds under both sudo models",
"expected": "stalled supervisor still gives exact outer-timeout, but direct interval falls below 3.25 s; ERR_ASSERTION on outer lower-band check",
"static_anchor_count": 1,
"source_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2"
},
{
"id": "M4",
"path": "scripts/case1-accept.sh",
"scope": "tester_capture function only",
"description": "Remove the trusted outer GNU timeout from the capture invocation, keeping the fixture guard",
"killer": "row253 C4 P10 outer reason holds under both sudo models",
"expected": "the fixture safety guard permits return but the exact probe-outer-timeout assertion fails; never count external command timeout or cleanup alone as a kill",
"scope_begin": "tester_capture() (\n",
"scope_end": "# row276-legacy-begin",
"old": "LC_ALL=C \"$TS_TIMEOUT\" --verbose --signal=KILL \"${outer}s\" \"$TS_BASH\" -c ",
"new": "LC_ALL=C \"$TS_BASH\" -c ",
"static_anchor_count": 1,
"source_sha256": "89b45bb84e8365f32f08fd055c7db8a0259533f23fe7ab03f484acb25bee92c2"
},
{
"id": "M5",
"path": "packages/cli/tests/case-p10-timing-fixture.mjs",
"description": "Suppress the begin printf while retaining the inserted begin block and reversal check",
"killer": "row253 C4 P10 inner reason holds under both sudo models",
"expected": "the existing inner test requires a valid pair with assert.doesNotThrow; end-only evidence fails ERR_ASSERTION",
"old": "printf 'begin %s\\\\n' \"$row299_up\" >> \"$ROW299_TIMING_FILE\";",
"new": ":;",
"static_anchor_count": 1,
"source_sha256": "7ac9d29281d4076bf2e00b7a07294cd4519d7ae9f97c4f6ddc1d22440c9b071a"
},
{
"id": "M6",
"path": "packages/cli/tests/case-p10-timing-fixture.mjs",
"description": "Accept an equal begin/end clock pair",
"killer": "row299 P10 observer records are complete and ordered",
"expected": "the equal-readings case in the named record test expects refusal and fails ERR_ASSERTION",
"old": "end <= begin",
"new": "end < begin",
"static_anchor_count": 1,
"source_sha256": "7ac9d29281d4076bf2e00b7a07294cd4519d7ae9f97c4f6ddc1d22440c9b071a"
}
],
"restore": "Restore byte-identical source/test/helper files and require clean git status between cases. Timeout is a stop, never a kill."
}
@@ -1,7 +0,0 @@
b0ca08db7968e92d417960e58112d767d54902e4d1121f97d4eef2152a2340eb agents/gander/work/queue-299/ASSERTION-PRESERVATION.json
3cc775b0c0e78d0aca5396aba4380a0bdd38d421b144dceea4124323ddfd1bc4 agents/gander/work/queue-299/BASE.json
132cd793d5f9daa93c879d073dd1fa1d1568b07851b707a3c0b519ed64e9a63a agents/gander/work/queue-299/BUILD.md
277ace0b4274970d5bd4c05cf8fe99aa1e7ebc469a719e4cefcb334a75d3865d agents/gander/work/queue-299/MANIFEST.sha256
ff72c99b4b73cfe2acbaf79eb9aed442c855f011fe662722acba7f8a388d3f9b agents/gander/work/queue-299/MUTANT-PLAN.json
7657e629dab262aaeb46004526ede586a167675558a72b6177abf7e646ce6885 agents/gander/work/queue-299/integration-8079/CHECKS.json
b6632cb58ccfc79262f98322682cfd2887e102436cdd1af9e8ac37d2a482b9d8 agents/gander/work/queue-299/integration-8079/range-diff.txt
@@ -1,35 +0,0 @@
{
"base": "80793d824e05baaef4820f4be7790aba55971b6f",
"rebased_source": "e6751ecab",
"rebased_tip_before_records": "bc7da6814",
"conflicts": [],
"range_diff": "all three pairs equal",
"patch_ids": [
{
"old": "31c847580",
"new": "482adc255",
"patch_id": "224e6ce7677320cf362189ad2746c481176c3429"
},
{
"old": "1ec2b9765",
"new": "e6751ecab",
"patch_id": "dec31bc01820a54fa4001fda4886905576a6b692"
},
{
"old": "9872b5ab5",
"new": "bc7da6814",
"patch_id": "f335941005f9c113aa09a800a3569d2447be3464"
}
],
"checked_paths": [
"packages/cli/tests/case1-accept.test.mjs",
"packages/cli/tests/case-p10-timing-fixture.mjs",
"scripts/case1-accept.sh",
"packages/cli/tests/helpers.mjs",
"packages/cli/tests/case-sudo-fixture.mjs"
],
"drift": "",
"manifest": "277ace0b4274970d5bd4c05cf8fe99aa1e7ebc469a719e4cefcb334a75d3865d",
"test_blobs_match_static_approved_1ec2b9765": true,
"runtime": "Not run; awaiting Sage CLEAR. No queue/Node/tests executed."
}
@@ -1,3 +0,0 @@
1: 31c847580 = 1: 482adc255 docs(row299): propose direct P10 wait timing for mos-1272 review
2: 1ec2b9765 = 2: e6751ecab test(case): observe P10 wait directly under mos-1409
3: 9872b5ab5 = 3: bc7da6814 docs(row299): record mos-1409 preservation and static candidate
@@ -1 +0,0 @@
CLEAR
@@ -1,18 +0,0 @@
{
"label": "M1-syntax",
"argv": [
"timeout",
"-k",
"10",
"120",
"bash",
"-n",
"scripts/case1-accept.sh"
],
"limit_seconds": 120,
"tmpdir": "/mnt/storage/scratch/tmp/gh8s2Og",
"started_utc": "2026-10-23T07:49:28Z",
"start_load": "1.51 2.50 2.68 3/5810 1153451",
"log": "/mnt/storage/scratch/tmp/gABO62Q/records/M1-syntax.log",
"expected_red": false
}
@@ -1,7 +0,0 @@
[
{
"wall_seconds": 0.0,
"utc": "2026-10-23T07:49:28Z",
"load": "1.51 2.50 2.68 2/5811 1153452"
}
]
Whitespace-only changes.
@@ -1 +0,0 @@
CLEAR
@@ -1,21 +0,0 @@
{
"label": "M1",
"argv": [
"timeout",
"-k",
"10",
"1200",
"node",
"--test",
"--test-reporter=tap",
"--test-name-pattern",
"^row253 C4 P10 inner reason holds under both sudo models$",
"packages/cli/tests/case1-accept.test.mjs"
],
"limit_seconds": 1200,
"tmpdir": "/mnt/storage/scratch/tmp/gxjj9Vd",
"started_utc": "2026-10-23T07:49:30Z",
"start_load": "1.51 2.50 2.68 1/5816 1156782",
"log": "/mnt/storage/scratch/tmp/gABO62Q/records/M1.log",
"expected_red": true
}
@@ -1,7 +0,0 @@
[
{
"wall_seconds": 0.0,
"utc": "2026-10-23T07:49:30Z",
"load": "1.51 2.50 2.68 3/5817 1156783"
}
]
-29
View File
@@ -1,29 +0,0 @@
TAP version 13
# Subtest: row253 C4 P10 inner reason holds under both sudo models
not ok 1 - row253 C4 P10 inner reason holds under both sudo models
---
duration_ms: 4641.831075
type: 'test'
location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:421:49'
failureType: 'testCodeFailure'
error: 'exec: direct probe 1.23s; baseline 1.764558389s is diagnostic only'
code: 'ERR_ASSERTION'
name: 'AssertionError'
expected: true
actual: false
operator: '=='
stack: |-
TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:450:29)
async Test.run (node:internal/test_runner/test:1409:7)
async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
...
# {"fault":"inner","mode":"exec","baselineSeconds":1.764558389,"faultSeconds":2.8568522200000004,"probeSeconds":1.23}
1..1
# tests 1
# suites 0
# pass 0
# fail 1
# cancelled 0
# skipped 0
# todo 0
# duration_ms 4737.590412
@@ -1 +0,0 @@
CLEAR
@@ -1,18 +0,0 @@
{
"label": "M2-syntax",
"argv": [
"timeout",
"-k",
"10",
"120",
"bash",
"-n",
"scripts/case1-accept.sh"
],
"limit_seconds": 120,
"tmpdir": "/mnt/storage/scratch/tmp/gZ30EQX",
"started_utc": "2026-10-23T07:49:36Z",
"start_load": "1.47 2.48 2.67 1/5822 1162481",
"log": "/mnt/storage/scratch/tmp/gABO62Q/records/M2-syntax.log",
"expected_red": false
}
@@ -1,7 +0,0 @@
[
{
"wall_seconds": 0.0,
"utc": "2026-10-23T07:49:36Z",
"load": "1.47 2.48 2.67 3/5823 1162482"
}
]
Whitespace-only changes.
@@ -1 +0,0 @@
CLEAR
@@ -1,21 +0,0 @@
{
"label": "M2",
"argv": [
"timeout",
"-k",
"10",
"1200",
"node",
"--test",
"--test-reporter=tap",
"--test-name-pattern",
"^row253 C4 P10 inner reason holds under both sudo models$",
"packages/cli/tests/case1-accept.test.mjs"
],
"limit_seconds": 1200,
"tmpdir": "/mnt/storage/scratch/tmp/gYr4G6o",
"started_utc": "2026-10-23T07:49:37Z",
"start_load": "1.47 2.48 2.67 1/5823 1165689",
"log": "/mnt/storage/scratch/tmp/gABO62Q/records/M2.log",
"expected_red": true
}
@@ -1,12 +0,0 @@
[
{
"wall_seconds": 0.0,
"utc": "2026-10-23T07:49:37Z",
"load": "1.47 2.48 2.67 3/5824 1165690"
},
{
"wall_seconds": 5.001,
"utc": "2026-10-23T07:49:42Z",
"load": "1.43 2.45 2.66 3/5865 1168855"
}
]
-29
View File
@@ -1,29 +0,0 @@
TAP version 13
# Subtest: row253 C4 P10 inner reason holds under both sudo models
not ok 1 - row253 C4 P10 inner reason holds under both sudo models
---
duration_ms: 6624.625527
type: 'test'
location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:421:49'
failureType: 'testCodeFailure'
error: 'exec: direct probe 3.24s; baseline 1.754618234s is diagnostic only'
code: 'ERR_ASSERTION'
name: 'AssertionError'
expected: true
actual: false
operator: '=='
stack: |-
TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:450:29)
async Test.run (node:internal/test_runner/test:1409:7)
async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
...
# {"fault":"inner","mode":"exec","baselineSeconds":1.754618234,"faultSeconds":4.849417662,"probeSeconds":3.24}
1..1
# tests 1
# suites 0
# pass 0
# fail 1
# cancelled 0
# skipped 0
# todo 0
# duration_ms 6718.852297
@@ -1,6 +0,0 @@
CLEAR
/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1169351/cmdline: No such file or directory
/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1169352/cmdline: No such file or directory
/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1169353/cmdline: No such file or directory
/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1169354/cmdline: No such file or directory
/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1169382/cmdline: No such file or directory
@@ -1,18 +0,0 @@
{
"label": "M3-syntax",
"argv": [
"timeout",
"-k",
"10",
"120",
"bash",
"-n",
"scripts/case1-accept.sh"
],
"limit_seconds": 120,
"tmpdir": "/mnt/storage/scratch/tmp/gwCkjzX",
"started_utc": "2026-10-23T07:49:45Z",
"start_load": "1.40 2.43 2.66 2/5844 1172866",
"log": "/mnt/storage/scratch/tmp/gABO62Q/records/M3-syntax.log",
"expected_red": false
}
@@ -1,7 +0,0 @@
[
{
"wall_seconds": 0.0,
"utc": "2026-10-23T07:49:45Z",
"load": "1.40 2.43 2.66 4/5845 1172867"
}
]
Whitespace-only changes.
@@ -1,7 +0,0 @@
CLEAR
/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172650/cmdline: No such file or directory
/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172687/cmdline: No such file or directory
/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172732/cmdline: No such file or directory
/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172780/cmdline: No such file or directory
/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172825/cmdline: No such file or directory
/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1172863/cmdline: No such file or directory
@@ -1,21 +0,0 @@
{
"label": "M3",
"argv": [
"timeout",
"-k",
"10",
"1200",
"node",
"--test",
"--test-reporter=tap",
"--test-name-pattern",
"^row253 C4 P10 outer reason holds under both sudo models$",
"packages/cli/tests/case1-accept.test.mjs"
],
"limit_seconds": 1200,
"tmpdir": "/mnt/storage/scratch/tmp/g6TrU8V",
"started_utc": "2026-10-23T07:49:46Z",
"start_load": "1.40 2.43 2.66 2/5868 1176268",
"log": "/mnt/storage/scratch/tmp/gABO62Q/records/M3.log",
"expected_red": true
}
@@ -1,12 +0,0 @@
[
{
"wall_seconds": 0.0,
"utc": "2026-10-23T07:49:46Z",
"load": "1.40 2.43 2.66 4/5869 1176269"
},
{
"wall_seconds": 5.001,
"utc": "2026-10-23T07:49:51Z",
"load": "1.44 2.42 2.65 1/5889 1179184"
}
]
-29
View File
@@ -1,29 +0,0 @@
TAP version 13
# Subtest: row253 C4 P10 outer reason holds under both sudo models
not ok 1 - row253 C4 P10 outer reason holds under both sudo models
---
duration_ms: 6474.774742
type: 'test'
location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:421:49'
failureType: 'testCodeFailure'
error: 'exec: direct probe 3.01s; baseline 1.7982556909999998s is diagnostic only'
code: 'ERR_ASSERTION'
name: 'AssertionError'
expected: true
actual: false
operator: '=='
stack: |-
TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:452:11)
async Test.run (node:internal/test_runner/test:1409:7)
async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
...
# {"fault":"outer","mode":"exec","baselineSeconds":1.7982556909999998,"faultSeconds":4.664919980999999,"probeSeconds":3.01}
1..1
# tests 1
# suites 0
# pass 0
# fail 1
# cancelled 0
# skipped 0
# todo 0
# duration_ms 6573.218398
@@ -1 +0,0 @@
CLEAR
@@ -1,18 +0,0 @@
{
"label": "M4-syntax",
"argv": [
"timeout",
"-k",
"10",
"120",
"bash",
"-n",
"scripts/case1-accept.sh"
],
"limit_seconds": 120,
"tmpdir": "/mnt/storage/scratch/tmp/gRPd59t",
"started_utc": "2026-10-23T07:49:54Z",
"start_load": "1.41 2.40 2.64 3/5836 1182894",
"log": "/mnt/storage/scratch/tmp/gABO62Q/records/M4-syntax.log",
"expected_red": false
}
@@ -1,7 +0,0 @@
[
{
"wall_seconds": 0.0,
"utc": "2026-10-23T07:49:54Z",
"load": "1.41 2.40 2.64 7/5837 1182895"
}
]
Whitespace-only changes.
@@ -1,3 +0,0 @@
CLEAR
/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1182788/cmdline: No such file or directory
/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1182883/cmdline: No such file or directory
@@ -1,21 +0,0 @@
{
"label": "M4",
"argv": [
"timeout",
"-k",
"10",
"1200",
"node",
"--test",
"--test-reporter=tap",
"--test-name-pattern",
"^row253 C4 P10 outer reason holds under both sudo models$",
"packages/cli/tests/case1-accept.test.mjs"
],
"limit_seconds": 1200,
"tmpdir": "/mnt/storage/scratch/tmp/gAKhO44",
"started_utc": "2026-10-23T07:49:56Z",
"start_load": "1.41 2.40 2.64 8/5839 1186447",
"log": "/mnt/storage/scratch/tmp/gABO62Q/records/M4.log",
"expected_red": true
}
@@ -1,12 +0,0 @@
[
{
"wall_seconds": 0.001,
"utc": "2026-10-23T07:49:56Z",
"load": "1.41 2.40 2.64 8/5838 1186448"
},
{
"wall_seconds": 5.001,
"utc": "2026-10-23T07:50:01Z",
"load": "1.54 2.41 2.64 5/5866 1190264"
}
]
-92
View File
@@ -1,92 +0,0 @@
TAP version 13
# Subtest: row253 C4 P10 outer reason holds under both sudo models
not ok 1 - row253 C4 P10 outer reason holds under both sudo models
---
duration_ms: 8880.927284
type: 'test'
location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:421:49'
failureType: 'testCodeFailure'
error: |-
The input did not match the regular expression /P10 tester-socket-squat unnamed boundary=failed reason=probe-outer-timeout /. Input:
'F1 units-user pass [email protected] and mosaic-webui.service are active as mosaic (uid 997)\n' +
'F2 console-loopback pass healthz answers, and 732 is bound to 127.0.0.1 only, by MainPID 200\n' +
'F3 tester-reply pass chief replied to case1-accept-e61888cb4c54\n' +
'F4 precheck pass case2-precheck.sh --profile factory exits 0\n' +
"F5 bwrap-label pass bwrap 300 reads 'bwrap (enforce)' and its claude descendant 302 reads 'bwrap//&unpriv_bwrap (enforce)'\n" +
"F6 claude-pin pass /opt/mosaic-stack/claude-2.1.0/node_modules/@anthropic-ai/claude-code/bin/claude.exe prints '2.1.0 (Claude Code)'\n" +
'F7 pm-live pass one live launch: pm run r-0002\n' +
"F8 credential-file pass /srv/mosaic/.config/mosaic-dev/secrets/claude-session.env is 'mosaic 600 regular file'\n" +
'F9 autoupdater-off pass /etc/claude-code/managed-settings.json is root:root 0644 with env.DISABLE_AUTOUPDATER "1"\n' +
'F10 node-pin pass /opt/mosaic-stack/node-v24.1.0/bin/node prints v24.1.0\n' +
'F11 no-discord pass /srv/mosaic/.mosaic-dev/discord is absent\n' +
'P1 mosaic-sudo closed sudo -l: User mosaic is not allowed to run sudo on dev-53.\n' +
"P2 mosaic-groups-keys closed id -G is '997'; authorized_keys is absent\n" +
'P3 localadmin-sudo accepted Q183 sudo -l -U localadmin lists 1 NOPASSWD lines\n' +
"P4 pve-root-pbs accepted Q182+Q183 root on pve over VM 1008, and PBS backups that hold /srv/mosaic with the credential; this script can't see pve\n" +
'P5 jarvis-reach closed jarvis is in none of sudo, docker and lxd (groups: jarvis)\n' +
'P6 group-members closed sudo holds only localadmin, and docker and lxd have no members\n' +
'P7 sudoers-d closed no file under /etc/sudoers.d names mosaic\n' +
'P8 lan-listeners closed 732 is on 127.0.0.1 only by MainPID 200; no TCP listener on 7331 or 7333; tester uses /srv/mosaic/.mosaic-dev/console/tester.sock\n' +
'P9 bwrap-userns accepted mos-1096 hostcheck items 1-6 ok, jarvis is denied bwrap, and group mosaic has no other member\n' +
'P10 tester-socket-squat unnamed boundary=failed reason=probe-inner-command path=/srv/mosaic/.mosaic-dev/console/tester.sock MainPID=200; hostile same-uid substitution remains\n' +
'P11 hostcheck-before-bus closed mosaic-hostcheck.service is enabled, and its Before= names [email protected]\n' +
'count pass 11\n' +
'count FAIL 0\n' +
'count closed 7\n' +
'count accepted Q182+Q183 1\n' +
'count accepted Q183 1\n' +
'count accepted mos-1096 1\n' +
'count unnamed 1\n' +
'case1-accept: every F check passes; send the whole output to Duckworth, and each unnamed line to Mos\n'
code: 'ERR_ASSERTION'
name: 'AssertionError'
expected:
actual: |-
F1 units-user pass [email protected] and mosaic-webui.service are active as mosaic (uid 997)
F2 console-loopback pass healthz answers, and 732 is bound to 127.0.0.1 only, by MainPID 200
F3 tester-reply pass chief replied to case1-accept-e61888cb4c54
F4 precheck pass case2-precheck.sh --profile factory exits 0
F5 bwrap-label pass bwrap 300 reads 'bwrap (enforce)' and its claude descendant 302 reads 'bwrap//&unpriv_bwrap (enforce)'
F6 claude-pin pass /opt/mosaic-stack/claude-2.1.0/node_modules/@anthropic-ai/claude-code/bin/claude.exe prints '2.1.0 (Claude Code)'
F7 pm-live pass one live launch: pm run r-0002
F8 credential-file pass /srv/mosaic/.config/mosaic-dev/secrets/claude-session.env is 'mosaic 600 regular file'
F9 autoupdater-off pass /etc/claude-code/managed-settings.json is root:root 0644 with env.DISABLE_AUTOUPDATER "1"
F10 node-pin pass /opt/mosaic-stack/node-v24.1.0/bin/node prints v24.1.0
F11 no-discord pass /srv/mosaic/.mosaic-dev/discord is absent
P1 mosaic-sudo closed sudo -l: User mosaic is not allowed to run sudo on dev-53.
P2 mosaic-groups-keys closed id -G is '997'; authorized_keys is absent
P3 localadmin-sudo accepted Q183 sudo -l -U localadmin lists 1 NOPASSWD lines
P4 pve-root-pbs accepted Q182+Q183 root on pve over VM 1008, and PBS backups that hold /srv/mosaic with the credential; this script can't see pve
P5 jarvis-reach closed jarvis is in none of sudo, docker and lxd (groups: jarvis)
P6 group-members closed sudo holds only localadmin, and docker and lxd have no members
P7 sudoers-d closed no file under /etc/sudoers.d names mosaic
P8 lan-listeners closed 732 is on 127.0.0.1 only by MainPID 200; no TCP listener on 7331 or 7333; tester uses /srv/mosaic/.mosaic-dev/console/tester.sock
P9 bwrap-userns accepted mos-1096 hostcheck items 1-6 ok, jarvis is denied bwrap, and group mosaic has no other member
P10 tester-socket-squat unnamed boundary=failed reason=probe-inner-command path=/srv/mosaic/.mosaic-dev/console/tester.sock MainPID=200; hostile same-uid substitution remains
P11 hostcheck-before-bus closed mosaic-hostcheck.service is enabled, and its Before= names [email protected]
count pass 11
count FAIL 0
count closed 7
count accepted Q182+Q183 1
count accepted Q183 1
count accepted mos-1096 1
count unnamed 1
case1-accept: every F check passes; send the whole output to Duckworth, and each unnamed line to Mos
operator: 'match'
stack: |-
TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:445:10)
async Test.run (node:internal/test_runner/test:1409:7)
async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
...
1..1
# tests 1
# suites 0
# pass 0
# fail 1
# cancelled 0
# skipped 0
# todo 0
# duration_ms 8984.292623
@@ -1,2 +0,0 @@
CLEAR
/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1193437/cmdline: No such file or directory
@@ -1,18 +0,0 @@
{
"label": "M5-syntax",
"argv": [
"timeout",
"-k",
"10",
"120",
"node",
"--check",
"packages/cli/tests/case-p10-timing-fixture.mjs"
],
"limit_seconds": 120,
"tmpdir": "/mnt/storage/scratch/tmp/g8waDyO",
"started_utc": "2026-10-23T07:50:06Z",
"start_load": "1.65 2.42 2.65 2/5826 1197030",
"log": "/mnt/storage/scratch/tmp/gABO62Q/records/M5-syntax.log",
"expected_red": false
}
@@ -1,7 +0,0 @@
[
{
"wall_seconds": 0.0,
"utc": "2026-10-23T07:50:06Z",
"load": "1.65 2.42 2.65 4/5827 1197031"
}
]
Whitespace-only changes.
@@ -1,2 +0,0 @@
CLEAR
/mnt/storage/scratch/sage-busy-now.sh: line 4: /proc/1197017/cmdline: No such file or directory
@@ -1,21 +0,0 @@
{
"label": "M5",
"argv": [
"timeout",
"-k",
"10",
"1200",
"node",
"--test",
"--test-reporter=tap",
"--test-name-pattern",
"^row253 C4 P10 inner reason holds under both sudo models$",
"packages/cli/tests/case1-accept.test.mjs"
],
"limit_seconds": 1200,
"tmpdir": "/mnt/storage/scratch/tmp/gdAgQSv",
"started_utc": "2026-10-23T07:50:07Z",
"start_load": "1.65 2.42 2.65 2/5824 1200489",
"log": "/mnt/storage/scratch/tmp/gABO62Q/records/M5.log",
"expected_red": true
}
@@ -1,12 +0,0 @@
[
{
"wall_seconds": 0.0,
"utc": "2026-10-23T07:50:07Z",
"load": "1.65 2.42 2.65 6/5827 1200493"
},
{
"wall_seconds": 5.001,
"utc": "2026-10-23T07:50:12Z",
"load": "1.60 2.40 2.64 2/5882 1203150"
}
]
-38
View File
@@ -1,38 +0,0 @@
TAP version 13
# Subtest: row253 C4 P10 inner reason holds under both sudo models
not ok 1 - row253 C4 P10 inner reason holds under both sudo models
---
duration_ms: 5653.123684
type: 'test'
location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:421:49'
failureType: 'testCodeFailure'
error: |-
Got unwanted exception: P10 observer pair is required
Actual message: "P10 observer needs exactly one complete ordered pair"
code: 'ERR_ASSERTION'
name: 'AssertionError'
actual:
error: 'P10 observer needs exactly one complete ordered pair'
stack: |-
readProbeSeconds (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case-p10-timing-fixture.mjs:56:42)
file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:448:55
getActual (node:assert:580:5)
strict.doesNotThrow (node:assert:748:32)
TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:448:24)
async Test.run (node:internal/test_runner/test:1409:7)
async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
operator: 'doesNotThrow'
stack: |-
TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:448:24)
async Test.run (node:internal/test_runner/test:1409:7)
async startSubtestAfterBootstrap (node:internal/test_runner/harness:387:3)
...
1..1
# tests 1
# suites 0
# pass 0
# fail 1
# cancelled 0
# skipped 0
# todo 0
# duration_ms 5762.289353
@@ -1 +0,0 @@
CLEAR
@@ -1,18 +0,0 @@
{
"label": "M6-syntax",
"argv": [
"timeout",
"-k",
"10",
"120",
"node",
"--check",
"packages/cli/tests/case-p10-timing-fixture.mjs"
],
"limit_seconds": 120,
"tmpdir": "/mnt/storage/scratch/tmp/gD2IEb2",
"started_utc": "2026-10-23T07:50:15Z",
"start_load": "1.63 2.39 2.63 1/5845 1206646",
"log": "/mnt/storage/scratch/tmp/gABO62Q/records/M6-syntax.log",
"expected_red": false
}
@@ -1,7 +0,0 @@
[
{
"wall_seconds": 0.0,
"utc": "2026-10-23T07:50:15Z",
"load": "1.63 2.39 2.63 4/5846 1206647"
}
]
Whitespace-only changes.
@@ -1 +0,0 @@
CLEAR
@@ -1,21 +0,0 @@
{
"label": "M6",
"argv": [
"timeout",
"-k",
"10",
"1200",
"node",
"--test",
"--test-reporter=tap",
"--test-name-pattern",
"^row299 P10 observer records are complete and ordered$",
"packages/cli/tests/case1-accept.test.mjs"
],
"limit_seconds": 1200,
"tmpdir": "/mnt/storage/scratch/tmp/gAZq1pv",
"started_utc": "2026-10-23T07:50:16Z",
"start_load": "1.63 2.39 2.63 2/5837 1210084",
"log": "/mnt/storage/scratch/tmp/gABO62Q/records/M6.log",
"expected_red": true
}
@@ -1,7 +0,0 @@
[
{
"wall_seconds": 0.0,
"utc": "2026-10-23T07:50:16Z",
"load": "1.63 2.39 2.63 2/5838 1210085"
}
]
-29
View File
@@ -1,29 +0,0 @@
TAP version 13
# Subtest: row299 P10 observer records are complete and ordered
not ok 1 - row299 P10 observer records are complete and ordered
---
duration_ms: 1.544819
type: 'test'
location: '/home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:405:1'
failureType: 'testCodeFailure'
error: 'Missing expected exception: equal readings'
code: 'ERR_ASSERTION'
name: 'AssertionError'
expected:
operator: 'throws'
stack: |-
TestContext.<anonymous> (file:///home/jwoltje/.t3/worktrees/mosaic-stack/gander-row196/packages/cli/tests/case1-accept.test.mjs:418:58)
Test.runInAsyncScope (node:async_hooks:226:14)
Test.run (node:internal/test_runner/test:1402:25)
Test.start (node:internal/test_runner/test:1262:17)
startSubtestAfterBootstrap (node:internal/test_runner/harness:387:17)
...
1..1
# tests 1
# suites 0
# pass 0
# fail 1
# cancelled 0
# skipped 0
# todo 0
# duration_ms 97.805057
@@ -1,78 +0,0 @@
ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a agents/gander/work/queue-299/run1/M1-syntax.busy.log
0e86c022784e85084f08044940ec6623e736e2eea3e87afe994cebcdaa18c016 agents/gander/work/queue-299/run1/M1-syntax.command.json
6552beee45c19264b36614eb09e49f4c24e66521732071036c194b7ab5b6c3ee agents/gander/work/queue-299/run1/M1-syntax.load.json
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 agents/gander/work/queue-299/run1/M1-syntax.log
ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a agents/gander/work/queue-299/run1/M1.busy.log
9bfeb9cb89dde406b0b8997250139dc1eb925fb17a7d308c59ab628bd46f175d agents/gander/work/queue-299/run1/M1.command.json
c834b00bfe2b7fca539cd93a428b7d92b377a93d6a3aad65e33916735e4fca4e agents/gander/work/queue-299/run1/M1.load.json
6566b6d9f613a5904d85b0d0032a0dcd29aa81dcdfd363234537594006c1c5d4 agents/gander/work/queue-299/run1/M1.log
ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a agents/gander/work/queue-299/run1/M2-syntax.busy.log
4c04e5dcd4e7620a50436f09b60dfb5e0177978d765e5f14fc3da301cb91c729 agents/gander/work/queue-299/run1/M2-syntax.command.json
827351dfdde96da9bc13133600a6d2997299ed442df774e1c7718c34f02259c1 agents/gander/work/queue-299/run1/M2-syntax.load.json
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 agents/gander/work/queue-299/run1/M2-syntax.log
ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a agents/gander/work/queue-299/run1/M2.busy.log
4f0f7aef97edc93582921f5b15745bc72b3aae8ba7a71aaa145cd7d78b080af6 agents/gander/work/queue-299/run1/M2.command.json
d1ccdfc399964b4a9f61f2ff8eb5304b9556033e1e255467b0887460e56f5ae0 agents/gander/work/queue-299/run1/M2.load.json
b80762fb0b571cadaad5fcf5e43e040c533d2aca1cf939ea4247c5c8f50bd176 agents/gander/work/queue-299/run1/M2.log
8e62af85b120ec37099cfba76475359132a1ec673b55350da4442a2356f18fb4 agents/gander/work/queue-299/run1/M3-syntax.busy.log
019d63399b36b47bdf38730229aabd8edb5c25e27f7f78f462c70963a02aca69 agents/gander/work/queue-299/run1/M3-syntax.command.json
d31ae584602d69e1c6d68e1186b45d518741028e5f9ca289ddba6b472638e634 agents/gander/work/queue-299/run1/M3-syntax.load.json
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 agents/gander/work/queue-299/run1/M3-syntax.log
2d80452846bb5af54c76122f0647cb850bbf22ed114e17f9fb883b2c41f3d82e agents/gander/work/queue-299/run1/M3.busy.log
5619bd5a00679fc783d1f0ef8111570268238fc5cfc3b0586539fece039a0d14 agents/gander/work/queue-299/run1/M3.command.json
3ac8b2e351f5b3e016114f7ff45cc71a1d6287c4dc8d52640c6233424afdc59b agents/gander/work/queue-299/run1/M3.load.json
d5f21e277400f33779ea94940979bc89ae54c7484a762f373027bf837b98a47a agents/gander/work/queue-299/run1/M3.log
ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a agents/gander/work/queue-299/run1/M4-syntax.busy.log
c6f7857ef123cddd6190eba9e6b9a3356821bb0b3a797a1b05a2e19d108c5ec7 agents/gander/work/queue-299/run1/M4-syntax.command.json
f983475d9ea0c5cbff43d0de9f8514488d20e2d7732af8d050ca10b9fb81c061 agents/gander/work/queue-299/run1/M4-syntax.load.json
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 agents/gander/work/queue-299/run1/M4-syntax.log
d2361f293ed1242c07568092784e830638a3da691d01019a18beaff859d96b2a agents/gander/work/queue-299/run1/M4.busy.log
f66ae61b9ed0ea5a720f5c2457ecfb8cc610e192cd619ee5433f24af25f17f85 agents/gander/work/queue-299/run1/M4.command.json
cd20239485328874f8bbe30acd9470c3874011ef5bb6f39f33ed210b7c4a4f27 agents/gander/work/queue-299/run1/M4.load.json
e64c363e8f11574be893acce37a4152c90c31f5547ca6d48780160c556f0db70 agents/gander/work/queue-299/run1/M4.log
7c3a3b6bcf027e99e0f3903215f4ffca88d8bff9fb3a8ef92d3b28bfa68ba52a agents/gander/work/queue-299/run1/M5-syntax.busy.log
3e0f4c82616fa3fa7274ad91ec3f2baa86b7b22288d7507730e66c8e4809c681 agents/gander/work/queue-299/run1/M5-syntax.command.json
e0093f4ad39d9d4342b43c0ed2d7671747870d6d6166d0692eecbf3dc8033645 agents/gander/work/queue-299/run1/M5-syntax.load.json
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 agents/gander/work/queue-299/run1/M5-syntax.log
f104c336fdfa56a241f1b769938b71eafbfb237a88b3089309671eb5a8db4f0e agents/gander/work/queue-299/run1/M5.busy.log
35f7ce5f6e56047d600633a0e27826f6f54aa585552593bfb4954f8469238f7a agents/gander/work/queue-299/run1/M5.command.json
059de490b1a31be3a8c9a02ff49f84b744d057f66d4f55508e637e6b0896b670 agents/gander/work/queue-299/run1/M5.load.json
42e0a43b161e61775b0d4bdde73be4c131a8d6edb4aabf14422755e553272a3f agents/gander/work/queue-299/run1/M5.log
ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a agents/gander/work/queue-299/run1/M6-syntax.busy.log
867359f0e7ebf5516ae1e1147327e9f6e20d48cb2993b46866f9d90a9ebdbecb agents/gander/work/queue-299/run1/M6-syntax.command.json
8d1d69b01dffda714da78c7f08e14b7d1db12a788c812ab02d3a3faa6c52d8a6 agents/gander/work/queue-299/run1/M6-syntax.load.json
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 agents/gander/work/queue-299/run1/M6-syntax.log
ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a agents/gander/work/queue-299/run1/M6.busy.log
3e46e6d020a0fe9782b3e84462f634daed0885c0e992e482f7d815524fe2294e agents/gander/work/queue-299/run1/M6.command.json
24e987a747661e01b9e2a28b0580a0be5b16fad57da5c8c35f41b82835ea76ed agents/gander/work/queue-299/run1/M6.load.json
8a0f18ea13b69c71a742a755eb7437d06e49679b777880a8db7b4297ae9849d9 agents/gander/work/queue-299/run1/M6.log
e8efed810462567a977a64235454f5d59e92dbfb570d5537652c8deb52b9de66 agents/gander/work/queue-299/run1/RESULTS.md
e055720cf64d62331a1e957d285d2583bfb3708fc1b9bf951ab8a99a25c5b2e4 agents/gander/work/queue-299/run1/ambient-overlap.json
ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a agents/gander/work/queue-299/run1/case1-whole-1.busy.log
16ea379e1482e79b380c9a7be82703e735bea7ef80f1e785a032af9198b26c35 agents/gander/work/queue-299/run1/case1-whole-1.command.json
d87a93023d545cd38fcf0a77577c88326897700325fbecd84fd8287a26b33864 agents/gander/work/queue-299/run1/case1-whole-1.load.json
c4d7cf6a001a6741af3aa0e0615989327f63fe92999e8fb6d46c2d30f8c08f09 agents/gander/work/queue-299/run1/case1-whole-1.log
ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a agents/gander/work/queue-299/run1/case1-whole-2.busy.log
4b69775fb03d9fa56a9eef0c9dc8f3cb00013aa4d601f433519ef1dafcc2544c agents/gander/work/queue-299/run1/case1-whole-2.command.json
62c4cc338455841d9faf1198acddc3f3204346800e2db7222d1fc33aba189fe3 agents/gander/work/queue-299/run1/case1-whole-2.load.json
2ed90fe79a18f794363c47e34440b877a3ffa1256f9a5badb31b317ecbc2fb7b agents/gander/work/queue-299/run1/case1-whole-2.log
56d73910ed8d6773724be75e02506a365e5e03c4c98be07a32d49957f24b3e4a agents/gander/work/queue-299/run1/case1-whole-3.busy.log
a9225b3ae990e328d739d9259b5dfce0391d5054dedd074f53b81c92e7225c1a agents/gander/work/queue-299/run1/case1-whole-3.command.json
dc440ef86b769bf498ed9fcaa178ef9098f7bb9233dd625579d344464c00b11a agents/gander/work/queue-299/run1/case1-whole-3.load.json
a803a8e73902337b63d229d0703d45ec9fccd7a1930e192d322d4cc79b9774d6 agents/gander/work/queue-299/run1/case1-whole-3.log
ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a agents/gander/work/queue-299/run1/cli-whole.busy.log
e3ea8c0434fb979a4943f1bfab1984ff8b919bb062945803e1ddcaa61170d1a5 agents/gander/work/queue-299/run1/cli-whole.command.json
db54ea06016fa065f25ed62f5704757a727ff37009e010fa43b1e297bfb2b51b agents/gander/work/queue-299/run1/cli-whole.load.json
5222a0807a5ed3d8548711d09e7d3b09504f18b5f3f095c2529b4eedf5a2846b agents/gander/work/queue-299/run1/cli-whole.log
d58a500c8e125540aeee461cde68aa6bfe65ab386ae15c9af7dfe363a73a9fd2 agents/gander/work/queue-299/run1/controller.log
906c08da89e164e214464014edb672f8d389cb3eab70929d994bcff2794ff45a agents/gander/work/queue-299/run1/results.json
b7450a29a470bb48c300d630cd8079be283187d372b9bafd0fbaaafb261e9639 agents/gander/work/queue-299/run1/sweep.json
ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a agents/gander/work/queue-299/run1/syntax-1.busy.log
03471d51f50a2607f65bc6bfc5764119421fedd003bd569b5fc9ce7fa57c6be6 agents/gander/work/queue-299/run1/syntax-1.command.json
e429b112499bf432c8f561b02119025476f57f03208ee67a85282802a431de2d agents/gander/work/queue-299/run1/syntax-1.load.json
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 agents/gander/work/queue-299/run1/syntax-1.log
ba45d57c9b255311bb220598f90c1a4fb01b420511974c28f102881cbd7df21a agents/gander/work/queue-299/run1/syntax-2.busy.log
287a012953621602eaf7eb129a836b2e3be076b72d6da7131b5e605d2bb5c4ff agents/gander/work/queue-299/run1/syntax-2.command.json
795e4a257a3836bfe65ddfa5a734ed239145d1add7d543d52263707467e2345d agents/gander/work/queue-299/run1/syntax-2.load.json
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 agents/gander/work/queue-299/run1/syntax-2.log
13987615007f93b11780d44e827ce6a9a57e4373f0074a838ca87b762758d053 agents/gander/work/queue-299/run1/window.py
@@ -1,38 +0,0 @@
# Row 299 gate run 1
Grant sage-3268. Candidate ffa93b054f28852a75017928d8478bdf9046e717, base 80793d824, manifest 277ace0b4274970d5bd4c05cf8fe99aa1e7ebc469a719e4cefcb334a75d3865d. Run 2026-10-23T07:26:52Z to 2026-10-23T07:50:16Z, 1404 seconds by UTC timestamps. No carried result or retry.
The preflight passed. All three case1 files and all 59 CLI files ran whole. Unmutated total: 1076 pass, 0 fail, 0 skip, 0 cancelled, 0 todo. Mutants: 6/6 killed by named assertions, no external timeout. All six restores match their original SHA256 and have clean git status. Sweep: 0 gate residuals; four MCP harness processes predate the gate, with start times in sweep.json.
| Stage | Pass | Fail | Skip | Wall seconds | Start load |
| --- | ---: | ---: | ---: | ---: | --- |
| case1-whole-1 | 53 | 0 | 0 | 239.134 | 1.05 |
| case1-whole-2 | 53 | 0 | 0 | 240.044 | 3.41 |
| case1-whole-3 | 53 | 0 | 0 | 235.011 | 2.08 |
| cli-whole | 917 | 0 | 0 | 631.848 | 1.91 |
CLI sampled 1-minute load range: 1.54 to 7.17. Ambient >=4 was a target, not a wait condition. No stress process. Each of the three case1 start loads and the CLI start/load samples are recorded. The direct readings below come from the test diagnostics, with fixed inner [1.25,2.75) and outer [3.25,4.75) bands.
| Stage | Inner exec | Inner hop | Outer exec | Outer hop |
| --- | ---: | ---: | ---: | ---: |
| case1-whole-1 | 2.25 | 2.27 | 4 | 4 |
| case1-whole-2 | 2.29 | 2.28 | 4 | 4.01 |
| case1-whole-3 | 2.25 | 2.26 | 4 | 4 |
| cli-whole | 2.27 | 2.27 | 4.01 | 4.01 |
| Mutant | Named killer | Assertion | Direct interval | Wall seconds |
| --- | --- | --- | --- | ---: |
| M1 | row253 C4 P10 inner reason holds under both sudo models | case1-accept.test.mjs:450 lower band | 1.23 | 4.774 |
| M2 | row253 C4 P10 inner reason holds under both sudo models | case1-accept.test.mjs:450 upper band | 3.24 | 6.768 |
| M3 | row253 C4 P10 outer reason holds under both sudo models | case1-accept.test.mjs:452 outer lower band | 3.01 | 6.618 |
| M4 | row253 C4 P10 outer reason holds under both sudo models | case1-accept.test.mjs:445 exact probe-outer-timeout reason | not reached | 9.023 |
| M5 | row253 C4 P10 inner reason holds under both sudo models | case1-accept.test.mjs:448 required complete pair (doesNotThrow) | not reached | 5.816 |
| M6 | row299 P10 observer records are complete and ordered | case1-accept.test.mjs:418 equal readings must refuse (throws) | not reached | 0.164 |
M1 measured 1.23 s, below 1.25 by only 0.02 s. This is the anticipated startup-overhead risk. It died at the intended lower-band assertion; no tuning or retry was used.
M4 classification follows sage-3271, sage-3273 and mos-1426. The unchanged 7000 ms fixture guard returned; the named outer test failed with ERR_ASSERTION / match at line 445 because P10 reported reason=probe-inner-command instead of exact reason=probe-outer-timeout. It returned rc 1 in 9.023 s including the baseline. No external command timeout or cleanup-only failure was counted. Raw evidence: M4.log, M4.command.json, results.json guard_return_receipt and clean restore.
sage-3274 reported a read-only canonical queue polling overlap for receipts window 07:20–07:26Z. It wrote nothing and touched no worktree or test path. This is accepted ambient load, not a rerun condition; ambient-overlap.json keeps the report.
All raw logs, command headers with timeout -k 10, TMPDIRs, per-stage load samples, controller, results, and restores are in this directory. Every run used a fresh short TMPDIR directly under /mnt/storage/scratch/tmp. No source or assertion changed during the gate.
@@ -1,10 +0,0 @@
{
"source": "sage-3274",
"reported_utc": "2026-10-23T07:27:24Z",
"window_utc": [
"2026-10-23T07:20:00Z",
"2026-10-23T07:26:00Z"
],
"activity": "Read-only canonical queue show 303 every 20 seconds by Duckworth, stopped; no writes or test/worktree paths touched",
"classification": "Allowed ambient overlap under mos-1409, no rerun or recheck"
}
@@ -1 +0,0 @@
CLEAR
@@ -1,19 +0,0 @@
{
"label": "case1-whole-1",
"argv": [
"timeout",
"-k",
"10",
"1200",
"node",
"--test",
"--test-reporter=tap",
"packages/cli/tests/case1-accept.test.mjs"
],
"limit_seconds": 1200,
"tmpdir": "/mnt/storage/scratch/tmp/geSGqXZ",
"started_utc": "2026-10-23T07:26:57Z",
"start_load": "1.05 1.69 2.00 1/6640 205920",
"log": "/mnt/storage/scratch/tmp/gABO62Q/records/case1-whole-1.log",
"expected_red": false
}
@@ -1,242 +0,0 @@
[
{
"wall_seconds": 0.0,
"utc": "2026-10-23T07:26:57Z",
"load": "1.05 1.69 2.00 5/6641 205921"
},
{
"wall_seconds": 5.001,
"utc": "2026-10-23T07:27:02Z",
"load": "1.05 1.68 1.99 2/6664 208983"
},
{
"wall_seconds": 10.001,
"utc": "2026-10-23T07:27:07Z",
"load": "1.12 1.69 1.99 4/6679 212072"
},
{
"wall_seconds": 15.001,
"utc": "2026-10-23T07:27:12Z",
"load": "1.19 1.69 1.99 4/6676 215231"
},
{
"wall_seconds": 20.001,
"utc": "2026-10-23T07:27:17Z",
"load": "1.26 1.70 1.99 2/6696 218364"
},
{
"wall_seconds": 25.002,
"utc": "2026-10-23T07:27:22Z",
"load": "1.24 1.69 1.99 2/6689 221537"
},
{
"wall_seconds": 30.002,
"utc": "2026-10-23T07:27:27Z",
"load": "1.22 1.67 1.98 2/6683 224753"
},
{
"wall_seconds": 35.002,
"utc": "2026-10-23T07:27:32Z",
"load": "1.36 1.70 1.99 3/6686 228651"
},
{
"wall_seconds": 40.002,
"utc": "2026-10-23T07:27:37Z",
"load": "1.33 1.68 1.98 3/6709 231645"
},
{
"wall_seconds": 45.003,
"utc": "2026-10-23T07:27:42Z",
"load": "1.22 1.66 1.97 2/6719 234495"
},
{
"wall_seconds": 50.003,
"utc": "2026-10-23T07:27:47Z",
"load": "1.21 1.64 1.97 3/6710 235979"
},
{
"wall_seconds": 55.003,
"utc": "2026-10-23T07:27:52Z",
"load": "1.27 1.65 1.97 3/6724 238345"
},
{
"wall_seconds": 60.003,
"utc": "2026-10-23T07:27:57Z",
"load": "1.33 1.66 1.97 4/6734 240013"
},
{
"wall_seconds": 65.004,
"utc": "2026-10-23T07:28:02Z",
"load": "1.38 1.66 1.97 1/6730 240697"
},
{
"wall_seconds": 70.004,
"utc": "2026-10-23T07:28:07Z",
"load": "1.43 1.67 1.97 4/6727 243478"
},
{
"wall_seconds": 75.004,
"utc": "2026-10-23T07:28:12Z",
"load": "1.48 1.67 1.97 2/6745 245706"
},
{
"wall_seconds": 80.004,
"utc": "2026-10-23T07:28:17Z",
"load": "1.44 1.66 1.96 2/6741 247933"
},
{
"wall_seconds": 85.005,
"utc": "2026-10-23T07:28:22Z",
"load": "1.48 1.67 1.97 1/6742 249267"
},
{
"wall_seconds": 90.005,
"utc": "2026-10-23T07:28:27Z",
"load": "1.53 1.68 1.97 1/6710 251793"
},
{
"wall_seconds": 95.005,
"utc": "2026-10-23T07:28:32Z",
"load": "1.48 1.66 1.96 2/6712 253250"
},
{
"wall_seconds": 100.005,
"utc": "2026-10-23T07:28:37Z",
"load": "1.53 1.67 1.96 4/6719 256547"
},
{
"wall_seconds": 105.006,
"utc": "2026-10-23T07:28:42Z",
"load": "1.56 1.68 1.96 5/6721 259938"
},
{
"wall_seconds": 110.006,
"utc": "2026-10-23T07:28:47Z",
"load": "1.68 1.70 1.97 4/6762 263119"
},
{
"wall_seconds": 115.006,
"utc": "2026-10-23T07:28:52Z",
"load": "1.86 1.74 1.98 3/6741 266483"
},
{
"wall_seconds": 120.006,
"utc": "2026-10-23T07:28:57Z",
"load": "2.20 1.81 2.00 2/6714 269932"
},
{
"wall_seconds": 125.006,
"utc": "2026-10-23T07:29:02Z",
"load": "2.42 1.86 2.02 6/6713 274031"
},
{
"wall_seconds": 130.007,
"utc": "2026-10-23T07:29:07Z",
"load": "2.55 1.90 2.03 3/6718 277881"
},
{
"wall_seconds": 135.007,
"utc": "2026-10-23T07:29:12Z",
"load": "2.58 1.91 2.03 2/6741 281990"
},
{
"wall_seconds": 140.007,
"utc": "2026-10-23T07:29:17Z",
"load": "2.62 1.93 2.04 4/6740 286159"
},
{
"wall_seconds": 145.007,
"utc": "2026-10-23T07:29:22Z",
"load": "2.73 1.97 2.05 2/6748 290530"
},
{
"wall_seconds": 150.008,
"utc": "2026-10-23T07:29:27Z",
"load": "2.99 2.04 2.07 2/6701 294400"
},
{
"wall_seconds": 155.008,
"utc": "2026-10-23T07:29:32Z",
"load": "3.07 2.07 2.08 3/6694 297610"
},
{
"wall_seconds": 160.008,
"utc": "2026-10-23T07:29:37Z",
"load": "3.15 2.10 2.09 5/6705 300813"
},
{
"wall_seconds": 165.008,
"utc": "2026-10-23T07:29:42Z",
"load": "3.05 2.10 2.09 2/6703 304321"
},
{
"wall_seconds": 170.008,
"utc": "2026-10-23T07:29:47Z",
"load": "3.05 2.11 2.10 3/6739 307613"
},
{
"wall_seconds": 175.009,
"utc": "2026-10-23T07:29:52Z",
"load": "2.97 2.11 2.10 2/6745 310850"
},
{
"wall_seconds": 180.009,
"utc": "2026-10-23T07:29:57Z",
"load": "2.89 2.11 2.09 4/6709 314125"
},
{
"wall_seconds": 185.009,
"utc": "2026-10-23T07:30:02Z",
"load": "3.14 2.17 2.12 4/6698 317556"
},
{
"wall_seconds": 190.009,
"utc": "2026-10-23T07:30:07Z",
"load": "3.93 2.35 2.17 2/6708 321964"
},
{
"wall_seconds": 195.009,
"utc": "2026-10-23T07:30:12Z",
"load": "3.93 2.38 2.18 2/6713 325120"
},
{
"wall_seconds": 200.01,
"utc": "2026-10-23T07:30:17Z",
"load": "3.78 2.38 2.18 3/6721 328405"
},
{
"wall_seconds": 205.01,
"utc": "2026-10-23T07:30:22Z",
"load": "3.80 2.40 2.19 2/6725 331643"
},
{
"wall_seconds": 210.01,
"utc": "2026-10-23T07:30:27Z",
"load": "3.89 2.45 2.21 5/6714 335757"
},
{
"wall_seconds": 215.01,
"utc": "2026-10-23T07:30:32Z",
"load": "3.74 2.44 2.21 2/6706 339141"
},
{
"wall_seconds": 220.01,
"utc": "2026-10-23T07:30:37Z",
"load": "3.60 2.43 2.20 3/6722 342107"
},
{
"wall_seconds": 225.011,
"utc": "2026-10-23T07:30:42Z",
"load": "3.63 2.46 2.21 4/6716 345179"
},
{
"wall_seconds": 230.011,
"utc": "2026-10-23T07:30:47Z",
"load": "3.66 2.48 2.22 2/6740 349322"
},
{
"wall_seconds": 235.011,
"utc": "2026-10-23T07:30:52Z",
"load": "3.53 2.47 2.22 3/6745 352500"
}
]
@@ -1,332 +0,0 @@
TAP version 13
# Subtest: row253 socket observation uses configured root, metadata and the Console peer without sending bytes
ok 1 - row253 socket observation uses configured root, metadata and the Console peer without sending bytes
---
duration_ms: 1855.818133
type: 'test'
...
# Subtest: row253 P10 refuses unsafe metadata, wrong peers and an unsafe Python without claiming closure
ok 2 - row253 P10 refuses unsafe metadata, wrong peers and an unsafe Python without claiming closure
---
duration_ms: 29336.896059
type: 'test'
...
# Subtest: row253 acceptance rejects bad config and unsupported copies before talk
ok 3 - row253 acceptance rejects bad config and unsupported copies before talk
---
duration_ms: 1492.589344
type: 'test'
...
# Subtest: row253 stalled peer observation ends within its bound without leaving a reader
ok 4 - row253 stalled peer observation ends within its bound without leaving a reader
---
duration_ms: 3995.592937
type: 'test'
...
# Subtest: row253 P8 refuses both retired TCP and board listeners
ok 5 - row253 P8 refuses both retired TCP and board listeners
---
duration_ms: 3885.105115
type: 'test'
...
# Subtest: row253 C4 acceptance query inner reason holds under both sudo models
ok 6 - row253 C4 acceptance query inner reason holds under both sudo models
---
duration_ms: 10722.031738
type: 'test'
...
# Subtest: row253 C4 acceptance query outer reason discards stdout and names residual cleanup
ok 7 - row253 C4 acceptance query outer reason discards stdout and names residual cleanup
---
duration_ms: 14183.471618
type: 'test'
...
# Subtest: row253 C4 acceptance query overflow is output-limit in both models
ok 8 - row253 C4 acceptance query overflow is output-limit in both models
---
duration_ms: 492.660764
type: 'test'
...
# Subtest: row299 P10 timing copy preserves shipped bytes and isolates observer variables
ok 9 - row299 P10 timing copy preserves shipped bytes and isolates observer variables
---
duration_ms: 0.874413
type: 'test'
...
# Subtest: row299 P10 observers preserve stdout stderr status and the EXIT trap
ok 10 - row299 P10 observers preserve stdout stderr status and the EXIT trap
---
duration_ms: 3.117643
type: 'test'
...
# Subtest: row299 P10 observer records are complete and ordered
ok 11 - row299 P10 observer records are complete and ordered
---
duration_ms: 0.494254
type: 'test'
...
# Subtest: row253 C4 P10 inner reason holds under both sudo models
ok 12 - row253 C4 P10 inner reason holds under both sudo models
---
duration_ms: 11837.509919
type: 'test'
...
# {"fault":"inner","mode":"exec","baselineSeconds":1.8914214159999974,"faultSeconds":3.974223306999993,"probeSeconds":2.25}
# {"fault":"inner","mode":"hop","baselineSeconds":1.8980776110000006,"faultSeconds":4.004310756999999,"probeSeconds":2.27}
# Subtest: row253 C4 P10 outer reason holds under both sudo models
ok 13 - row253 C4 P10 outer reason holds under both sudo models
---
duration_ms: 15238.957947
type: 'test'
...
# {"fault":"outer","mode":"exec","baselineSeconds":1.8725320299999875,"faultSeconds":5.715126132999998,"probeSeconds":4}
# {"fault":"outer","mode":"hop","baselineSeconds":1.8715896639999992,"faultSeconds":5.726812752999991,"probeSeconds":4}
# Subtest: row253 C4 P10 overflow reason holds under both sudo models
ok 14 - row253 C4 P10 overflow reason holds under both sudo models
---
duration_ms: 3757.733977
type: 'test'
...
# Subtest: row 195 accept: every check passing exits 0, with each P mark and counts that match the lines
ok 15 - row 195 accept: every check passing exits 0, with each P mark and counts that match the lines
---
duration_ms: 1879.003371
type: 'test'
...
# Subtest: row 195 accept: exits 1 with each F check failing alone, and its line names it
ok 16 - row 195 accept: exits 1 with each F check failing alone, and its line names it
---
duration_ms: 21149.551708
type: 'test'
...
# Subtest: row 195 accept: F3 fails on exit 0 with no reply line, and its evidence takes talk's error
ok 17 - row 195 accept: F3 fails on exit 0 with no reply line, and its evidence takes talk's error
---
duration_ms: 3936.849005
type: 'test'
...
# Subtest: row 195 accept: F1 fails on a unit that isn't active or isn't User=mosaic
ok 18 - row 195 accept: F1 fails on a unit that isn't active or isn't User=mosaic
---
duration_ms: 3519.175544
type: 'test'
...
# Subtest: row 195 accept: F2 fails when healthz doesn't answer and when another pid holds the port
ok 19 - row 195 accept: F2 fails when healthz doesn't answer and when another pid holds the port
---
duration_ms: 3846.383271
type: 'test'
...
# Subtest: row 195 accept: F5 fails on unpriv_bwrap (enforce), on complain and on a trailing space
ok 20 - row 195 accept: F5 fails on unpriv_bwrap (enforce), on complain and on a trailing space
---
duration_ms: 8775.592742
type: 'test'
...
# Subtest: row 195 accept: F5 fails with no bwrap of mosaic's, and passes on comm alone
ok 21 - row 195 accept: F5 fails with no bwrap of mosaic's, and passes on comm alone
---
duration_ms: 4053.330344
type: 'test'
...
# Subtest: row 195 accept: F6 fails on a stub that prints nothing, on a path outside claude-<pin> and on a .. segment
ok 22 - row 195 accept: F6 fails on a stub that prints nothing, on a path outside claude-<pin> and on a .. segment
---
duration_ms: 5151.877925
type: 'test'
...
# Subtest: row 195 accept: F7 fails on two live PM launches, one for another business, and no launch.by
ok 23 - row 195 accept: F7 fails on two live PM launches, one for another business, and no launch.by
---
duration_ms: 5579.901611
type: 'test'
...
# Subtest: row 195 accept: F8 fails on 0640, on another owner and on a symlink, and never prints the credential
ok 24 - row 195 accept: F8 fails on 0640, on another owner and on a symlink, and never prints the credential
---
duration_ms: 5585.627061
type: 'test'
...
# Subtest: row 195 accept: F9 fails on another owner, a group-writable mode and a number for the flag
ok 25 - row 195 accept: F9 fails on another owner, a group-writable mode and a number for the flag
---
duration_ms: 5536.898215
type: 'test'
...
# Subtest: row 195 accept: F9 won't run --node as root off the pin path or with a writable directory above it
ok 26 - row 195 accept: F9 won't run --node as root off the pin path or with a writable directory above it
---
duration_ms: 5246.446744
type: 'test'
...
# Subtest: row 195 accept: F11 fails on one *.json under discord/ and passes on an empty directory
ok 27 - row 195 accept: F11 fails on one *.json under discord/ and passes on an empty directory
---
duration_ms: 3711.063365
type: 'test'
...
# Subtest: row 195 accept: each P check reports unnamed on its fault, and the exit stays 0
ok 28 - row 195 accept: each P check reports unnamed on its fault, and the exit stays 0
---
duration_ms: 16646.70564
type: 'test'
...
# Subtest: row 195 accept: P2 is unnamed with a supplementary group, and P5 names docker
ok 29 - row 195 accept: P2 is unnamed with a supplementary group, and P5 names docker
---
duration_ms: 3728.983
type: 'test'
...
# Subtest: row 195 accept: P5 is closed with no jarvis account, and P2 with an empty authorized_keys
ok 30 - row 195 accept: P5 is closed with no jarvis account, and P2 with an empty authorized_keys
---
duration_ms: 1843.108704
type: 'test'
...
# Subtest: row 195 accept: P9 is unnamed once for each item missing
ok 31 - row 195 accept: P9 is unnamed once for each item missing
---
duration_ms: 9276.56305
type: 'test'
...
# Subtest: row253 accept: P10 fails its observation with another peer; P11 with the unit disabled
ok 32 - row253 accept: P10 fails its observation with another peer; P11 with the unit disabled
---
duration_ms: 3822.919805
type: 'test'
...
# Subtest: row 195 accept: every P check unnamed together still exits 0
ok 33 - row 195 accept: every P check unnamed together still exits 0
---
duration_ms: 1656.312404
type: 'test'
...
# Subtest: row 195 accept: a bad args file refuses with exit 2 before any check, each for its own reason
ok 34 - row 195 accept: a bad args file refuses with exit 2 before any check, each for its own reason
---
duration_ms: 97.36437
type: 'test'
...
# Subtest: row 195 accept: usage errors and a run without --root as a user exit 2
ok 35 - row 195 accept: usage errors and a run without --root as a user exit 2
---
duration_ms: 10.881957
type: 'test'
...
# Subtest: row 195 accept: every in-instance call goes through sudo -u mosaic -H env PATH=<node dir>:...
ok 36 - row 195 accept: every in-instance call goes through sudo -u mosaic -H env PATH=<node dir>:...
---
duration_ms: 1850.760145
type: 'test'
...
# Subtest: row 195 accept: the host check runs with --check and never --enforce
ok 37 - row 195 accept: the host check runs with --check and never --enforce
---
duration_ms: 1869.942933
type: 'test'
...
# Subtest: row276 legacy call inventory pins every production bound and the conversation contract
ok 38 - row276 legacy call inventory pins every production bound and the conversation contract
---
duration_ms: 0.366334
type: 'test'
...
# Subtest: row276 talk legacy inner timeout cleans both sudo models
ok 39 - row276 talk legacy inner timeout cleans both sudo models
---
duration_ms: 1692.158566
type: 'test'
...
# Subtest: row276 precheck legacy inner timeout cleans both sudo models
ok 40 - row276 precheck legacy inner timeout cleans both sudo models
---
duration_ms: 1720.136504
type: 'test'
...
# Subtest: row276 claude-version legacy inner timeout cleans both sudo models
ok 41 - row276 claude-version legacy inner timeout cleans both sudo models
---
duration_ms: 1702.886014
type: 'test'
...
# Subtest: row276 pm-list legacy inner timeout cleans both sudo models
ok 42 - row276 pm-list legacy inner timeout cleans both sudo models
---
duration_ms: 1710.920935
type: 'test'
...
# Subtest: row276 node-version legacy inner timeout cleans both sudo models
ok 43 - row276 node-version legacy inner timeout cleans both sudo models
---
duration_ms: 1712.683898
type: 'test'
...
# Subtest: row276 legacy streams and display status preserve failures without granting success
ok 44 - row276 legacy streams and display status preserve failures without granting success
---
duration_ms: 2671.771328
type: 'test'
...
# Subtest: row276 trailer grammar cannot make supervisor failure pass
ok 45 - row276 trailer grammar cannot make supervisor failure pass
---
duration_ms: 2089.079622
type: 'test'
...
# Subtest: row276 earlier forged trailer and appended zero remain failures
ok 46 - row276 earlier forged trailer and appended zero remain failures
---
duration_ms: 513.433074
type: 'test'
...
# Subtest: row276 precheck outer bound discards success status and fixture cleans residual
ok 47 - row276 precheck outer bound discards success status and fixture cleans residual
---
duration_ms: 2173.848153
type: 'test'
...
# Subtest: row276 case1 capture and legacy tools refuse unsafe system tools
ok 48 - row276 case1 capture and legacy tools refuse unsafe system tools
---
duration_ms: 76.5521
type: 'test'
...
# Subtest: row276 stderr retention is bounded and keeps the final diagnostic
ok 49 - row276 stderr retention is bounded and keeps the final diagnostic
---
duration_ms: 278.525167
type: 'test'
...
# Subtest: row276 version and PM checks refuse successful-looking stdout on supervisor failure
ok 50 - row276 version and PM checks refuse successful-looking stdout on supervisor failure
---
duration_ms: 15.742297
type: 'test'
...
# Subtest: row276 full acceptance keeps all five healthy calls in both sudo models
ok 51 - row276 full acceptance keeps all five healthy calls in both sudo models
---
duration_ms: 3757.894895
type: 'test'
...
# Subtest: row276 vanished pid stat read returns 3 with empty stderr in both scripts
ok 52 - row276 vanished pid stat read returns 3 with empty stderr in both scripts
---
duration_ms: 4.785932
type: 'test'
...
# Subtest: row276 legacy stdout snapshot preserves exact bytes on success and command failure
ok 53 - row276 legacy stdout snapshot preserves exact bytes on success and command failure
---
duration_ms: 3281.165451
type: 'test'
...
1..53
# tests 53
# suites 0
# pass 53
# fail 0
# cancelled 0
# skipped 0
# todo 0
# duration_ms 239100.197017
@@ -1 +0,0 @@
CLEAR
@@ -1,19 +0,0 @@
{
"label": "case1-whole-2",
"argv": [
"timeout",
"-k",
"10",
"1200",
"node",
"--test",
"--test-reporter=tap",
"packages/cli/tests/case1-accept.test.mjs"
],
"limit_seconds": 1200,
"tmpdir": "/mnt/storage/scratch/tmp/gd0qwWL",
"started_utc": "2026-10-23T07:30:57Z",
"start_load": "3.41 2.47 2.22 4/6666 357541",
"log": "/mnt/storage/scratch/tmp/gABO62Q/records/case1-whole-2.log",
"expected_red": false
}
@@ -1,247 +0,0 @@
[
{
"wall_seconds": 0.0,
"utc": "2026-10-23T07:30:57Z",
"load": "3.41 2.47 2.22 8/6667 357542"
},
{
"wall_seconds": 5.001,
"utc": "2026-10-23T07:31:02Z",
"load": "3.21 2.44 2.21 6/6697 360865"
},
{
"wall_seconds": 10.001,
"utc": "2026-10-23T07:31:07Z",
"load": "3.44 2.50 2.23 2/6704 364103"
},
{
"wall_seconds": 15.001,
"utc": "2026-10-23T07:31:12Z",
"load": "3.24 2.48 2.23 2/6696 367319"
},
{
"wall_seconds": 20.001,
"utc": "2026-10-23T07:31:17Z",
"load": "3.14 2.47 2.23 8/6721 370622"
},
{
"wall_seconds": 25.002,
"utc": "2026-10-23T07:31:22Z",
"load": "3.05 2.46 2.22 3/6707 373850"
},
{
"wall_seconds": 30.002,
"utc": "2026-10-23T07:31:27Z",
"load": "2.89 2.44 2.22 2/6664 377071"
},
{
"wall_seconds": 35.002,
"utc": "2026-10-23T07:31:32Z",
"load": "2.73 2.41 2.21 2/6679 380056"
},
{
"wall_seconds": 40.002,
"utc": "2026-10-23T07:31:37Z",
"load": "2.52 2.37 2.20 4/6709 384877"
},
{
"wall_seconds": 45.002,
"utc": "2026-10-23T07:31:42Z",
"load": "2.71 2.42 2.21 3/6727 386330"
},
{
"wall_seconds": 50.003,
"utc": "2026-10-23T07:31:47Z",
"load": "2.58 2.39 2.21 1/6740 387775"
},
{
"wall_seconds": 55.003,
"utc": "2026-10-23T07:31:52Z",
"load": "2.69 2.42 2.22 9/6763 389481"
},
{
"wall_seconds": 60.003,
"utc": "2026-10-23T07:31:57Z",
"load": "2.56 2.39 2.21 3/6722 390241"
},
{
"wall_seconds": 65.003,
"utc": "2026-10-23T07:32:02Z",
"load": "2.43 2.37 2.20 4/6732 391752"
},
{
"wall_seconds": 70.004,
"utc": "2026-10-23T07:32:07Z",
"load": "2.40 2.36 2.20 9/6738 395390"
},
{
"wall_seconds": 75.004,
"utc": "2026-10-23T07:32:12Z",
"load": "2.44 2.38 2.21 6/6731 398840"
},
{
"wall_seconds": 80.004,
"utc": "2026-10-23T07:32:17Z",
"load": "2.57 2.40 2.22 3/6790 402895"
},
{
"wall_seconds": 85.004,
"utc": "2026-10-23T07:32:22Z",
"load": "2.60 2.41 2.22 1/6721 405197"
},
{
"wall_seconds": 90.005,
"utc": "2026-10-23T07:32:27Z",
"load": "2.48 2.39 2.21 6/6682 407571"
},
{
"wall_seconds": 95.005,
"utc": "2026-10-23T07:32:32Z",
"load": "2.44 2.38 2.21 3/6688 408595"
},
{
"wall_seconds": 100.005,
"utc": "2026-10-23T07:32:37Z",
"load": "2.32 2.36 2.21 4/6690 411784"
},
{
"wall_seconds": 105.005,
"utc": "2026-10-23T07:32:42Z",
"load": "2.38 2.37 2.21 2/6695 414989"
},
{
"wall_seconds": 110.006,
"utc": "2026-10-23T07:32:47Z",
"load": "2.27 2.35 2.20 2/6747 418296"
},
{
"wall_seconds": 115.006,
"utc": "2026-10-23T07:32:52Z",
"load": "2.16 2.32 2.20 3/6725 421487"
},
{
"wall_seconds": 120.006,
"utc": "2026-10-23T07:32:57Z",
"load": "2.31 2.35 2.21 2/6717 424642"
},
{
"wall_seconds": 125.006,
"utc": "2026-10-23T07:33:02Z",
"load": "2.37 2.36 2.21 2/6711 427881"
},
{
"wall_seconds": 130.007,
"utc": "2026-10-23T07:33:07Z",
"load": "2.34 2.36 2.21 8/6702 431078"
},
{
"wall_seconds": 135.007,
"utc": "2026-10-23T07:33:12Z",
"load": "2.55 2.40 2.22 4/6715 434482"
},
{
"wall_seconds": 140.007,
"utc": "2026-10-23T07:33:17Z",
"load": "2.59 2.41 2.23 8/6722 437629"
},
{
"wall_seconds": 145.007,
"utc": "2026-10-23T07:33:22Z",
"load": "3.10 2.52 2.27 5/6730 441654"
},
{
"wall_seconds": 150.008,
"utc": "2026-10-23T07:33:27Z",
"load": "2.93 2.50 2.26 3/6688 445391"
},
{
"wall_seconds": 155.008,
"utc": "2026-10-23T07:33:32Z",
"load": "2.86 2.49 2.26 2/6720 449750"
},
{
"wall_seconds": 160.008,
"utc": "2026-10-23T07:33:37Z",
"load": "2.63 2.45 2.24 3/6720 454134"
},
{
"wall_seconds": 165.008,
"utc": "2026-10-23T07:33:42Z",
"load": "2.58 2.44 2.24 3/6705 458552"
},
{
"wall_seconds": 170.008,
"utc": "2026-10-23T07:33:47Z",
"load": "2.53 2.43 2.24 2/6751 462649"
},
{
"wall_seconds": 175.009,
"utc": "2026-10-23T07:33:52Z",
"load": "2.49 2.42 2.24 2/6728 466002"
},
{
"wall_seconds": 180.009,
"utc": "2026-10-23T07:33:57Z",
"load": "2.37 2.40 2.23 4/6684 469149"
},
{
"wall_seconds": 185.009,
"utc": "2026-10-23T07:34:02Z",
"load": "2.50 2.43 2.24 10/6506 472229"
},
{
"wall_seconds": 190.009,
"utc": "2026-10-23T07:34:07Z",
"load": "2.78 2.49 2.26 3/6479 475928"
},
{
"wall_seconds": 195.01,
"utc": "2026-10-23T07:34:12Z",
"load": "2.64 2.46 2.26 3/6479 479085"
},
{
"wall_seconds": 200.01,
"utc": "2026-10-23T07:34:17Z",
"load": "2.51 2.44 2.25 3/6502 482380"
},
{
"wall_seconds": 205.01,
"utc": "2026-10-23T07:34:22Z",
"load": "2.63 2.46 2.26 4/6485 486156"
},
{
"wall_seconds": 210.01,
"utc": "2026-10-23T07:34:27Z",
"load": "2.50 2.44 2.25 2/6457 489465"
},
{
"wall_seconds": 215.011,
"utc": "2026-10-23T07:34:32Z",
"load": "2.38 2.41 2.25 2/6462 492613"
},
{
"wall_seconds": 220.011,
"utc": "2026-10-23T07:34:37Z",
"load": "2.27 2.39 2.24 2/6495 494796"
},
{
"wall_seconds": 225.011,
"utc": "2026-10-23T07:34:42Z",
"load": "2.08 2.35 2.23 1/6512 496267"
},
{
"wall_seconds": 230.011,
"utc": "2026-10-23T07:34:47Z",
"load": "2.00 2.33 2.22 2/6527 499579"
},
{
"wall_seconds": 235.012,
"utc": "2026-10-23T07:34:52Z",
"load": "2.00 2.32 2.22 2/6514 502183"
},
{
"wall_seconds": 240.012,
"utc": "2026-10-23T07:34:57Z",
"load": "2.00 2.32 2.22 8/6467 505173"
}
]
Loaded 100 of 654 files, more files were not shown because too many files have changed in this diff. Show more