CI queue guard: the FIXED wrapper has never reached the hosts that run it (installed artifact is the pre-fix blob) #1063
Open
opened 2026-08-05 21:53:35 +00:00 by Mos
·
0 comments
No Branch/Tag Specified
main
feat/1050-install-state-machine-red-fixture
fix/1043-pane-git-identity
fix/pr-merge-message-field
feat/1051-mosaic-brain-installer
feat/1045-mosaic-cred
remediation/state
fix/1056-upgrade-rollback-control-race
fix/1019-ci-queue-timeout-harness
next
feat/rm-02-gate-registry
fix/rm-01-reproducible-checkout
remediation/mission-setup
fix/hygiene-inert-format-gate
fix/1019-queue-guard-stdin
feat/mos-ste-writing-standard
fix/1007-suite-hermeticity
fix/991-comment-url-scheme-normalise
feat/push-guard-null-case-verification
mos-comms-live
docs/heartbeat-framework-layering-ms-lead
feat/869-c4-version-coupling
feat/869-c2-install-ordering-guard
feat/869-c5-doctor-activation-check
feat/per-agent-gitea-identity
fix/875-belongs-case-insensitive-slug
fix/ci-queue-wait-404-branch-absent
feat/869-c1-activation-probe
feat/869-c3-broker-supervisor
fix/865-tea-cli-comment-invocation
feat/glpi-skills
fix/860-deflake-mutator-lease-gate
fix/850-detect-platform-port-normalization
fix/856-worktree-deps-preflight
fix/835-pr-review-approve-reject-comment-flag
fix/848-truthful-evidence
fix/812-pr-review-comment
fix/849-recovery-runtime-fixture-race
docs/758-ledger-m5-001-sync
feat/834-tc-server-side-doc
feat/833-constrained-recovery-command
feat/827-gate0-probe
governance/gate0-probe3-amendment
fix/795-codex-pr-diff
fix/795-ci-base-jq
fix/795-ci-base-git
feat/791-pr3-fleet-regen
feat/791-pr2-snapshot-restore
fix/807-glpi-206
fix/808-agent-send-false-sender
feat/791-upgrade-config-protection
feat/790-mosaic-yolo-claudex-pr2
feat/790-mosaic-yolo-claudex
feat/758-v1-v2-migrator
fix/766-exact-fleet-comms
test/758-reconciler-lifecycle-gates
docs/771-kbn101-db-role-split
test/758-example-profile-dispositions
feat/758-shared-role-resolution
feat/mos-logical-identity-fencing
feat/769-kbn100-unified-schema
docs/753-kbn010-threat-gate
feat/758-roster-v2-compiler
feat/756-official-discord-plugin
docs/758-fleet-config-management
fix/mos-option2-qualification-format
docs/issue-758-m0
docs/mos-option2-qualification
mos-comms
feat/tess-interaction-agent
fix/tess-docs-format
draft/mosaic-platform-prd
fix/installer-provider-gate-and-local-gateway-redis
release/mosaic-cli-0.0.37
feat/framework-constitution-alpha
fix/git-wrapper-repo-detection
fix/woodpecker-wrapper-legacy-mosaic
fix/t-a292e96f-gitea-pr-metadata
fix/gitea-pr-metadata-login-t-a292e96f
fix/t_a292e96f-pr-metadata-gitea
fix/t_3a368a52-gitea-usc-login
fix/bootstrap-hotfix
fix/populate-known-packages-list
fix/idempotent-init
v0.0.39-alpha
mosaic-v0.0.31
fed-v0.2.0-m2
fed-v0.1.0-m1
mosaic-v0.0.29
mosaic-v0.0.28
mosaic-v0.0.27
mosaic-v0.0.26
mosaic-v0.0.25
mosaic-v0.0.24
v0.2.0
v0.1.0
v0.0.8
v0.0.7
v0.0.6
v0.0.5
v0.0.4
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
No Assignees
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: mosaicstack/stack#1063
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
#1019's defect was fixed in this repository on 2026-08-01 by58b971ab(#1032) and the fix hasnever reached the machine that runs it.
#1019is closed; the defect it describes is live.Measured
The installed wrapper is byte-identical to the version immediately before the fix. On that code a
heredoc binds stdin to the program text,
json.load(sys.stdin)hits EOF, the guard printsunknownandexits 0 — on every invocation, every branch, every repo, both platforms.
Why this is filed separately
#1019is CLOSED. A closed issue describing a live defect is not tracked by anything.the wrapper to any host.
MOSAIC_SYNC_ONLY=1brought it to
main's hash — so this is not a manifest exclusion and not a sync bug. Packagemetadata read
0.0.48while the source changed, so the published0.0.48artifact is the pre-fix bloband no successful
0.0.49update+reseed ever reached this host..install-manifest.jsonis absentat all three plausible paths.
Observed consequence
The guard returned
state=unknownwhile Woodpecker pipeline 2214 was running; a careful seatdistrusted the string, enumerated Woodpecker directly, and waited. The safe behaviour was a property of
the seat, not of the tool. It also printed
state=unknownduring the merge of #1062 itself.Not in scope
ci-queue-wait.sh— already fixed inmain.unable to state its source revision or prove a successful update) but this issue is the deployment gap,
not the detector.
Done when
A host running the fleet can be shown to carry
main'sci-queue-wait.sh, and the mechanism that left itstale is identified.