RM-02 Gate Registry Scratchpad (#1029)

Objective

Deliver the seven-gate registry and RED-first anti-inert verifier on feat/rm-02-gate-registry, preserving required-versus-actual defects without laundering them as success.

Constraints and boundaries

Do not modify ci-queue-wait.sh; RM-03 owns that fix.
Do not modify docs/remediation/TASKS.md; workers cannot edit orchestrator tracking.
Every declared behavior must be observed, not inferred from an exit code.
Repository-local evidence does not establish same-authority tamper resistance; RM-25/RM-59 own the external trust anchor.
Coverage is seven logical gates; broader inventory is RM-54.
Budget assumption: no explicit token ceiling was supplied. Keep implementation dependency-free (stock Node), avoid repeated full monorepo installs, and keep generated test artifacts under the worktree/main disk.

Plan

Update PRD and tracking references.
Write black-box meta-negative-control first and observe it fail for the missing verifier behavior.
Implement minimal manifest parser/case runner/mutation detector; observe meta-control succeed.
Add schema, coverage, provenance, prose marker, compatibility, discovery, deployment identity, and defect-delta tests RED-first.
Register seven gates with exact cases and run each case.
Add prospective per-commit replay and bounded provider-evidence reporting.
Wire unconditional Woodpecker CI and update developer/admin documentation.
Run situational and baseline verification, independent Codex review, remediate, commit, queue guard, push, PR, coordinator/reviewer handoff.

Progress

2026-08-01: Design approved by mos-remediation; rulings A-E and source/deployed identity addition incorporated.
2026-08-01: Isolated worktree created from origin/main f65e9ea6; RM-01 f58b3699 verified as ancestor.
2026-08-01: Git author set to f10-coder <[email protected]>; provider issue #1029 created with MOSAIC_GIT_IDENTITY=f10-coder.
2026-08-01: Source/deployed queue-guard SHA-256 observed equal (19cda2f...); this observation is not yet an enforced property.

Tests and RED-first evidence

Meta-negative RED first: node --test scripts/gate-verify.test.mjs failed because the absent verifier did not name externally inerted meta-fixture.
Structural RED: nine tests failed before implementation for internal mutation, unregistered executable, missing negative control, ownerless delta, unbound criterion/claim, modeled conflict, missing provenance, and deployment drift.
Clause hardening RED: positive-only security criterion and missing registered claim marker both passed incorrectly before validation was added.
CI wiring RED: package script and unconditional Woodpecker step tests both failed before wiring.
History RED: history test failed with missing module before own-tree manifest selection/provider classification was implemented.
pnpm gate:verify: exit 0; seven gates each reported META-NEGATIVE-CONTROL ... observed red; queue source/deployed drift control observed red; six queue behavior deltas printed as DEFECT (owner: RM-03).
Focused Node tests: 33/33 pass after review hardening (23 verifier/wiring plus 10 history/provider tests).
pnpm typecheck: pass (45/45 Turbo tasks).
pnpm lint: pass (25/25 Turbo tasks).
pnpm format:check: pass.
pnpm test: repository suites reached 45/46 Turbo tasks; all application/package tests shown passed, then the known host-specific wake assertion aborted exit 97 (BASH_LINENO convention violated, #973/D-16). No test was edited or bypassed. CI remains the authoritative full-suite environment.

Self-surfaced defect

The queue guard's get_state_from_status_json runs python3 - <<'PY' while provider JSON is piped to the shell function. The heredoc owns stdin, so Python never reads provider JSON. Terminal success, no-status, terminal failure, and malformed payloads all classify as unknown; the associated fail-open outcomes are recorded under RM-03. No queue-guard source was modified.

Independent review remediation

Final pre-commit Codex code review found three blockers: a tautological deployment drift control, independently observed rather than combined compatibility cases, and unauthorized edits to orchestrator-owned TASKS.md.
Deployment identity now uses one shared file comparator for both live equality and a temporary drifted deployed copy; a test makes that comparator inert and proves the meta-control fails.
Compatibility scenarios now merge referenced fixtures/environments into one isolated construction and execute an exact scenario invocation; a test proves two independently valid fixtures coexist in the combined run.
TASKS.md changes were reverted. docs/remediation/GATE-CLAIMS.md binds source headings and anchored text without editing orchestrator tracking.
Codex security review found the Bubblewrap replay shared the runner PID namespace. Replay now unshares PID, IPC, and UTS namespaces, and an abuse-case test proves a sibling runner PID is invisible.
Second review found empty reason diagnostics, final-symlink fixture writes, and lifecycle-script mutation of authoritative history files. Must-fail cases now require a reason pattern; writes use no-follow semantics; and replay snapshots every archived file before install and rejects any changed, deleted, or type/mode-shifted source before executing the verifier. Dedicated negative tests cover all three.
Third code review found ambiguous duplicate provider steps and order-sensitive JSON outcome comparison. Provider evidence now requires exactly one gate-verify step in the authoritative rerun, and structural equality normalizes object keys. Both regressions have RED-first tests. Third security review reported no findings.

Documentation checklist

PRD, developer guide, admin guide, governing claim index, sitemap, plan, and scratchpad updated.
User/API documentation not applicable: no user workflow or API changed.
Independent review documentation check pending rev-974.
Canonical documentation remains in-repository; no external publication requested.

Risks/blockers

Current queue guard intentionally has required-versus-actual deltas owned by RM-03.
Provider CI cannot report the currently executing pipeline as terminal success; current-commit evidence must be labeled pending and becomes historical evidence only after provider completion.
CI containers may not expose the operator-home deployed queue guard. In that layer the verifier checks the pinned observed digest and reports live identity unavailable under RM-04; it does not infer live equality.

6.5 KiB Raw Blame History