jason.woltjeandClaude Opus 5.5
d6ea568312
Ledger skips T3 reasoning summaries and reads issue pages with a
10-page ceiling. Candidate manifest, patch against cc48b124f, mutants
(both killed) and a passing full gate.
Co-Authored-By: Claude Opus 5.5 <[email protected]>
167 lines
14 KiB
Plaintext
167 lines
14 KiB
Plaintext
✔ F1: an ordinary commit after update-ref is refused until step 8; then it commits and the queue stays at C (1215.914812ms)
|
||
✔ F1: a plain `commit -e` whose guard ran before update-ref fails at its own HEAD update (952.995895ms)
|
||
ℹ git commit -e: index.lock free during the editor
|
||
✔ F1: a `commit -e -- path` whose guard ran before update-ref fails at its own HEAD update (976.49178ms)
|
||
ℹ git commit -e -- src.txt: index.lock held during the editor
|
||
✔ F1: step 8 with index.lock held exits 3, and ordinary commits stay refused until the printed command runs (1031.622263ms)
|
||
✔ F1: HEAD moving after the step-7 guard check and before update-ref: refused, nothing published (1020.004447ms)
|
||
✔ F1: H is recorded before the canary, so HEAD moving during the step-1 canary is refused at step 7 (991.461101ms)
|
||
✔ F1: a queue commit landing after H is recorded: step 1 says HEAD moved, not the guard (1304.47048ms)
|
||
✔ F1: a queue commit landing between the HEAD check and the canary: the failed clean run is reported as HEAD moved (920.305828ms)
|
||
✔ F1: a shared-index change during the procedure is not committed (1006.02997ms)
|
||
✔ F1: a queue path staged after update-ref: step 8 stops and touches nothing (1090.487716ms)
|
||
✔ F1: a missing or a different hook refuses (704.526514ms)
|
||
✔ F1: same bytes without the exec bit, a symlinked hook, and core.hooksPath in the local or global scope each refuse before update-ref (1147.866968ms)
|
||
✔ F1: the canary refuses a hook that git would not run (637.28245ms)
|
||
✔ F1: the guard deactivated after step 1 is refused at the step-7 recheck (906.464489ms)
|
||
✔ bootstrap: implementation-only HEAD, the guard, genesis, the --genesis commit, then an extending commit (903.772772ms)
|
||
✔ bootstrap: --genesis with a base present, no base without --genesis, an op before the first commit, a changed map, another branch (1106.602556ms)
|
||
✔ bootstrap: the archived tests and validator run outside any repository (1085.40739ms)
|
||
✔ general: an unrelated staged file stays staged, and the committed blobs are the snapshot bytes (862.881086ms)
|
||
✔ general: a queue write after the snapshot is not committed (1312.07093ms)
|
||
✔ general: a snapshot whose log does not extend the base refuses (1019.305396ms)
|
||
✔ general: install-hook privilege, repair of a same-bytes hook, and its refusals (150.607514ms)
|
||
✔ general: environment overrides, a linked worktree and usage (621.548028ms)
|
||
✔ general: a queue path staged before the run refuses at step 1 (625.223004ms)
|
||
✔ general: HEAD's queue tests failing in the archive refuse (893.744537ms)
|
||
✔ genesis document serializes deterministically and replays (4.060102ms)
|
||
✔ a hand edit that stays valid JSON fails replay; a formatting-only edit fails re-serialization (3.034827ms)
|
||
✔ a tampered result, receipt or viewSha fails replay (2.790229ms)
|
||
✔ op ids: 8 to 72 characters for callers, 80 in the log for .outcome entries (0.187728ms)
|
||
✔ add: defaults for an ordinary seat, privileged extras, refusals (4.447611ms)
|
||
✔ matrix: queued→briefed privileged; briefed→in-progress owner with after satisfied (10.152072ms)
|
||
✔ matrix: release, review round, changes requested and waiting-on-jason (17.590316ms)
|
||
✔ matrix J5: in-review→done by the gate owner with evidence naming the current round (8.244523ms)
|
||
✔ review issue, lead decision 23: none refuses, one is used, several need --issue, later rounds keep it (19.229485ms)
|
||
✔ the row schema refuses a round with a null issue, and the A1 review shape (P2) (2.271595ms)
|
||
✔ matrix R1: every state × target × actor class matches 8.7, gate owner jason or not, required or not (1327.655886ms)
|
||
✔ matrix: blocked keeps the claim and returns only to previousState (3.731079ms)
|
||
✔ matrix J4: parking is Jason's, refused while required; unpark returns to queued (2.410993ms)
|
||
✔ field edits: who may change what (4.635129ms)
|
||
✔ set issues keeps a logged narrowing of closes (N10) (2.898213ms)
|
||
✔ text the table shows refuses \ and <, everywhere it enters (N8) (1.677693ms)
|
||
✔ every accepted text renders to nine cells on every row (N8) (20.349297ms)
|
||
✔ genesis: the map refuses an owner among its row's reviewers; replay doesn't (2026-10-04) (0.463273ms)
|
||
✔ times and dates must be calendar values, not just the shape (2026-10-04) (1.41702ms)
|
||
✔ replay holds every op id to the caller's rule (N11) (4.131921ms)
|
||
✔ note: owner, listed reviewer or privileged; empty clears (0.975737ms)
|
||
✔ assign moves the claim with the owner; done clears it (2.121496ms)
|
||
✔ render is byte-stable and escapes pipes (0.42715ms)
|
||
✔ view classification: current, genuine stale, edited stale marker, changed current body, markers (0.524868ms)
|
||
✔ next: resume, then review, then start, then wait, then nothing; lowest id first (15.749023ms)
|
||
✔ canonical args make a retry's identity independent of list order (0.299303ms)
|
||
✔ manifests, headings and blob ids (0.396434ms)
|
||
✔ the migration map: one queue-map block, exact keys (0.576501ms)
|
||
✔ every call but `queue` reaches the seat CLI exactly as before A2 (530.418932ms)
|
||
✔ no argument reaches the app entry in packages/cli, and only that call (55.840434ms)
|
||
✔ `queue` reaches the queue CLI with the rest of the arguments (190.004779ms)
|
||
✔ the pre-A2 fixture is the script A2 changed (0.328187ms)
|
||
✔ an old privileged add with no gate owner still replays through loadDoc, and gets jason (8.256688ms)
|
||
✔ a non-privileged add gets jason through the replay path and can't name a gate owner (2.717201ms)
|
||
✔ the CLI refuses a privileged add without --gate-owner, for jason and sage, and writes nothing (295.304689ms)
|
||
✔ the CLI add with --gate-owner carries the named owner and records a log entry (262.037236ms)
|
||
✔ the CLI add by a non-privileged seat gets jason and can't name a gate owner (297.686103ms)
|
||
✔ a retried sage add recorded with no gate owner answers (already recorded at rev N) and writes nothing (263.516671ms)
|
||
✔ acquire publishes the record by link; release removes only its own lock (14.74055ms)
|
||
✔ a kill between the temp write and the link leaves no lock (50.679345ms)
|
||
✔ a short or failed temp write refuses and leaves no lock and no temp (9.234966ms)
|
||
✔ a link error other than EEXIST refuses (5.946692ms)
|
||
✔ an error after the link releases the lock: unreadable gate, failing temp stat (24.140513ms)
|
||
✔ a release that fails on a gate path is reported, never a stack trace (P1) (37.565124ms)
|
||
✔ a paused holder: another writer waits 10 s, then refuses naming it live (10094.153082ms)
|
||
✔ two concurrent unlockers: the second refuses on the gate (40.95355ms)
|
||
✔ a writer publishing during an unlock, lock first: unlock sees it live and refuses (22.107707ms)
|
||
✔ a writer publishing during an unlock, gate first: the writer releases and refuses (18.819762ms)
|
||
✔ a gate swapped while held is left in place and reported, on success and on refusal (N1) (19.571498ms)
|
||
✔ a reused pid within one boot is mismatch; unlock removes the lock and never signals the process (12.614873ms)
|
||
✔ the same pid and start on a different boot is mismatch (0.426472ms)
|
||
✔ a foreign host is unknown whatever the local pid says; unlock refuses (63.135383ms)
|
||
✔ unreadable /proc: classification is unknown and acquire refuses (0.682255ms)
|
||
✔ invalid records: empty, unparsable, wrong keys, bad start or boot (0.192928ms)
|
||
✔ a stale gate blocks writers; --check-gate says mismatch for a reused pid (20.141774ms)
|
||
✔ a delayed release by a dead owner, after unlock and a new owner: the inode check keeps the new lock (16.984167ms)
|
||
✔ release checks the inode too: a byte-identical lock file with a new inode is left in place (5.359768ms)
|
||
✔ unlock refuses a live, unknown or invalid lock, and does nothing without one (30.767494ms)
|
||
✔ the migration map validates and renders the golden genesis table (5.218552ms)
|
||
✔ the marked QUEUE.md holds every row and parked item between its markers (1.952308ms)
|
||
✔ map-check reports each kind of drift (5.689196ms)
|
||
✔ a request posts once as the requester; a retry sends nothing (798.508631ms)
|
||
✔ each transport answer maps to posted, failed or uncertain (8.9 step 3) (4360.43698ms)
|
||
✔ the pre-send checks: GET user must name the requester, under the deadline (1581.69014ms)
|
||
✔ the lead's request refuses a token for login sage (931.874419ms)
|
||
✔ the credential file: the seat's own, 0600, no symlink, never the shared default (765.025726ms)
|
||
✔ an unresolved request blocks a new request, a new round, waiting-on-jason and done (2260.507933ms)
|
||
✔ a same-op retry after a kill sends nothing, even with a stale view (2941.313275ms)
|
||
✔ a held lock at the outcome exits 3 and names what the transport said (670.875975ms)
|
||
✔ late outcomes: after an abandon, and after a resolve with the same or another id (2557.550683ms)
|
||
✔ resolve checks the comment: issue, markers, round, candidate and author (1650.666897ms)
|
||
✔ the lead resolves a seat's request: the comment's author is the requester, fetched with the lead's token (682.959484ms)
|
||
✔ validateRow checks a request round's shape, which every replayed entry must keep (522.146406ms)
|
||
✔ request, changes, a new candidate, approval: every round pinned; no review files (1702.650936ms)
|
||
✔ a row with no reviewers opens a round that posts nothing (1202.969847ms)
|
||
✔ verify-commit: a prospective tree must hold exactly the candidate's paths (1340.032054ms)
|
||
✔ semantics: v1 entries replay as before; review entries need v2 (500.629545ms)
|
||
✔ set reviewers refuses the row's owner (2026-09-28) (366.295838ms)
|
||
✔ the owner records no verdict, even as a listed reviewer (518.169034ms)
|
||
✔ a request comment over the length limit is not sent (564.192106ms)
|
||
✔ a late POST on a closed row leaves a conflict nothing can resolve, and resolve asks nothing (660.210934ms)
|
||
✔ a Jason-gated row reaches waiting-on-jason only on every reviewer's approval (2609.597768ms)
|
||
✔ genesis: refusals before anything is written (425.803972ms)
|
||
✔ genesis: the map must be committed, well formed, with committed briefs and seats (582.819017ms)
|
||
✔ genesis: markers, a stray witness, once only; a retry returns the receipt (513.336668ms)
|
||
✔ genesis: a file holding genesis alone with no witness is confirmed by sync or a retry (383.099658ms)
|
||
✔ canonical checks: worktree, second clone, detached HEAD, wrong branch, GIT_DIR, foreign code; a symlink works (621.981519ms)
|
||
✔ --by that differs from MOSAIC_AGENT_NAME warns on stderr and logs nothing more (N12) (827.699107ms)
|
||
✔ op ids: missing, too long, reserved; a retry answers; another payload refuses (707.523328ms)
|
||
✔ a retried add returns the id it first allocated, after reassignment and after done (959.645922ms)
|
||
✔ Rocko's S4 schedule: a lost result, another writer, then the retry opens no second round (684.902866ms)
|
||
✔ the review issue and the evidence round through the CLI (lead decision 23, 8.7) (1202.705916ms)
|
||
✔ claims and add defaults through the CLI; candidates are manifests or reachable commits (772.549347ms)
|
||
✔ add, set reviewers and assign refuse the row's owner as a reviewer (492.957148ms)
|
||
✔ the working-brief check: a changed working copy refuses the start and flags next (645.141711ms)
|
||
✔ next: resume first, then nothing for an idle seat; needs a seat (293.747138ms)
|
||
✔ view stale: new ops and verify refuse naming the unshown op; retries answer; reads warn; render fixes (642.661855ms)
|
||
✔ view unknown: a hand edit, an old marker over an edited body, missing or duplicate markers (1188.579763ms)
|
||
✔ a hand edit to queue.json refuses every verb, reads included (580.599723ms)
|
||
✔ verify and render --check leave bytes and mtimes unchanged (409.60657ms)
|
||
✔ render is byte-stable across runs and repositories (293.299996ms)
|
||
✔ snapshot and verify --snapshot (725.775455ms)
|
||
✔ usage errors exit 4 (510.812222ms)
|
||
✔ a short write, ENOSPC or a file fsync failure: nothing visible, temp removed (298.585091ms)
|
||
✔ a rename failure: nothing visible, temp removed (204.28157ms)
|
||
✔ a directory fsync failure: uncertain, exit 3, no receipt; the tail refuses new ops; a retry confirms (224.57637ms)
|
||
✔ a directory fsync failure, then sync names the op (381.66251ms)
|
||
✔ a witness write failure: uncertain, durable, exit 3; the view is untouched (211.528336ms)
|
||
✔ the .git fsync after the witness rename fails: uncertain, exit 3, the witness says so (195.772366ms)
|
||
✔ confirming a tail fsyncs queue.json and docs/plans before the witness; either failure changes nothing (221.629408ms)
|
||
✔ the docs/plans fsync after the view rename fails: the op stands, the view is written, a warning says so (175.421407ms)
|
||
✔ a lock swapped while held is left in place and reported, on a receipt and on a refusal (197.419038ms)
|
||
✔ a lock that cannot be released after an op is reported, on a receipt and on a refusal (197.417895ms)
|
||
✔ unlock prints a swapped gate's warning on stderr, the result on stdout (142.360309ms)
|
||
✔ a view write that fails keeps the op and reports a stale view (221.269186ms)
|
||
✔ SIGKILL before the rename: nothing recorded; the retry removes the leftover temp (670.996291ms)
|
||
✔ SIGKILL after the rename, before the witness: the tail refuses new ops and sync names the op (696.692576ms)
|
||
✔ SIGKILL after the witness, before the view: the stale refusal names the op (644.425449ms)
|
||
✔ SIGKILL after the view, before the receipt: the retry returns the receipt (688.781395ms)
|
||
✔ git checkout between steps 1 and 7: step 7 refuses and nothing is written (246.841125ms)
|
||
✔ git stash restoring an older valid pair: history lost; accept-history needs privilege, a reason and --yes (1023.611417ms)
|
||
✔ a deleted witness: refused after the locked recheck; accept-history records it absent (334.084552ms)
|
||
✔ a header edit during a write: the op stands, the view write is skipped with a warning (218.688505ms)
|
||
✔ a reader paused between the witness and the file while a writer finishes: no lost-history report (210.73913ms)
|
||
✔ rows: every row as show prints it, in list order; writes nothing; same notes and refusals as list (247.458244ms)
|
||
✔ file-then-witness order forced by a hook: the locked recheck prevents a false report (191.40775ms)
|
||
✔ a writer paused before and after the witness rename: readers see a tail, then a match (188.245392ms)
|
||
✔ a true rollback is reported only after the locked recheck; a held lock names its holder instead (573.276625ms)
|
||
✔ an accept-history in progress: an unlocked reader waits on the lock and never reports lost history (570.400421ms)
|
||
✔ the platform check refuses other filesystems (145.715453ms)
|
||
✔ tmpfs passes only a test layer that allows it (N5) (229.794041ms)
|
||
✔ unlock keeps a multi-line lock record on stdout (P3) (199.603237ms)
|
||
ℹ tests 156
|
||
ℹ suites 0
|
||
ℹ pass 156
|
||
ℹ fail 0
|
||
ℹ cancelled 0
|
||
ℹ skipped 0
|
||
ℹ todo 0
|
||
ℹ duration_ms 29276.755618
|