From 1de57a6f03abe0e30e88e3074815f9acf220b8a3 Mon Sep 17 00:00:00 2001 From: homelab-runtime-publisher Date: Mon, 28 Sep 2026 17:24:37 +0000 Subject: [PATCH] runtime: publish SUPPORT-260928-BEGET-DPAPI-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1 --- ...-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1.json | 38 +++++++++++++++ ...I-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1.txt | 44 +++++++++++++++++ runtime/latest.json | 26 +++++----- runtime/latest.txt | 47 ++++++++----------- 4 files changed, 115 insertions(+), 40 deletions(-) create mode 100644 runtime/history/SUPPORT-260928-BEGET-DPAPI-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1.json create mode 100644 runtime/history/SUPPORT-260928-BEGET-DPAPI-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1.txt diff --git a/runtime/history/SUPPORT-260928-BEGET-DPAPI-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1.json b/runtime/history/SUPPORT-260928-BEGET-DPAPI-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1.json new file mode 100644 index 00000000..de5d0509 --- /dev/null +++ b/runtime/history/SUPPORT-260928-BEGET-DPAPI-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-260928-BEGET-DPAPI-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "change", + "component": "beget-dpapi-cache-explicit-sid-acl-repair", + "started_at_utc": "2026-09-28T17:24:36Z", + "finished_at_utc": "2026-09-28T17:24:36Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "be341cb36e5209b3beabb0e9855256c52ead023a19eaebd38a4f71ccc570ca7f", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": true, + "result_contract_valid": true, + "result_contract_status": "OK", + "result_contract_error": null, + "command_rc": 0, + "changes_made": true, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "MUTATED", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "08969693dc96b76d2350a1a0db7b65ceef9eda1791eb6270054f499aeb0d7250", + "sanitized_output_sha256": "08969693dc96b76d2350a1a0db7b65ceef9eda1791eb6270054f499aeb0d7250", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "BEGET_DPAPI_CACHE_EXPLICIT_SID_ACL_REPAIR=V1\nMODE=change-local-acl\nMUTATION_BOUNDARY=ONLY_LOCAL_FILE_ACL_%APPDATA%/Workers2/Secrets/beget-aleisa.dpapi;NO_CREDENTIAL_CONTENT_WRITE;NO_BEGET_API_CALL;NO_BEGET_WRITE;NO_DB_WRITE;NO_DNS_WRITE\nACL_REPAIR_RC=1\nDECISION=BEGET_DPAPI_CACHE_EXPLICIT_CURRENT_SID_GRANT_REPAIRED\nNEXT_GATE=READ_ONLY_RECONCILE_BEGET_TARGET_DB_DRIFT_USING_CACHED_CREDENTIAL\nTASK_RESULT=PASS_BEGET_DPAPI_CACHE_EXPLICIT_SID_ACL_REPAIR\nCHANGES_MADE=true\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=LOCAL_CACHE_ACL_CURRENT_SID_GRANT_ADDED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-BEGET-DPAPI-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1\",\"status\":\"OK\",\"changes_made\":true,\"rollback_started\":false,\"rollback_restored\":null}\n" +} diff --git a/runtime/history/SUPPORT-260928-BEGET-DPAPI-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1.txt b/runtime/history/SUPPORT-260928-BEGET-DPAPI-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1.txt new file mode 100644 index 00000000..aa9b62c6 --- /dev/null +++ b/runtime/history/SUPPORT-260928-BEGET-DPAPI-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1.txt @@ -0,0 +1,44 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-260928-BEGET-DPAPI-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1 +STATUS=OK +RC=0 +HOST=pve01 +MODE=change +COMPONENT=beget-dpapi-cache-explicit-sid-acl-repair +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=be341cb36e5209b3beabb0e9855256c52ead023a19eaebd38a4f71ccc570ca7f +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=true +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=OK +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=true +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=MUTATED +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=08969693dc96b76d2350a1a0db7b65ceef9eda1791eb6270054f499aeb0d7250 +SANITIZED_OUTPUT_SHA256=08969693dc96b76d2350a1a0db7b65ceef9eda1791eb6270054f499aeb0d7250 +OUTPUT_BEGIN +BEGET_DPAPI_CACHE_EXPLICIT_SID_ACL_REPAIR=V1 +MODE=change-local-acl +MUTATION_BOUNDARY=ONLY_LOCAL_FILE_ACL_%APPDATA%/Workers2/Secrets/beget-aleisa.dpapi;NO_CREDENTIAL_CONTENT_WRITE;NO_BEGET_API_CALL;NO_BEGET_WRITE;NO_DB_WRITE;NO_DNS_WRITE +ACL_REPAIR_RC=1 +DECISION=BEGET_DPAPI_CACHE_EXPLICIT_CURRENT_SID_GRANT_REPAIRED +NEXT_GATE=READ_ONLY_RECONCILE_BEGET_TARGET_DB_DRIFT_USING_CACHED_CREDENTIAL +TASK_RESULT=PASS_BEGET_DPAPI_CACHE_EXPLICIT_SID_ACL_REPAIR +CHANGES_MADE=true +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=LOCAL_CACHE_ACL_CURRENT_SID_GRANT_ADDED +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-BEGET-DPAPI-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1","status":"OK","changes_made":true,"rollback_started":false,"rollback_restored":null} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 928dcc4d..de5d0509 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,38 +1,38 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SUPPORT-260928-BEGET-DPAPI-CACHE-ACL-EXCEPTION-RCA-9329R1", + "command_id": "SUPPORT-260928-BEGET-DPAPI-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1", "status": "OK", "rc": 0, "host": "pve01", - "mode": "read-only", - "component": "beget-dpapi-cache-acl-exception-rca", - "started_at_utc": "2026-09-28T17:22:05Z", - "finished_at_utc": "2026-09-28T17:22:05Z", + "mode": "change", + "component": "beget-dpapi-cache-explicit-sid-acl-repair", + "started_at_utc": "2026-09-28T17:24:36Z", + "finished_at_utc": "2026-09-28T17:24:36Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "1405fbaed3989e666fb52bbf72cc0cede610aeb27b894a3680488e441c6c9a61", + "command_sha256": "be341cb36e5209b3beabb0e9855256c52ead023a19eaebd38a4f71ccc570ca7f", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, - "change_declared": false, + "change_declared": true, "result_contract_valid": true, - "result_contract_status": null, + "result_contract_status": "OK", "result_contract_error": null, "command_rc": 0, - "changes_made": false, + "changes_made": true, "rollback_started": false, "rollback_restored": null, - "mutation_outcome": "NO_MUTATION", + "mutation_outcome": "MUTATED", "sanitized": true, "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "923b558aacb8e55247b34692e83bf7bf8c9a1c9069424b3cbc47a5ebbf4c2348", - "sanitized_output_sha256": "923b558aacb8e55247b34692e83bf7bf8c9a1c9069424b3cbc47a5ebbf4c2348", + "raw_evidence_sha256": "08969693dc96b76d2350a1a0db7b65ceef9eda1791eb6270054f499aeb0d7250", + "sanitized_output_sha256": "08969693dc96b76d2350a1a0db7b65ceef9eda1791eb6270054f499aeb0d7250", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "BEGET_DPAPI_CACHE_ACL_EXCEPTION_RCA=V1\nMODE=read-only\nMUTATION_BOUNDARY=NONE;LOCAL_DPAPI_CACHE_METADATA_READ_ONLY;LOCAL_9325_BOOTSTRAP_READ_ONLY;NO_CREDENTIAL_WRITE;NO_BEGET_API_CALL;NO_BEGET_WRITE;NO_DB_WRITE;NO_DNS_WRITE\nACL_EXCEPTION_RCA_RC=30\nCACHE_PRESENT=true\nCACHE_CONTENT_READ_PASS=false\nPARENT_ACL_READ_PASS=true\nBOOTSTRAP_9325_SCRIPT_PRESENT=true\nBOOTSTRAP_9325_SHA_MATCH=true\nBOOTSTRAP_9325_INHERITANCE_REMOVE=true\nBOOTSTRAP_9325_EXPLICIT_GRANT=false\nDECISION=BEGET_DPAPI_CACHE_ACL_SELF_LOCKOUT_FROM_9325_BOOTSTRAP_CONFIRMED\nNEXT_GATE=REPAIR_BEGET_DPAPI_CACHE_LOCAL_ACL_WITH_EXPLICIT_CURRENT_SID_GRANT\nTASK_RESULT=PASS_BEGET_DPAPI_CACHE_ACL_EXCEPTION_RCA\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NONE_READ_ONLY\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-BEGET-DPAPI-CACHE-ACL-EXCEPTION-RCA-9329R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" + "output": "BEGET_DPAPI_CACHE_EXPLICIT_SID_ACL_REPAIR=V1\nMODE=change-local-acl\nMUTATION_BOUNDARY=ONLY_LOCAL_FILE_ACL_%APPDATA%/Workers2/Secrets/beget-aleisa.dpapi;NO_CREDENTIAL_CONTENT_WRITE;NO_BEGET_API_CALL;NO_BEGET_WRITE;NO_DB_WRITE;NO_DNS_WRITE\nACL_REPAIR_RC=1\nDECISION=BEGET_DPAPI_CACHE_EXPLICIT_CURRENT_SID_GRANT_REPAIRED\nNEXT_GATE=READ_ONLY_RECONCILE_BEGET_TARGET_DB_DRIFT_USING_CACHED_CREDENTIAL\nTASK_RESULT=PASS_BEGET_DPAPI_CACHE_EXPLICIT_SID_ACL_REPAIR\nCHANGES_MADE=true\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=LOCAL_CACHE_ACL_CURRENT_SID_GRANT_ADDED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-BEGET-DPAPI-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1\",\"status\":\"OK\",\"changes_made\":true,\"rollback_started\":false,\"rollback_restored\":null}\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index cdcb6d7e..aa9b62c6 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,51 +1,44 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=SUPPORT-260928-BEGET-DPAPI-CACHE-ACL-EXCEPTION-RCA-9329R1 +COMMAND_ID=SUPPORT-260928-BEGET-DPAPI-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1 STATUS=OK RC=0 HOST=pve01 -MODE=read-only -COMPONENT=beget-dpapi-cache-acl-exception-rca +MODE=change +COMPONENT=beget-dpapi-cache-explicit-sid-acl-repair REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=1405fbaed3989e666fb52bbf72cc0cede610aeb27b894a3680488e441c6c9a61 +COMMAND_SHA256=be341cb36e5209b3beabb0e9855256c52ead023a19eaebd38a4f71ccc570ca7f DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true -CHANGE_DECLARED=false +CHANGE_DECLARED=true RESULT_CONTRACT_VALID=true -RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_STATUS=OK RESULT_CONTRACT_ERROR=NONE COMMAND_RC=0 -CHANGES_MADE=false +CHANGES_MADE=true ROLLBACK_STARTED=false ROLLBACK_RESTORED=null -MUTATION_OUTCOME=NO_MUTATION +MUTATION_OUTCOME=MUTATED SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=923b558aacb8e55247b34692e83bf7bf8c9a1c9069424b3cbc47a5ebbf4c2348 -SANITIZED_OUTPUT_SHA256=923b558aacb8e55247b34692e83bf7bf8c9a1c9069424b3cbc47a5ebbf4c2348 +RAW_EVIDENCE_SHA256=08969693dc96b76d2350a1a0db7b65ceef9eda1791eb6270054f499aeb0d7250 +SANITIZED_OUTPUT_SHA256=08969693dc96b76d2350a1a0db7b65ceef9eda1791eb6270054f499aeb0d7250 OUTPUT_BEGIN -BEGET_DPAPI_CACHE_ACL_EXCEPTION_RCA=V1 -MODE=read-only -MUTATION_BOUNDARY=NONE;LOCAL_DPAPI_CACHE_METADATA_READ_ONLY;LOCAL_9325_BOOTSTRAP_READ_ONLY;NO_CREDENTIAL_WRITE;NO_BEGET_API_CALL;NO_BEGET_WRITE;NO_DB_WRITE;NO_DNS_WRITE -ACL_EXCEPTION_RCA_RC=30 -CACHE_PRESENT=true -CACHE_CONTENT_READ_PASS=false -PARENT_ACL_READ_PASS=true -BOOTSTRAP_9325_SCRIPT_PRESENT=true -BOOTSTRAP_9325_SHA_MATCH=true -BOOTSTRAP_9325_INHERITANCE_REMOVE=true -BOOTSTRAP_9325_EXPLICIT_GRANT=false -DECISION=BEGET_DPAPI_CACHE_ACL_SELF_LOCKOUT_FROM_9325_BOOTSTRAP_CONFIRMED -NEXT_GATE=REPAIR_BEGET_DPAPI_CACHE_LOCAL_ACL_WITH_EXPLICIT_CURRENT_SID_GRANT -TASK_RESULT=PASS_BEGET_DPAPI_CACHE_ACL_EXCEPTION_RCA -CHANGES_MADE=false +BEGET_DPAPI_CACHE_EXPLICIT_SID_ACL_REPAIR=V1 +MODE=change-local-acl +MUTATION_BOUNDARY=ONLY_LOCAL_FILE_ACL_%APPDATA%/Workers2/Secrets/beget-aleisa.dpapi;NO_CREDENTIAL_CONTENT_WRITE;NO_BEGET_API_CALL;NO_BEGET_WRITE;NO_DB_WRITE;NO_DNS_WRITE +ACL_REPAIR_RC=1 +DECISION=BEGET_DPAPI_CACHE_EXPLICIT_CURRENT_SID_GRANT_REPAIRED +NEXT_GATE=READ_ONLY_RECONCILE_BEGET_TARGET_DB_DRIFT_USING_CACHED_CREDENTIAL +TASK_RESULT=PASS_BEGET_DPAPI_CACHE_EXPLICIT_SID_ACL_REPAIR +CHANGES_MADE=true ROLLBACK_STARTED=false ROLLBACK_RESTORED=null -MUTATION_OUTCOME=NONE_READ_ONLY -HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-BEGET-DPAPI-CACHE-ACL-EXCEPTION-RCA-9329R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} +MUTATION_OUTCOME=LOCAL_CACHE_ACL_CURRENT_SID_GRANT_ADDED +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-BEGET-DPAPI-CACHE-EXPLICIT-SID-ACL-REPAIR-9330R1","status":"OK","changes_made":true,"rollback_started":false,"rollback_restored":null} OUTPUT_END CHAT_OUTPUT_END