From 413c7b08b6edb1fc59955cd328c6c4f6d903fd9a Mon Sep 17 00:00:00 2001 From: homelab-runtime-publisher Date: Tue, 8 Sep 2026 15:09:17 +0000 Subject: [PATCH] runtime: publish SIGNALBOT-260908-ACT1-PREMUTATION-CONTRACT-RCA-043ACT1RCA2 --- ...-PREMUTATION-CONTRACT-RCA-043ACT1RCA2.json | 38 +++++++++++++ ...1-PREMUTATION-CONTRACT-RCA-043ACT1RCA2.txt | 46 +++++++++++++++ runtime/latest.json | 22 ++++---- runtime/latest.txt | 56 +++++++------------ 4 files changed, 115 insertions(+), 47 deletions(-) create mode 100644 runtime/history/SIGNALBOT-260908-ACT1-PREMUTATION-CONTRACT-RCA-043ACT1RCA2.json create mode 100644 runtime/history/SIGNALBOT-260908-ACT1-PREMUTATION-CONTRACT-RCA-043ACT1RCA2.txt diff --git a/runtime/history/SIGNALBOT-260908-ACT1-PREMUTATION-CONTRACT-RCA-043ACT1RCA2.json b/runtime/history/SIGNALBOT-260908-ACT1-PREMUTATION-CONTRACT-RCA-043ACT1RCA2.json new file mode 100644 index 00000000..57edad86 --- /dev/null +++ b/runtime/history/SIGNALBOT-260908-ACT1-PREMUTATION-CONTRACT-RCA-043ACT1RCA2.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SIGNALBOT-260908-ACT1-PREMUTATION-CONTRACT-RCA-043ACT1RCA2", + "status": "FAIL", + "rc": 3, + "host": "pve01", + "mode": "read-only", + "component": "signalbot-cr0116-act1-premutation-contract-rca", + "started_at_utc": "2026-09-08T15:09:14Z", + "finished_at_utc": "2026-09-08T15:09:17Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "c8e53f317faa55f8790c104db79071fc1dc108d6c8bd990cacab871d7e0cd4f9", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 3, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "df6fa0c417941e38c8ea5c150eaa9efdfe990107eb0e3914ece24252af071a0f", + "sanitized_output_sha256": "df6fa0c417941e38c8ea5c150eaa9efdfe990107eb0e3914ece24252af071a0f", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "ERROR_REGISTER_CHECK=OK\nREFERENCE_CHECK=OK\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nSB043AR2_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nSB043AR2_VM170_CLUSTER={\"name\":\"core-apps\",\"node\":\"pve01\",\"status\":\"running\",\"type\":\"qemu\"}\nSB043AR2_QGA_INPUT_BYTES=5390\nSB043AR2_PRESTATE={\"act1_epoch_refs\":[],\"act1_result\":{\"command_id\":\"SIGNALBOT-260908-SEALED-ACTIVATION-043ACT1\",\"reason\":\"RuntimeError:PROJECT_RUNTIME_CONTRACT_UNAVAILABLE\",\"status\":\"PREMUTATION_HOLD\",\"ts_utc\":\"2026-09-08T15:03:52.521761+00:00\"},\"env\":{\"APP_IMAGE\":\"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70\",\"CODE_IDENTITY\":\"e32760c69a4311728db9066ee8bf2bf66b1e5a70\",\"COLLECTION_START_AT\":\"2026-09-07T00:00:00+00:00\",\"EXPERIMENT_ID\":\"ec477ea41ecbd5cfdef5afc259595aab20674a7d933f41a389329ff05098b338\",\"RUNTIME_MANIFEST_ID\":\"58d3b59200bdc0eb8d448612679d667b194263586cb3198dfc08597935053a1a\"},\"services\":[{\"image\":\"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70\",\"image_id\":\"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736\",\"restart_count\":0,\"running\":true,\"service\":\"worker\",\"started_at\":\"2026-09-06T18:48:20.586788319Z\"},{\"image\":\"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70\",\"image_id\":\"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736\",\"restart_count\":0,\"running\":true,\"service\":\"relay\",\"started_at\":\"2026-09-06T18:48:20.603414848Z\"},{\"image\":\"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70\",\"image_id\":\"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736\",\"restart_count\":19,\"running\":true,\"service\":\"collector\",\"started_at\":\"2026-09-08T13:42:51.284969517Z\"},{\"image\":\"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70\",\"image_id\":\"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736\",\"restart_count\":0,\"running\":true,\"service\":\"shadow\",\"started_at\":\"2026-09-06T18:48:20.768190553Z\"}]}\nSB043AR2_CONTRACT_OWNERS={\"RuntimeArtifactManifest\":[\"runtime_integrity.py\"],\"RuntimeDeploymentManifestV1\":[\"runtime_manifest.py\"],\"canonical_hash\":[\"canonical_hash.py\"]}\nSB043AR2_CONTRACT_SOURCE_DETAILS={\"canonical_hash.py\":{\"sha256\":\"531237f499b7f2b2c568f4f101f1b451ea9fcd08a4afaff79153ba38a06f2482\",\"symbols\":[{\"end_lineno\":44,\"kind\":\"FunctionDef\",\"lineno\":43,\"name\":\"canonical_hash\"}]},\"runtime_integrity.py\":{\"sha256\":\"99859b63e23d10fc051672965123f49d6e79d2ff767871c019ff7bdae2e2e39e\",\"symbols\":[{\"end_lineno\":559,\"kind\":\"ClassDef\",\"lineno\":536,\"name\":\"RuntimeArtifactManifest\"}]},\"runtime_manifest.py\":{\"sha256\":\"1064cfb74303fdc8e0bf50bae95b1e755556a5b1dfc28b2b062341becaba08f2\",\"symbols\":[{\"end_lineno\":105,\"kind\":\"ClassDef\",\"lineno\":37,\"name\":\"RuntimeDeploymentManifestV1\"}]}}\nSB043AR2_HOLDS=[\"CANONICAL_HASH_OWNER_NOT_EXACT\"]\nSB043AR2_DECISION=HOLD_ACT1_PREMUTATION_CONTRACT_RCA\nSB043AR2_MUTATION_SCOPE=NONE_READ_ONLY\nSB043AR2_GUEST_RC=3\nSB043AR2_GUEST_STDERR_PRESENT=false\n" +} diff --git a/runtime/history/SIGNALBOT-260908-ACT1-PREMUTATION-CONTRACT-RCA-043ACT1RCA2.txt b/runtime/history/SIGNALBOT-260908-ACT1-PREMUTATION-CONTRACT-RCA-043ACT1RCA2.txt new file mode 100644 index 00000000..08cb5b8b --- /dev/null +++ b/runtime/history/SIGNALBOT-260908-ACT1-PREMUTATION-CONTRACT-RCA-043ACT1RCA2.txt @@ -0,0 +1,46 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SIGNALBOT-260908-ACT1-PREMUTATION-CONTRACT-RCA-043ACT1RCA2 +STATUS=FAIL +RC=3 +HOST=pve01 +MODE=read-only +COMPONENT=signalbot-cr0116-act1-premutation-contract-rca +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=c8e53f317faa55f8790c104db79071fc1dc108d6c8bd990cacab871d7e0cd4f9 +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=3 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=df6fa0c417941e38c8ea5c150eaa9efdfe990107eb0e3914ece24252af071a0f +SANITIZED_OUTPUT_SHA256=df6fa0c417941e38c8ea5c150eaa9efdfe990107eb0e3914ece24252af071a0f +OUTPUT_BEGIN +ERROR_REGISTER_CHECK=OK +REFERENCE_CHECK=OK +AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED +SB043AR2_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d +SB043AR2_VM170_CLUSTER={"name":"core-apps","node":"pve01","status":"running","type":"qemu"} +SB043AR2_QGA_INPUT_BYTES=5390 +SB043AR2_PRESTATE={"act1_epoch_refs":[],"act1_result":{"command_id":"SIGNALBOT-260908-SEALED-ACTIVATION-043ACT1","reason":"RuntimeError:PROJECT_RUNTIME_CONTRACT_UNAVAILABLE","status":"PREMUTATION_HOLD","ts_utc":"2026-09-08T15:03:52.521761+00:00"},"env":{"APP_IMAGE":"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70","CODE_IDENTITY":"e32760c69a4311728db9066ee8bf2bf66b1e5a70","COLLECTION_START_AT":"2026-09-07T00:00:00+00:00","EXPERIMENT_ID":"ec477ea41ecbd5cfdef5afc259595aab20674a7d933f41a389329ff05098b338","RUNTIME_MANIFEST_ID":"58d3b59200bdc0eb8d448612679d667b194263586cb3198dfc08597935053a1a"},"services":[{"image":"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70","image_id":"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736","restart_count":0,"running":true,"service":"worker","started_at":"2026-09-06T18:48:20.586788319Z"},{"image":"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70","image_id":"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736","restart_count":0,"running":true,"service":"relay","started_at":"2026-09-06T18:48:20.603414848Z"},{"image":"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70","image_id":"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736","restart_count":19,"running":true,"service":"collector","started_at":"2026-09-08T13:42:51.284969517Z"},{"image":"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70","image_id":"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736","restart_count":0,"running":true,"service":"shadow","started_at":"2026-09-06T18:48:20.768190553Z"}]} +SB043AR2_CONTRACT_OWNERS={"RuntimeArtifactManifest":["runtime_integrity.py"],"RuntimeDeploymentManifestV1":["runtime_manifest.py"],"canonical_hash":["canonical_hash.py"]} +SB043AR2_CONTRACT_SOURCE_DETAILS={"canonical_hash.py":{"sha256":"531237f499b7f2b2c568f4f101f1b451ea9fcd08a4afaff79153ba38a06f2482","symbols":[{"end_lineno":44,"kind":"FunctionDef","lineno":43,"name":"canonical_hash"}]},"runtime_integrity.py":{"sha256":"99859b63e23d10fc051672965123f49d6e79d2ff767871c019ff7bdae2e2e39e","symbols":[{"end_lineno":559,"kind":"ClassDef","lineno":536,"name":"RuntimeArtifactManifest"}]},"runtime_manifest.py":{"sha256":"1064cfb74303fdc8e0bf50bae95b1e755556a5b1dfc28b2b062341becaba08f2","symbols":[{"end_lineno":105,"kind":"ClassDef","lineno":37,"name":"RuntimeDeploymentManifestV1"}]}} +SB043AR2_HOLDS=["CANONICAL_HASH_OWNER_NOT_EXACT"] +SB043AR2_DECISION=HOLD_ACT1_PREMUTATION_CONTRACT_RCA +SB043AR2_MUTATION_SCOPE=NONE_READ_ONLY +SB043AR2_GUEST_RC=3 +SB043AR2_GUEST_STDERR_PRESENT=false + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index ae4be9b0..57edad86 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,19 +1,19 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "NEWFI-260908-A-STAGINGEDGE-CLOUDFLARE-PROVENANCE23", - "status": "OK", - "rc": 0, + "command_id": "SIGNALBOT-260908-ACT1-PREMUTATION-CONTRACT-RCA-043ACT1RCA2", + "status": "FAIL", + "rc": 3, "host": "pve01", "mode": "read-only", - "component": "newfi-stagingedge-cloudflare-auth-provenance-readonly", - "started_at_utc": "2026-09-08T15:05:44Z", - "finished_at_utc": "2026-09-08T15:06:15Z", + "component": "signalbot-cr0116-act1-premutation-contract-rca", + "started_at_utc": "2026-09-08T15:09:14Z", + "finished_at_utc": "2026-09-08T15:09:17Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "a51ecb4fd3b97c5539bd96fdb5bba51d1c7a8b616d03ee970d755384afdc1bb1", + "command_sha256": "c8e53f317faa55f8790c104db79071fc1dc108d6c8bd990cacab871d7e0cd4f9", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, @@ -21,7 +21,7 @@ "result_contract_valid": true, "result_contract_status": null, "result_contract_error": null, - "command_rc": 0, + "command_rc": 3, "changes_made": false, "rollback_started": false, "rollback_restored": null, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "b2bf15e5aced8552d6ecd78eb23ead4e230b1a86f55088c05e2c663328315011", - "sanitized_output_sha256": "b2bf15e5aced8552d6ecd78eb23ead4e230b1a86f55088c05e2c663328315011", + "raw_evidence_sha256": "df6fa0c417941e38c8ea5c150eaa9efdfe990107eb0e3914ece24252af071a0f", + "sanitized_output_sha256": "df6fa0c417941e38c8ea5c150eaa9efdfe990107eb0e3914ece24252af071a0f", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "PROVENANCE23_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-CLOUDFLARE-PROVENANCE23\nMODE=read-only\nMUTATIONS_PERFORMED=NO\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nRUNNER_SHA_MATCH=true\nCANONICAL_LIVE_USERS=debian\nPOST_REBOOT_USER_CONFIRM=true\nTRUSTED_EDGEVM_MARKER=true\nPUBLIC_VPS_REJECT_MARKER=true\nCANONICAL_USER_PROOF=true\nNETBIRD_STATUS_JSON_RC=0\nNETBIRD_STATUS_DETAIL_RC=0\nEDGEVM_OVERLAY_IP_COUNT=1\nEDGEVM_HOSTKEY_MATCH=true\nEDGEVM_HOSTKEY_ALGS=ssh-ed25519\nOUTER_PROVENANCE23_GATE=true\nEDGEVM_SUDO_RC=0\nREMOTE_PROVENANCE_RC=0\nVALIDATED_CF_CANDIDATE_COUNT=2\nPROVENANCE_COMPLETE=true\nCF_PROVENANCE_JSON={\"euid\":0,\"validated_candidate_count\":2,\"provenance_complete\":true,\"candidates\":[{\"material_hash\":\"4d32cc81257fa0bed53d17cac37a2a7d3ce8f7031502ddc8fa4689c2af76efe4\",\"path_sha256\":\"c885a37d16a3df2c20dd65be8c3a8f6b339070b3ff9867f4c9c6a594deaa9f37\",\"basename\":\"credentials-38.before\",\"parent_basename\":\"cert38-narrow-migration-20260904T074428Z\",\"historical_exact\":true,\"auth_type\":\"api_token\",\"key_names\":[\"dns_cloudflare_api_token\"],\"uid\":0,\"gid\":0,\"mode\":\"0o600\",\"mtime_utc\":\"2026-08-28T13:34:33+00:00\",\"backup_name_signal\":true,\"temp_name_signal\":true,\"operational_reference_count\":0,\"operational_references\":[],\"runtime_env_match_count\":0,\"runtime_env_matches\":[],\"staging_record_count\":0,\"reference_type\":\"A\",\"reference_proxied\":false,\"reference_ttl\":1,\"reference_content_sha256\":\"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5\"},{\"material_hash\":\"d6799544acb945f64be43c89a0d877c964697dfda0f3a703a613498aa76bbb63\",\"path_sha256\":\"641c598a546799f0d1316aa993d57731741eee0da3d43d11055c0d8ceaedc6be\",\"basename\":\"gram1_cf_token\",\"parent_basename\":\"secure\",\"historical_exact\":false,\"auth_type\":\"raw_token\",\"key_names\":[\"RAW_TOKEN\"],\"uid\":0,\"gid\":0,\"mode\":\"0o600\",\"mtime_utc\":\"2026-07-01T17:12:23.200041+00:00\",\"backup_name_signal\":false,\"temp_name_signal\":false,\"operational_reference_count\":3,\"operational_references\":[{\"ref_file_sha256\":\"29f2edba2995afa11b26f66c7480f52a380c77148acbe0216124ff97ddaba284\",\"ref_basename\":\"edge-gram1-close-stage19.py\",\"line\":5,\"kind\":\"full_path\"},{\"ref_file_sha256\":\"29f2edba2995afa11b26f66c7480f52a380c77148acbe0216124ff97ddaba284\",\"ref_basename\":\"edge-gram1-close-stage19.py\",\"line\":74,\"kind\":\"full_path\"},{\"ref_file_sha256\":\"7dcaf6f5cd4361b99ebb7ab51a7fb416347886dbc405b550ff785e0346d8334e\",\"ref_basename\":\"gram1-cf-certbot-hook.py\",\"line\":4,\"kind\":\"full_path\"}],\"runtime_env_match_count\":0,\"runtime_env_matches\":[],\"staging_record_count\":0,\"reference_type\":\"A\",\"reference_proxied\":false,\"reference_ttl\":1,\"reference_content_sha256\":\"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5\"}],\"parent_contexts\":[{\"parent_sha256\":\"163a90108e606c1854b1d4d29a3b41738b1a0176034755e67cfe6a2d040d2ab7\",\"parent_basename\":\"cert38-narrow-migration-20260904T074428Z\",\"siblings\":[{\"basename\":\"credentials-38.before\",\"is_file\":true,\"is_symlink\":false,\"size\":249,\"mode\":\"0o600\",\"mtime_utc\":\"2026-08-28T13:34:33+00:00\"},{\"basename\":\"database.sqlite.before\",\"is_file\":true,\"is_symlink\":false,\"size\":331776,\"mode\":\"0o644\",\"mtime_utc\":\"2026-09-04T07:44:28.796358+00:00\"},{\"basename\":\"npm-38.conf.before\",\"is_file\":true,\"is_symlink\":false,\"size\":860,\"mode\":\"0o600\",\"mtime_utc\":\"2026-09-04T04:34:38.446873+00:00\"}]},{\"parent_sha256\":\"dd741d0eeb8e9aa510f3d34937c26cf8f713ccc87a518f7c9d8c1eec1f4cff83\",\"parent_basename\":\"secure\",\"siblings\":[{\"basename\":\"forum_cf_token.env\",\"is_file\":true,\"is_symlink\":false,\"size\":67,\"mode\":\"0o600\",\"mtime_utc\":\"2026-07-01T06:26:06.356641+00:00\"},{\"basename\":\"gram1_cf_token\",\"is_file\":true,\"is_symlink\":false,\"size\":53,\"mode\":\"0o600\",\"mtime_utc\":\"2026-07-01T17:12:23.200041+00:00\"},{\"basename\":\"parked_cf_token\",\"is_file\":true,\"is_symlink\":false,\"size\":53,\"mode\":\"0o600\",\"mtime_utc\":\"2026-07-01T15:44:11.244355+00:00\"},{\"basename\":\"pvepro_cf_token\",\"is_file\":true,\"is_symlink\":false,\"size\":53,\"mode\":\"0o600\",\"mtime_utc\":\"2026-07-01T17:29:00.836496+00:00\"},{\"basename\":\"taftauto_cf_certbot.ini\",\"is_file\":true,\"is_symlink\":false,\"size\":81,\"mode\":\"0o600\",\"mtime_utc\":\"2026-07-01T22:14:22.274863+00:00\"},{\"basename\":\"taftauto_cf_token\",\"is_file\":true,\"is_symlink\":false,\"size\":54,\"mode\":\"0o600\",\"mtime_utc\":\"2026-07-01T21:41:14.705633+00:00\"},{\"basename\":\"taftauto_wg_psk_next\",\"is_file\":true,\"is_symlink\":false,\"size\":45,\"mode\":\"0o600\",\"mtime_utc\":\"2026-07-01T21:42:37.402021+00:00\"}]}]}\nPRODUCTION_PUBLIC_CURL_RC=0\nPRODUCTION_PUBLIC_HTTP=200\nPROVENANCE23_DECISION=PASS_PROVENANCE_CAPTURED\nPROVENANCE23_END=true\n" + "output": "ERROR_REGISTER_CHECK=OK\nREFERENCE_CHECK=OK\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nSB043AR2_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nSB043AR2_VM170_CLUSTER={\"name\":\"core-apps\",\"node\":\"pve01\",\"status\":\"running\",\"type\":\"qemu\"}\nSB043AR2_QGA_INPUT_BYTES=5390\nSB043AR2_PRESTATE={\"act1_epoch_refs\":[],\"act1_result\":{\"command_id\":\"SIGNALBOT-260908-SEALED-ACTIVATION-043ACT1\",\"reason\":\"RuntimeError:PROJECT_RUNTIME_CONTRACT_UNAVAILABLE\",\"status\":\"PREMUTATION_HOLD\",\"ts_utc\":\"2026-09-08T15:03:52.521761+00:00\"},\"env\":{\"APP_IMAGE\":\"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70\",\"CODE_IDENTITY\":\"e32760c69a4311728db9066ee8bf2bf66b1e5a70\",\"COLLECTION_START_AT\":\"2026-09-07T00:00:00+00:00\",\"EXPERIMENT_ID\":\"ec477ea41ecbd5cfdef5afc259595aab20674a7d933f41a389329ff05098b338\",\"RUNTIME_MANIFEST_ID\":\"58d3b59200bdc0eb8d448612679d667b194263586cb3198dfc08597935053a1a\"},\"services\":[{\"image\":\"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70\",\"image_id\":\"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736\",\"restart_count\":0,\"running\":true,\"service\":\"worker\",\"started_at\":\"2026-09-06T18:48:20.586788319Z\"},{\"image\":\"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70\",\"image_id\":\"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736\",\"restart_count\":0,\"running\":true,\"service\":\"relay\",\"started_at\":\"2026-09-06T18:48:20.603414848Z\"},{\"image\":\"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70\",\"image_id\":\"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736\",\"restart_count\":19,\"running\":true,\"service\":\"collector\",\"started_at\":\"2026-09-08T13:42:51.284969517Z\"},{\"image\":\"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70\",\"image_id\":\"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736\",\"restart_count\":0,\"running\":true,\"service\":\"shadow\",\"started_at\":\"2026-09-06T18:48:20.768190553Z\"}]}\nSB043AR2_CONTRACT_OWNERS={\"RuntimeArtifactManifest\":[\"runtime_integrity.py\"],\"RuntimeDeploymentManifestV1\":[\"runtime_manifest.py\"],\"canonical_hash\":[\"canonical_hash.py\"]}\nSB043AR2_CONTRACT_SOURCE_DETAILS={\"canonical_hash.py\":{\"sha256\":\"531237f499b7f2b2c568f4f101f1b451ea9fcd08a4afaff79153ba38a06f2482\",\"symbols\":[{\"end_lineno\":44,\"kind\":\"FunctionDef\",\"lineno\":43,\"name\":\"canonical_hash\"}]},\"runtime_integrity.py\":{\"sha256\":\"99859b63e23d10fc051672965123f49d6e79d2ff767871c019ff7bdae2e2e39e\",\"symbols\":[{\"end_lineno\":559,\"kind\":\"ClassDef\",\"lineno\":536,\"name\":\"RuntimeArtifactManifest\"}]},\"runtime_manifest.py\":{\"sha256\":\"1064cfb74303fdc8e0bf50bae95b1e755556a5b1dfc28b2b062341becaba08f2\",\"symbols\":[{\"end_lineno\":105,\"kind\":\"ClassDef\",\"lineno\":37,\"name\":\"RuntimeDeploymentManifestV1\"}]}}\nSB043AR2_HOLDS=[\"CANONICAL_HASH_OWNER_NOT_EXACT\"]\nSB043AR2_DECISION=HOLD_ACT1_PREMUTATION_CONTRACT_RCA\nSB043AR2_MUTATION_SCOPE=NONE_READ_ONLY\nSB043AR2_GUEST_RC=3\nSB043AR2_GUEST_STDERR_PRESENT=false\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index 6d7b746e..08cb5b8b 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,22 +1,22 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-CLOUDFLARE-PROVENANCE23 -STATUS=OK -RC=0 +COMMAND_ID=SIGNALBOT-260908-ACT1-PREMUTATION-CONTRACT-RCA-043ACT1RCA2 +STATUS=FAIL +RC=3 HOST=pve01 MODE=read-only -COMPONENT=newfi-stagingedge-cloudflare-auth-provenance-readonly +COMPONENT=signalbot-cr0116-act1-premutation-contract-rca REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=a51ecb4fd3b97c5539bd96fdb5bba51d1c7a8b616d03ee970d755384afdc1bb1 +COMMAND_SHA256=c8e53f317faa55f8790c104db79071fc1dc108d6c8bd990cacab871d7e0cd4f9 DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true CHANGE_DECLARED=false RESULT_CONTRACT_VALID=true RESULT_CONTRACT_STATUS=NOT_APPLICABLE RESULT_CONTRACT_ERROR=NONE -COMMAND_RC=0 +COMMAND_RC=3 CHANGES_MADE=false ROLLBACK_STARTED=false ROLLBACK_RESTORED=null @@ -24,39 +24,23 @@ MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=b2bf15e5aced8552d6ecd78eb23ead4e230b1a86f55088c05e2c663328315011 -SANITIZED_OUTPUT_SHA256=b2bf15e5aced8552d6ecd78eb23ead4e230b1a86f55088c05e2c663328315011 +RAW_EVIDENCE_SHA256=df6fa0c417941e38c8ea5c150eaa9efdfe990107eb0e3914ece24252af071a0f +SANITIZED_OUTPUT_SHA256=df6fa0c417941e38c8ea5c150eaa9efdfe990107eb0e3914ece24252af071a0f OUTPUT_BEGIN -PROVENANCE23_BEGIN=true -COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-CLOUDFLARE-PROVENANCE23 -MODE=read-only -MUTATIONS_PERFORMED=NO ERROR_REGISTER_CHECK=OK -ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 REFERENCE_CHECK=OK -REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 -RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d -RUNNER_SHA_MATCH=true -CANONICAL_LIVE_USERS=debian -POST_REBOOT_USER_CONFIRM=true -TRUSTED_EDGEVM_MARKER=true -PUBLIC_VPS_REJECT_MARKER=true -CANONICAL_USER_PROOF=true -NETBIRD_STATUS_JSON_RC=0 -NETBIRD_STATUS_DETAIL_RC=0 -EDGEVM_OVERLAY_IP_COUNT=1 -EDGEVM_HOSTKEY_MATCH=true -EDGEVM_HOSTKEY_ALGS=ssh-ed25519 -OUTER_PROVENANCE23_GATE=true -EDGEVM_SUDO_RC=0 -REMOTE_PROVENANCE_RC=0 -VALIDATED_CF_CANDIDATE_COUNT=2 -PROVENANCE_COMPLETE=true -CF_PROVENANCE_JSON={"euid":0,"validated_candidate_count":2,"provenance_complete":true,"candidates":[{"material_hash":"4d32cc81257fa0bed53d17cac37a2a7d3ce8f7031502ddc8fa4689c2af76efe4","path_sha256":"c885a37d16a3df2c20dd65be8c3a8f6b339070b3ff9867f4c9c6a594deaa9f37","basename":"credentials-38.before","parent_basename":"cert38-narrow-migration-20260904T074428Z","historical_exact":true,"auth_type":"api_token","key_names":["dns_cloudflare_api_token"],"uid":0,"gid":0,"mode":"0o600","mtime_utc":"2026-08-28T13:34:33+00:00","backup_name_signal":true,"temp_name_signal":true,"operational_reference_count":0,"operational_references":[],"runtime_env_match_count":0,"runtime_env_matches":[],"staging_record_count":0,"reference_type":"A","reference_proxied":false,"reference_ttl":1,"reference_content_sha256":"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5"},{"material_hash":"d6799544acb945f64be43c89a0d877c964697dfda0f3a703a613498aa76bbb63","path_sha256":"641c598a546799f0d1316aa993d57731741eee0da3d43d11055c0d8ceaedc6be","basename":"gram1_cf_token","parent_basename":"secure","historical_exact":false,"auth_type":"raw_token","key_names":["RAW_TOKEN"],"uid":0,"gid":0,"mode":"0o600","mtime_utc":"2026-07-01T17:12:23.200041+00:00","backup_name_signal":false,"temp_name_signal":false,"operational_reference_count":3,"operational_references":[{"ref_file_sha256":"29f2edba2995afa11b26f66c7480f52a380c77148acbe0216124ff97ddaba284","ref_basename":"edge-gram1-close-stage19.py","line":5,"kind":"full_path"},{"ref_file_sha256":"29f2edba2995afa11b26f66c7480f52a380c77148acbe0216124ff97ddaba284","ref_basename":"edge-gram1-close-stage19.py","line":74,"kind":"full_path"},{"ref_file_sha256":"7dcaf6f5cd4361b99ebb7ab51a7fb416347886dbc405b550ff785e0346d8334e","ref_basename":"gram1-cf-certbot-hook.py","line":4,"kind":"full_path"}],"runtime_env_match_count":0,"runtime_env_matches":[],"staging_record_count":0,"reference_type":"A","reference_proxied":false,"reference_ttl":1,"reference_content_sha256":"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5"}],"parent_contexts":[{"parent_sha256":"163a90108e606c1854b1d4d29a3b41738b1a0176034755e67cfe6a2d040d2ab7","parent_basename":"cert38-narrow-migration-20260904T074428Z","siblings":[{"basename":"credentials-38.before","is_file":true,"is_symlink":false,"size":249,"mode":"0o600","mtime_utc":"2026-08-28T13:34:33+00:00"},{"basename":"database.sqlite.before","is_file":true,"is_symlink":false,"size":331776,"mode":"0o644","mtime_utc":"2026-09-04T07:44:28.796358+00:00"},{"basename":"npm-38.conf.before","is_file":true,"is_symlink":false,"size":860,"mode":"0o600","mtime_utc":"2026-09-04T04:34:38.446873+00:00"}]},{"parent_sha256":"dd741d0eeb8e9aa510f3d34937c26cf8f713ccc87a518f7c9d8c1eec1f4cff83","parent_basename":"secure","siblings":[{"basename":"forum_cf_token.env","is_file":true,"is_symlink":false,"size":67,"mode":"0o600","mtime_utc":"2026-07-01T06:26:06.356641+00:00"},{"basename":"gram1_cf_token","is_file":true,"is_symlink":false,"size":53,"mode":"0o600","mtime_utc":"2026-07-01T17:12:23.200041+00:00"},{"basename":"parked_cf_token","is_file":true,"is_symlink":false,"size":53,"mode":"0o600","mtime_utc":"2026-07-01T15:44:11.244355+00:00"},{"basename":"pvepro_cf_token","is_file":true,"is_symlink":false,"size":53,"mode":"0o600","mtime_utc":"2026-07-01T17:29:00.836496+00:00"},{"basename":"taftauto_cf_certbot.ini","is_file":true,"is_symlink":false,"size":81,"mode":"0o600","mtime_utc":"2026-07-01T22:14:22.274863+00:00"},{"basename":"taftauto_cf_token","is_file":true,"is_symlink":false,"size":54,"mode":"0o600","mtime_utc":"2026-07-01T21:41:14.705633+00:00"},{"basename":"taftauto_wg_psk_next","is_file":true,"is_symlink":false,"size":45,"mode":"0o600","mtime_utc":"2026-07-01T21:42:37.402021+00:00"}]}]} -PRODUCTION_PUBLIC_CURL_RC=0 -PRODUCTION_PUBLIC_HTTP=200 -PROVENANCE23_DECISION=PASS_PROVENANCE_CAPTURED -PROVENANCE23_END=true +AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED +SB043AR2_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d +SB043AR2_VM170_CLUSTER={"name":"core-apps","node":"pve01","status":"running","type":"qemu"} +SB043AR2_QGA_INPUT_BYTES=5390 +SB043AR2_PRESTATE={"act1_epoch_refs":[],"act1_result":{"command_id":"SIGNALBOT-260908-SEALED-ACTIVATION-043ACT1","reason":"RuntimeError:PROJECT_RUNTIME_CONTRACT_UNAVAILABLE","status":"PREMUTATION_HOLD","ts_utc":"2026-09-08T15:03:52.521761+00:00"},"env":{"APP_IMAGE":"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70","CODE_IDENTITY":"e32760c69a4311728db9066ee8bf2bf66b1e5a70","COLLECTION_START_AT":"2026-09-07T00:00:00+00:00","EXPERIMENT_ID":"ec477ea41ecbd5cfdef5afc259595aab20674a7d933f41a389329ff05098b338","RUNTIME_MANIFEST_ID":"58d3b59200bdc0eb8d448612679d667b194263586cb3198dfc08597935053a1a"},"services":[{"image":"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70","image_id":"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736","restart_count":0,"running":true,"service":"worker","started_at":"2026-09-06T18:48:20.586788319Z"},{"image":"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70","image_id":"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736","restart_count":0,"running":true,"service":"relay","started_at":"2026-09-06T18:48:20.603414848Z"},{"image":"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70","image_id":"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736","restart_count":19,"running":true,"service":"collector","started_at":"2026-09-08T13:42:51.284969517Z"},{"image":"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70","image_id":"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736","restart_count":0,"running":true,"service":"shadow","started_at":"2026-09-06T18:48:20.768190553Z"}]} +SB043AR2_CONTRACT_OWNERS={"RuntimeArtifactManifest":["runtime_integrity.py"],"RuntimeDeploymentManifestV1":["runtime_manifest.py"],"canonical_hash":["canonical_hash.py"]} +SB043AR2_CONTRACT_SOURCE_DETAILS={"canonical_hash.py":{"sha256":"531237f499b7f2b2c568f4f101f1b451ea9fcd08a4afaff79153ba38a06f2482","symbols":[{"end_lineno":44,"kind":"FunctionDef","lineno":43,"name":"canonical_hash"}]},"runtime_integrity.py":{"sha256":"99859b63e23d10fc051672965123f49d6e79d2ff767871c019ff7bdae2e2e39e","symbols":[{"end_lineno":559,"kind":"ClassDef","lineno":536,"name":"RuntimeArtifactManifest"}]},"runtime_manifest.py":{"sha256":"1064cfb74303fdc8e0bf50bae95b1e755556a5b1dfc28b2b062341becaba08f2","symbols":[{"end_lineno":105,"kind":"ClassDef","lineno":37,"name":"RuntimeDeploymentManifestV1"}]}} +SB043AR2_HOLDS=["CANONICAL_HASH_OWNER_NOT_EXACT"] +SB043AR2_DECISION=HOLD_ACT1_PREMUTATION_CONTRACT_RCA +SB043AR2_MUTATION_SCOPE=NONE_READ_ONLY +SB043AR2_GUEST_RC=3 +SB043AR2_GUEST_STDERR_PRESENT=false OUTPUT_END CHAT_OUTPUT_END