runtime: publish NEWFI-260908-A-STAGINGEDGE-APPLY18

2026-09-08 14:02:43 +00:00
parent 8141023f6a
commit 780ba1a4ef
4 changed files with 143 additions and 39 deletions
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "NEWFI-260908-A-STAGINGEDGE-APPLY18",
+  "status": "BLOCKED",
+  "rc": 2,
+  "host": "pve01",
+  "mode": "change",
+  "component": "newfi-staging-trusted-edge-exact-cert-route-dns",
+  "started_at_utc": "2026-09-08T14:02:41Z",
+  "finished_at_utc": "2026-09-08T14:02:43Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "f007220b742defa766caa4719481dccd36d25c4223170d3fd9cfda2083cb81c7",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": true,
+  "result_contract_valid": true,
+  "result_contract_status": "BLOCKED",
+  "result_contract_error": null,
+  "command_rc": 2,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "c2062d64a921d7db5cbfd0d1f1d941dbc87f3157fe3a33d4228831cb6585fcce",
+  "sanitized_output_sha256": "c2062d64a921d7db5cbfd0d1f1d941dbc87f3157fe3a33d4228831cb6585fcce",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "APPLY18_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY18\nMODE=change\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nTRUSTED_EDGEVM_MARKER=true\nPUBLIC_VPS_REJECT_MARKER=true\nCANONICAL_USERS=debian\nPOST_REBOOT_USERS=debian\nNETBIRD_STATUS_JSON_RC=0\nNETBIRD_STATUS_DETAIL_RC=0\nEDGEVM_OVERLAY_IP_COUNT=1\nEDGEVM_HOSTKEY_MATCH=true\nEDGEVM_HOSTKEY_ALGS=ssh-ed25519\nEDGEVM_SUDO_RC=0\nREMOTE_TRANSPORT_RC=0\nREMOTE_TRANSPORT_OK=true\nREMOTE_PREFLIGHT_RC=0\nREMOTE_PREFLIGHT_OK=false\nREMOTE_PREFLIGHT_REASON=TEMPLATE_SHAPE\nAPPLY18_REASON=REMOTE_PREFLIGHT_TEMPLATE_SHAPE\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"NEWFI-260908-A-STAGINGEDGE-APPLY18\",\"status\":\"BLOCKED\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+}
@@ -0,0 +1,57 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY18
+STATUS=BLOCKED
+RC=2
+HOST=pve01
+MODE=change
+COMPONENT=newfi-staging-trusted-edge-exact-cert-route-dns
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=f007220b742defa766caa4719481dccd36d25c4223170d3fd9cfda2083cb81c7
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=true
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=BLOCKED
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=2
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=c2062d64a921d7db5cbfd0d1f1d941dbc87f3157fe3a33d4228831cb6585fcce
+SANITIZED_OUTPUT_SHA256=c2062d64a921d7db5cbfd0d1f1d941dbc87f3157fe3a33d4228831cb6585fcce
+OUTPUT_BEGIN
+APPLY18_BEGIN=true
+COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY18
+MODE=change
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+REFERENCE_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
+TRUSTED_EDGEVM_MARKER=true
+PUBLIC_VPS_REJECT_MARKER=true
+CANONICAL_USERS=debian
+POST_REBOOT_USERS=debian
+NETBIRD_STATUS_JSON_RC=0
+NETBIRD_STATUS_DETAIL_RC=0
+EDGEVM_OVERLAY_IP_COUNT=1
+EDGEVM_HOSTKEY_MATCH=true
+EDGEVM_HOSTKEY_ALGS=ssh-ed25519
+EDGEVM_SUDO_RC=0
+REMOTE_TRANSPORT_RC=0
+REMOTE_TRANSPORT_OK=true
+REMOTE_PREFLIGHT_RC=0
+REMOTE_PREFLIGHT_OK=false
+REMOTE_PREFLIGHT_REASON=TEMPLATE_SHAPE
+APPLY18_REASON=REMOTE_PREFLIGHT_TEMPLATE_SHAPE
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"NEWFI-260908-A-STAGINGEDGE-APPLY18","status":"BLOCKED","changes_made":false,"rollback_started":false,"rollback_restored":null}
+
+OUTPUT_END
+CHAT_OUTPUT_END
@@ -1,27 +1,27 @@
 {
  "schema_version": 1,
  "channel": "homelab-runtime",
-  "command_id": "SIGNALBOT-260908-PACKAGE-PROVENANCE-EXACT-REPRO-RCA-043ORIGIN13",
-  "status": "FAIL",
-  "rc": 3,
+  "command_id": "NEWFI-260908-A-STAGINGEDGE-APPLY18",
+  "status": "BLOCKED",
+  "rc": 2,
  "host": "pve01",
-  "mode": "read-only",
-  "component": "signalbot-cr0116-package-provenance-exact-repro-rca",
-  "started_at_utc": "2026-09-08T14:01:49Z",
-  "finished_at_utc": "2026-09-08T14:01:52Z",
+  "mode": "change",
+  "component": "newfi-staging-trusted-edge-exact-cert-route-dns",
+  "started_at_utc": "2026-09-08T14:02:41Z",
+  "finished_at_utc": "2026-09-08T14:02:43Z",
  "reference_register_checked": true,
  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
  "error_register_checked": true,
  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "5bd7c78a9424a7cc58ebe1b721f1f1ae3b3977269fea1ccc250e2179684378c8",
+  "command_sha256": "f007220b742defa766caa4719481dccd36d25c4223170d3fd9cfda2083cb81c7",
  "duplicate_failed_command_blocked": false,
  "block_reason": null,
  "execution_started": true,
-  "change_declared": false,
+  "change_declared": true,
  "result_contract_valid": true,
-  "result_contract_status": null,
+  "result_contract_status": "BLOCKED",
  "result_contract_error": null,
-  "command_rc": 3,
+  "command_rc": 2,
  "changes_made": false,
  "rollback_started": false,
  "rollback_restored": null,
@@ -30,9 +30,9 @@
  "secrets_included": false,
  "private_addresses_included": false,
  "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "8c8358233518871d131c8d026e51b1aefd3e25c6283850f72543b6ad7919c7f3",
-  "sanitized_output_sha256": "8c8358233518871d131c8d026e51b1aefd3e25c6283850f72543b6ad7919c7f3",
+  "raw_evidence_sha256": "c2062d64a921d7db5cbfd0d1f1d941dbc87f3157fe3a33d4228831cb6585fcce",
+  "sanitized_output_sha256": "c2062d64a921d7db5cbfd0d1f1d941dbc87f3157fe3a33d4228831cb6585fcce",
  "output_truncated_in_json": false,
  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "SB043O13_EXECUTION_IDENTITY={\"hostname\":\"pve01\",\"root\":true}\nERROR_REGISTER_CHECK=OK\nREFERENCE_CHECK=OK\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nSB043O13_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nSB043O13_VM170_CLUSTER={\"name\":\"core-apps\",\"node\":\"pve01\",\"status\":\"running\",\"type\":\"qemu\"}\nSB043O13_QGA_INPUT_BYTES=21117\nSB043O13_REPRODUCTION={\"new_calls_attempted\":[{\"captures_added\":0,\"function\":\"package_code_identity\",\"module\":\"code_identity\",\"status\":\"OK\"}],\"new_capture_count\":0,\"new_match\":null,\"new_meta\":{\"parse\":\"OK\",\"rc\":0,\"stderr_nonempty\":false},\"new_package_ids\":[],\"old_calls_attempted\":[{\"captures_added\":0,\"function\":\"package_code_identity\",\"module\":\"code_identity\",\"status\":\"OK\"}],\"old_candidate_functions\":[{\"args\":[\"package_dir\"],\"field_hits\":[],\"function\":\"package_code_identity\",\"lineno\":80,\"module\":\"code_identity\"},{\"args\":[\"baseline\",\"augmented\"],\"field_hits\":[],\"function\":\"verify_fold_artifact_pair\",\"lineno\":129,\"module\":\"evaluation_freeze\"},{\"args\":[\"artifacts\",\"forecasts\"],\"field_hits\":[],\"function\":\"verify_artifacts_against_forecasts\",\"lineno\":150,\"module\":\"evaluation_freeze\"},{\"args\":[],\"field_hits\":[\"source_tree_hash\",\"dependency_lock_hash\",\"executable_artifact_hash\",\"runtime_environment_hash\"],\"function\":\"verify_final_deployment_attestations\",\"lineno\":1944,\"module\":\"runtime_integrity\"},{\"args\":[],\"field_hits\":[\"source_tree_hash\",\"dependency_lock_hash\",\"build_recipe_hash\",\"executable_artifact_hash\",\"runtime_environment_hash\"],\"function\":\"required_retained_hashes\",\"lineno\":2674,\"module\":\"runtime_integrity\"},{\"args\":[],\"field_hits\":[],\"function\":\"verify_artifact_retention\",\"lineno\":2707,\"module\":\"runtime_integrity\"},{\"args\":[\"manifest\"],\"field_hits\":[],\"function\":\"verify_runtime_manifest\",\"lineno\":108,\"module\":\"runtime_manifest\"}],\"old_capture_count\":0,\"old_exact_match_count\":0,\"old_match\":null,\"old_meta\":{\"parse\":\"OK\",\"rc\":0,\"stderr_nonempty\":false},\"producer_key\":null,\"service_fingerprint_stable\":true}\nSB043O13_HOLDS=[\"OLD_PACKAGE_EXACT_PRODUCER_MATCH_COUNT_0\"]\nSB043O13_DECISION=HOLD_EXACT_PACKAGE_REPRODUCTION\nSB043O13_MUTATION_SCOPE=NONE_READ_ONLY\nSB043O13_GUEST_RC=3\nSB043O13_GUEST_STDERR_PRESENT=false\nSB043O13_HOLDS=[\"OLD_PACKAGE_EXACT_PRODUCER_MATCH_COUNT_0\"]\nSB043O13_DECISION=HOLD_EXACT_PACKAGE_REPRODUCTION\nSB043O13_MUTATION_SCOPE=NONE_READ_ONLY\n"
+  "output": "APPLY18_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY18\nMODE=change\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nTRUSTED_EDGEVM_MARKER=true\nPUBLIC_VPS_REJECT_MARKER=true\nCANONICAL_USERS=debian\nPOST_REBOOT_USERS=debian\nNETBIRD_STATUS_JSON_RC=0\nNETBIRD_STATUS_DETAIL_RC=0\nEDGEVM_OVERLAY_IP_COUNT=1\nEDGEVM_HOSTKEY_MATCH=true\nEDGEVM_HOSTKEY_ALGS=ssh-ed25519\nEDGEVM_SUDO_RC=0\nREMOTE_TRANSPORT_RC=0\nREMOTE_TRANSPORT_OK=true\nREMOTE_PREFLIGHT_RC=0\nREMOTE_PREFLIGHT_OK=false\nREMOTE_PREFLIGHT_REASON=TEMPLATE_SHAPE\nAPPLY18_REASON=REMOTE_PREFLIGHT_TEMPLATE_SHAPE\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"NEWFI-260908-A-STAGINGEDGE-APPLY18\",\"status\":\"BLOCKED\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
 }
@@ -1,22 +1,22 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SIGNALBOT-260908-PACKAGE-PROVENANCE-EXACT-REPRO-RCA-043ORIGIN13
-STATUS=FAIL
-RC=3
+COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY18
+STATUS=BLOCKED
+RC=2
 HOST=pve01
-MODE=read-only
-COMPONENT=signalbot-cr0116-package-provenance-exact-repro-rca
+MODE=change
+COMPONENT=newfi-staging-trusted-edge-exact-cert-route-dns
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=5bd7c78a9424a7cc58ebe1b721f1f1ae3b3977269fea1ccc250e2179684378c8
+COMMAND_SHA256=f007220b742defa766caa4719481dccd36d25c4223170d3fd9cfda2083cb81c7
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
-CHANGE_DECLARED=false
+CHANGE_DECLARED=true
 RESULT_CONTRACT_VALID=true
-RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_STATUS=BLOCKED
 RESULT_CONTRACT_ERROR=NONE
-COMMAND_RC=3
+COMMAND_RC=2
 CHANGES_MADE=false
 ROLLBACK_STARTED=false
 ROLLBACK_RESTORED=null
@@ -24,25 +24,34 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=8c8358233518871d131c8d026e51b1aefd3e25c6283850f72543b6ad7919c7f3
-SANITIZED_OUTPUT_SHA256=8c8358233518871d131c8d026e51b1aefd3e25c6283850f72543b6ad7919c7f3
+RAW_EVIDENCE_SHA256=c2062d64a921d7db5cbfd0d1f1d941dbc87f3157fe3a33d4228831cb6585fcce
+SANITIZED_OUTPUT_SHA256=c2062d64a921d7db5cbfd0d1f1d941dbc87f3157fe3a33d4228831cb6585fcce
 OUTPUT_BEGIN
-SB043O13_EXECUTION_IDENTITY={"hostname":"pve01","root":true}
+APPLY18_BEGIN=true
+COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY18
+MODE=change
 ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
 REFERENCE_CHECK=OK
-AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED
-SB043O13_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
-SB043O13_VM170_CLUSTER={"name":"core-apps","node":"pve01","status":"running","type":"qemu"}
-SB043O13_QGA_INPUT_BYTES=21117
-SB043O13_REPRODUCTION={"new_calls_attempted":[{"captures_added":0,"function":"package_code_identity","module":"code_identity","status":"OK"}],"new_capture_count":0,"new_match":null,"new_meta":{"parse":"OK","rc":0,"stderr_nonempty":false},"new_package_ids":[],"old_calls_attempted":[{"captures_added":0,"function":"package_code_identity","module":"code_identity","status":"OK"}],"old_candidate_functions":[{"args":["package_dir"],"field_hits":[],"function":"package_code_identity","lineno":80,"module":"code_identity"},{"args":["baseline","augmented"],"field_hits":[],"function":"verify_fold_artifact_pair","lineno":129,"module":"evaluation_freeze"},{"args":["artifacts","forecasts"],"field_hits":[],"function":"verify_artifacts_against_forecasts","lineno":150,"module":"evaluation_freeze"},{"args":[],"field_hits":["source_tree_hash","dependency_lock_hash","executable_artifact_hash","runtime_environment_hash"],"function":"verify_final_deployment_attestations","lineno":1944,"module":"runtime_integrity"},{"args":[],"field_hits":["source_tree_hash","dependency_lock_hash","build_recipe_hash","executable_artifact_hash","runtime_environment_hash"],"function":"required_retained_hashes","lineno":2674,"module":"runtime_integrity"},{"args":[],"field_hits":[],"function":"verify_artifact_retention","lineno":2707,"module":"runtime_integrity"},{"args":["manifest"],"field_hits":[],"function":"verify_runtime_manifest","lineno":108,"module":"runtime_manifest"}],"old_capture_count":0,"old_exact_match_count":0,"old_match":null,"old_meta":{"parse":"OK","rc":0,"stderr_nonempty":false},"producer_key":null,"service_fingerprint_stable":true}
-SB043O13_HOLDS=["OLD_PACKAGE_EXACT_PRODUCER_MATCH_COUNT_0"]
-SB043O13_DECISION=HOLD_EXACT_PACKAGE_REPRODUCTION
-SB043O13_MUTATION_SCOPE=NONE_READ_ONLY
-SB043O13_GUEST_RC=3
-SB043O13_GUEST_STDERR_PRESENT=false
-SB043O13_HOLDS=["OLD_PACKAGE_EXACT_PRODUCER_MATCH_COUNT_0"]
-SB043O13_DECISION=HOLD_EXACT_PACKAGE_REPRODUCTION
-SB043O13_MUTATION_SCOPE=NONE_READ_ONLY
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
+TRUSTED_EDGEVM_MARKER=true
+PUBLIC_VPS_REJECT_MARKER=true
+CANONICAL_USERS=debian
+POST_REBOOT_USERS=debian
+NETBIRD_STATUS_JSON_RC=0
+NETBIRD_STATUS_DETAIL_RC=0
+EDGEVM_OVERLAY_IP_COUNT=1
+EDGEVM_HOSTKEY_MATCH=true
+EDGEVM_HOSTKEY_ALGS=ssh-ed25519
+EDGEVM_SUDO_RC=0
+REMOTE_TRANSPORT_RC=0
+REMOTE_TRANSPORT_OK=true
+REMOTE_PREFLIGHT_RC=0
+REMOTE_PREFLIGHT_OK=false
+REMOTE_PREFLIGHT_REASON=TEMPLATE_SHAPE
+APPLY18_REASON=REMOTE_PREFLIGHT_TEMPLATE_SHAPE
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"NEWFI-260908-A-STAGINGEDGE-APPLY18","status":"BLOCKED","changes_made":false,"rollback_started":false,"rollback_restored":null}

 OUTPUT_END
 CHAT_OUTPUT_END