From 780ba1a4ef49fa88bd138d876d56665ad90d4390 Mon Sep 17 00:00:00 2001 From: homelab-runtime-publisher Date: Tue, 8 Sep 2026 14:02:43 +0000 Subject: [PATCH] runtime: publish NEWFI-260908-A-STAGINGEDGE-APPLY18 --- .../NEWFI-260908-A-STAGINGEDGE-APPLY18.json | 38 ++++++++++++ .../NEWFI-260908-A-STAGINGEDGE-APPLY18.txt | 57 ++++++++++++++++++ runtime/latest.json | 28 ++++----- runtime/latest.txt | 59 +++++++++++-------- 4 files changed, 143 insertions(+), 39 deletions(-) create mode 100644 runtime/history/NEWFI-260908-A-STAGINGEDGE-APPLY18.json create mode 100644 runtime/history/NEWFI-260908-A-STAGINGEDGE-APPLY18.txt diff --git a/runtime/history/NEWFI-260908-A-STAGINGEDGE-APPLY18.json b/runtime/history/NEWFI-260908-A-STAGINGEDGE-APPLY18.json new file mode 100644 index 00000000..0e54093f --- /dev/null +++ b/runtime/history/NEWFI-260908-A-STAGINGEDGE-APPLY18.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "NEWFI-260908-A-STAGINGEDGE-APPLY18", + "status": "BLOCKED", + "rc": 2, + "host": "pve01", + "mode": "change", + "component": "newfi-staging-trusted-edge-exact-cert-route-dns", + "started_at_utc": "2026-09-08T14:02:41Z", + "finished_at_utc": "2026-09-08T14:02:43Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "f007220b742defa766caa4719481dccd36d25c4223170d3fd9cfda2083cb81c7", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": true, + "result_contract_valid": true, + "result_contract_status": "BLOCKED", + "result_contract_error": null, + "command_rc": 2, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "c2062d64a921d7db5cbfd0d1f1d941dbc87f3157fe3a33d4228831cb6585fcce", + "sanitized_output_sha256": "c2062d64a921d7db5cbfd0d1f1d941dbc87f3157fe3a33d4228831cb6585fcce", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "APPLY18_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY18\nMODE=change\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nTRUSTED_EDGEVM_MARKER=true\nPUBLIC_VPS_REJECT_MARKER=true\nCANONICAL_USERS=debian\nPOST_REBOOT_USERS=debian\nNETBIRD_STATUS_JSON_RC=0\nNETBIRD_STATUS_DETAIL_RC=0\nEDGEVM_OVERLAY_IP_COUNT=1\nEDGEVM_HOSTKEY_MATCH=true\nEDGEVM_HOSTKEY_ALGS=ssh-ed25519\nEDGEVM_SUDO_RC=0\nREMOTE_TRANSPORT_RC=0\nREMOTE_TRANSPORT_OK=true\nREMOTE_PREFLIGHT_RC=0\nREMOTE_PREFLIGHT_OK=false\nREMOTE_PREFLIGHT_REASON=TEMPLATE_SHAPE\nAPPLY18_REASON=REMOTE_PREFLIGHT_TEMPLATE_SHAPE\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"NEWFI-260908-A-STAGINGEDGE-APPLY18\",\"status\":\"BLOCKED\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" +} diff --git a/runtime/history/NEWFI-260908-A-STAGINGEDGE-APPLY18.txt b/runtime/history/NEWFI-260908-A-STAGINGEDGE-APPLY18.txt new file mode 100644 index 00000000..0f3c6fa5 --- /dev/null +++ b/runtime/history/NEWFI-260908-A-STAGINGEDGE-APPLY18.txt @@ -0,0 +1,57 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY18 +STATUS=BLOCKED +RC=2 +HOST=pve01 +MODE=change +COMPONENT=newfi-staging-trusted-edge-exact-cert-route-dns +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=f007220b742defa766caa4719481dccd36d25c4223170d3fd9cfda2083cb81c7 +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=true +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=BLOCKED +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=2 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=c2062d64a921d7db5cbfd0d1f1d941dbc87f3157fe3a33d4228831cb6585fcce +SANITIZED_OUTPUT_SHA256=c2062d64a921d7db5cbfd0d1f1d941dbc87f3157fe3a33d4228831cb6585fcce +OUTPUT_BEGIN +APPLY18_BEGIN=true +COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY18 +MODE=change +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +REFERENCE_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d +TRUSTED_EDGEVM_MARKER=true +PUBLIC_VPS_REJECT_MARKER=true +CANONICAL_USERS=debian +POST_REBOOT_USERS=debian +NETBIRD_STATUS_JSON_RC=0 +NETBIRD_STATUS_DETAIL_RC=0 +EDGEVM_OVERLAY_IP_COUNT=1 +EDGEVM_HOSTKEY_MATCH=true +EDGEVM_HOSTKEY_ALGS=ssh-ed25519 +EDGEVM_SUDO_RC=0 +REMOTE_TRANSPORT_RC=0 +REMOTE_TRANSPORT_OK=true +REMOTE_PREFLIGHT_RC=0 +REMOTE_PREFLIGHT_OK=false +REMOTE_PREFLIGHT_REASON=TEMPLATE_SHAPE +APPLY18_REASON=REMOTE_PREFLIGHT_TEMPLATE_SHAPE +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"NEWFI-260908-A-STAGINGEDGE-APPLY18","status":"BLOCKED","changes_made":false,"rollback_started":false,"rollback_restored":null} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index d40f2cdc..0e54093f 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,27 +1,27 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SIGNALBOT-260908-PACKAGE-PROVENANCE-EXACT-REPRO-RCA-043ORIGIN13", - "status": "FAIL", - "rc": 3, + "command_id": "NEWFI-260908-A-STAGINGEDGE-APPLY18", + "status": "BLOCKED", + "rc": 2, "host": "pve01", - "mode": "read-only", - "component": "signalbot-cr0116-package-provenance-exact-repro-rca", - "started_at_utc": "2026-09-08T14:01:49Z", - "finished_at_utc": "2026-09-08T14:01:52Z", + "mode": "change", + "component": "newfi-staging-trusted-edge-exact-cert-route-dns", + "started_at_utc": "2026-09-08T14:02:41Z", + "finished_at_utc": "2026-09-08T14:02:43Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "5bd7c78a9424a7cc58ebe1b721f1f1ae3b3977269fea1ccc250e2179684378c8", + "command_sha256": "f007220b742defa766caa4719481dccd36d25c4223170d3fd9cfda2083cb81c7", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, - "change_declared": false, + "change_declared": true, "result_contract_valid": true, - "result_contract_status": null, + "result_contract_status": "BLOCKED", "result_contract_error": null, - "command_rc": 3, + "command_rc": 2, "changes_made": false, "rollback_started": false, "rollback_restored": null, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "8c8358233518871d131c8d026e51b1aefd3e25c6283850f72543b6ad7919c7f3", - "sanitized_output_sha256": "8c8358233518871d131c8d026e51b1aefd3e25c6283850f72543b6ad7919c7f3", + "raw_evidence_sha256": "c2062d64a921d7db5cbfd0d1f1d941dbc87f3157fe3a33d4228831cb6585fcce", + "sanitized_output_sha256": "c2062d64a921d7db5cbfd0d1f1d941dbc87f3157fe3a33d4228831cb6585fcce", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "SB043O13_EXECUTION_IDENTITY={\"hostname\":\"pve01\",\"root\":true}\nERROR_REGISTER_CHECK=OK\nREFERENCE_CHECK=OK\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nSB043O13_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nSB043O13_VM170_CLUSTER={\"name\":\"core-apps\",\"node\":\"pve01\",\"status\":\"running\",\"type\":\"qemu\"}\nSB043O13_QGA_INPUT_BYTES=21117\nSB043O13_REPRODUCTION={\"new_calls_attempted\":[{\"captures_added\":0,\"function\":\"package_code_identity\",\"module\":\"code_identity\",\"status\":\"OK\"}],\"new_capture_count\":0,\"new_match\":null,\"new_meta\":{\"parse\":\"OK\",\"rc\":0,\"stderr_nonempty\":false},\"new_package_ids\":[],\"old_calls_attempted\":[{\"captures_added\":0,\"function\":\"package_code_identity\",\"module\":\"code_identity\",\"status\":\"OK\"}],\"old_candidate_functions\":[{\"args\":[\"package_dir\"],\"field_hits\":[],\"function\":\"package_code_identity\",\"lineno\":80,\"module\":\"code_identity\"},{\"args\":[\"baseline\",\"augmented\"],\"field_hits\":[],\"function\":\"verify_fold_artifact_pair\",\"lineno\":129,\"module\":\"evaluation_freeze\"},{\"args\":[\"artifacts\",\"forecasts\"],\"field_hits\":[],\"function\":\"verify_artifacts_against_forecasts\",\"lineno\":150,\"module\":\"evaluation_freeze\"},{\"args\":[],\"field_hits\":[\"source_tree_hash\",\"dependency_lock_hash\",\"executable_artifact_hash\",\"runtime_environment_hash\"],\"function\":\"verify_final_deployment_attestations\",\"lineno\":1944,\"module\":\"runtime_integrity\"},{\"args\":[],\"field_hits\":[\"source_tree_hash\",\"dependency_lock_hash\",\"build_recipe_hash\",\"executable_artifact_hash\",\"runtime_environment_hash\"],\"function\":\"required_retained_hashes\",\"lineno\":2674,\"module\":\"runtime_integrity\"},{\"args\":[],\"field_hits\":[],\"function\":\"verify_artifact_retention\",\"lineno\":2707,\"module\":\"runtime_integrity\"},{\"args\":[\"manifest\"],\"field_hits\":[],\"function\":\"verify_runtime_manifest\",\"lineno\":108,\"module\":\"runtime_manifest\"}],\"old_capture_count\":0,\"old_exact_match_count\":0,\"old_match\":null,\"old_meta\":{\"parse\":\"OK\",\"rc\":0,\"stderr_nonempty\":false},\"producer_key\":null,\"service_fingerprint_stable\":true}\nSB043O13_HOLDS=[\"OLD_PACKAGE_EXACT_PRODUCER_MATCH_COUNT_0\"]\nSB043O13_DECISION=HOLD_EXACT_PACKAGE_REPRODUCTION\nSB043O13_MUTATION_SCOPE=NONE_READ_ONLY\nSB043O13_GUEST_RC=3\nSB043O13_GUEST_STDERR_PRESENT=false\nSB043O13_HOLDS=[\"OLD_PACKAGE_EXACT_PRODUCER_MATCH_COUNT_0\"]\nSB043O13_DECISION=HOLD_EXACT_PACKAGE_REPRODUCTION\nSB043O13_MUTATION_SCOPE=NONE_READ_ONLY\n" + "output": "APPLY18_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY18\nMODE=change\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nTRUSTED_EDGEVM_MARKER=true\nPUBLIC_VPS_REJECT_MARKER=true\nCANONICAL_USERS=debian\nPOST_REBOOT_USERS=debian\nNETBIRD_STATUS_JSON_RC=0\nNETBIRD_STATUS_DETAIL_RC=0\nEDGEVM_OVERLAY_IP_COUNT=1\nEDGEVM_HOSTKEY_MATCH=true\nEDGEVM_HOSTKEY_ALGS=ssh-ed25519\nEDGEVM_SUDO_RC=0\nREMOTE_TRANSPORT_RC=0\nREMOTE_TRANSPORT_OK=true\nREMOTE_PREFLIGHT_RC=0\nREMOTE_PREFLIGHT_OK=false\nREMOTE_PREFLIGHT_REASON=TEMPLATE_SHAPE\nAPPLY18_REASON=REMOTE_PREFLIGHT_TEMPLATE_SHAPE\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"NEWFI-260908-A-STAGINGEDGE-APPLY18\",\"status\":\"BLOCKED\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index 99c5b459..0f3c6fa5 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,22 +1,22 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=SIGNALBOT-260908-PACKAGE-PROVENANCE-EXACT-REPRO-RCA-043ORIGIN13 -STATUS=FAIL -RC=3 +COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY18 +STATUS=BLOCKED +RC=2 HOST=pve01 -MODE=read-only -COMPONENT=signalbot-cr0116-package-provenance-exact-repro-rca +MODE=change +COMPONENT=newfi-staging-trusted-edge-exact-cert-route-dns REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=5bd7c78a9424a7cc58ebe1b721f1f1ae3b3977269fea1ccc250e2179684378c8 +COMMAND_SHA256=f007220b742defa766caa4719481dccd36d25c4223170d3fd9cfda2083cb81c7 DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true -CHANGE_DECLARED=false +CHANGE_DECLARED=true RESULT_CONTRACT_VALID=true -RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_STATUS=BLOCKED RESULT_CONTRACT_ERROR=NONE -COMMAND_RC=3 +COMMAND_RC=2 CHANGES_MADE=false ROLLBACK_STARTED=false ROLLBACK_RESTORED=null @@ -24,25 +24,34 @@ MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=8c8358233518871d131c8d026e51b1aefd3e25c6283850f72543b6ad7919c7f3 -SANITIZED_OUTPUT_SHA256=8c8358233518871d131c8d026e51b1aefd3e25c6283850f72543b6ad7919c7f3 +RAW_EVIDENCE_SHA256=c2062d64a921d7db5cbfd0d1f1d941dbc87f3157fe3a33d4228831cb6585fcce +SANITIZED_OUTPUT_SHA256=c2062d64a921d7db5cbfd0d1f1d941dbc87f3157fe3a33d4228831cb6585fcce OUTPUT_BEGIN -SB043O13_EXECUTION_IDENTITY={"hostname":"pve01","root":true} +APPLY18_BEGIN=true +COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY18 +MODE=change ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 REFERENCE_CHECK=OK -AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED -SB043O13_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d -SB043O13_VM170_CLUSTER={"name":"core-apps","node":"pve01","status":"running","type":"qemu"} -SB043O13_QGA_INPUT_BYTES=21117 -SB043O13_REPRODUCTION={"new_calls_attempted":[{"captures_added":0,"function":"package_code_identity","module":"code_identity","status":"OK"}],"new_capture_count":0,"new_match":null,"new_meta":{"parse":"OK","rc":0,"stderr_nonempty":false},"new_package_ids":[],"old_calls_attempted":[{"captures_added":0,"function":"package_code_identity","module":"code_identity","status":"OK"}],"old_candidate_functions":[{"args":["package_dir"],"field_hits":[],"function":"package_code_identity","lineno":80,"module":"code_identity"},{"args":["baseline","augmented"],"field_hits":[],"function":"verify_fold_artifact_pair","lineno":129,"module":"evaluation_freeze"},{"args":["artifacts","forecasts"],"field_hits":[],"function":"verify_artifacts_against_forecasts","lineno":150,"module":"evaluation_freeze"},{"args":[],"field_hits":["source_tree_hash","dependency_lock_hash","executable_artifact_hash","runtime_environment_hash"],"function":"verify_final_deployment_attestations","lineno":1944,"module":"runtime_integrity"},{"args":[],"field_hits":["source_tree_hash","dependency_lock_hash","build_recipe_hash","executable_artifact_hash","runtime_environment_hash"],"function":"required_retained_hashes","lineno":2674,"module":"runtime_integrity"},{"args":[],"field_hits":[],"function":"verify_artifact_retention","lineno":2707,"module":"runtime_integrity"},{"args":["manifest"],"field_hits":[],"function":"verify_runtime_manifest","lineno":108,"module":"runtime_manifest"}],"old_capture_count":0,"old_exact_match_count":0,"old_match":null,"old_meta":{"parse":"OK","rc":0,"stderr_nonempty":false},"producer_key":null,"service_fingerprint_stable":true} -SB043O13_HOLDS=["OLD_PACKAGE_EXACT_PRODUCER_MATCH_COUNT_0"] -SB043O13_DECISION=HOLD_EXACT_PACKAGE_REPRODUCTION -SB043O13_MUTATION_SCOPE=NONE_READ_ONLY -SB043O13_GUEST_RC=3 -SB043O13_GUEST_STDERR_PRESENT=false -SB043O13_HOLDS=["OLD_PACKAGE_EXACT_PRODUCER_MATCH_COUNT_0"] -SB043O13_DECISION=HOLD_EXACT_PACKAGE_REPRODUCTION -SB043O13_MUTATION_SCOPE=NONE_READ_ONLY +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d +TRUSTED_EDGEVM_MARKER=true +PUBLIC_VPS_REJECT_MARKER=true +CANONICAL_USERS=debian +POST_REBOOT_USERS=debian +NETBIRD_STATUS_JSON_RC=0 +NETBIRD_STATUS_DETAIL_RC=0 +EDGEVM_OVERLAY_IP_COUNT=1 +EDGEVM_HOSTKEY_MATCH=true +EDGEVM_HOSTKEY_ALGS=ssh-ed25519 +EDGEVM_SUDO_RC=0 +REMOTE_TRANSPORT_RC=0 +REMOTE_TRANSPORT_OK=true +REMOTE_PREFLIGHT_RC=0 +REMOTE_PREFLIGHT_OK=false +REMOTE_PREFLIGHT_REASON=TEMPLATE_SHAPE +APPLY18_REASON=REMOTE_PREFLIGHT_TEMPLATE_SHAPE +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"NEWFI-260908-A-STAGINGEDGE-APPLY18","status":"BLOCKED","changes_made":false,"rollback_started":false,"rollback_restored":null} OUTPUT_END CHAT_OUTPUT_END