runtime: publish KOW-260907-A-ICF4

runtime/history/KOW-260907-A-ICF4.json

@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "KOW-260907-A-ICF4",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "change",
+  "component": "kingofwolk-csp-img-connect-frame-production-enforcement",
+  "started_at_utc": "2026-09-07T15:45:39Z",
+  "finished_at_utc": "2026-09-07T15:47:06Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "34c56e819e3c9c684cbe4d935f3643a661da0a25330cc35f5b4b37a021d088f3",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": true,
+  "result_contract_valid": true,
+  "result_contract_status": "OK",
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": true,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "MUTATED",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "9d67df146b85ee116fa0f0388a356c76b6831bcfcd16a67686a8730261b53b79",
+  "sanitized_output_sha256": "9d67df146b85ee116fa0f0388a356c76b6831bcfcd16a67686a8730261b53b79",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "KOWAICF4_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nKOWAICF4_BRANCH=forum/kingofwolk-csp-baseline-20260907\nKOWAICF4_LOCAL_HEAD=3e5d8584ae6887c292cc910c5796e73d8d20aecd\nKOWAICF4_REMOTE_HEAD=3e5d8584ae6887c292cc910c5796e73d8d20aecd\nKOWAICF4_PARENT_HEAD=e4635c9997801a0ea65aad727270c88ee3bdb817\nKOWAICF4_COMMIT_SUBJECT=csp(kingofwolk): enforce image and network sources\nKOWAICF4_REPO_VALIDATION=PASS\nKOWAICF4_TESTS=PASS\nKOWAICF4_LIVE_SHA_BEFORE=28e855ff56c4844768f0e8606fe0edc2acb3f548a5c06fa15c0d80ae00e2bc1b\nKOWAICF4_LIVE_META_BEFORE=0:0:644\nKOWAICF4_PRE_REPORT_LOG_SHA256=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143\nKOWAICF4_PRE_REPORT_LINES=2\nKOWAICF4_PRE_CONTAINER_STATUS=running\nKOWAICF4_PRE_CONTAINER_RUNNING=YES\nKOWAICF4_PRE_CONTAINER_RESTARTING=NO\nKOWAICF4_PRE_NPMPLUS_HEALTH=healthy\nKOWAICF4_PRE_ROOT_HTTP=200\nKOWAICF4_PRE_LOGIN_HTTP=200\nKOWAICF4_PRE_REGISTER_HTTP=200\nKOWAICF4_PRE_SMILIES_HTTP=200\nKOWAICF4_PRE_THREAD_HTTP=200\nKOWAICF4_PRE_SERVICE_WORKER_HTTP=200\nKOWAICF4_PRE_WEBMANIFEST_HTTP=200\nKOWAICF4_PRE_ENFORCING_CSP_COUNT=1\nKOWAICF4_PRE_REPORT_ONLY_CSP_COUNT=1\nKOWAICF4_PRE_XFO=SAMEORIGIN\nKOWAICF4_PRE_COLLECTOR_GET=405\nKOWAICF4_PRE_COLLECTOR_ALLOW=POST\nKOWAICF4_BACKUP_SHA=28e855ff56c4844768f0e8606fe0edc2acb3f548a5c06fa15c0d80ae00e2bc1b\nKOWAICF4_REMOTE_CANDIDATE_SHA=fc9fb1dbdb6141bfb43a8122dcf3db435a94da48d0a0c02fe9dfae019b1439c5\nKOWAICF4_PHASE=APPLY1\nKOWAICF4_APPLY1_ROOT_HTTP=200\nKOWAICF4_APPLY1_LOGIN_HTTP=200\nKOWAICF4_APPLY1_REGISTER_HTTP=200\nKOWAICF4_APPLY1_SMILIES_HTTP=200\nKOWAICF4_APPLY1_THREAD_HTTP=200\nKOWAICF4_APPLY1_SERVICE_WORKER_HTTP=200\nKOWAICF4_APPLY1_WEBMANIFEST_HTTP=200\nKOWAICF4_APPLY1_ENFORCING_CSP_COUNT=1\nKOWAICF4_APPLY1_REPORT_ONLY_CSP_COUNT=1\nKOWAICF4_APPLY1_XFO=SAMEORIGIN\nKOWAICF4_APPLY1_COLLECTOR_GET=405\nKOWAICF4_APPLY1_COLLECTOR_ALLOW=POST\nKOWAICF4_APPLY1_REPORT_LOG_SHA256=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143\nKOWAICF4_APPLY1_REPORT_LINES=2\nKOWAICF4_APPLY1_CONTAINER_STATUS=running\nKOWAICF4_APPLY1_CONTAINER_RUNNING=YES\nKOWAICF4_APPLY1_CONTAINER_RESTARTING=NO\nKOWAICF4_APPLY1_NPMPLUS_HEALTH=healthy\nKOWAICF4_APPLY1=PASS\nKOWAICF4_PHASE=ROLLBACK_PROOF\nKOWAICF4_RBPROOF_ROOT_HTTP=200\nKOWAICF4_RBPROOF_LOGIN_HTTP=200\nKOWAICF4_RBPROOF_REGISTER_HTTP=200\nKOWAICF4_RBPROOF_SMILIES_HTTP=200\nKOWAICF4_RBPROOF_THREAD_HTTP=200\nKOWAICF4_RBPROOF_SERVICE_WORKER_HTTP=200\nKOWAICF4_RBPROOF_WEBMANIFEST_HTTP=200\nKOWAICF4_RBPROOF_ENFORCING_CSP_COUNT=1\nKOWAICF4_RBPROOF_REPORT_ONLY_CSP_COUNT=1\nKOWAICF4_RBPROOF_XFO=SAMEORIGIN\nKOWAICF4_RBPROOF_COLLECTOR_GET=405\nKOWAICF4_RBPROOF_COLLECTOR_ALLOW=POST\nKOWAICF4_RBPROOF_REPORT_LOG_SHA256=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143\nKOWAICF4_RBPROOF_REPORT_LINES=2\nKOWAICF4_RBPROOF_CONTAINER_STATUS=running\nKOWAICF4_RBPROOF_CONTAINER_RUNNING=YES\nKOWAICF4_RBPROOF_CONTAINER_RESTARTING=NO\nKOWAICF4_RBPROOF_NPMPLUS_HEALTH=healthy\nKOWAICF4_ROLLBACK_PROOF=PASS\nKOWAICF4_PHASE=FINAL_REAPPLY\nKOWAICF4_FINAL_ROOT_HTTP=200\nKOWAICF4_FINAL_LOGIN_HTTP=200\nKOWAICF4_FINAL_REGISTER_HTTP=200\nKOWAICF4_FINAL_SMILIES_HTTP=200\nKOWAICF4_FINAL_THREAD_HTTP=200\nKOWAICF4_FINAL_SERVICE_WORKER_HTTP=200\nKOWAICF4_FINAL_WEBMANIFEST_HTTP=200\nKOWAICF4_FINAL_ENFORCING_CSP_COUNT=1\nKOWAICF4_FINAL_REPORT_ONLY_CSP_COUNT=1\nKOWAICF4_FINAL_XFO=SAMEORIGIN\nKOWAICF4_FINAL_COLLECTOR_GET=405\nKOWAICF4_FINAL_COLLECTOR_ALLOW=POST\nKOWAICF4_FINAL_REPORT_LOG_SHA256=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143\nKOWAICF4_FINAL_REPORT_LINES=2\nKOWAICF4_FINAL_CONTAINER_STATUS=running\nKOWAICF4_FINAL_CONTAINER_RUNNING=YES\nKOWAICF4_FINAL_CONTAINER_RESTARTING=NO\nKOWAICF4_FINAL_NPMPLUS_HEALTH=healthy\nKOWAICF4_FINAL_EDGE_SHA=fc9fb1dbdb6141bfb43a8122dcf3db435a94da48d0a0c02fe9dfae019b1439c5\nKOWAICF4_FINAL_META=0:0:644\nKOWAICF4_FINAL_LOCAL_HEAD=3e5d8584ae6887c292cc910c5796e73d8d20aecd\nKOWAICF4_FINAL_REMOTE_HEAD=3e5d8584ae6887c292cc910c5796e73d8d20aecd\nKOWAICF4_STATUS=OK\nKOWAICF4_REASON=IMG_CONNECT_FRAME_ENFORCED_WITH_ROLLBACK_PROOF\nHOMELAB_RESULT_CONTRACT={\"changes_made\":true,\"command_id\":\"KOW-260907-A-ICF4\",\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"OK\",\"version\":1}\n"
+}

runtime/history/KOW-260907-A-ICF4.txt

@@ -0,0 +1,128 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=KOW-260907-A-ICF4
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=change
+COMPONENT=kingofwolk-csp-img-connect-frame-production-enforcement
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=34c56e819e3c9c684cbe4d935f3643a661da0a25330cc35f5b4b37a021d088f3
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=true
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=OK
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=true
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=MUTATED
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=9d67df146b85ee116fa0f0388a356c76b6831bcfcd16a67686a8730261b53b79
+SANITIZED_OUTPUT_SHA256=9d67df146b85ee116fa0f0388a356c76b6831bcfcd16a67686a8730261b53b79
+OUTPUT_BEGIN
+KOWAICF4_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
+KOWAICF4_BRANCH=forum/kingofwolk-csp-baseline-20260907
+KOWAICF4_LOCAL_HEAD=3e5d8584ae6887c292cc910c5796e73d8d20aecd
+KOWAICF4_REMOTE_HEAD=3e5d8584ae6887c292cc910c5796e73d8d20aecd
+KOWAICF4_PARENT_HEAD=e4635c9997801a0ea65aad727270c88ee3bdb817
+KOWAICF4_COMMIT_SUBJECT=csp(kingofwolk): enforce image and network sources
+KOWAICF4_REPO_VALIDATION=PASS
+KOWAICF4_TESTS=PASS
+KOWAICF4_LIVE_SHA_BEFORE=28e855ff56c4844768f0e8606fe0edc2acb3f548a5c06fa15c0d80ae00e2bc1b
+KOWAICF4_LIVE_META_BEFORE=0:0:644
+KOWAICF4_PRE_REPORT_LOG_SHA256=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143
+KOWAICF4_PRE_REPORT_LINES=2
+KOWAICF4_PRE_CONTAINER_STATUS=running
+KOWAICF4_PRE_CONTAINER_RUNNING=YES
+KOWAICF4_PRE_CONTAINER_RESTARTING=NO
+KOWAICF4_PRE_NPMPLUS_HEALTH=healthy
+KOWAICF4_PRE_ROOT_HTTP=200
+KOWAICF4_PRE_LOGIN_HTTP=200
+KOWAICF4_PRE_REGISTER_HTTP=200
+KOWAICF4_PRE_SMILIES_HTTP=200
+KOWAICF4_PRE_THREAD_HTTP=200
+KOWAICF4_PRE_SERVICE_WORKER_HTTP=200
+KOWAICF4_PRE_WEBMANIFEST_HTTP=200
+KOWAICF4_PRE_ENFORCING_CSP_COUNT=1
+KOWAICF4_PRE_REPORT_ONLY_CSP_COUNT=1
+KOWAICF4_PRE_XFO=SAMEORIGIN
+KOWAICF4_PRE_COLLECTOR_GET=405
+KOWAICF4_PRE_COLLECTOR_ALLOW=POST
+KOWAICF4_BACKUP_SHA=28e855ff56c4844768f0e8606fe0edc2acb3f548a5c06fa15c0d80ae00e2bc1b
+KOWAICF4_REMOTE_CANDIDATE_SHA=fc9fb1dbdb6141bfb43a8122dcf3db435a94da48d0a0c02fe9dfae019b1439c5
+KOWAICF4_PHASE=APPLY1
+KOWAICF4_APPLY1_ROOT_HTTP=200
+KOWAICF4_APPLY1_LOGIN_HTTP=200
+KOWAICF4_APPLY1_REGISTER_HTTP=200
+KOWAICF4_APPLY1_SMILIES_HTTP=200
+KOWAICF4_APPLY1_THREAD_HTTP=200
+KOWAICF4_APPLY1_SERVICE_WORKER_HTTP=200
+KOWAICF4_APPLY1_WEBMANIFEST_HTTP=200
+KOWAICF4_APPLY1_ENFORCING_CSP_COUNT=1
+KOWAICF4_APPLY1_REPORT_ONLY_CSP_COUNT=1
+KOWAICF4_APPLY1_XFO=SAMEORIGIN
+KOWAICF4_APPLY1_COLLECTOR_GET=405
+KOWAICF4_APPLY1_COLLECTOR_ALLOW=POST
+KOWAICF4_APPLY1_REPORT_LOG_SHA256=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143
+KOWAICF4_APPLY1_REPORT_LINES=2
+KOWAICF4_APPLY1_CONTAINER_STATUS=running
+KOWAICF4_APPLY1_CONTAINER_RUNNING=YES
+KOWAICF4_APPLY1_CONTAINER_RESTARTING=NO
+KOWAICF4_APPLY1_NPMPLUS_HEALTH=healthy
+KOWAICF4_APPLY1=PASS
+KOWAICF4_PHASE=ROLLBACK_PROOF
+KOWAICF4_RBPROOF_ROOT_HTTP=200
+KOWAICF4_RBPROOF_LOGIN_HTTP=200
+KOWAICF4_RBPROOF_REGISTER_HTTP=200
+KOWAICF4_RBPROOF_SMILIES_HTTP=200
+KOWAICF4_RBPROOF_THREAD_HTTP=200
+KOWAICF4_RBPROOF_SERVICE_WORKER_HTTP=200
+KOWAICF4_RBPROOF_WEBMANIFEST_HTTP=200
+KOWAICF4_RBPROOF_ENFORCING_CSP_COUNT=1
+KOWAICF4_RBPROOF_REPORT_ONLY_CSP_COUNT=1
+KOWAICF4_RBPROOF_XFO=SAMEORIGIN
+KOWAICF4_RBPROOF_COLLECTOR_GET=405
+KOWAICF4_RBPROOF_COLLECTOR_ALLOW=POST
+KOWAICF4_RBPROOF_REPORT_LOG_SHA256=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143
+KOWAICF4_RBPROOF_REPORT_LINES=2
+KOWAICF4_RBPROOF_CONTAINER_STATUS=running
+KOWAICF4_RBPROOF_CONTAINER_RUNNING=YES
+KOWAICF4_RBPROOF_CONTAINER_RESTARTING=NO
+KOWAICF4_RBPROOF_NPMPLUS_HEALTH=healthy
+KOWAICF4_ROLLBACK_PROOF=PASS
+KOWAICF4_PHASE=FINAL_REAPPLY
+KOWAICF4_FINAL_ROOT_HTTP=200
+KOWAICF4_FINAL_LOGIN_HTTP=200
+KOWAICF4_FINAL_REGISTER_HTTP=200
+KOWAICF4_FINAL_SMILIES_HTTP=200
+KOWAICF4_FINAL_THREAD_HTTP=200
+KOWAICF4_FINAL_SERVICE_WORKER_HTTP=200
+KOWAICF4_FINAL_WEBMANIFEST_HTTP=200
+KOWAICF4_FINAL_ENFORCING_CSP_COUNT=1
+KOWAICF4_FINAL_REPORT_ONLY_CSP_COUNT=1
+KOWAICF4_FINAL_XFO=SAMEORIGIN
+KOWAICF4_FINAL_COLLECTOR_GET=405
+KOWAICF4_FINAL_COLLECTOR_ALLOW=POST
+KOWAICF4_FINAL_REPORT_LOG_SHA256=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143
+KOWAICF4_FINAL_REPORT_LINES=2
+KOWAICF4_FINAL_CONTAINER_STATUS=running
+KOWAICF4_FINAL_CONTAINER_RUNNING=YES
+KOWAICF4_FINAL_CONTAINER_RESTARTING=NO
+KOWAICF4_FINAL_NPMPLUS_HEALTH=healthy
+KOWAICF4_FINAL_EDGE_SHA=fc9fb1dbdb6141bfb43a8122dcf3db435a94da48d0a0c02fe9dfae019b1439c5
+KOWAICF4_FINAL_META=0:0:644
+KOWAICF4_FINAL_LOCAL_HEAD=3e5d8584ae6887c292cc910c5796e73d8d20aecd
+KOWAICF4_FINAL_REMOTE_HEAD=3e5d8584ae6887c292cc910c5796e73d8d20aecd
+KOWAICF4_STATUS=OK
+KOWAICF4_REASON=IMG_CONNECT_FRAME_ENFORCED_WITH_ROLLBACK_PROOF
+HOMELAB_RESULT_CONTRACT={"changes_made":true,"command_id":"KOW-260907-A-ICF4","rollback_restored":null,"rollback_started":false,"status":"OK","version":1}
+
+OUTPUT_END
+CHAT_OUTPUT_END

runtime/latest.json

@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "KOW-260907-A-ICF3",
+  "command_id": "KOW-260907-A-ICF4",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
   "mode": "change",
-  "component": "kingofwolk-csp-img-connect-frame-git-promotion",
-  "started_at_utc": "2026-09-07T15:37:01Z",
-  "finished_at_utc": "2026-09-07T15:37:17Z",
+  "component": "kingofwolk-csp-img-connect-frame-production-enforcement",
+  "started_at_utc": "2026-09-07T15:45:39Z",
+  "finished_at_utc": "2026-09-07T15:47:06Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "b77e9cf7b8a478c10947e4c583a69ec89f46c0504e1d7e924a9862b1d0d0d8e0",
+  "command_sha256": "34c56e819e3c9c684cbe4d935f3643a661da0a25330cc35f5b4b37a021d088f3",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "2bb8b0e9c025e7fcc301b44f8c4d3ea89a2d8578bc06920f3373eb1a8d956349",
-  "sanitized_output_sha256": "2bb8b0e9c025e7fcc301b44f8c4d3ea89a2d8578bc06920f3373eb1a8d956349",
+  "raw_evidence_sha256": "9d67df146b85ee116fa0f0388a356c76b6831bcfcd16a67686a8730261b53b79",
+  "sanitized_output_sha256": "9d67df146b85ee116fa0f0388a356c76b6831bcfcd16a67686a8730261b53b79",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "KOWAICF3_BRANCH=forum/kingofwolk-csp-baseline-20260907\nKOWAICF3_LOCAL_HEAD_BEFORE=e4635c9997801a0ea65aad727270c88ee3bdb817\nKOWAICF3_REMOTE_HEAD_BEFORE=e4635c9997801a0ea65aad727270c88ee3bdb817\nKOWAICF3_WORKTREE_CLEAN_BEFORE=YES\nKOWAICF3_SOURCE_SHA_BEFORE=28e855ff56c4844768f0e8606fe0edc2acb3f548a5c06fa15c0d80ae00e2bc1b\nKOWAICF3_CANDIDATE_SHA256=fc9fb1dbdb6141bfb43a8122dcf3db435a94da48d0a0c02fe9dfae019b1439c5\nKOWAICF3_PROD_EDGE_SHA_BEFORE=28e855ff56c4844768f0e8606fe0edc2acb3f548a5c06fa15c0d80ae00e2bc1b\nKOWAICF3_REPORT_LOG_SHA_BEFORE=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143\nKOWAICF3_REPORT_LINES_BEFORE=2\nKOWAICF3_NPMPLUS_HEALTH_BEFORE=healthy\nKOWAICF3_REPO_VALIDATION_BEFORE=PASS\nKOWAICF3_TESTS_BEFORE=PASS\nKOWAICF3_DIFF_EXACT=YES\nKOWAICF3_REPO_VALIDATION_AFTER=PASS\nKOWAICF3_TESTS_AFTER=PASS\nKOWAICF3_LOCAL_HEAD_AFTER=3e5d8584ae6887c292cc910c5796e73d8d20aecd\nKOWAICF3_REMOTE_HEAD_AFTER=3e5d8584ae6887c292cc910c5796e73d8d20aecd\nKOWAICF3_SOURCE_SHA_AFTER=fc9fb1dbdb6141bfb43a8122dcf3db435a94da48d0a0c02fe9dfae019b1439c5\nKOWAICF3_PROD_EDGE_SHA_AFTER=28e855ff56c4844768f0e8606fe0edc2acb3f548a5c06fa15c0d80ae00e2bc1b\nKOWAICF3_REPORT_LOG_SHA_AFTER=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143\nKOWAICF3_REPORT_LINES_AFTER=2\nKOWAICF3_PRODUCTION_CHANGED=NO\nKOWAICF3_STATUS=OK\nKOWAICF3_REASON=IMG_CONNECT_FRAME_ENFORCEMENT_SOURCE_COMMITTED_AND_PUSHED\nHOMELAB_RESULT_CONTRACT={\"changes_made\":true,\"command_id\":\"KOW-260907-A-ICF3\",\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"OK\",\"version\":1}\n"
+  "output": "KOWAICF4_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nKOWAICF4_BRANCH=forum/kingofwolk-csp-baseline-20260907\nKOWAICF4_LOCAL_HEAD=3e5d8584ae6887c292cc910c5796e73d8d20aecd\nKOWAICF4_REMOTE_HEAD=3e5d8584ae6887c292cc910c5796e73d8d20aecd\nKOWAICF4_PARENT_HEAD=e4635c9997801a0ea65aad727270c88ee3bdb817\nKOWAICF4_COMMIT_SUBJECT=csp(kingofwolk): enforce image and network sources\nKOWAICF4_REPO_VALIDATION=PASS\nKOWAICF4_TESTS=PASS\nKOWAICF4_LIVE_SHA_BEFORE=28e855ff56c4844768f0e8606fe0edc2acb3f548a5c06fa15c0d80ae00e2bc1b\nKOWAICF4_LIVE_META_BEFORE=0:0:644\nKOWAICF4_PRE_REPORT_LOG_SHA256=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143\nKOWAICF4_PRE_REPORT_LINES=2\nKOWAICF4_PRE_CONTAINER_STATUS=running\nKOWAICF4_PRE_CONTAINER_RUNNING=YES\nKOWAICF4_PRE_CONTAINER_RESTARTING=NO\nKOWAICF4_PRE_NPMPLUS_HEALTH=healthy\nKOWAICF4_PRE_ROOT_HTTP=200\nKOWAICF4_PRE_LOGIN_HTTP=200\nKOWAICF4_PRE_REGISTER_HTTP=200\nKOWAICF4_PRE_SMILIES_HTTP=200\nKOWAICF4_PRE_THREAD_HTTP=200\nKOWAICF4_PRE_SERVICE_WORKER_HTTP=200\nKOWAICF4_PRE_WEBMANIFEST_HTTP=200\nKOWAICF4_PRE_ENFORCING_CSP_COUNT=1\nKOWAICF4_PRE_REPORT_ONLY_CSP_COUNT=1\nKOWAICF4_PRE_XFO=SAMEORIGIN\nKOWAICF4_PRE_COLLECTOR_GET=405\nKOWAICF4_PRE_COLLECTOR_ALLOW=POST\nKOWAICF4_BACKUP_SHA=28e855ff56c4844768f0e8606fe0edc2acb3f548a5c06fa15c0d80ae00e2bc1b\nKOWAICF4_REMOTE_CANDIDATE_SHA=fc9fb1dbdb6141bfb43a8122dcf3db435a94da48d0a0c02fe9dfae019b1439c5\nKOWAICF4_PHASE=APPLY1\nKOWAICF4_APPLY1_ROOT_HTTP=200\nKOWAICF4_APPLY1_LOGIN_HTTP=200\nKOWAICF4_APPLY1_REGISTER_HTTP=200\nKOWAICF4_APPLY1_SMILIES_HTTP=200\nKOWAICF4_APPLY1_THREAD_HTTP=200\nKOWAICF4_APPLY1_SERVICE_WORKER_HTTP=200\nKOWAICF4_APPLY1_WEBMANIFEST_HTTP=200\nKOWAICF4_APPLY1_ENFORCING_CSP_COUNT=1\nKOWAICF4_APPLY1_REPORT_ONLY_CSP_COUNT=1\nKOWAICF4_APPLY1_XFO=SAMEORIGIN\nKOWAICF4_APPLY1_COLLECTOR_GET=405\nKOWAICF4_APPLY1_COLLECTOR_ALLOW=POST\nKOWAICF4_APPLY1_REPORT_LOG_SHA256=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143\nKOWAICF4_APPLY1_REPORT_LINES=2\nKOWAICF4_APPLY1_CONTAINER_STATUS=running\nKOWAICF4_APPLY1_CONTAINER_RUNNING=YES\nKOWAICF4_APPLY1_CONTAINER_RESTARTING=NO\nKOWAICF4_APPLY1_NPMPLUS_HEALTH=healthy\nKOWAICF4_APPLY1=PASS\nKOWAICF4_PHASE=ROLLBACK_PROOF\nKOWAICF4_RBPROOF_ROOT_HTTP=200\nKOWAICF4_RBPROOF_LOGIN_HTTP=200\nKOWAICF4_RBPROOF_REGISTER_HTTP=200\nKOWAICF4_RBPROOF_SMILIES_HTTP=200\nKOWAICF4_RBPROOF_THREAD_HTTP=200\nKOWAICF4_RBPROOF_SERVICE_WORKER_HTTP=200\nKOWAICF4_RBPROOF_WEBMANIFEST_HTTP=200\nKOWAICF4_RBPROOF_ENFORCING_CSP_COUNT=1\nKOWAICF4_RBPROOF_REPORT_ONLY_CSP_COUNT=1\nKOWAICF4_RBPROOF_XFO=SAMEORIGIN\nKOWAICF4_RBPROOF_COLLECTOR_GET=405\nKOWAICF4_RBPROOF_COLLECTOR_ALLOW=POST\nKOWAICF4_RBPROOF_REPORT_LOG_SHA256=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143\nKOWAICF4_RBPROOF_REPORT_LINES=2\nKOWAICF4_RBPROOF_CONTAINER_STATUS=running\nKOWAICF4_RBPROOF_CONTAINER_RUNNING=YES\nKOWAICF4_RBPROOF_CONTAINER_RESTARTING=NO\nKOWAICF4_RBPROOF_NPMPLUS_HEALTH=healthy\nKOWAICF4_ROLLBACK_PROOF=PASS\nKOWAICF4_PHASE=FINAL_REAPPLY\nKOWAICF4_FINAL_ROOT_HTTP=200\nKOWAICF4_FINAL_LOGIN_HTTP=200\nKOWAICF4_FINAL_REGISTER_HTTP=200\nKOWAICF4_FINAL_SMILIES_HTTP=200\nKOWAICF4_FINAL_THREAD_HTTP=200\nKOWAICF4_FINAL_SERVICE_WORKER_HTTP=200\nKOWAICF4_FINAL_WEBMANIFEST_HTTP=200\nKOWAICF4_FINAL_ENFORCING_CSP_COUNT=1\nKOWAICF4_FINAL_REPORT_ONLY_CSP_COUNT=1\nKOWAICF4_FINAL_XFO=SAMEORIGIN\nKOWAICF4_FINAL_COLLECTOR_GET=405\nKOWAICF4_FINAL_COLLECTOR_ALLOW=POST\nKOWAICF4_FINAL_REPORT_LOG_SHA256=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143\nKOWAICF4_FINAL_REPORT_LINES=2\nKOWAICF4_FINAL_CONTAINER_STATUS=running\nKOWAICF4_FINAL_CONTAINER_RUNNING=YES\nKOWAICF4_FINAL_CONTAINER_RESTARTING=NO\nKOWAICF4_FINAL_NPMPLUS_HEALTH=healthy\nKOWAICF4_FINAL_EDGE_SHA=fc9fb1dbdb6141bfb43a8122dcf3db435a94da48d0a0c02fe9dfae019b1439c5\nKOWAICF4_FINAL_META=0:0:644\nKOWAICF4_FINAL_LOCAL_HEAD=3e5d8584ae6887c292cc910c5796e73d8d20aecd\nKOWAICF4_FINAL_REMOTE_HEAD=3e5d8584ae6887c292cc910c5796e73d8d20aecd\nKOWAICF4_STATUS=OK\nKOWAICF4_REASON=IMG_CONNECT_FRAME_ENFORCED_WITH_ROLLBACK_PROOF\nHOMELAB_RESULT_CONTRACT={\"changes_made\":true,\"command_id\":\"KOW-260907-A-ICF4\",\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"OK\",\"version\":1}\n"
 }

runtime/latest.txt

@@ -1,15 +1,15 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=KOW-260907-A-ICF3
+COMMAND_ID=KOW-260907-A-ICF4
 STATUS=OK
 RC=0
 HOST=pve01
 MODE=change
-COMPONENT=kingofwolk-csp-img-connect-frame-git-promotion
+COMPONENT=kingofwolk-csp-img-connect-frame-production-enforcement
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=b77e9cf7b8a478c10947e4c583a69ec89f46c0504e1d7e924a9862b1d0d0d8e0
+COMMAND_SHA256=34c56e819e3c9c684cbe4d935f3643a661da0a25330cc35f5b4b37a021d088f3
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=true
@@ -24,34 +24,105 @@ MUTATION_OUTCOME=MUTATED
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=2bb8b0e9c025e7fcc301b44f8c4d3ea89a2d8578bc06920f3373eb1a8d956349
-SANITIZED_OUTPUT_SHA256=2bb8b0e9c025e7fcc301b44f8c4d3ea89a2d8578bc06920f3373eb1a8d956349
+RAW_EVIDENCE_SHA256=9d67df146b85ee116fa0f0388a356c76b6831bcfcd16a67686a8730261b53b79
+SANITIZED_OUTPUT_SHA256=9d67df146b85ee116fa0f0388a356c76b6831bcfcd16a67686a8730261b53b79
 OUTPUT_BEGIN
-KOWAICF3_BRANCH=forum/kingofwolk-csp-baseline-20260907
-KOWAICF3_LOCAL_HEAD_BEFORE=e4635c9997801a0ea65aad727270c88ee3bdb817
-KOWAICF3_REMOTE_HEAD_BEFORE=e4635c9997801a0ea65aad727270c88ee3bdb817
-KOWAICF3_WORKTREE_CLEAN_BEFORE=YES
-KOWAICF3_SOURCE_SHA_BEFORE=28e855ff56c4844768f0e8606fe0edc2acb3f548a5c06fa15c0d80ae00e2bc1b
-KOWAICF3_CANDIDATE_SHA256=fc9fb1dbdb6141bfb43a8122dcf3db435a94da48d0a0c02fe9dfae019b1439c5
-KOWAICF3_PROD_EDGE_SHA_BEFORE=28e855ff56c4844768f0e8606fe0edc2acb3f548a5c06fa15c0d80ae00e2bc1b
-KOWAICF3_REPORT_LOG_SHA_BEFORE=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143
-KOWAICF3_REPORT_LINES_BEFORE=2
-KOWAICF3_NPMPLUS_HEALTH_BEFORE=healthy
-KOWAICF3_REPO_VALIDATION_BEFORE=PASS
-KOWAICF3_TESTS_BEFORE=PASS
-KOWAICF3_DIFF_EXACT=YES
-KOWAICF3_REPO_VALIDATION_AFTER=PASS
-KOWAICF3_TESTS_AFTER=PASS
-KOWAICF3_LOCAL_HEAD_AFTER=3e5d8584ae6887c292cc910c5796e73d8d20aecd
-KOWAICF3_REMOTE_HEAD_AFTER=3e5d8584ae6887c292cc910c5796e73d8d20aecd
-KOWAICF3_SOURCE_SHA_AFTER=fc9fb1dbdb6141bfb43a8122dcf3db435a94da48d0a0c02fe9dfae019b1439c5
-KOWAICF3_PROD_EDGE_SHA_AFTER=28e855ff56c4844768f0e8606fe0edc2acb3f548a5c06fa15c0d80ae00e2bc1b
-KOWAICF3_REPORT_LOG_SHA_AFTER=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143
-KOWAICF3_REPORT_LINES_AFTER=2
-KOWAICF3_PRODUCTION_CHANGED=NO
-KOWAICF3_STATUS=OK
-KOWAICF3_REASON=IMG_CONNECT_FRAME_ENFORCEMENT_SOURCE_COMMITTED_AND_PUSHED
-HOMELAB_RESULT_CONTRACT={"changes_made":true,"command_id":"KOW-260907-A-ICF3","rollback_restored":null,"rollback_started":false,"status":"OK","version":1}
+KOWAICF4_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
+KOWAICF4_BRANCH=forum/kingofwolk-csp-baseline-20260907
+KOWAICF4_LOCAL_HEAD=3e5d8584ae6887c292cc910c5796e73d8d20aecd
+KOWAICF4_REMOTE_HEAD=3e5d8584ae6887c292cc910c5796e73d8d20aecd
+KOWAICF4_PARENT_HEAD=e4635c9997801a0ea65aad727270c88ee3bdb817
+KOWAICF4_COMMIT_SUBJECT=csp(kingofwolk): enforce image and network sources
+KOWAICF4_REPO_VALIDATION=PASS
+KOWAICF4_TESTS=PASS
+KOWAICF4_LIVE_SHA_BEFORE=28e855ff56c4844768f0e8606fe0edc2acb3f548a5c06fa15c0d80ae00e2bc1b
+KOWAICF4_LIVE_META_BEFORE=0:0:644
+KOWAICF4_PRE_REPORT_LOG_SHA256=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143
+KOWAICF4_PRE_REPORT_LINES=2
+KOWAICF4_PRE_CONTAINER_STATUS=running
+KOWAICF4_PRE_CONTAINER_RUNNING=YES
+KOWAICF4_PRE_CONTAINER_RESTARTING=NO
+KOWAICF4_PRE_NPMPLUS_HEALTH=healthy
+KOWAICF4_PRE_ROOT_HTTP=200
+KOWAICF4_PRE_LOGIN_HTTP=200
+KOWAICF4_PRE_REGISTER_HTTP=200
+KOWAICF4_PRE_SMILIES_HTTP=200
+KOWAICF4_PRE_THREAD_HTTP=200
+KOWAICF4_PRE_SERVICE_WORKER_HTTP=200
+KOWAICF4_PRE_WEBMANIFEST_HTTP=200
+KOWAICF4_PRE_ENFORCING_CSP_COUNT=1
+KOWAICF4_PRE_REPORT_ONLY_CSP_COUNT=1
+KOWAICF4_PRE_XFO=SAMEORIGIN
+KOWAICF4_PRE_COLLECTOR_GET=405
+KOWAICF4_PRE_COLLECTOR_ALLOW=POST
+KOWAICF4_BACKUP_SHA=28e855ff56c4844768f0e8606fe0edc2acb3f548a5c06fa15c0d80ae00e2bc1b
+KOWAICF4_REMOTE_CANDIDATE_SHA=fc9fb1dbdb6141bfb43a8122dcf3db435a94da48d0a0c02fe9dfae019b1439c5
+KOWAICF4_PHASE=APPLY1
+KOWAICF4_APPLY1_ROOT_HTTP=200
+KOWAICF4_APPLY1_LOGIN_HTTP=200
+KOWAICF4_APPLY1_REGISTER_HTTP=200
+KOWAICF4_APPLY1_SMILIES_HTTP=200
+KOWAICF4_APPLY1_THREAD_HTTP=200
+KOWAICF4_APPLY1_SERVICE_WORKER_HTTP=200
+KOWAICF4_APPLY1_WEBMANIFEST_HTTP=200
+KOWAICF4_APPLY1_ENFORCING_CSP_COUNT=1
+KOWAICF4_APPLY1_REPORT_ONLY_CSP_COUNT=1
+KOWAICF4_APPLY1_XFO=SAMEORIGIN
+KOWAICF4_APPLY1_COLLECTOR_GET=405
+KOWAICF4_APPLY1_COLLECTOR_ALLOW=POST
+KOWAICF4_APPLY1_REPORT_LOG_SHA256=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143
+KOWAICF4_APPLY1_REPORT_LINES=2
+KOWAICF4_APPLY1_CONTAINER_STATUS=running
+KOWAICF4_APPLY1_CONTAINER_RUNNING=YES
+KOWAICF4_APPLY1_CONTAINER_RESTARTING=NO
+KOWAICF4_APPLY1_NPMPLUS_HEALTH=healthy
+KOWAICF4_APPLY1=PASS
+KOWAICF4_PHASE=ROLLBACK_PROOF
+KOWAICF4_RBPROOF_ROOT_HTTP=200
+KOWAICF4_RBPROOF_LOGIN_HTTP=200
+KOWAICF4_RBPROOF_REGISTER_HTTP=200
+KOWAICF4_RBPROOF_SMILIES_HTTP=200
+KOWAICF4_RBPROOF_THREAD_HTTP=200
+KOWAICF4_RBPROOF_SERVICE_WORKER_HTTP=200
+KOWAICF4_RBPROOF_WEBMANIFEST_HTTP=200
+KOWAICF4_RBPROOF_ENFORCING_CSP_COUNT=1
+KOWAICF4_RBPROOF_REPORT_ONLY_CSP_COUNT=1
+KOWAICF4_RBPROOF_XFO=SAMEORIGIN
+KOWAICF4_RBPROOF_COLLECTOR_GET=405
+KOWAICF4_RBPROOF_COLLECTOR_ALLOW=POST
+KOWAICF4_RBPROOF_REPORT_LOG_SHA256=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143
+KOWAICF4_RBPROOF_REPORT_LINES=2
+KOWAICF4_RBPROOF_CONTAINER_STATUS=running
+KOWAICF4_RBPROOF_CONTAINER_RUNNING=YES
+KOWAICF4_RBPROOF_CONTAINER_RESTARTING=NO
+KOWAICF4_RBPROOF_NPMPLUS_HEALTH=healthy
+KOWAICF4_ROLLBACK_PROOF=PASS
+KOWAICF4_PHASE=FINAL_REAPPLY
+KOWAICF4_FINAL_ROOT_HTTP=200
+KOWAICF4_FINAL_LOGIN_HTTP=200
+KOWAICF4_FINAL_REGISTER_HTTP=200
+KOWAICF4_FINAL_SMILIES_HTTP=200
+KOWAICF4_FINAL_THREAD_HTTP=200
+KOWAICF4_FINAL_SERVICE_WORKER_HTTP=200
+KOWAICF4_FINAL_WEBMANIFEST_HTTP=200
+KOWAICF4_FINAL_ENFORCING_CSP_COUNT=1
+KOWAICF4_FINAL_REPORT_ONLY_CSP_COUNT=1
+KOWAICF4_FINAL_XFO=SAMEORIGIN
+KOWAICF4_FINAL_COLLECTOR_GET=405
+KOWAICF4_FINAL_COLLECTOR_ALLOW=POST
+KOWAICF4_FINAL_REPORT_LOG_SHA256=2f7977cbfaed7953bd70033c0cf92138eedf974f5886fadf4b4971f2d00a4143
+KOWAICF4_FINAL_REPORT_LINES=2
+KOWAICF4_FINAL_CONTAINER_STATUS=running
+KOWAICF4_FINAL_CONTAINER_RUNNING=YES
+KOWAICF4_FINAL_CONTAINER_RESTARTING=NO
+KOWAICF4_FINAL_NPMPLUS_HEALTH=healthy
+KOWAICF4_FINAL_EDGE_SHA=fc9fb1dbdb6141bfb43a8122dcf3db435a94da48d0a0c02fe9dfae019b1439c5
+KOWAICF4_FINAL_META=0:0:644
+KOWAICF4_FINAL_LOCAL_HEAD=3e5d8584ae6887c292cc910c5796e73d8d20aecd
+KOWAICF4_FINAL_REMOTE_HEAD=3e5d8584ae6887c292cc910c5796e73d8d20aecd
+KOWAICF4_STATUS=OK
+KOWAICF4_REASON=IMG_CONNECT_FRAME_ENFORCED_WITH_ROLLBACK_PROOF
+HOMELAB_RESULT_CONTRACT={"changes_made":true,"command_id":"KOW-260907-A-ICF4","rollback_restored":null,"rollback_started":false,"status":"OK","version":1}
 
 OUTPUT_END
 CHAT_OUTPUT_END