runtime: publish SUPPORT-261010-WORKERS2-POLICY-ISOLATION-READONLY-99969R1

2026-10-10 06:40:00 +00:00
parent a24e213ded
commit dd18a6d00e
4 changed files with 266 additions and 148 deletions
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-261010-WORKERS2-POLICY-ISOLATION-READONLY-99969R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "workers2-policy-isolation-readonly",
+  "started_at_utc": "2026-10-10T06:39:57Z",
+  "finished_at_utc": "2026-10-10T06:39:59Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "bafae7e59e980fd361c34e5a710661db525eb592111b8e5091678cd34548bd56",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "f5136e2c49d4a8fac375da321a39c00fddfaa2d754ceaec19d3c4879267fa5d7",
+  "sanitized_output_sha256": "f5136e2c49d4a8fac375da321a39c00fddfaa2d754ceaec19d3c4879267fa5d7",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "WORKERS2_POLICY_ISOLATION_READONLY=V1\nMODE=read-only\nNO_CLOUD_RCLONE_OAUTH=true\nNO_PCT_RESTORE_START_STOP_CREATE=true\nNO_SYSTEMD_OR_PVE_CONFIGURATION_CHANGES=true\nDR_GUEST_BOOT_NETWORK_ISOLATION_PROVEN=false\nDR_GUEST_STORAGE_ISOLATION_PROVEN=false\nDR_VMID_RESERVED=false\nDR_ARCHIVE_STAGED=false\nISOLATED_DR_EXECUTED=false\nRPO_SLA_COMPLIANCE_PROVEN=false\nGFS_RETENTION_PROVEN=false\nACTIVE_RELEASE_SAMPLE_PIN_MATCHED=3\nACTIVE_RELEASE_ALL_29_PINS_RECHECKED=false\nCT112_CONFIG_READ_OK=true\nCT112_PROD_HAS_NET_CONFIG=true\nCT112_PROD_HAS_MP_CONFIG=false\nCT112_PROD_HAS_HOOKSCRIPT=false\nCT112_PROD_HAS_RAW_LXC_DIRECTIVES=false\nCT112_PROD_ONBOOT_ENABLED=true\nCT112_PROD_PRIVILEGED=false\nCT112_PROD_RUNNING=true\nPVE_CLUSTER_VMIDS_OBSERVED=13\nDR_VMID_20990_FREE_AT_SNAPSHOT=true\nDR_VMID_20990_NOT_RESERVED=true\nCT112_PVE_GUEST_LOCK_CONFIGURED=false\nSTORAGE_CONFIG_ROWS=2\nDR_ROOTDIR_CONFIG_CANDIDATES=1\nCT112_ROOTFS_CONFIG_PRESENT=true\nCT112_ROOTDIR_STORAGE_IS_CANDIDATE=true\nDR_CONFIG_ROOTDIR_MATCHES_SOURCE=true\nPVE_STORAGE_STATUS_READ_OK=true\nHOST_MEMORY_AVAILABLE_GIB_FLOOR=12\nPVE01_STAGING_AVAILABLE=true\nPVE01_STAGING_FREE_GIB_FLOOR=262\nPVE01_STAGING_DISTINCT_FROM_ROOT_FS=true\nPVE01_VARTMP_AVAILABLE=true\nPVE01_VARTMP_FREE_GIB_FLOOR=47\nPVE01_VARTMP_DISTINCT_FROM_ROOT_FS=false\nPOLICY_SEARCH_ROOTS_CONFIGURED=10\nPOLICY_FILES_INSPECTED_LIMITED=4\nPOLICY_RELEVANT_CONTENT_CANDIDATES=1\nPOLICY_RPO_TEXT_HITS=0\nPOLICY_GFS_TEXT_HITS=1\nPOLICY_BACKUPV2_LINKED_TEXT_HITS=0\nPOLICY_FILES_SKIPPED=0\nPOLICY_ROOT_ACTIVE_CONFIG_FILES=0\nPOLICY_ROOT_ACTIVE_SOURCE_FILES=0\nPOLICY_ROOT_ACTIVE_STATE_FILES=0\nPOLICY_ROOT_CONFIG_REPO_FILES=0\nPOLICY_ROOT_DESIRED_STATE_FILES=0\nPOLICY_ROOT_OPS_FILES=4\nPOLICY_SEARCH_EXHAUSTIVE=false\nRPO_POLICY_APPROVED_PROVEN=false\nGFS_POLICY_APPROVED_PROVEN=false\nDR_SAFETY_PLAN_APPROVED=false\nRPO_GFS_POLICY_CURRENT_ATTESTED=false\nDECISION=READONLY_POLICY_ISOLATION_FACTS_CAPTURED_NO_DR\nNEXT_GATE=APPROVED_POLICY_AND_EXPLICIT_DR_CHANGE_PLAN\nAUDIT_COMPLETE=false\nPRODUCTION_CHANGES_MADE=false\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_MUTATION\nEND_MARKER=true\nHOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"SUPPORT-261010-WORKERS2-POLICY-ISOLATION-READONLY-99969R1\",\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"OK\",\"version\":1}\n"
+}
@@ -0,0 +1,99 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-261010-WORKERS2-POLICY-ISOLATION-READONLY-99969R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=workers2-policy-isolation-readonly
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=bafae7e59e980fd361c34e5a710661db525eb592111b8e5091678cd34548bd56
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=f5136e2c49d4a8fac375da321a39c00fddfaa2d754ceaec19d3c4879267fa5d7
+SANITIZED_OUTPUT_SHA256=f5136e2c49d4a8fac375da321a39c00fddfaa2d754ceaec19d3c4879267fa5d7
+OUTPUT_BEGIN
+WORKERS2_POLICY_ISOLATION_READONLY=V1
+MODE=read-only
+NO_CLOUD_RCLONE_OAUTH=true
+NO_PCT_RESTORE_START_STOP_CREATE=true
+NO_SYSTEMD_OR_PVE_CONFIGURATION_CHANGES=true
+DR_GUEST_BOOT_NETWORK_ISOLATION_PROVEN=false
+DR_GUEST_STORAGE_ISOLATION_PROVEN=false
+DR_VMID_RESERVED=false
+DR_ARCHIVE_STAGED=false
+ISOLATED_DR_EXECUTED=false
+RPO_SLA_COMPLIANCE_PROVEN=false
+GFS_RETENTION_PROVEN=false
+ACTIVE_RELEASE_SAMPLE_PIN_MATCHED=3
+ACTIVE_RELEASE_ALL_29_PINS_RECHECKED=false
+CT112_CONFIG_READ_OK=true
+CT112_PROD_HAS_NET_CONFIG=true
+CT112_PROD_HAS_MP_CONFIG=false
+CT112_PROD_HAS_HOOKSCRIPT=false
+CT112_PROD_HAS_RAW_LXC_DIRECTIVES=false
+CT112_PROD_ONBOOT_ENABLED=true
+CT112_PROD_PRIVILEGED=false
+CT112_PROD_RUNNING=true
+PVE_CLUSTER_VMIDS_OBSERVED=13
+DR_VMID_20990_FREE_AT_SNAPSHOT=true
+DR_VMID_20990_NOT_RESERVED=true
+CT112_PVE_GUEST_LOCK_CONFIGURED=false
+STORAGE_CONFIG_ROWS=2
+DR_ROOTDIR_CONFIG_CANDIDATES=1
+CT112_ROOTFS_CONFIG_PRESENT=true
+CT112_ROOTDIR_STORAGE_IS_CANDIDATE=true
+DR_CONFIG_ROOTDIR_MATCHES_SOURCE=true
+PVE_STORAGE_STATUS_READ_OK=true
+HOST_MEMORY_AVAILABLE_GIB_FLOOR=12
+PVE01_STAGING_AVAILABLE=true
+PVE01_STAGING_FREE_GIB_FLOOR=262
+PVE01_STAGING_DISTINCT_FROM_ROOT_FS=true
+PVE01_VARTMP_AVAILABLE=true
+PVE01_VARTMP_FREE_GIB_FLOOR=47
+PVE01_VARTMP_DISTINCT_FROM_ROOT_FS=false
+POLICY_SEARCH_ROOTS_CONFIGURED=10
+POLICY_FILES_INSPECTED_LIMITED=4
+POLICY_RELEVANT_CONTENT_CANDIDATES=1
+POLICY_RPO_TEXT_HITS=0
+POLICY_GFS_TEXT_HITS=1
+POLICY_BACKUPV2_LINKED_TEXT_HITS=0
+POLICY_FILES_SKIPPED=0
+POLICY_ROOT_ACTIVE_CONFIG_FILES=0
+POLICY_ROOT_ACTIVE_SOURCE_FILES=0
+POLICY_ROOT_ACTIVE_STATE_FILES=0
+POLICY_ROOT_CONFIG_REPO_FILES=0
+POLICY_ROOT_DESIRED_STATE_FILES=0
+POLICY_ROOT_OPS_FILES=4
+POLICY_SEARCH_EXHAUSTIVE=false
+RPO_POLICY_APPROVED_PROVEN=false
+GFS_POLICY_APPROVED_PROVEN=false
+DR_SAFETY_PLAN_APPROVED=false
+RPO_GFS_POLICY_CURRENT_ATTESTED=false
+DECISION=READONLY_POLICY_ISOLATION_FACTS_CAPTURED_NO_DR
+NEXT_GATE=APPROVED_POLICY_AND_EXPLICIT_DR_CHANGE_PLAN
+AUDIT_COMPLETE=false
+PRODUCTION_CHANGES_MADE=false
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+END_MARKER=true
+HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"SUPPORT-261010-WORKERS2-POLICY-ISOLATION-READONLY-99969R1","rollback_restored":null,"rollback_started":false,"status":"OK","version":1}
+
+OUTPUT_END
+CHAT_OUTPUT_END
@@ -1 +1,38 @@
-{"schema_version":1,"channel":"homelab-runtime","command_id":"CONTEXT-AUTO-20261010T061701Z","status":"OK","rc":0,"host":"pve01","mode":"read-only","component":"cluster-context","started_at_utc":"2026-10-10T06:17:01Z","finished_at_utc":"2026-10-10T06:17:02Z","reference_register_checked":true,"reference_sha256":"5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66","error_register_checked":true,"error_register_sha256":"3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0","changes_made":false,"sanitized":true,"secrets_included":false,"private_addresses_included":false,"output":"AUTOMATIC_CLUSTER_CONTEXT_REFRESH=OK"}
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-261010-WORKERS2-POLICY-ISOLATION-READONLY-99969R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "workers2-policy-isolation-readonly",
+  "started_at_utc": "2026-10-10T06:39:57Z",
+  "finished_at_utc": "2026-10-10T06:39:59Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "bafae7e59e980fd361c34e5a710661db525eb592111b8e5091678cd34548bd56",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "f5136e2c49d4a8fac375da321a39c00fddfaa2d754ceaec19d3c4879267fa5d7",
+  "sanitized_output_sha256": "f5136e2c49d4a8fac375da321a39c00fddfaa2d754ceaec19d3c4879267fa5d7",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "WORKERS2_POLICY_ISOLATION_READONLY=V1\nMODE=read-only\nNO_CLOUD_RCLONE_OAUTH=true\nNO_PCT_RESTORE_START_STOP_CREATE=true\nNO_SYSTEMD_OR_PVE_CONFIGURATION_CHANGES=true\nDR_GUEST_BOOT_NETWORK_ISOLATION_PROVEN=false\nDR_GUEST_STORAGE_ISOLATION_PROVEN=false\nDR_VMID_RESERVED=false\nDR_ARCHIVE_STAGED=false\nISOLATED_DR_EXECUTED=false\nRPO_SLA_COMPLIANCE_PROVEN=false\nGFS_RETENTION_PROVEN=false\nACTIVE_RELEASE_SAMPLE_PIN_MATCHED=3\nACTIVE_RELEASE_ALL_29_PINS_RECHECKED=false\nCT112_CONFIG_READ_OK=true\nCT112_PROD_HAS_NET_CONFIG=true\nCT112_PROD_HAS_MP_CONFIG=false\nCT112_PROD_HAS_HOOKSCRIPT=false\nCT112_PROD_HAS_RAW_LXC_DIRECTIVES=false\nCT112_PROD_ONBOOT_ENABLED=true\nCT112_PROD_PRIVILEGED=false\nCT112_PROD_RUNNING=true\nPVE_CLUSTER_VMIDS_OBSERVED=13\nDR_VMID_20990_FREE_AT_SNAPSHOT=true\nDR_VMID_20990_NOT_RESERVED=true\nCT112_PVE_GUEST_LOCK_CONFIGURED=false\nSTORAGE_CONFIG_ROWS=2\nDR_ROOTDIR_CONFIG_CANDIDATES=1\nCT112_ROOTFS_CONFIG_PRESENT=true\nCT112_ROOTDIR_STORAGE_IS_CANDIDATE=true\nDR_CONFIG_ROOTDIR_MATCHES_SOURCE=true\nPVE_STORAGE_STATUS_READ_OK=true\nHOST_MEMORY_AVAILABLE_GIB_FLOOR=12\nPVE01_STAGING_AVAILABLE=true\nPVE01_STAGING_FREE_GIB_FLOOR=262\nPVE01_STAGING_DISTINCT_FROM_ROOT_FS=true\nPVE01_VARTMP_AVAILABLE=true\nPVE01_VARTMP_FREE_GIB_FLOOR=47\nPVE01_VARTMP_DISTINCT_FROM_ROOT_FS=false\nPOLICY_SEARCH_ROOTS_CONFIGURED=10\nPOLICY_FILES_INSPECTED_LIMITED=4\nPOLICY_RELEVANT_CONTENT_CANDIDATES=1\nPOLICY_RPO_TEXT_HITS=0\nPOLICY_GFS_TEXT_HITS=1\nPOLICY_BACKUPV2_LINKED_TEXT_HITS=0\nPOLICY_FILES_SKIPPED=0\nPOLICY_ROOT_ACTIVE_CONFIG_FILES=0\nPOLICY_ROOT_ACTIVE_SOURCE_FILES=0\nPOLICY_ROOT_ACTIVE_STATE_FILES=0\nPOLICY_ROOT_CONFIG_REPO_FILES=0\nPOLICY_ROOT_DESIRED_STATE_FILES=0\nPOLICY_ROOT_OPS_FILES=4\nPOLICY_SEARCH_EXHAUSTIVE=false\nRPO_POLICY_APPROVED_PROVEN=false\nGFS_POLICY_APPROVED_PROVEN=false\nDR_SAFETY_PLAN_APPROVED=false\nRPO_GFS_POLICY_CURRENT_ATTESTED=false\nDECISION=READONLY_POLICY_ISOLATION_FACTS_CAPTURED_NO_DR\nNEXT_GATE=APPROVED_POLICY_AND_EXPLICIT_DR_CHANGE_PLAN\nAUDIT_COMPLETE=false\nPRODUCTION_CHANGES_MADE=false\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_MUTATION\nEND_MARKER=true\nHOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"SUPPORT-261010-WORKERS2-POLICY-ISOLATION-READONLY-99969R1\",\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"OK\",\"version\":1}\n"
+}