diff --git a/runtime/history/HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z.json b/runtime/history/HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z.json new file mode 100644 index 0000000..bb388d9 --- /dev/null +++ b/runtime/history/HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "verify", + "component": "cluster-knowledge-base-error-system", + "started_at_utc": "2026-08-06T00:52:50Z", + "finished_at_utc": "2026-08-06T00:52:56Z", + "reference_register_checked": true, + "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e", + "error_register_checked": true, + "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83", + "command_sha256": "9aa7aea2adb5fc39dc68be0b59ad2e6495c9d4cebd794574516605a90a26fba0", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "4086e3b3e2072c37c68046215cf7e09ecfd8b6561c9f92a5c356c076ada99096", + "sanitized_output_sha256": "4086e3b3e2072c37c68046215cf7e09ecfd8b6561c9f92a5c356c076ada99096", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z\",\"command_rc\":0,\"control_plane_error\":null,\"mutation_outcome\":\"NO_MUTATION\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"OK\",\"version\":1}\n{\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z\",\"command_rc\":0,\"control_plane_error\":null,\"exact_error\":null,\"identity_confirmed\":true,\"mutation_outcome\":\"NO_MUTATION\",\"next_step\":\"Use the target result only after its identity and all runner fields are reviewed. If the target proved one safe path, prepare the single atomic ten-path transaction through that path.\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"schema\":\"homelab.exact-result-state-bind.v3\",\"status\":\"OK\",\"target\":{\"adapter_state_sha256\":\"63ad60c637bfd0071cb6fcd7ff34d2c32d94be3b8b6a3763eb1c41f7d9c18274\",\"allowed_path_diagnostics\":{\"actions_workflow_count\":null,\"admin_branch_protection_change_capability\":null,\"admin_branch_protection_change_selected\":null,\"candidate_branch_exists\":null,\"documented_automation_write_path\":null,\"dry_run_corroborative_only\":null,\"main_user_can_merge\":null,\"main_user_can_push\":null,\"matching_protection_rule_count\":null,\"merge_styles\":[],\"other_write_capable_collaborator_count\":null,\"owner_admin_direct_push_bypass_proven\":null,\"pull_request_api_readable\":null,\"pull_requests_enabled\":null,\"read_write_deploy_key_count\":null,\"service_account_or_deploy_key_path_selected\":null,\"temp_branch_push_dry_run_allowed\":null,\"workflow_or_bot_path_selected\":null,\"write_capable_deploy_key_available_to_current_transaction\":null,\"write_capable_team_count\":null},\"capsule_sha256\":\"57eb9f0002df9890f0d0ed3528922fe14c7a84556d3cce7c881f90af961657a3\",\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R7-20260806T005000Z\",\"command_rc\":3,\"control_plane_error\":null,\"exact_error\":{\"code\":\"UNEXPECTED_READ_ONLY_DIAGNOSTIC_FAILURE\",\"evidence\":{\"exception\":\"KeyError\"},\"message\":\"Unexpected exception in read-only diagnostic\"},\"identity\":{\"active\":null,\"api_auth_mode\":\"None\",\"api_identity_verified\":null,\"candidate_count\":null,\"credential_source\":\"None\",\"credential_values_exposed\":null,\"git_ls_remote_verified\":null,\"permission\":null,\"repository_permissions\":{\"admin\":null,\"pull\":null,\"push\":null},\"repository_pull_permission_verified\":null,\"repository_push_permission_verified\":null,\"restricted\":null,\"selected_alias_source_count\":null,\"source_detail_sha256\":null,\"source_path_sha256\":null,\"username_sha256\":null,\"valid_credential_set_count\":null},\"main_protection\":{\"current_user_in_push_whitelist\":null,\"current_user_merge_allowed\":null,\"effective_branch_protection_name_present\":null,\"enable_merge_whitelist\":null,\"enable_push\":null,\"enable_push_whitelist\":null,\"enable_status_check\":null,\"protected\":null,\"protected_file_patterns_present\":null,\"require_signed_commits\":null,\"required_approvals\":null,\"user_can_merge\":null,\"user_can_push\":null},\"mutation_outcome\":\"NO_MUTATION\",\"output_sha256\":\"73227f43f05e8b6420a66a329965ec2535c0818d192de99b156a9c24ca2a52d6\",\"output_truncated_in_json\":false,\"previous_exact_result\":{\"capsule_sha256\":null,\"command_id\":null,\"identity_confirmed\":null,\"output_complete\":null,\"output_sha256\":null,\"runner_document_rc\":null,\"runner_json_sha256\":null,\"runner_rc\":null,\"runner_text_sha256\":null,\"runner_wrapper_matches_document\":null,\"slot_directory_count\":null,\"slot_lane\":null},\"public_exact_result\":{\"available\":false,\"exact_error\":{\"code\":\"PUBLIC_EXACT_HTTP_ERROR\",\"evidence\":{\"status\":409},\"message\":\"Published exact-result link returned an HTTP error\"},\"lane\":\"9\",\"output_found\":false,\"published_resource_count\":0,\"runner_json_found\":false,\"runner_text_found\":false,\"slot_depth\":11},\"rc\":3,\"remote_main\":null,\"remote_unchanged_since_previous_rejection\":null,\"repository_policy_evidence\":{\"conflicting_direct_main_policy_found\":null,\"explicit_pr_policy_found\":null,\"policy_file_count\":null,\"workflow_count\":null},\"rollback_restored\":null,\"rollback_started\":false,\"runner_document_rc\":null,\"runner_json_sha256\":\"cbd40e4091eaae6a9cbe53c4187171230d3a5c11cb1770a5c3337ec4db6b811c\",\"runner_rc\":null,\"runner_text_sha256\":\"3791fb392362b546b787741dcae06490e1d17334c46904894363c8bb44554d3a\",\"runner_wrapper_matches_document\":null,\"single_proven_safe_path\":{\"classification\":null,\"next_atomic_transaction\":\"None\",\"proof\":{},\"proven\":null,\"proven_path_count\":null,\"proven_paths\":[],\"scope_path_count\":null},\"status\":\"ERROR\",\"target_report_identity_confirmed\":false},\"target_command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R7-20260806T005000Z\"}\n" +} diff --git a/runtime/history/HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z.txt b/runtime/history/HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z.txt new file mode 100644 index 0000000..5485e2a --- /dev/null +++ b/runtime/history/HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z.txt @@ -0,0 +1,34 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z +STATUS=OK +RC=0 +HOST=pve01 +MODE=verify +COMPONENT=cluster-knowledge-base-error-system +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83 +COMMAND_SHA256=9aa7aea2adb5fc39dc68be0b59ad2e6495c9d4cebd794574516605a90a26fba0 +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=4086e3b3e2072c37c68046215cf7e09ecfd8b6561c9f92a5c356c076ada99096 +SANITIZED_OUTPUT_SHA256=4086e3b3e2072c37c68046215cf7e09ecfd8b6561c9f92a5c356c076ada99096 +OUTPUT_BEGIN +HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z","command_rc":0,"control_plane_error":null,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"status":"OK","version":1} +{"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z","command_rc":0,"control_plane_error":null,"exact_error":null,"identity_confirmed":true,"mutation_outcome":"NO_MUTATION","next_step":"Use the target result only after its identity and all runner fields are reviewed. If the target proved one safe path, prepare the single atomic ten-path transaction through that path.","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"schema":"homelab.exact-result-state-bind.v3","status":"OK","target":{"adapter_state_sha256":"63ad60c637bfd0071cb6fcd7ff34d2c32d94be3b8b6a3763eb1c41f7d9c18274","allowed_path_diagnostics":{"actions_workflow_count":null,"admin_branch_protection_change_capability":null,"admin_branch_protection_change_selected":null,"candidate_branch_exists":null,"documented_automation_write_path":null,"dry_run_corroborative_only":null,"main_user_can_merge":null,"main_user_can_push":null,"matching_protection_rule_count":null,"merge_styles":[],"other_write_capable_collaborator_count":null,"owner_admin_direct_push_bypass_proven":null,"pull_request_api_readable":null,"pull_requests_enabled":null,"read_write_deploy_key_count":null,"service_account_or_deploy_key_path_selected":null,"temp_branch_push_dry_run_allowed":null,"workflow_or_bot_path_selected":null,"write_capable_deploy_key_available_to_current_transaction":null,"write_capable_team_count":null},"capsule_sha256":"57eb9f0002df9890f0d0ed3528922fe14c7a84556d3cce7c881f90af961657a3","changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R7-20260806T005000Z","command_rc":3,"control_plane_error":null,"exact_error":{"code":"UNEXPECTED_READ_ONLY_DIAGNOSTIC_FAILURE","evidence":{"exception":"KeyError"},"message":"Unexpected exception in read-only diagnostic"},"identity":{"active":null,"api_auth_mode":"None","api_identity_verified":null,"candidate_count":null,"credential_source":"None","credential_values_exposed":null,"git_ls_remote_verified":null,"permission":null,"repository_permissions":{"admin":null,"pull":null,"push":null},"repository_pull_permission_verified":null,"repository_push_permission_verified":null,"restricted":null,"selected_alias_source_count":null,"source_detail_sha256":null,"source_path_sha256":null,"username_sha256":null,"valid_credential_set_count":null},"main_protection":{"current_user_in_push_whitelist":null,"current_user_merge_allowed":null,"effective_branch_protection_name_present":null,"enable_merge_whitelist":null,"enable_push":null,"enable_push_whitelist":null,"enable_status_check":null,"protected":null,"protected_file_patterns_present":null,"require_signed_commits":null,"required_approvals":null,"user_can_merge":null,"user_can_push":null},"mutation_outcome":"NO_MUTATION","output_sha256":"73227f43f05e8b6420a66a329965ec2535c0818d192de99b156a9c24ca2a52d6","output_truncated_in_json":false,"previous_exact_result":{"capsule_sha256":null,"command_id":null,"identity_confirmed":null,"output_complete":null,"output_sha256":null,"runner_document_rc":null,"runner_json_sha256":null,"runner_rc":null,"runner_text_sha256":null,"runner_wrapper_matches_document":null,"slot_directory_count":null,"slot_lane":null},"public_exact_result":{"available":false,"exact_error":{"code":"PUBLIC_EXACT_HTTP_ERROR","evidence":{"status":409},"message":"Published exact-result link returned an HTTP error"},"lane":"9","output_found":false,"published_resource_count":0,"runner_json_found":false,"runner_text_found":false,"slot_depth":11},"rc":3,"remote_main":null,"remote_unchanged_since_previous_rejection":null,"repository_policy_evidence":{"conflicting_direct_main_policy_found":null,"explicit_pr_policy_found":null,"policy_file_count":null,"workflow_count":null},"rollback_restored":null,"rollback_started":false,"runner_document_rc":null,"runner_json_sha256":"cbd40e4091eaae6a9cbe53c4187171230d3a5c11cb1770a5c3337ec4db6b811c","runner_rc":null,"runner_text_sha256":"3791fb392362b546b787741dcae06490e1d17334c46904894363c8bb44554d3a","runner_wrapper_matches_document":null,"single_proven_safe_path":{"classification":null,"next_atomic_transaction":"None","proof":{},"proven":null,"proven_path_count":null,"proven_paths":[],"scope_path_count":null},"status":"ERROR","target_report_identity_confirmed":false},"target_command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R7-20260806T005000Z"} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 2ca211a..bb388d9 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,19 +1,19 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R7-20260806T005000Z", - "status": "FAIL", - "rc": 3, + "command_id": "HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z", + "status": "OK", + "rc": 0, "host": "pve01", "mode": "verify", "component": "cluster-knowledge-base-error-system", - "started_at_utc": "2026-08-06T00:49:24Z", - "finished_at_utc": "2026-08-06T00:49:29Z", + "started_at_utc": "2026-08-06T00:52:50Z", + "finished_at_utc": "2026-08-06T00:52:56Z", "reference_register_checked": true, "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e", "error_register_checked": true, "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83", - "command_sha256": "8618865b73e07435e9e3f5d746b656bb78264fcb05f8de9b338159f052b0040e", + "command_sha256": "9aa7aea2adb5fc39dc68be0b59ad2e6495c9d4cebd794574516605a90a26fba0", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, @@ -21,7 +21,7 @@ "result_contract_valid": true, "result_contract_status": null, "result_contract_error": null, - "command_rc": 3, + "command_rc": 0, "changes_made": false, "rollback_started": false, "rollback_restored": null, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "73227f43f05e8b6420a66a329965ec2535c0818d192de99b156a9c24ca2a52d6", - "sanitized_output_sha256": "73227f43f05e8b6420a66a329965ec2535c0818d192de99b156a9c24ca2a52d6", + "raw_evidence_sha256": "4086e3b3e2072c37c68046215cf7e09ecfd8b6561c9f92a5c356c076ada99096", + "sanitized_output_sha256": "4086e3b3e2072c37c68046215cf7e09ecfd8b6561c9f92a5c356c076ada99096", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R7-20260806T005000Z\",\"command_rc\":3,\"control_plane_error\":null,\"mutation_outcome\":\"NO_MUTATION\",\"output_truncated_in_json\":false,\"rc\":3,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"ERROR\",\"version\":1}\n{\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R7-20260806T005000Z\",\"command_rc\":3,\"control_plane_error\":null,\"error_system_v2_future_record\":{\"classification\":\"GITEA_BRANCH_PROTECTION_REJECTS_DIRECT_PUSHER\",\"fingerprint\":\"40795f946c36fcaaf8413b2b46b1900a5df4771d93aeb24f2a596287df0a8023\",\"id\":\"GITEA_PROTECTED_MAIN_DIRECT_PUSH_DRY_RUN_FALSE_POSITIVE\",\"negative_control\":\"dry-run may return rc=0 without exercising the server-side protected-branch mutation decision\",\"normalized_signature\":\"gitea protected main rejects direct push while git push --dry-run succeeds; dry-run does not prove that the server-side protected-branch pre-receive path will accept a real update\",\"positive_control\":\"protected main has direct push disabled and the previous real push was rejected\",\"prevention_rule\":\"A successful git push --dry-run must never be treated as proof that a real update to a protected branch is allowed; the configured branch-protection write path must be proven separately by read-only evidence.\",\"regression_test_required\":true,\"space\":\"runtime\"},\"exact_error\":{\"code\":\"UNEXPECTED_READ_ONLY_DIAGNOSTIC_FAILURE\",\"evidence\":{\"exception\":\"KeyError\"},\"message\":\"Unexpected exception in read-only diagnostic\"},\"identity_confirmed\":false,\"mode\":\"READ_ONLY\",\"mutation_outcome\":\"NO_MUTATION\",\"next_step\":\"Prepare no mutation command until the read-only diagnostic implementation failure is resolved.\",\"output_truncated_in_json\":false,\"rc\":3,\"rollback_restored\":null,\"rollback_started\":false,\"schema\":\"homelab.read-only-diagnostic.v4\",\"status\":\"ERROR\"}\n" + "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z\",\"command_rc\":0,\"control_plane_error\":null,\"mutation_outcome\":\"NO_MUTATION\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"OK\",\"version\":1}\n{\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z\",\"command_rc\":0,\"control_plane_error\":null,\"exact_error\":null,\"identity_confirmed\":true,\"mutation_outcome\":\"NO_MUTATION\",\"next_step\":\"Use the target result only after its identity and all runner fields are reviewed. If the target proved one safe path, prepare the single atomic ten-path transaction through that path.\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"schema\":\"homelab.exact-result-state-bind.v3\",\"status\":\"OK\",\"target\":{\"adapter_state_sha256\":\"63ad60c637bfd0071cb6fcd7ff34d2c32d94be3b8b6a3763eb1c41f7d9c18274\",\"allowed_path_diagnostics\":{\"actions_workflow_count\":null,\"admin_branch_protection_change_capability\":null,\"admin_branch_protection_change_selected\":null,\"candidate_branch_exists\":null,\"documented_automation_write_path\":null,\"dry_run_corroborative_only\":null,\"main_user_can_merge\":null,\"main_user_can_push\":null,\"matching_protection_rule_count\":null,\"merge_styles\":[],\"other_write_capable_collaborator_count\":null,\"owner_admin_direct_push_bypass_proven\":null,\"pull_request_api_readable\":null,\"pull_requests_enabled\":null,\"read_write_deploy_key_count\":null,\"service_account_or_deploy_key_path_selected\":null,\"temp_branch_push_dry_run_allowed\":null,\"workflow_or_bot_path_selected\":null,\"write_capable_deploy_key_available_to_current_transaction\":null,\"write_capable_team_count\":null},\"capsule_sha256\":\"57eb9f0002df9890f0d0ed3528922fe14c7a84556d3cce7c881f90af961657a3\",\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R7-20260806T005000Z\",\"command_rc\":3,\"control_plane_error\":null,\"exact_error\":{\"code\":\"UNEXPECTED_READ_ONLY_DIAGNOSTIC_FAILURE\",\"evidence\":{\"exception\":\"KeyError\"},\"message\":\"Unexpected exception in read-only diagnostic\"},\"identity\":{\"active\":null,\"api_auth_mode\":\"None\",\"api_identity_verified\":null,\"candidate_count\":null,\"credential_source\":\"None\",\"credential_values_exposed\":null,\"git_ls_remote_verified\":null,\"permission\":null,\"repository_permissions\":{\"admin\":null,\"pull\":null,\"push\":null},\"repository_pull_permission_verified\":null,\"repository_push_permission_verified\":null,\"restricted\":null,\"selected_alias_source_count\":null,\"source_detail_sha256\":null,\"source_path_sha256\":null,\"username_sha256\":null,\"valid_credential_set_count\":null},\"main_protection\":{\"current_user_in_push_whitelist\":null,\"current_user_merge_allowed\":null,\"effective_branch_protection_name_present\":null,\"enable_merge_whitelist\":null,\"enable_push\":null,\"enable_push_whitelist\":null,\"enable_status_check\":null,\"protected\":null,\"protected_file_patterns_present\":null,\"require_signed_commits\":null,\"required_approvals\":null,\"user_can_merge\":null,\"user_can_push\":null},\"mutation_outcome\":\"NO_MUTATION\",\"output_sha256\":\"73227f43f05e8b6420a66a329965ec2535c0818d192de99b156a9c24ca2a52d6\",\"output_truncated_in_json\":false,\"previous_exact_result\":{\"capsule_sha256\":null,\"command_id\":null,\"identity_confirmed\":null,\"output_complete\":null,\"output_sha256\":null,\"runner_document_rc\":null,\"runner_json_sha256\":null,\"runner_rc\":null,\"runner_text_sha256\":null,\"runner_wrapper_matches_document\":null,\"slot_directory_count\":null,\"slot_lane\":null},\"public_exact_result\":{\"available\":false,\"exact_error\":{\"code\":\"PUBLIC_EXACT_HTTP_ERROR\",\"evidence\":{\"status\":409},\"message\":\"Published exact-result link returned an HTTP error\"},\"lane\":\"9\",\"output_found\":false,\"published_resource_count\":0,\"runner_json_found\":false,\"runner_text_found\":false,\"slot_depth\":11},\"rc\":3,\"remote_main\":null,\"remote_unchanged_since_previous_rejection\":null,\"repository_policy_evidence\":{\"conflicting_direct_main_policy_found\":null,\"explicit_pr_policy_found\":null,\"policy_file_count\":null,\"workflow_count\":null},\"rollback_restored\":null,\"rollback_started\":false,\"runner_document_rc\":null,\"runner_json_sha256\":\"cbd40e4091eaae6a9cbe53c4187171230d3a5c11cb1770a5c3337ec4db6b811c\",\"runner_rc\":null,\"runner_text_sha256\":\"3791fb392362b546b787741dcae06490e1d17334c46904894363c8bb44554d3a\",\"runner_wrapper_matches_document\":null,\"single_proven_safe_path\":{\"classification\":null,\"next_atomic_transaction\":\"None\",\"proof\":{},\"proven\":null,\"proven_path_count\":null,\"proven_paths\":[],\"scope_path_count\":null},\"status\":\"ERROR\",\"target_report_identity_confirmed\":false},\"target_command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R7-20260806T005000Z\"}\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index ed33dfa..5485e2a 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,7 +1,7 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R7-20260806T005000Z -STATUS=FAIL -RC=3 +COMMAND_ID=HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z +STATUS=OK +RC=0 HOST=pve01 MODE=verify COMPONENT=cluster-knowledge-base-error-system @@ -9,14 +9,14 @@ REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83 -COMMAND_SHA256=8618865b73e07435e9e3f5d746b656bb78264fcb05f8de9b338159f052b0040e +COMMAND_SHA256=9aa7aea2adb5fc39dc68be0b59ad2e6495c9d4cebd794574516605a90a26fba0 DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true CHANGE_DECLARED=false RESULT_CONTRACT_VALID=true RESULT_CONTRACT_STATUS=NOT_APPLICABLE RESULT_CONTRACT_ERROR=NONE -COMMAND_RC=3 +COMMAND_RC=0 CHANGES_MADE=false ROLLBACK_STARTED=false ROLLBACK_RESTORED=null @@ -24,11 +24,11 @@ MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=73227f43f05e8b6420a66a329965ec2535c0818d192de99b156a9c24ca2a52d6 -SANITIZED_OUTPUT_SHA256=73227f43f05e8b6420a66a329965ec2535c0818d192de99b156a9c24ca2a52d6 +RAW_EVIDENCE_SHA256=4086e3b3e2072c37c68046215cf7e09ecfd8b6561c9f92a5c356c076ada99096 +SANITIZED_OUTPUT_SHA256=4086e3b3e2072c37c68046215cf7e09ecfd8b6561c9f92a5c356c076ada99096 OUTPUT_BEGIN -HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R7-20260806T005000Z","command_rc":3,"control_plane_error":null,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":3,"rollback_restored":null,"rollback_started":false,"status":"ERROR","version":1} -{"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R7-20260806T005000Z","command_rc":3,"control_plane_error":null,"error_system_v2_future_record":{"classification":"GITEA_BRANCH_PROTECTION_REJECTS_DIRECT_PUSHER","fingerprint":"40795f946c36fcaaf8413b2b46b1900a5df4771d93aeb24f2a596287df0a8023","id":"GITEA_PROTECTED_MAIN_DIRECT_PUSH_DRY_RUN_FALSE_POSITIVE","negative_control":"dry-run may return rc=0 without exercising the server-side protected-branch mutation decision","normalized_signature":"gitea protected main rejects direct push while git push --dry-run succeeds; dry-run does not prove that the server-side protected-branch pre-receive path will accept a real update","positive_control":"protected main has direct push disabled and the previous real push was rejected","prevention_rule":"A successful git push --dry-run must never be treated as proof that a real update to a protected branch is allowed; the configured branch-protection write path must be proven separately by read-only evidence.","regression_test_required":true,"space":"runtime"},"exact_error":{"code":"UNEXPECTED_READ_ONLY_DIAGNOSTIC_FAILURE","evidence":{"exception":"KeyError"},"message":"Unexpected exception in read-only diagnostic"},"identity_confirmed":false,"mode":"READ_ONLY","mutation_outcome":"NO_MUTATION","next_step":"Prepare no mutation command until the read-only diagnostic implementation failure is resolved.","output_truncated_in_json":false,"rc":3,"rollback_restored":null,"rollback_started":false,"schema":"homelab.read-only-diagnostic.v4","status":"ERROR"} +HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z","command_rc":0,"control_plane_error":null,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"status":"OK","version":1} +{"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z","command_rc":0,"control_plane_error":null,"exact_error":null,"identity_confirmed":true,"mutation_outcome":"NO_MUTATION","next_step":"Use the target result only after its identity and all runner fields are reviewed. If the target proved one safe path, prepare the single atomic ten-path transaction through that path.","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"schema":"homelab.exact-result-state-bind.v3","status":"OK","target":{"adapter_state_sha256":"63ad60c637bfd0071cb6fcd7ff34d2c32d94be3b8b6a3763eb1c41f7d9c18274","allowed_path_diagnostics":{"actions_workflow_count":null,"admin_branch_protection_change_capability":null,"admin_branch_protection_change_selected":null,"candidate_branch_exists":null,"documented_automation_write_path":null,"dry_run_corroborative_only":null,"main_user_can_merge":null,"main_user_can_push":null,"matching_protection_rule_count":null,"merge_styles":[],"other_write_capable_collaborator_count":null,"owner_admin_direct_push_bypass_proven":null,"pull_request_api_readable":null,"pull_requests_enabled":null,"read_write_deploy_key_count":null,"service_account_or_deploy_key_path_selected":null,"temp_branch_push_dry_run_allowed":null,"workflow_or_bot_path_selected":null,"write_capable_deploy_key_available_to_current_transaction":null,"write_capable_team_count":null},"capsule_sha256":"57eb9f0002df9890f0d0ed3528922fe14c7a84556d3cce7c881f90af961657a3","changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R7-20260806T005000Z","command_rc":3,"control_plane_error":null,"exact_error":{"code":"UNEXPECTED_READ_ONLY_DIAGNOSTIC_FAILURE","evidence":{"exception":"KeyError"},"message":"Unexpected exception in read-only diagnostic"},"identity":{"active":null,"api_auth_mode":"None","api_identity_verified":null,"candidate_count":null,"credential_source":"None","credential_values_exposed":null,"git_ls_remote_verified":null,"permission":null,"repository_permissions":{"admin":null,"pull":null,"push":null},"repository_pull_permission_verified":null,"repository_push_permission_verified":null,"restricted":null,"selected_alias_source_count":null,"source_detail_sha256":null,"source_path_sha256":null,"username_sha256":null,"valid_credential_set_count":null},"main_protection":{"current_user_in_push_whitelist":null,"current_user_merge_allowed":null,"effective_branch_protection_name_present":null,"enable_merge_whitelist":null,"enable_push":null,"enable_push_whitelist":null,"enable_status_check":null,"protected":null,"protected_file_patterns_present":null,"require_signed_commits":null,"required_approvals":null,"user_can_merge":null,"user_can_push":null},"mutation_outcome":"NO_MUTATION","output_sha256":"73227f43f05e8b6420a66a329965ec2535c0818d192de99b156a9c24ca2a52d6","output_truncated_in_json":false,"previous_exact_result":{"capsule_sha256":null,"command_id":null,"identity_confirmed":null,"output_complete":null,"output_sha256":null,"runner_document_rc":null,"runner_json_sha256":null,"runner_rc":null,"runner_text_sha256":null,"runner_wrapper_matches_document":null,"slot_directory_count":null,"slot_lane":null},"public_exact_result":{"available":false,"exact_error":{"code":"PUBLIC_EXACT_HTTP_ERROR","evidence":{"status":409},"message":"Published exact-result link returned an HTTP error"},"lane":"9","output_found":false,"published_resource_count":0,"runner_json_found":false,"runner_text_found":false,"slot_depth":11},"rc":3,"remote_main":null,"remote_unchanged_since_previous_rejection":null,"repository_policy_evidence":{"conflicting_direct_main_policy_found":null,"explicit_pr_policy_found":null,"policy_file_count":null,"workflow_count":null},"rollback_restored":null,"rollback_started":false,"runner_document_rc":null,"runner_json_sha256":"cbd40e4091eaae6a9cbe53c4187171230d3a5c11cb1770a5c3337ec4db6b811c","runner_rc":null,"runner_text_sha256":"3791fb392362b546b787741dcae06490e1d17334c46904894363c8bb44554d3a","runner_wrapper_matches_document":null,"single_proven_safe_path":{"classification":null,"next_atomic_transaction":"None","proof":{},"proven":null,"proven_path_count":null,"proven_paths":[],"scope_path_count":null},"status":"ERROR","target_report_identity_confirmed":false},"target_command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R7-20260806T005000Z"} OUTPUT_END CHAT_OUTPUT_END