diff --git a/runtime/history/HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z.json b/runtime/history/HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z.json new file mode 100644 index 0000000..425358c --- /dev/null +++ b/runtime/history/HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "verify", + "component": "cluster-knowledge-base-error-system", + "started_at_utc": "2026-08-05T09:37:24Z", + "finished_at_utc": "2026-08-05T09:37:25Z", + "reference_register_checked": true, + "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e", + "error_register_checked": true, + "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83", + "command_sha256": "916bb1e5adc8f7e0ceb715cf1c84697d9a99523f8f3dd737bf66317519191acd", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "b829e8f514d0be81fc40bbbeb82d9196862a423ddfe6985bc17e3792c49584e2", + "sanitized_output_sha256": "b829e8f514d0be81fc40bbbeb82d9196862a423ddfe6985bc17e3792c49584e2", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z\",\"command_rc\":0,\"mutation_outcome\":\"NO_MUTATION\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"OK\",\"version\":1}\n{\"ast_source_selection\":{\"selected_count\":1,\"selected_paths\":[\"/usr/local/sbin/homelab-reader-server-v3\"],\"systemd_unit_excluded\":true},\"changes_made\":false,\"command_id\":\"HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z\",\"command_rc\":0,\"correction_of_previous_logic_gaps\":[{\"exact_fix\":\"analyze every reachable or path-bearing method in the exact handler class, follow self-method edges, resolve path aliases and normalize lstrip/removeprefix before probing\",\"proven_gap\":\"the previous analyzer parsed the exact Python source but restricted contract extraction to do_GET/do_HEAD and did not model path operands of compare_digest or leading-slash normalization in helper methods\",\"regression_test\":\"a handler whose do_GET calls a helper using compare_digest(self.path.split(...).lstrip('/'), CAPABILITY) must produce one redacted source-derived route\"}],\"error_fingerprint\":\"27ca4a7a83a33494c7c40dd173cbca17a1885d66fbed4ce2272a6c61ebb58387\",\"latest_exact_result_basis\":{\"capsule_sha256\":\"bd099f64b0fc0af2ec1b3da3ea49185b7fd81a716b33d7811e796c0374e6d094\",\"changes_made\":false,\"command_id\":\"HOMELAB-CLUSTER-KB-V1-READER-V3-HANDLER-CONTROL-FLOW-READ-ONLY-20260805T085100Z\",\"command_rc\":0,\"control_plane_error\":null,\"error_fingerprint\":\"14c4867b57e7cadf602ed3e999632ca22c1347c101703fc01af7d49a4e3266e3\",\"mutation_outcome\":\"NO_MUTATION\",\"next_action\":\"RUN_ONE_READ_ONLY_READER_V3_HANDLER_CONTROL_FLOW_TRACE\",\"output_complete\":true,\"output_sha256\":\"17cf9be1f2e911f7f5e392c00def5e5d77fe08c3425cce755acac1ce3a9e1d06\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"root_cause_classification\":\"READER_V3_LISTENER_FOUND_BUT_AST_AUTH_ROUTE_CONTRACT_NOT_DERIVED\",\"runner_document_rc\":0,\"runner_json_sha256\":\"ac1fa14875c76c86c2fd768d689fa06e73e4eff9ea84a89c7c954aedbc70c30f\",\"runner_rc\":0,\"runner_text_sha256\":\"b360c8d360a3e1f57e6dc5ae5615ecd5571177f310ccdd03d2748c94c2c35e01\",\"runner_wrapper_matches_document\":true,\"status\":\"OK\"},\"mutation_outcome\":\"NO_MUTATION\",\"next_action\":\"RUN_ONE_READ_ONLY_READER_V3_RESPONSE_SCHEMA_TRACE\",\"output_truncated_in_json\":false,\"owned_listeners\":[{\"address_class\":\"private\",\"address_sha256\":\"fb345731d21c612ed2cb13088c10fd26bac959c79a7634cb55e23ee6bfb428d9\",\"family\":\"ipv4\",\"inode\":\"24795\",\"port\":18788}],\"pre_command_known_error_gate\":{\"checked\":true,\"items\":[{\"id\":\"candidate-scan-limit-20260805\",\"prevention\":\"exact files only; hard source, response, route, probe and output limits\"},{\"id\":\"runner-wrapper-mismatch-20260805\",\"prevention\":\"single compact JSON below 42000 bytes; no raw sources or response bodies\"},{\"id\":\"gitea-owner-hardcoded-20260805\",\"prevention\":\"no repository owner or repository URL is assumed\"},{\"id\":\"gitea-git-auth-unavailable-20260805\",\"prevention\":\"no Git or Gitea authentication retry in this command\"},{\"id\":\"pvesh-adapter-context-unreadable-20260805\",\"prevention\":\"pvesh is not called\"},{\"id\":\"gitea-process-self-match-20260805\",\"prevention\":\"Reader identity is bound to exact systemd ControlGroup\"},{\"id\":\"sanitize-non-string-attributeerror-20260805\",\"prevention\":\"sanitize converts Any to str; embedded bool regression test\"},{\"id\":\"reader-v3-skipped-on-nonauthoritative-inventory-20260805\",\"prevention\":\"this command directly probes Reader V3\"},{\"id\":\"reader-path-env-misclassified-as-route-20260805\",\"prevention\":\"PATH/PYTHONPATH and colon-separated filesystem values are explicitly forbidden as HTTP routes\"},{\"id\":\"reader-loopback-only-probe-20260805\",\"prevention\":\"connections use the exact address of the socket owned by the Reader ControlGroup; 127.0.0.1 is not assumed\"},{\"id\":\"reader-capability-not-secret-20260805\",\"prevention\":\"all capability values are secret; values and concrete secret-bearing routes are never output\"},{\"id\":\"reader-v3-root-404-no-json-20260805\",\"prevention\":\"derive auth and route only from exact AST comparisons, source literals and process environment before probing\"},{\"id\":\"reader-systemd-unit-parsed-as-python-20260805\",\"prevention\":\"only the exact Python server source is passed to ast.parse; systemd units are verified by SHA but never parsed as Python\"},{\"id\":\"reader-helper-contract-coverage-gap-20260805\",\"prevention\":\"analyze every method in the exact BaseHTTPRequestHandler class, follow self-method edges, model path operands of compare_digest, and normalize leading-slash removal before probing\"}]},\"prevention_test\":{\"must_run_before_future_cluster_or_gitea_commands\":true,\"name\":\"reader_v3_helper_contract_preflight\",\"requirements\":[\"verify exact Reader source SHA\",\"bind process and socket to exact systemd ControlGroup\",\"follow handler self-method call edges\",\"model path comparisons and compare_digest in helper methods\",\"normalize only source-proven leading-slash removal\",\"never output capability values or private addresses\",\"probe only source-supported request contracts\",\"accept inventory only from successful JSON with normalized guest rows\"]},\"process_environment\":{\"capability_name_present\":true,\"names\":[\"HOME\",\"HOMELAB_READER_CAPABILITY\",\"HOMELAB_READER_PORT\",\"INVOCATION_ID\",\"JOURNAL_STREAM\",\"LANG\",\"LOGNAME\",\"MEMORY_PRESSURE_WATCH\",\"MEMORY_PRESSURE_WRITE\",\"PATH\",\"SHELL\",\"SYSTEMD_EXEC_PID\",\"USER\"],\"secret_name_count\":1},\"protocol_probe\":{\"auth_candidate_count\":0,\"gitea_candidates\":[],\"guest_count\":0,\"probes\":[{\"auth\":\"none\",\"auth_basis\":\"control\",\"auth_header_names\":[],\"body_bytes\":10,\"body_sha256\":\"709009e02c8e364113b28205aadde30cce270d709073f28153c85fdc5036c96d\",\"body_truncated\":false,\"content_type\":\"text/plain; charset=utf-8\",\"duration_seconds\":0.001,\"endpoint_index\":0,\"json\":null,\"method\":\"GET\",\"response_header_names\":[\"cache-control\",\"content-length\",\"content-type\",\"date\",\"expires\",\"pragma\",\"server\",\"surrogate-control\",\"x-robots-tag\"],\"route_source\":\"ast_path_startswith_any_method\",\"route_template\":\"//\",\"status\":404},{\"auth\":\"none\",\"auth_basis\":\"control\",\"auth_header_names\":[],\"body_bytes\":10,\"body_sha256\":\"709009e02c8e364113b28205aadde30cce270d709073f28153c85fdc5036c96d\",\"body_truncated\":false,\"content_type\":\"text/plain; charset=utf-8\",\"duration_seconds\":0.001,\"endpoint_index\":0,\"json\":null,\"method\":\"GET\",\"response_header_names\":[\"cache-control\",\"content-length\",\"content-type\",\"date\",\"expires\",\"pragma\",\"server\",\"surrogate-control\",\"x-robots-tag\"],\"route_source\":\"ast_reachable_method_literal\",\"route_template\":\"/\",\"status\":404},{\"auth\":\"none\",\"auth_basis\":\"control\",\"auth_header_names\":[],\"body_bytes\":10,\"body_sha256\":\"709009e02c8e364113b28205aadde30cce270d709073f28153c85fdc5036c96d\",\"body_truncated\":false,\"content_type\":\"text/plain; charset=utf-8\",\"duration_seconds\":0.001,\"endpoint_index\":0,\"json\":null,\"method\":\"GET\",\"response_header_names\":[\"cache-control\",\"content-length\",\"content-type\",\"date\",\"expires\",\"pragma\",\"server\",\"surrogate-control\",\"x-robots-tag\"],\"route_source\":\"ast_reachable_method_literal\",\"route_template\":\"/\",\"status\":404}],\"request_contract_count\":3,\"successful_inventory_routes\":[]},\"rc\":0,\"read_only\":true,\"ready_for_guest_probe\":false,\"result_projection\":{\"bytes_before_projection\":9916,\"compacted\":false,\"max_bytes\":36000},\"rollback_restored\":null,\"rollback_started\":false,\"root_cause_classification\":\"READER_V3_EXACT_AUTH_AND_ROUTE_CONTRACT_PROBED_BUT_NO_AUTHORITATIVE_JSON_RESPONSE\",\"schema\":1,\"source_files\":[{\"actual_sha256\":\"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1\",\"bytes\":580,\"expected_sha256\":\"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1\",\"matches_expected\":true,\"path\":\"/etc/systemd/system/homelab-reader-v3.service\"},{\"actual_sha256\":\"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536\",\"bytes\":3539,\"expected_sha256\":\"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536\",\"matches_expected\":true,\"path\":\"/usr/local/sbin/homelab-reader-server-v3\"}],\"source_semantics\":{\"analyzed_method_count\":4,\"analyzed_methods\":[\"do_GET\",\"do_HEAD\",\"handle_reader\",\"reply\"],\"ast_parse_ok\":true,\"auth_variants\":[{\"basis\":\"control\",\"header_names\":[],\"label\":\"none\"}],\"handler_count\":2,\"header_contract_count\":0,\"header_names\":[],\"parse_errors\":[],\"path_alias_count\":4,\"path_compare_digest_count\":0,\"path_predicate_count\":5,\"protocol_markers\":[\"basehttprequesthandler\",\"content-type\",\"do_get\",\"do_head\",\"http.server\",\"send_response\"],\"query_contract_count\":0,\"query_keys\":[],\"resolved_scope_names\":[\"CAPABILITY\",\"PORT\",\"allow_reuse_address\",\"server_version\"],\"route_template_count\":3,\"route_templates\":[{\"evidence_sha256\":\"3e022402ebaac8e3f28c9bd23f581a0d3b497ee6f746ddae9504aafa00503ad0\",\"match_kind\":\"prefix\",\"method\":\"GET\",\"secret_bearing\":true,\"source\":\"ast_path_startswith_any_method\",\"template\":\"//\"},{\"evidence_sha256\":\"503a079ea70636de095387956b4dff774121ca61b676f2e02197822c2abd4bed\",\"match_kind\":\"exact\",\"method\":\"GET\",\"secret_bearing\":true,\"source\":\"ast_reachable_method_literal\",\"template\":\"/\"},{\"evidence_sha256\":\"2aa6b2ef6e5dfe39f88e5bf3558f3778c1b61b59eae77c349b98c1afe6589ec6\",\"match_kind\":\"exact\",\"method\":\"GET\",\"secret_bearing\":false,\"source\":\"ast_reachable_method_literal\",\"template\":\"/\"}],\"self_call_edges\":[{\"from\":\"do_GET\",\"to\":\"handle_reader\"},{\"from\":\"do_HEAD\",\"to\":\"handle_reader\"},{\"from\":\"handle_reader\",\"to\":\"reply\"}],\"source_environment_references\":[\"HOMELAB_READER_CAPABILITY\",\"HOMELAB_READER_PORT\"]},\"source_state\":\"MATCH\",\"status\":\"OK\",\"systemd_identity\":{\"identity_valid\":true,\"pid_count\":1,\"probe\":{\"duration_seconds\":0.005,\"rc\":0,\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\"stderr_truncated\":false,\"stdout_bytes\":375,\"stdout_sha256\":\"49094d65d3787c1479e6408e1fefb7af3758d0fa55e1d37bf22907442aab35e9\",\"stdout_truncated\":false},\"properties\":{\"ActiveState\":\"active\",\"ControlGroup\":\"/system.slice/homelab-reader-v3.service\",\"ExecStart_present\":true,\"ExecStart_sha256\":\"2500fde09569176736b4f2f1dd29d6289b6a6ae6a59b52b6a3c31f797f567379\",\"FragmentPath\":\"/etc/systemd/system/homelab-reader-v3.service\",\"LoadState\":\"loaded\",\"MainPID\":\"1282\",\"SubState\":\"running\"}}}\n" +} diff --git a/runtime/history/HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z.txt b/runtime/history/HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z.txt new file mode 100644 index 0000000..a3df48b --- /dev/null +++ b/runtime/history/HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z.txt @@ -0,0 +1,34 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z +STATUS=OK +RC=0 +HOST=pve01 +MODE=verify +COMPONENT=cluster-knowledge-base-error-system +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83 +COMMAND_SHA256=916bb1e5adc8f7e0ceb715cf1c84697d9a99523f8f3dd737bf66317519191acd +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=b829e8f514d0be81fc40bbbeb82d9196862a423ddfe6985bc17e3792c49584e2 +SANITIZED_OUTPUT_SHA256=b829e8f514d0be81fc40bbbeb82d9196862a423ddfe6985bc17e3792c49584e2 +OUTPUT_BEGIN +HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z","command_rc":0,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"status":"OK","version":1} +{"ast_source_selection":{"selected_count":1,"selected_paths":["/usr/local/sbin/homelab-reader-server-v3"],"systemd_unit_excluded":true},"changes_made":false,"command_id":"HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z","command_rc":0,"correction_of_previous_logic_gaps":[{"exact_fix":"analyze every reachable or path-bearing method in the exact handler class, follow self-method edges, resolve path aliases and normalize lstrip/removeprefix before probing","proven_gap":"the previous analyzer parsed the exact Python source but restricted contract extraction to do_GET/do_HEAD and did not model path operands of compare_digest or leading-slash normalization in helper methods","regression_test":"a handler whose do_GET calls a helper using compare_digest(self.path.split(...).lstrip('/'), CAPABILITY) must produce one redacted source-derived route"}],"error_fingerprint":"27ca4a7a83a33494c7c40dd173cbca17a1885d66fbed4ce2272a6c61ebb58387","latest_exact_result_basis":{"capsule_sha256":"bd099f64b0fc0af2ec1b3da3ea49185b7fd81a716b33d7811e796c0374e6d094","changes_made":false,"command_id":"HOMELAB-CLUSTER-KB-V1-READER-V3-HANDLER-CONTROL-FLOW-READ-ONLY-20260805T085100Z","command_rc":0,"control_plane_error":null,"error_fingerprint":"14c4867b57e7cadf602ed3e999632ca22c1347c101703fc01af7d49a4e3266e3","mutation_outcome":"NO_MUTATION","next_action":"RUN_ONE_READ_ONLY_READER_V3_HANDLER_CONTROL_FLOW_TRACE","output_complete":true,"output_sha256":"17cf9be1f2e911f7f5e392c00def5e5d77fe08c3425cce755acac1ce3a9e1d06","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"root_cause_classification":"READER_V3_LISTENER_FOUND_BUT_AST_AUTH_ROUTE_CONTRACT_NOT_DERIVED","runner_document_rc":0,"runner_json_sha256":"ac1fa14875c76c86c2fd768d689fa06e73e4eff9ea84a89c7c954aedbc70c30f","runner_rc":0,"runner_text_sha256":"b360c8d360a3e1f57e6dc5ae5615ecd5571177f310ccdd03d2748c94c2c35e01","runner_wrapper_matches_document":true,"status":"OK"},"mutation_outcome":"NO_MUTATION","next_action":"RUN_ONE_READ_ONLY_READER_V3_RESPONSE_SCHEMA_TRACE","output_truncated_in_json":false,"owned_listeners":[{"address_class":"private","address_sha256":"fb345731d21c612ed2cb13088c10fd26bac959c79a7634cb55e23ee6bfb428d9","family":"ipv4","inode":"24795","port":18788}],"pre_command_known_error_gate":{"checked":true,"items":[{"id":"candidate-scan-limit-20260805","prevention":"exact files only; hard source, response, route, probe and output limits"},{"id":"runner-wrapper-mismatch-20260805","prevention":"single compact JSON below 42000 bytes; no raw sources or response bodies"},{"id":"gitea-owner-hardcoded-20260805","prevention":"no repository owner or repository URL is assumed"},{"id":"gitea-git-auth-unavailable-20260805","prevention":"no Git or Gitea authentication retry in this command"},{"id":"pvesh-adapter-context-unreadable-20260805","prevention":"pvesh is not called"},{"id":"gitea-process-self-match-20260805","prevention":"Reader identity is bound to exact systemd ControlGroup"},{"id":"sanitize-non-string-attributeerror-20260805","prevention":"sanitize converts Any to str; embedded bool regression test"},{"id":"reader-v3-skipped-on-nonauthoritative-inventory-20260805","prevention":"this command directly probes Reader V3"},{"id":"reader-path-env-misclassified-as-route-20260805","prevention":"PATH/PYTHONPATH and colon-separated filesystem values are explicitly forbidden as HTTP routes"},{"id":"reader-loopback-only-probe-20260805","prevention":"connections use the exact address of the socket owned by the Reader ControlGroup; 127.0.0.1 is not assumed"},{"id":"reader-capability-not-secret-20260805","prevention":"all capability values are secret; values and concrete secret-bearing routes are never output"},{"id":"reader-v3-root-404-no-json-20260805","prevention":"derive auth and route only from exact AST comparisons, source literals and process environment before probing"},{"id":"reader-systemd-unit-parsed-as-python-20260805","prevention":"only the exact Python server source is passed to ast.parse; systemd units are verified by SHA but never parsed as Python"},{"id":"reader-helper-contract-coverage-gap-20260805","prevention":"analyze every method in the exact BaseHTTPRequestHandler class, follow self-method edges, model path operands of compare_digest, and normalize leading-slash removal before probing"}]},"prevention_test":{"must_run_before_future_cluster_or_gitea_commands":true,"name":"reader_v3_helper_contract_preflight","requirements":["verify exact Reader source SHA","bind process and socket to exact systemd ControlGroup","follow handler self-method call edges","model path comparisons and compare_digest in helper methods","normalize only source-proven leading-slash removal","never output capability values or private addresses","probe only source-supported request contracts","accept inventory only from successful JSON with normalized guest rows"]},"process_environment":{"capability_name_present":true,"names":["HOME","HOMELAB_READER_CAPABILITY","HOMELAB_READER_PORT","INVOCATION_ID","JOURNAL_STREAM","LANG","LOGNAME","MEMORY_PRESSURE_WATCH","MEMORY_PRESSURE_WRITE","PATH","SHELL","SYSTEMD_EXEC_PID","USER"],"secret_name_count":1},"protocol_probe":{"auth_candidate_count":0,"gitea_candidates":[],"guest_count":0,"probes":[{"auth":"none","auth_basis":"control","auth_header_names":[],"body_bytes":10,"body_sha256":"709009e02c8e364113b28205aadde30cce270d709073f28153c85fdc5036c96d","body_truncated":false,"content_type":"text/plain; charset=utf-8","duration_seconds":0.001,"endpoint_index":0,"json":null,"method":"GET","response_header_names":["cache-control","content-length","content-type","date","expires","pragma","server","surrogate-control","x-robots-tag"],"route_source":"ast_path_startswith_any_method","route_template":"//","status":404},{"auth":"none","auth_basis":"control","auth_header_names":[],"body_bytes":10,"body_sha256":"709009e02c8e364113b28205aadde30cce270d709073f28153c85fdc5036c96d","body_truncated":false,"content_type":"text/plain; charset=utf-8","duration_seconds":0.001,"endpoint_index":0,"json":null,"method":"GET","response_header_names":["cache-control","content-length","content-type","date","expires","pragma","server","surrogate-control","x-robots-tag"],"route_source":"ast_reachable_method_literal","route_template":"/","status":404},{"auth":"none","auth_basis":"control","auth_header_names":[],"body_bytes":10,"body_sha256":"709009e02c8e364113b28205aadde30cce270d709073f28153c85fdc5036c96d","body_truncated":false,"content_type":"text/plain; charset=utf-8","duration_seconds":0.001,"endpoint_index":0,"json":null,"method":"GET","response_header_names":["cache-control","content-length","content-type","date","expires","pragma","server","surrogate-control","x-robots-tag"],"route_source":"ast_reachable_method_literal","route_template":"/","status":404}],"request_contract_count":3,"successful_inventory_routes":[]},"rc":0,"read_only":true,"ready_for_guest_probe":false,"result_projection":{"bytes_before_projection":9916,"compacted":false,"max_bytes":36000},"rollback_restored":null,"rollback_started":false,"root_cause_classification":"READER_V3_EXACT_AUTH_AND_ROUTE_CONTRACT_PROBED_BUT_NO_AUTHORITATIVE_JSON_RESPONSE","schema":1,"source_files":[{"actual_sha256":"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1","bytes":580,"expected_sha256":"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1","matches_expected":true,"path":"/etc/systemd/system/homelab-reader-v3.service"},{"actual_sha256":"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536","bytes":3539,"expected_sha256":"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536","matches_expected":true,"path":"/usr/local/sbin/homelab-reader-server-v3"}],"source_semantics":{"analyzed_method_count":4,"analyzed_methods":["do_GET","do_HEAD","handle_reader","reply"],"ast_parse_ok":true,"auth_variants":[{"basis":"control","header_names":[],"label":"none"}],"handler_count":2,"header_contract_count":0,"header_names":[],"parse_errors":[],"path_alias_count":4,"path_compare_digest_count":0,"path_predicate_count":5,"protocol_markers":["basehttprequesthandler","content-type","do_get","do_head","http.server","send_response"],"query_contract_count":0,"query_keys":[],"resolved_scope_names":["CAPABILITY","PORT","allow_reuse_address","server_version"],"route_template_count":3,"route_templates":[{"evidence_sha256":"3e022402ebaac8e3f28c9bd23f581a0d3b497ee6f746ddae9504aafa00503ad0","match_kind":"prefix","method":"GET","secret_bearing":true,"source":"ast_path_startswith_any_method","template":"//"},{"evidence_sha256":"503a079ea70636de095387956b4dff774121ca61b676f2e02197822c2abd4bed","match_kind":"exact","method":"GET","secret_bearing":true,"source":"ast_reachable_method_literal","template":"/"},{"evidence_sha256":"2aa6b2ef6e5dfe39f88e5bf3558f3778c1b61b59eae77c349b98c1afe6589ec6","match_kind":"exact","method":"GET","secret_bearing":false,"source":"ast_reachable_method_literal","template":"/"}],"self_call_edges":[{"from":"do_GET","to":"handle_reader"},{"from":"do_HEAD","to":"handle_reader"},{"from":"handle_reader","to":"reply"}],"source_environment_references":["HOMELAB_READER_CAPABILITY","HOMELAB_READER_PORT"]},"source_state":"MATCH","status":"OK","systemd_identity":{"identity_valid":true,"pid_count":1,"probe":{"duration_seconds":0.005,"rc":0,"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","stderr_truncated":false,"stdout_bytes":375,"stdout_sha256":"49094d65d3787c1479e6408e1fefb7af3758d0fa55e1d37bf22907442aab35e9","stdout_truncated":false},"properties":{"ActiveState":"active","ControlGroup":"/system.slice/homelab-reader-v3.service","ExecStart_present":true,"ExecStart_sha256":"2500fde09569176736b4f2f1dd29d6289b6a6ae6a59b52b6a3c31f797f567379","FragmentPath":"/etc/systemd/system/homelab-reader-v3.service","LoadState":"loaded","MainPID":"1282","SubState":"running"}}} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 6158a55..425358c 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1 +1,38 @@ -{"schema_version":1,"channel":"homelab-runtime","command_id":"CONTEXT-AUTO-20260805T091701Z","status":"OK","rc":0,"host":"pve01","mode":"read-only","component":"cluster-context","started_at_utc":"2026-08-05T09:17:01Z","finished_at_utc":"2026-08-05T09:17:02Z","reference_register_checked":true,"reference_sha256":"5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e","error_register_checked":true,"error_register_sha256":"24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83","changes_made":false,"sanitized":true,"secrets_included":false,"private_addresses_included":false,"output":"AUTOMATIC_CLUSTER_CONTEXT_REFRESH=OK"} +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "verify", + "component": "cluster-knowledge-base-error-system", + "started_at_utc": "2026-08-05T09:37:24Z", + "finished_at_utc": "2026-08-05T09:37:25Z", + "reference_register_checked": true, + "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e", + "error_register_checked": true, + "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83", + "command_sha256": "916bb1e5adc8f7e0ceb715cf1c84697d9a99523f8f3dd737bf66317519191acd", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "b829e8f514d0be81fc40bbbeb82d9196862a423ddfe6985bc17e3792c49584e2", + "sanitized_output_sha256": "b829e8f514d0be81fc40bbbeb82d9196862a423ddfe6985bc17e3792c49584e2", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z\",\"command_rc\":0,\"mutation_outcome\":\"NO_MUTATION\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"OK\",\"version\":1}\n{\"ast_source_selection\":{\"selected_count\":1,\"selected_paths\":[\"/usr/local/sbin/homelab-reader-server-v3\"],\"systemd_unit_excluded\":true},\"changes_made\":false,\"command_id\":\"HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z\",\"command_rc\":0,\"correction_of_previous_logic_gaps\":[{\"exact_fix\":\"analyze every reachable or path-bearing method in the exact handler class, follow self-method edges, resolve path aliases and normalize lstrip/removeprefix before probing\",\"proven_gap\":\"the previous analyzer parsed the exact Python source but restricted contract extraction to do_GET/do_HEAD and did not model path operands of compare_digest or leading-slash normalization in helper methods\",\"regression_test\":\"a handler whose do_GET calls a helper using compare_digest(self.path.split(...).lstrip('/'), CAPABILITY) must produce one redacted source-derived route\"}],\"error_fingerprint\":\"27ca4a7a83a33494c7c40dd173cbca17a1885d66fbed4ce2272a6c61ebb58387\",\"latest_exact_result_basis\":{\"capsule_sha256\":\"bd099f64b0fc0af2ec1b3da3ea49185b7fd81a716b33d7811e796c0374e6d094\",\"changes_made\":false,\"command_id\":\"HOMELAB-CLUSTER-KB-V1-READER-V3-HANDLER-CONTROL-FLOW-READ-ONLY-20260805T085100Z\",\"command_rc\":0,\"control_plane_error\":null,\"error_fingerprint\":\"14c4867b57e7cadf602ed3e999632ca22c1347c101703fc01af7d49a4e3266e3\",\"mutation_outcome\":\"NO_MUTATION\",\"next_action\":\"RUN_ONE_READ_ONLY_READER_V3_HANDLER_CONTROL_FLOW_TRACE\",\"output_complete\":true,\"output_sha256\":\"17cf9be1f2e911f7f5e392c00def5e5d77fe08c3425cce755acac1ce3a9e1d06\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"root_cause_classification\":\"READER_V3_LISTENER_FOUND_BUT_AST_AUTH_ROUTE_CONTRACT_NOT_DERIVED\",\"runner_document_rc\":0,\"runner_json_sha256\":\"ac1fa14875c76c86c2fd768d689fa06e73e4eff9ea84a89c7c954aedbc70c30f\",\"runner_rc\":0,\"runner_text_sha256\":\"b360c8d360a3e1f57e6dc5ae5615ecd5571177f310ccdd03d2748c94c2c35e01\",\"runner_wrapper_matches_document\":true,\"status\":\"OK\"},\"mutation_outcome\":\"NO_MUTATION\",\"next_action\":\"RUN_ONE_READ_ONLY_READER_V3_RESPONSE_SCHEMA_TRACE\",\"output_truncated_in_json\":false,\"owned_listeners\":[{\"address_class\":\"private\",\"address_sha256\":\"fb345731d21c612ed2cb13088c10fd26bac959c79a7634cb55e23ee6bfb428d9\",\"family\":\"ipv4\",\"inode\":\"24795\",\"port\":18788}],\"pre_command_known_error_gate\":{\"checked\":true,\"items\":[{\"id\":\"candidate-scan-limit-20260805\",\"prevention\":\"exact files only; hard source, response, route, probe and output limits\"},{\"id\":\"runner-wrapper-mismatch-20260805\",\"prevention\":\"single compact JSON below 42000 bytes; no raw sources or response bodies\"},{\"id\":\"gitea-owner-hardcoded-20260805\",\"prevention\":\"no repository owner or repository URL is assumed\"},{\"id\":\"gitea-git-auth-unavailable-20260805\",\"prevention\":\"no Git or Gitea authentication retry in this command\"},{\"id\":\"pvesh-adapter-context-unreadable-20260805\",\"prevention\":\"pvesh is not called\"},{\"id\":\"gitea-process-self-match-20260805\",\"prevention\":\"Reader identity is bound to exact systemd ControlGroup\"},{\"id\":\"sanitize-non-string-attributeerror-20260805\",\"prevention\":\"sanitize converts Any to str; embedded bool regression test\"},{\"id\":\"reader-v3-skipped-on-nonauthoritative-inventory-20260805\",\"prevention\":\"this command directly probes Reader V3\"},{\"id\":\"reader-path-env-misclassified-as-route-20260805\",\"prevention\":\"PATH/PYTHONPATH and colon-separated filesystem values are explicitly forbidden as HTTP routes\"},{\"id\":\"reader-loopback-only-probe-20260805\",\"prevention\":\"connections use the exact address of the socket owned by the Reader ControlGroup; 127.0.0.1 is not assumed\"},{\"id\":\"reader-capability-not-secret-20260805\",\"prevention\":\"all capability values are secret; values and concrete secret-bearing routes are never output\"},{\"id\":\"reader-v3-root-404-no-json-20260805\",\"prevention\":\"derive auth and route only from exact AST comparisons, source literals and process environment before probing\"},{\"id\":\"reader-systemd-unit-parsed-as-python-20260805\",\"prevention\":\"only the exact Python server source is passed to ast.parse; systemd units are verified by SHA but never parsed as Python\"},{\"id\":\"reader-helper-contract-coverage-gap-20260805\",\"prevention\":\"analyze every method in the exact BaseHTTPRequestHandler class, follow self-method edges, model path operands of compare_digest, and normalize leading-slash removal before probing\"}]},\"prevention_test\":{\"must_run_before_future_cluster_or_gitea_commands\":true,\"name\":\"reader_v3_helper_contract_preflight\",\"requirements\":[\"verify exact Reader source SHA\",\"bind process and socket to exact systemd ControlGroup\",\"follow handler self-method call edges\",\"model path comparisons and compare_digest in helper methods\",\"normalize only source-proven leading-slash removal\",\"never output capability values or private addresses\",\"probe only source-supported request contracts\",\"accept inventory only from successful JSON with normalized guest rows\"]},\"process_environment\":{\"capability_name_present\":true,\"names\":[\"HOME\",\"HOMELAB_READER_CAPABILITY\",\"HOMELAB_READER_PORT\",\"INVOCATION_ID\",\"JOURNAL_STREAM\",\"LANG\",\"LOGNAME\",\"MEMORY_PRESSURE_WATCH\",\"MEMORY_PRESSURE_WRITE\",\"PATH\",\"SHELL\",\"SYSTEMD_EXEC_PID\",\"USER\"],\"secret_name_count\":1},\"protocol_probe\":{\"auth_candidate_count\":0,\"gitea_candidates\":[],\"guest_count\":0,\"probes\":[{\"auth\":\"none\",\"auth_basis\":\"control\",\"auth_header_names\":[],\"body_bytes\":10,\"body_sha256\":\"709009e02c8e364113b28205aadde30cce270d709073f28153c85fdc5036c96d\",\"body_truncated\":false,\"content_type\":\"text/plain; charset=utf-8\",\"duration_seconds\":0.001,\"endpoint_index\":0,\"json\":null,\"method\":\"GET\",\"response_header_names\":[\"cache-control\",\"content-length\",\"content-type\",\"date\",\"expires\",\"pragma\",\"server\",\"surrogate-control\",\"x-robots-tag\"],\"route_source\":\"ast_path_startswith_any_method\",\"route_template\":\"//\",\"status\":404},{\"auth\":\"none\",\"auth_basis\":\"control\",\"auth_header_names\":[],\"body_bytes\":10,\"body_sha256\":\"709009e02c8e364113b28205aadde30cce270d709073f28153c85fdc5036c96d\",\"body_truncated\":false,\"content_type\":\"text/plain; charset=utf-8\",\"duration_seconds\":0.001,\"endpoint_index\":0,\"json\":null,\"method\":\"GET\",\"response_header_names\":[\"cache-control\",\"content-length\",\"content-type\",\"date\",\"expires\",\"pragma\",\"server\",\"surrogate-control\",\"x-robots-tag\"],\"route_source\":\"ast_reachable_method_literal\",\"route_template\":\"/\",\"status\":404},{\"auth\":\"none\",\"auth_basis\":\"control\",\"auth_header_names\":[],\"body_bytes\":10,\"body_sha256\":\"709009e02c8e364113b28205aadde30cce270d709073f28153c85fdc5036c96d\",\"body_truncated\":false,\"content_type\":\"text/plain; charset=utf-8\",\"duration_seconds\":0.001,\"endpoint_index\":0,\"json\":null,\"method\":\"GET\",\"response_header_names\":[\"cache-control\",\"content-length\",\"content-type\",\"date\",\"expires\",\"pragma\",\"server\",\"surrogate-control\",\"x-robots-tag\"],\"route_source\":\"ast_reachable_method_literal\",\"route_template\":\"/\",\"status\":404}],\"request_contract_count\":3,\"successful_inventory_routes\":[]},\"rc\":0,\"read_only\":true,\"ready_for_guest_probe\":false,\"result_projection\":{\"bytes_before_projection\":9916,\"compacted\":false,\"max_bytes\":36000},\"rollback_restored\":null,\"rollback_started\":false,\"root_cause_classification\":\"READER_V3_EXACT_AUTH_AND_ROUTE_CONTRACT_PROBED_BUT_NO_AUTHORITATIVE_JSON_RESPONSE\",\"schema\":1,\"source_files\":[{\"actual_sha256\":\"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1\",\"bytes\":580,\"expected_sha256\":\"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1\",\"matches_expected\":true,\"path\":\"/etc/systemd/system/homelab-reader-v3.service\"},{\"actual_sha256\":\"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536\",\"bytes\":3539,\"expected_sha256\":\"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536\",\"matches_expected\":true,\"path\":\"/usr/local/sbin/homelab-reader-server-v3\"}],\"source_semantics\":{\"analyzed_method_count\":4,\"analyzed_methods\":[\"do_GET\",\"do_HEAD\",\"handle_reader\",\"reply\"],\"ast_parse_ok\":true,\"auth_variants\":[{\"basis\":\"control\",\"header_names\":[],\"label\":\"none\"}],\"handler_count\":2,\"header_contract_count\":0,\"header_names\":[],\"parse_errors\":[],\"path_alias_count\":4,\"path_compare_digest_count\":0,\"path_predicate_count\":5,\"protocol_markers\":[\"basehttprequesthandler\",\"content-type\",\"do_get\",\"do_head\",\"http.server\",\"send_response\"],\"query_contract_count\":0,\"query_keys\":[],\"resolved_scope_names\":[\"CAPABILITY\",\"PORT\",\"allow_reuse_address\",\"server_version\"],\"route_template_count\":3,\"route_templates\":[{\"evidence_sha256\":\"3e022402ebaac8e3f28c9bd23f581a0d3b497ee6f746ddae9504aafa00503ad0\",\"match_kind\":\"prefix\",\"method\":\"GET\",\"secret_bearing\":true,\"source\":\"ast_path_startswith_any_method\",\"template\":\"//\"},{\"evidence_sha256\":\"503a079ea70636de095387956b4dff774121ca61b676f2e02197822c2abd4bed\",\"match_kind\":\"exact\",\"method\":\"GET\",\"secret_bearing\":true,\"source\":\"ast_reachable_method_literal\",\"template\":\"/\"},{\"evidence_sha256\":\"2aa6b2ef6e5dfe39f88e5bf3558f3778c1b61b59eae77c349b98c1afe6589ec6\",\"match_kind\":\"exact\",\"method\":\"GET\",\"secret_bearing\":false,\"source\":\"ast_reachable_method_literal\",\"template\":\"/\"}],\"self_call_edges\":[{\"from\":\"do_GET\",\"to\":\"handle_reader\"},{\"from\":\"do_HEAD\",\"to\":\"handle_reader\"},{\"from\":\"handle_reader\",\"to\":\"reply\"}],\"source_environment_references\":[\"HOMELAB_READER_CAPABILITY\",\"HOMELAB_READER_PORT\"]},\"source_state\":\"MATCH\",\"status\":\"OK\",\"systemd_identity\":{\"identity_valid\":true,\"pid_count\":1,\"probe\":{\"duration_seconds\":0.005,\"rc\":0,\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\"stderr_truncated\":false,\"stdout_bytes\":375,\"stdout_sha256\":\"49094d65d3787c1479e6408e1fefb7af3758d0fa55e1d37bf22907442aab35e9\",\"stdout_truncated\":false},\"properties\":{\"ActiveState\":\"active\",\"ControlGroup\":\"/system.slice/homelab-reader-v3.service\",\"ExecStart_present\":true,\"ExecStart_sha256\":\"2500fde09569176736b4f2f1dd29d6289b6a6ae6a59b52b6a3c31f797f567379\",\"FragmentPath\":\"/etc/systemd/system/homelab-reader-v3.service\",\"LoadState\":\"loaded\",\"MainPID\":\"1282\",\"SubState\":\"running\"}}}\n" +} diff --git a/runtime/latest.txt b/runtime/latest.txt index e88fbae..a3df48b 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,164 +1,34 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=CONTEXT-AUTO-[PRIVATE_IP]701Z +COMMAND_ID=HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z STATUS=OK RC=0 HOST=pve01 -COMPONENT=cluster-context -REFERENCE_SHA[PRIVATE_IP]f8edc75fcf[PRIVATE_IP]c[PRIVATE_IP]cc112ceccb6cf[PRIVATE_IP]a4deb8e -ERROR_REGISTER_SHA[PRIVATE_IP]c7fa[PRIVATE_IP]583c4aefac[PRIVATE_IP]1736ed[PRIVATE_IP]ab83 +MODE=verify +COMPONENT=cluster-knowledge-base-error-system +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83 +COMMAND_SHA256=916bb1e5adc8f7e0ceb715cf1c84697d9a99523f8f3dd737bf66317519191acd +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=b829e8f514d0be81fc40bbbeb82d9196862a423ddfe6985bc17e3792c49584e2 +SANITIZED_OUTPUT_SHA256=b829e8f514d0be81fc40bbbeb82d9196862a423ddfe6985bc17e3792c49584e2 OUTPUT_BEGIN -GENERATED_AT_UTC=[PRIVATE_IP]T09:17:01Z -Cluster information -------------------- -Name: homelab -Config Version: 3 -Transport: knet -Secure auth: on +HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z","command_rc":0,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"status":"OK","version":1} +{"ast_source_selection":{"selected_count":1,"selected_paths":["/usr/local/sbin/homelab-reader-server-v3"],"systemd_unit_excluded":true},"changes_made":false,"command_id":"HOMELAB-CLUSTER-KB-V1-READER-V3-HELPER-CONTRACT-READ-ONLY-20260805T085900Z","command_rc":0,"correction_of_previous_logic_gaps":[{"exact_fix":"analyze every reachable or path-bearing method in the exact handler class, follow self-method edges, resolve path aliases and normalize lstrip/removeprefix before probing","proven_gap":"the previous analyzer parsed the exact Python source but restricted contract extraction to do_GET/do_HEAD and did not model path operands of compare_digest or leading-slash normalization in helper methods","regression_test":"a handler whose do_GET calls a helper using compare_digest(self.path.split(...).lstrip('/'), CAPABILITY) must produce one redacted source-derived route"}],"error_fingerprint":"27ca4a7a83a33494c7c40dd173cbca17a1885d66fbed4ce2272a6c61ebb58387","latest_exact_result_basis":{"capsule_sha256":"bd099f64b0fc0af2ec1b3da3ea49185b7fd81a716b33d7811e796c0374e6d094","changes_made":false,"command_id":"HOMELAB-CLUSTER-KB-V1-READER-V3-HANDLER-CONTROL-FLOW-READ-ONLY-20260805T085100Z","command_rc":0,"control_plane_error":null,"error_fingerprint":"14c4867b57e7cadf602ed3e999632ca22c1347c101703fc01af7d49a4e3266e3","mutation_outcome":"NO_MUTATION","next_action":"RUN_ONE_READ_ONLY_READER_V3_HANDLER_CONTROL_FLOW_TRACE","output_complete":true,"output_sha256":"17cf9be1f2e911f7f5e392c00def5e5d77fe08c3425cce755acac1ce3a9e1d06","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"root_cause_classification":"READER_V3_LISTENER_FOUND_BUT_AST_AUTH_ROUTE_CONTRACT_NOT_DERIVED","runner_document_rc":0,"runner_json_sha256":"ac1fa14875c76c86c2fd768d689fa06e73e4eff9ea84a89c7c954aedbc70c30f","runner_rc":0,"runner_text_sha256":"b360c8d360a3e1f57e6dc5ae5615ecd5571177f310ccdd03d2748c94c2c35e01","runner_wrapper_matches_document":true,"status":"OK"},"mutation_outcome":"NO_MUTATION","next_action":"RUN_ONE_READ_ONLY_READER_V3_RESPONSE_SCHEMA_TRACE","output_truncated_in_json":false,"owned_listeners":[{"address_class":"private","address_sha256":"fb345731d21c612ed2cb13088c10fd26bac959c79a7634cb55e23ee6bfb428d9","family":"ipv4","inode":"24795","port":18788}],"pre_command_known_error_gate":{"checked":true,"items":[{"id":"candidate-scan-limit-20260805","prevention":"exact files only; hard source, response, route, probe and output limits"},{"id":"runner-wrapper-mismatch-20260805","prevention":"single compact JSON below 42000 bytes; no raw sources or response bodies"},{"id":"gitea-owner-hardcoded-20260805","prevention":"no repository owner or repository URL is assumed"},{"id":"gitea-git-auth-unavailable-20260805","prevention":"no Git or Gitea authentication retry in this command"},{"id":"pvesh-adapter-context-unreadable-20260805","prevention":"pvesh is not called"},{"id":"gitea-process-self-match-20260805","prevention":"Reader identity is bound to exact systemd ControlGroup"},{"id":"sanitize-non-string-attributeerror-20260805","prevention":"sanitize converts Any to str; embedded bool regression test"},{"id":"reader-v3-skipped-on-nonauthoritative-inventory-20260805","prevention":"this command directly probes Reader V3"},{"id":"reader-path-env-misclassified-as-route-20260805","prevention":"PATH/PYTHONPATH and colon-separated filesystem values are explicitly forbidden as HTTP routes"},{"id":"reader-loopback-only-probe-20260805","prevention":"connections use the exact address of the socket owned by the Reader ControlGroup; 127.0.0.1 is not assumed"},{"id":"reader-capability-not-secret-20260805","prevention":"all capability values are secret; values and concrete secret-bearing routes are never output"},{"id":"reader-v3-root-404-no-json-20260805","prevention":"derive auth and route only from exact AST comparisons, source literals and process environment before probing"},{"id":"reader-systemd-unit-parsed-as-python-20260805","prevention":"only the exact Python server source is passed to ast.parse; systemd units are verified by SHA but never parsed as Python"},{"id":"reader-helper-contract-coverage-gap-20260805","prevention":"analyze every method in the exact BaseHTTPRequestHandler class, follow self-method edges, model path operands of compare_digest, and normalize leading-slash removal before probing"}]},"prevention_test":{"must_run_before_future_cluster_or_gitea_commands":true,"name":"reader_v3_helper_contract_preflight","requirements":["verify exact Reader source SHA","bind process and socket to exact systemd ControlGroup","follow handler self-method call edges","model path comparisons and compare_digest in helper methods","normalize only source-proven leading-slash removal","never output capability values or private addresses","probe only source-supported request contracts","accept inventory only from successful JSON with normalized guest rows"]},"process_environment":{"capability_name_present":true,"names":["HOME","HOMELAB_READER_CAPABILITY","HOMELAB_READER_PORT","INVOCATION_ID","JOURNAL_STREAM","LANG","LOGNAME","MEMORY_PRESSURE_WATCH","MEMORY_PRESSURE_WRITE","PATH","SHELL","SYSTEMD_EXEC_PID","USER"],"secret_name_count":1},"protocol_probe":{"auth_candidate_count":0,"gitea_candidates":[],"guest_count":0,"probes":[{"auth":"none","auth_basis":"control","auth_header_names":[],"body_bytes":10,"body_sha256":"709009e02c8e364113b28205aadde30cce270d709073f28153c85fdc5036c96d","body_truncated":false,"content_type":"text/plain; charset=utf-8","duration_seconds":0.001,"endpoint_index":0,"json":null,"method":"GET","response_header_names":["cache-control","content-length","content-type","date","expires","pragma","server","surrogate-control","x-robots-tag"],"route_source":"ast_path_startswith_any_method","route_template":"//","status":404},{"auth":"none","auth_basis":"control","auth_header_names":[],"body_bytes":10,"body_sha256":"709009e02c8e364113b28205aadde30cce270d709073f28153c85fdc5036c96d","body_truncated":false,"content_type":"text/plain; charset=utf-8","duration_seconds":0.001,"endpoint_index":0,"json":null,"method":"GET","response_header_names":["cache-control","content-length","content-type","date","expires","pragma","server","surrogate-control","x-robots-tag"],"route_source":"ast_reachable_method_literal","route_template":"/","status":404},{"auth":"none","auth_basis":"control","auth_header_names":[],"body_bytes":10,"body_sha256":"709009e02c8e364113b28205aadde30cce270d709073f28153c85fdc5036c96d","body_truncated":false,"content_type":"text/plain; charset=utf-8","duration_seconds":0.001,"endpoint_index":0,"json":null,"method":"GET","response_header_names":["cache-control","content-length","content-type","date","expires","pragma","server","surrogate-control","x-robots-tag"],"route_source":"ast_reachable_method_literal","route_template":"/","status":404}],"request_contract_count":3,"successful_inventory_routes":[]},"rc":0,"read_only":true,"ready_for_guest_probe":false,"result_projection":{"bytes_before_projection":9916,"compacted":false,"max_bytes":36000},"rollback_restored":null,"rollback_started":false,"root_cause_classification":"READER_V3_EXACT_AUTH_AND_ROUTE_CONTRACT_PROBED_BUT_NO_AUTHORITATIVE_JSON_RESPONSE","schema":1,"source_files":[{"actual_sha256":"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1","bytes":580,"expected_sha256":"d672b74b390efa787ffd5a090e8c8eea8fdf038075421231a9d9b3053ea926b1","matches_expected":true,"path":"/etc/systemd/system/homelab-reader-v3.service"},{"actual_sha256":"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536","bytes":3539,"expected_sha256":"092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536","matches_expected":true,"path":"/usr/local/sbin/homelab-reader-server-v3"}],"source_semantics":{"analyzed_method_count":4,"analyzed_methods":["do_GET","do_HEAD","handle_reader","reply"],"ast_parse_ok":true,"auth_variants":[{"basis":"control","header_names":[],"label":"none"}],"handler_count":2,"header_contract_count":0,"header_names":[],"parse_errors":[],"path_alias_count":4,"path_compare_digest_count":0,"path_predicate_count":5,"protocol_markers":["basehttprequesthandler","content-type","do_get","do_head","http.server","send_response"],"query_contract_count":0,"query_keys":[],"resolved_scope_names":["CAPABILITY","PORT","allow_reuse_address","server_version"],"route_template_count":3,"route_templates":[{"evidence_sha256":"3e022402ebaac8e3f28c9bd23f581a0d3b497ee6f746ddae9504aafa00503ad0","match_kind":"prefix","method":"GET","secret_bearing":true,"source":"ast_path_startswith_any_method","template":"//"},{"evidence_sha256":"503a079ea70636de095387956b4dff774121ca61b676f2e02197822c2abd4bed","match_kind":"exact","method":"GET","secret_bearing":true,"source":"ast_reachable_method_literal","template":"/"},{"evidence_sha256":"2aa6b2ef6e5dfe39f88e5bf3558f3778c1b61b59eae77c349b98c1afe6589ec6","match_kind":"exact","method":"GET","secret_bearing":false,"source":"ast_reachable_method_literal","template":"/"}],"self_call_edges":[{"from":"do_GET","to":"handle_reader"},{"from":"do_HEAD","to":"handle_reader"},{"from":"handle_reader","to":"reply"}],"source_environment_references":["HOMELAB_READER_CAPABILITY","HOMELAB_READER_PORT"]},"source_state":"MATCH","status":"OK","systemd_identity":{"identity_valid":true,"pid_count":1,"probe":{"duration_seconds":0.005,"rc":0,"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","stderr_truncated":false,"stdout_bytes":375,"stdout_sha256":"49094d65d3787c1479e6408e1fefb7af3758d0fa55e1d37bf22907442aab35e9","stdout_truncated":false},"properties":{"ActiveState":"active","ControlGroup":"/system.slice/homelab-reader-v3.service","ExecStart_present":true,"ExecStart_sha256":"2500fde09569176736b4f2f1dd29d6289b6a6ae6a59b52b6a3c31f797f567379","FragmentPath":"/etc/systemd/system/homelab-reader-v3.service","LoadState":"loaded","MainPID":"1282","SubState":"running"}}} -Quorum information ------------------- -Date: Wed Aug [PRIVATE_IP] 2026 -Quorum provider: corosync_votequorum -Nodes: 3 -Node ID: [PRIVATE_IP] -Ring ID: 1.db -Quorate: Yes - -Votequorum information ----------------------- -Expected votes: 3 -Highest expected: 3 -Total votes: 3 -Quorum: 2 -Flags: Quorate - -Membership information ----------------------- - Nodeid Votes Name -[PRIVATE_IP] [PRIVATE_IP].11 (local) -[PRIVATE_IP] [PRIVATE_IP].13 -[PRIVATE_IP] [PRIVATE_IP].12 - -Membership information ----------------------- - Nodeid Votes Name - 1 1 pve01 (local) - 2 1 pve03 - 3 1 pve02 -[{"cpu":[PRIVATE_IP][PRIVATE_IP],"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/110","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"dns1","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"lxc","uptime":684602,"vmid":110},{"cpu":[PRIVATE_IP]397e-05,"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/111","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"dns2","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve02","status":"running","template":0,"type":"lxc","uptime":684686,"vmid":111},{"cpu":[PRIVATE_IP]178e-05,"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/112","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"unbound1","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"lxc","uptime":684647,"vmid":112},{"cpu":0,"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/113","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"unbound2","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve02","status":"running","template":0,"type":"lxc","uptime":684690,"vmid":113},{"cpu":[PRIVATE_IP]02018,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/130","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"edge-vm","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve03","status":"running","template":0,"type":"qemu","uptime":684626,"vmid":130},{"cpu":[PRIVATE_IP]25898,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/150","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"nextcloud","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"qemu","uptime":684599,"vmid":150},{"cpu":[PRIVATE_IP]275269,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/160","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"forum-prod","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve02","status":"running","template":0,"type":"qemu","uptime":684682,"vmid":160},{"cpu":[PRIVATE_IP]82283,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/170","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"core-apps","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"qemu","uptime":684595,"vmid":170},{"cpu":[PRIVATE_IP]38357,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/171","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"monitoring","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"qemu","uptime":684592,"vmid":171},{"cpu":[PRIVATE_IP]1907,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/180","maxcpu":2,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"cluster-admin","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve02","status":"running","template":0,"type":"qemu","uptime":684680,"vmid":180},{"cpu":[PRIVATE_IP]211588,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/190","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"homelab-ops-worker","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve03","status":"running","template":0,"type":"qemu","uptime":684622,"vmid":190},{"cpu":0,"disk":0,"diskread":0,"diskwrite":0,"id":"qemu/9130","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":0,"memhost":0,"name":"edge-cold-standby","netin":0,"netout":0,"node":"pve02","status":"stopped","template":0,"type":"qemu","uptime":0,"vmid":9130},{"cgroup-mode":2,"cpu":[PRIVATE_IP]52062,"disk":[PRIVATE_IP],"id":"node/pve01","level":"","maxcpu":24,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"node":"pve01","status":"online","type":"node","uptime":684704},{"cgroup-mode":2,"cpu":[PRIVATE_IP]04245,"disk":[PRIVATE_IP],"id":"node/pve02","level":"","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"node":"pve02","status":"online","type":"node","uptime":684723},{"cgroup-mode":2,"cpu":[PRIVATE_IP]85369,"disk":[PRIVATE_IP],"id":"node/pve03","level":"","maxcpu":8,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"node":"pve03","status":"online","type":"node","uptime":684644},{"content":"iso,backup,import,vztmpl","disk":[PRIVATE_IP],"id":"storage/pve01/local","maxdisk":[PRIVATE_IP],"node":"pve01","plugintype":"dir","shared":0,"status":"available","storage":"local","type":"storage"},{"content":"iso,backup,import,vztmpl","disk":[PRIVATE_IP],"id":"storage/pve02/local","maxdisk":[PRIVATE_IP],"node":"pve02","plugintype":"dir","shared":0,"status":"available","storage":"local","type":"storage"},{"content":"iso,backup,import,vztmpl","disk":[PRIVATE_IP],"id":"storage/pve03/local","maxdisk":[PRIVATE_IP],"node":"pve03","plugintype":"dir","shared":0,"status":"available","storage":"local","type":"storage"},{"content":"rootdir,images","disk":[PRIVATE_IP],"id":"storage/pve01/local-lvm","maxdisk":[PRIVATE_IP],"node":"pve01","plugintype":"lvmthin","shared":0,"status":"available","storage":"local-lvm","type":"storage"},{"content":"rootdir,images","disk":[PRIVATE_IP],"id":"storage/pve02/local-lvm","maxdisk":[PRIVATE_IP],"node":"pve02","plugintype":"lvmthin","shared":0,"status":"available","storage":"local-lvm","type":"storage"},{"content":"rootdir,images","disk":[PRIVATE_IP],"id":"storage/pve03/local-lvm","maxdisk":[PRIVATE_IP],"node":"pve03","plugintype":"lvmthin","shared":0,"status":"available","storage":"local-lvm","type":"storage"},{"id":"network/pve01/zone/localnetwork","network":"localnetwork","network-type":"zone","node":"pve01","status":"ok","type":"network"},{"id":"network/pve02/zone/localnetwork","network":"localnetwork","network-type":"zone","node":"pve02","status":"ok","type":"network"},{"id":"network/pve03/zone/localnetwork","network":"localnetwork","network-type":"zone","node":"pve03","status":"ok","type":"network"}] -Name Type Status Total (KiB) Used (KiB) Available (KiB) % -local dir active [PRIVATE_IP] [PRIVATE_IP] [PRIVATE_IP] 14.31% -local-lvm lvmthin active [PRIVATE_IP] [PRIVATE_IP] [PRIVATE_IP] 27.39% - UNIT LOAD ACTIVE SUB DESCRIPTION -● homelab-backup-matrix-refresh.service loaded failed failed Generate unified homelab backup matrix state -● homelab-crypto-portfolio-chart-health.service loaded failed failed Crypto portfolio chart health check -● skladchik-reports-monitor-supervisor.service loaded failed failed Skladchik reports monitor full supervisor - -Legend: LOAD → Reflects whether the unit definition was properly loaded. - ACTIVE → The high-level unit activation state, i.e. generalization of SUB. - SUB → The low-level unit activation state, values depend on unit type. - -3 loaded units listed. -NEXT LEFT LAST PASSED UNIT ACTIVATES -Wed [PRIVATE_IP] 12:17:57 MSK 54s Wed [PRIVATE_IP] 12:16:57 MSK 5s ago homelab-cluster-admin-webpanel-sync.timer homelab-cluster-admin-webpanel-sync.service -Wed [PRIVATE_IP] 12:17:57 MSK 54s Wed [PRIVATE_IP] 12:16:57 MSK 5s ago homelab-private-vpn-hosts-health.timer homelab-private-vpn-hosts-health.service -Wed [PRIVATE_IP] 12:18:02 MSK 59s Wed [PRIVATE_IP] 12:16:57 MSK 5s ago homelab-router-watchdog.timer homelab-router-watchdog.service -Wed [PRIVATE_IP] 12:18:09 MSK 1min 6s Wed [PRIVATE_IP] 12:16:07 MSK 55s ago homelab-cluster-admin-inventory-sync.timer homelab-cluster-admin-inventory-sync.service -Wed [PRIVATE_IP] 12:18:55 MSK 1min 53s Wed [PRIVATE_IP] 12:13:26 MSK 3min 35s ago homelab-health-metrics.timer homelab-health-metrics.service -Wed [PRIVATE_IP] 12:19:14 MSK 2min 12s Wed [PRIVATE_IP] 12:14:14 MSK 2min 47s ago homelab-smartctl-textfile.timer homelab-smartctl-textfile.service -Wed [PRIVATE_IP] 12:19:14 MSK 2min 12s Wed [PRIVATE_IP] 12:14:14 MSK 2min 47s ago netbird-peers-health.timer netbird-peers-health.service -Wed [PRIVATE_IP] 12:20:14 MSK 3min 12s Wed [PRIVATE_IP] 12:05:14 MSK 11min ago prometheus-node-exporter-apt.timer prometheus-node-exporter-apt.service -Wed [PRIVATE_IP] 12:21:52 MSK 4min 49s Wed [PRIVATE_IP] 12:16:26 MSK 35s ago homelab-crypto-portfolio-chart-health.timer homelab-crypto-portfolio-chart-health.service -Wed [PRIVATE_IP] 12:22:26 MSK 5min Wed [PRIVATE_IP] 12:07:26 MSK 9min ago homelab-disk-space-health.timer homelab-disk-space-health.service -Wed [PRIVATE_IP] 12:24:26 MSK 7min Wed [PRIVATE_IP] 12:09:26 MSK 7min ago homelab-pve03-staging-capacity-health.timer homelab-pve03-staging-capacity-health.service -Wed [PRIVATE_IP] 12:25:26 MSK 8min Wed [PRIVATE_IP] 12:10:26 MSK 6min ago prometheus-node-exporter-nvme.timer prometheus-node-exporter-nvme.service -Wed [PRIVATE_IP] 12:26:20 MSK 9min Wed [PRIVATE_IP] 12:16:20 MSK 42s ago skladchik-reports-monitor-supervisor.timer skladchik-reports-monitor-supervisor.service -Wed [PRIVATE_IP] 12:30:00 MSK 12min Wed [PRIVATE_IP] 12:15:08 MSK 1min 54s ago homelab-incident-journal.timer homelab-incident-journal.service -Wed [PRIVATE_IP] 12:30:36 MSK 13min Wed [PRIVATE_IP] 12:15:50 MSK 1min 12s ago homelab-duty-admin-v2.timer homelab-duty-admin-v2.service -Wed [PRIVATE_IP] 12:30:55 MSK 13min Wed [PRIVATE_IP] 12:15:14 MSK 1min 47s ago homelab-external-probe-vps-health.timer homelab-external-probe-vps-health.service -Wed [PRIVATE_IP] 12:31:13 MSK 14min Wed [PRIVATE_IP] 12:15:54 MSK 1min 8s ago homelab-forum-snuffleupagus-health.timer homelab-forum-snuffleupagus-health.service -Wed [PRIVATE_IP] 12:34:13 MSK 17min Wed [PRIVATE_IP] 12:04:50 MSK 12min ago homelab-mkdocs-auto-refresh.timer homelab-mkdocs-auto-refresh.service -Wed [PRIVATE_IP] 12:49:47 MSK 32min Wed [PRIVATE_IP] 12:16:57 MSK 5s ago homelab-reference-refresh.timer homelab-reference-refresh.service -Wed [PRIVATE_IP] 14:08:26 MSK 1h 51min Wed [PRIVATE_IP] 08:08:26 MSK 4h 8min ago homelab-vps-identity-audit.timer homelab-vps-identity-audit.service -Wed [PRIVATE_IP] 14:20:26 MSK 2h 3min Tue [PRIVATE_IP] 14:20:26 MSK 21h ago systemd-tmpfiles-clean.timer systemd-tmpfiles-clean.service -Wed [PRIVATE_IP] 20:41:26 MSK 8h Wed [PRIVATE_IP] 08:05:14 MSK 4h 11min ago apt-daily.timer apt-daily.service -Thu [PRIVATE_IP] 00:00:00 MSK 11h Wed [PRIVATE_IP] 00:00:07 MSK 12h ago dpkg-db-backup.timer dpkg-db-backup.service -Thu [PRIVATE_IP] 00:03:40 MSK 11h Wed [PRIVATE_IP] 00:51:17 MSK 11h ago logrotate.timer logrotate.service -Thu [PRIVATE_IP] 00:10:46 MSK 11h Wed [PRIVATE_IP] 00:13:26 MSK 12h ago homelab-docker-health.timer homelab-docker-health.service -Thu [PRIVATE_IP] 00:12:36 MSK 11h Wed [PRIVATE_IP] 00:18:58 MSK 11h ago homelab-quality-gate.timer homelab-quality-gate.service -Thu [PRIVATE_IP] 00:18:11 MSK 12h Wed [PRIVATE_IP] 00:08:47 MSK 12h ago homelab-evidence-catalog.timer homelab-evidence-catalog.service -Thu [PRIVATE_IP] 00:19:51 MSK 12h Wed [PRIVATE_IP] 00:08:07 MSK 12h ago homelab-storage-capacity.timer homelab-storage-capacity.service -Thu [PRIVATE_IP] 02:45:12 MSK 14h Wed [PRIVATE_IP] 04:06:07 MSK 8h ago pve-daily-update.timer pve-daily-update.service -Thu [PRIVATE_IP] 03:50:00 MSK 15h Wed [PRIVATE_IP] 03:50:07 MSK 8h ago filebrowser-offhost-sync.timer filebrowser-offhost-sync.service -Thu [PRIVATE_IP] 04:35:40 MSK 16h Wed [PRIVATE_IP] 04:48:14 MSK 7h ago homelab-edge-vm-offhost-freshness.timer homelab-edge-vm-offhost-freshness.service -Thu [PRIVATE_IP] 04:52:05 MSK 16h Wed [PRIVATE_IP] 04:58:26 MSK 7h ago homelab-sops-edge-secret-coverage.timer homelab-sops-edge-secret-coverage.service -Thu [PRIVATE_IP] 06:51:28 MSK 18h Wed [PRIVATE_IP] 06:01:14 MSK 6h ago apt-daily-upgrade.timer apt-daily-upgrade.service -Thu [PRIVATE_IP] 07:03:41 MSK 18h Wed [PRIVATE_IP] 07:17:02 MSK 5h 0min ago homelab-drift-check.timer homelab-drift-check.service -Thu [PRIVATE_IP] 07:28:22 MSK 19h Wed [PRIVATE_IP] 07:32:07 MSK 4h 44min ago homelab-service-registry-check.timer homelab-service-registry-check.service -Thu [PRIVATE_IP] 07:48:33 MSK 19h Wed [PRIVATE_IP] 07:56:50 MSK 4h 20min ago homelab-dependency-map-check.timer homelab-dependency-map-check.service -Thu [PRIVATE_IP] 07:54:57 MSK 19h Wed [PRIVATE_IP] 07:54:04 MSK 4h 22min ago homelab-alerting-health.timer homelab-alerting-health.service -Thu [PRIVATE_IP] 08:00:12 MSK 19h Wed [PRIVATE_IP] 07:56:59 MSK 4h 20min ago homelab-runbook-generate.timer homelab-runbook-generate.service -Thu [PRIVATE_IP] 08:04:28 MSK 19h Wed [PRIVATE_IP] 08:06:26 MSK 4h 10min ago homelab-duty-admin-report.timer homelab-duty-admin-report.service -Thu [PRIVATE_IP] 08:06:16 MSK 19h Wed [PRIVATE_IP] 07:48:26 MSK 4h 28min ago homelab-desired-state-sync.timer homelab-desired-state-sync.service -Thu [PRIVATE_IP] 08:06:43 MSK 19h Wed [PRIVATE_IP] 08:17:02 MSK 3h 59min ago homelab-kuma-monitor-policy.timer homelab-kuma-monitor-policy.service -Thu [PRIVATE_IP] 08:12:34 MSK 19h Wed [PRIVATE_IP] 08:11:14 MSK 4h 5min ago homelab-overall-health.timer homelab-overall-health.service -Thu [PRIVATE_IP] 08:29:02 MSK 20h Wed [PRIVATE_IP] 08:21:50 MSK 3h 55min ago homelab-final-readiness-gate.timer homelab-final-readiness-gate.service -Thu [PRIVATE_IP] 08:29:18 MSK 20h Wed [PRIVATE_IP] 08:30:14 MSK 3h 46min ago homelab-capacity-risk.timer homelab-capacity-risk.service -Thu [PRIVATE_IP] 08:44:24 MSK 20h Wed [PRIVATE_IP] 01:56:14 MSK 10h ago man-db.timer man-db.service -Thu [PRIVATE_IP] 08:45:56 MSK 20h Wed [PRIVATE_IP] 08:40:50 MSK 3h 36min ago homelab-secret-exposure-guard.timer homelab-secret-exposure-guard.service -Thu [PRIVATE_IP] 08:47:53 MSK 20h Wed [PRIVATE_IP] 08:55:14 MSK 3h 21min ago homelab-golden-state-index.timer homelab-golden-state-index.service -Thu [PRIVATE_IP] 08:51:13 MSK 20h Wed [PRIVATE_IP] 08:37:07 MSK 3h 39min ago homelab-cluster-passport.timer homelab-cluster-passport.service -Thu [PRIVATE_IP] 08:53:10 MSK 20h Wed [PRIVATE_IP] 08:47:07 MSK 3h 29min ago immich-media-offhost-sync.timer immich-media-offhost-sync.service -Thu [PRIVATE_IP] 09:07:43 MSK 20h Wed [PRIVATE_IP] 09:21:07 MSK 2h 55min ago memos-offhost-sync.timer memos-offhost-sync.service -Thu [PRIVATE_IP] 10:15:00 MSK 21h Wed [PRIVATE_IP] 10:15:07 MSK 2h 1min ago skladchik-reports-monitor-monthly-selftest-watch.timer skladchik-reports-monitor-monthly-selftest-watch.service -Sun [PRIVATE_IP] 03:10:38 MSK 3 days Sun [PRIVATE_IP] 03:10:25 MSK 3 days ago xfs_scrub_all.timer xfs_scrub_all.service -Sun [PRIVATE_IP] 03:10:48 MSK 3 days Sun [PRIVATE_IP] 03:10:50 MSK 3 days ago e2scrub_all.timer e2scrub_all.service -Mon [PRIVATE_IP] 00:03:56 MSK 4 days Mon [PRIVATE_IP] 00:11:50 MSK 2 days ago homelab-secret-sanity.timer homelab-secret-sanity.service -Mon [PRIVATE_IP] 01:11:21 MSK 4 days Mon [PRIVATE_IP] 01:17:56 MSK 2 days ago fstrim.timer fstrim.service -- - - - prometheus-node-exporter-ipmitool-sensor.timer prometheus-node-exporter-ipmitool-sensor.service -- - - - prometheus-node-exporter-mellanox-hca-temp.timer prometheus-node-exporter-mellanox-hca-temp.service -- - - - prometheus-node-exporter-smartmon.timer prometheus-node-exporter-smartmon.service - -58 timers listed. -- Обрезанная, повреждённая или частично вставленная команда считается невыполненной; сначала проводится side-effect audit. -- Хвост parse-ошибки закрывается только после доказательства отсутствия изменений и временных артефактов. -- Proof: /var/lib/homelab-change-sets/operator-command-size-guard-v[PRIVATE_IP]T182653Z/report.txt - -## HOMELAB_ADMIN_CLI_CONTRACT_[PRIVATE_IP] -- Поддерживаемые команды: version, status, lint TASK_DIR, validate TASK_DIR, run TASK_DIR PHASE. -- Отдельная команда --help отсутствует. Неизвестный аргумент печатает usage и штатно возвращает RC=64. -- Нельзя трактовать RC=64 от --help как неисправность runner. -- Для проверки доступности runner использовать homelab-admin version; для структуры CLI использовать зафиксированную usage-строку. -- Proof: /var/lib/homelab-change-sets/homelab-admin-cli-contract-fix-v[PRIVATE_IP]T183338Z/report.txt - -AUTOMATIC_CLUSTER_CONTEXT_REFRESH_[PRIVATE_IP] -Collector: /usr/local/sbin/homelab-context-collect -Scheduler: hourly at minute 17 via /etc/cron.d/homelab-context-refresh -Destination: immutable Gitea runtime history with CONTEXT-AUTO UTC command IDs. - -AUTOMATIC_CLUSTER_CONTEXT_REFRESH_DIRECT_[PRIVATE_IP] -Publisher: /usr/local/sbin/homelab-context-refresh-direct -Schedule: hourly at minute 17. -Destination: immutable assistant-runtime history with CONTEXT-AUTO UTC IDs. -ANTI_REGRESSION_TOKEN=HOMELAB_VM_2CLOUD_444_OUTER_LAUNCHER_BOUNDARY_REQUIRED -- Anti-regression: validate the complete outer launcher with a shell syntax check and verify the wrapper argument boundary before issuing it. -- Infrastructure action executed: none. -- Backup payload impact: none. -- Production impact: none. -- Status: CLOSED; UNRESOLVED_TAIL_COUNT=0. -- Registered at: [PRIVATE_IP]T11:20:32Z - -## ERROR_[PRIVATE_IP]_HOMELAB_VM_2CLOUD_DRAIN_CLOSURE_PREFLIGHT_446 -COMMAND_ID=HOMELAB-VM-2CLOUD-DRAIN-CLOSURE-PREFLIGHT-446 -- Symptom: homelab-chat-run-linked printed Usage and skipped result-feed publication as invalid input. -- Root cause: the diagnostic script was piped to wrapper stdin and the mandatory double-dash command separator was omitted. -- Correction: invoke homelab-chat-run-linked as COMMAND_ID MODE COMPONENT -- command arguments; stdin is not its command interface. -ANTI_REGRESSION_TOKEN=HOMELAB_CHAT_RUN_COMMAND_REQUIRES_DOUBLE_DASH -- Anti-regression: treat wrapper Usage as the authoritative CLI contract and syntax-check the complete launcher, not only its inner payload. -- Infrastructure action executed: none. -- Backup payload impact: none. -- Production impact: none. -- Status: CLOSED; UNRESOLVED_TAIL_COUNT=0. -- Registered at: [PRIVATE_IP]T11:20:32Z OUTPUT_END CHAT_OUTPUT_END