homelab-admin/homelab-public-context
1
0
Fork 0
Code Activity

runtime: publish HOMELAB-GITEA-ALLOWED-PUSH-PATH-R6-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T003000Z

Browse Source
This commit is contained in:
homelab-runtime-publisher
2026-08-06 00:37:04 +00:00
parent 17706e65d6
commit 9b0d985920
4 changed files with 91 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files
runtime/latest.json
+10 -10
View File
@@ -1,19 +1,19 @@
{
"schema_version": 1,
"channel": "homelab-runtime",
"command_id": "HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R6-20260806T001200Z",
"status": "FAIL",
"rc": 2,
"command_id": "HOMELAB-GITEA-ALLOWED-PUSH-PATH-R6-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T003000Z",
"status": "OK",
"rc": 0,
"host": "pve01",
"mode": "verify",
"component": "cluster-knowledge-base-error-system",
"started_at_utc": "2026-08-06T00:30:46Z",
"finished_at_utc": "2026-08-06T00:30:51Z",
"started_at_utc": "2026-08-06T00:36:58Z",
"finished_at_utc": "2026-08-06T00:37:03Z",
"reference_register_checked": true,
"reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
"error_register_checked": true,
"error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83",
"command_sha256": "c3d56ffc46fea0569c3cbce438ff0757d334bd10e229fab9ec1b04dc01962f2d",
"command_sha256": "08e90ba54d74453ca55e2e9f5d9fa8e02d3076d5cd3c6658fd0a1db595d19223",
"duplicate_failed_command_blocked": false,
"block_reason": null,
"execution_started": true,
@@ -21,7 +21,7 @@
"result_contract_valid": true,
"result_contract_status": null,
"result_contract_error": null,
"command_rc": 2,
"command_rc": 0,
"changes_made": false,
"rollback_started": false,
"rollback_restored": null,
@@ -30,9 +30,9 @@
"secrets_included": false,
"private_addresses_included": false,
"raw_evidence_retained_locally": true,
"raw_evidence_sha256": "6ff513773ec1ebd20a3901b2f78df6c1df819b171f6ef343794266db30cc24ce",
"sanitized_output_sha256": "6ff513773ec1ebd20a3901b2f78df6c1df819b171f6ef343794266db30cc24ce",
"raw_evidence_sha256": "a5eca01f3acc3f2023dd04d231237bec1e0a0878cca99e26252ef9b3ec1b90b6",
"sanitized_output_sha256": "a5eca01f3acc3f2023dd04d231237bec1e0a0878cca99e26252ef9b3ec1b90b6",
"output_truncated_in_json": false,
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
"output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R6-20260806T001200Z\",\"command_rc\":2,\"control_plane_error\":null,\"mutation_outcome\":\"NO_MUTATION\",\"output_truncated_in_json\":false,\"rc\":2,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"ERROR\",\"version\":1}\n{\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R6-20260806T001200Z\",\"command_rc\":2,\"control_plane_error\":null,\"error_system_v2_future_record\":{\"classification\":\"GITEA_BRANCH_PROTECTION_REJECTS_DIRECT_PUSHER\",\"fingerprint\":\"40795f946c36fcaaf8413b2b46b1900a5df4771d93aeb24f2a596287df0a8023\",\"id\":\"GITEA_PROTECTED_MAIN_DIRECT_PUSH_DRY_RUN_FALSE_POSITIVE\",\"negative_control\":\"dry-run may return rc=0 without exercising the server-side protected-branch mutation decision\",\"normalized_signature\":\"gitea protected main rejects direct push while git push --dry-run succeeds; dry-run does not prove that the server-side protected-branch pre-receive path will accept a real update\",\"positive_control\":\"protected main has direct push disabled and the previous real push was rejected\",\"prevention_rule\":\"A successful git push --dry-run must never be treated as proof that a real update to a protected branch is allowed; the configured branch-protection write path must be proven separately by read-only evidence.\",\"regression_test_required\":true,\"space\":\"runtime\"},\"exact_error\":{\"code\":\"SUBPROCESS_FAILED\",\"evidence\":{\"program\":\"git\",\"rc\":128,\"stderr_sha256\":\"591344aa654102654e3f613438365c6071c792d6940b446f17161d298bacfd7a\"},\"message\":\"Read-only subprocess failed: git\"},\"identity_confirmed\":true,\"mode\":\"READ_ONLY\",\"mutation_outcome\":\"NO_MUTATION\",\"next_step\":\"Prepare no mutation command until this read-only proof failure is resolved by exact evidence.\",\"output_truncated_in_json\":false,\"previous_exact_result\":{\"capsule_sha256\":\"f5e77d9db0c525ab690b399a890da6c71897fb2334c478740f68fde805589478\",\"command_id\":\"HOMELAB-CLUSTER-KB-V1-GITEA-PUSH-REJECTION-ROOT-CAUSE-READ-ONLY-20260805T155800Z\",\"identity_confirmed\":true,\"output_complete\":true,\"output_sha256\":\"0b90f060b557a2b73c9fca1232f2c60daa60a323537377fc0e851f823bf2abdf\",\"published_resources_checked\":3,\"runner_document_rc\":0,\"runner_json_sha256\":\"03556bd432819e9d9389f7ab7155249b727e692e561a4019534788ca6c3da1e3\",\"runner_rc\":0,\"runner_text_sha256\":\"028cd35cccc7673af18b85f2e732a4c07c629951b0c2ca0284546b3a0eafe14f\",\"runner_wrapper_matches_document\":true,\"semantic_fields_verified\":[\"changes_made\",\"command_id\",\"command_rc\",\"control_plane_error\",\"found\",\"mutation_outcome\",\"output_complete\",\"output_truncated_in_json\",\"output_truncated_in_runner_json\",\"private_addresses_included\",\"rc\",\"rollback_restored\",\"rollback_started\",\"runner_document_rc\",\"runner_rc\",\"runner_status\",\"runner_wrapper_matches_document\",\"sanitized\",\"secrets_included\",\"status\"],\"slot_directory_count\":12,\"slot_lane\":\"2\"},\"rc\":2,\"rollback_restored\":null,\"rollback_started\":false,\"schema\":\"homelab.read-only-diagnostic.v3\",\"status\":\"ERROR\"}\n"
"output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R6-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T003000Z\",\"command_rc\":0,\"control_plane_error\":null,\"mutation_outcome\":\"NO_MUTATION\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"OK\",\"version\":1}\n{\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R6-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T003000Z\",\"command_rc\":0,\"control_plane_error\":null,\"exact_error\":null,\"identity_confirmed\":true,\"mutation_outcome\":\"NO_MUTATION\",\"next_step\":\"Use the target result only after its identity and all runner fields are reviewed. If the target proved one safe path, prepare the single atomic ten-path transaction through that path.\",\"output_truncated_in_json\":false,\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"schema\":\"homelab.exact-result-state-bind.v2\",\"status\":\"OK\",\"target\":{\"adapter_state_sha256\":\"2728b93c82b733ff6a8f1d1593de40b232508caccda2393580b340af972348bb\",\"allowed_path_diagnostics\":{\"actions_workflow_count\":null,\"admin_branch_protection_change_selected\":null,\"candidate_branch_exists\":null,\"documented_automation_write_path\":null,\"dry_run_corroborative_only\":null,\"main_user_can_merge\":null,\"main_user_can_push\":null,\"matching_protection_rule_count\":null,\"merge_styles\":[],\"other_write_capable_collaborator_count\":null,\"owner_admin_direct_push_bypass_proven\":null,\"pull_request_api_readable\":null,\"pull_requests_enabled\":null,\"read_write_deploy_key_count\":null,\"service_account_or_deploy_key_path_selected\":null,\"temp_branch_push_dry_run_allowed\":null,\"workflow_or_bot_path_selected\":null,\"write_capable_deploy_key_available_to_current_transaction\":null,\"write_capable_team_count\":null},\"capsule_sha256\":\"9f7ba29d042f6da4d31c23980d808e451f35502c3f5c1f426d4abb34678160a0\",\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R6-20260806T001200Z\",\"command_rc\":2,\"control_plane_error\":null,\"exact_error\":{\"code\":\"SUBPROCESS_FAILED\",\"evidence\":{},\"message\":\"Read-only subprocess failed: git\"},\"main_protection\":{\"current_user_in_push_whitelist\":null,\"current_user_merge_allowed\":null,\"enable_merge_whitelist\":null,\"enable_push\":null,\"enable_push_whitelist\":null,\"enable_status_check\":null,\"protected\":null,\"require_signed_commits\":null,\"required_approvals\":null},\"mutation_outcome\":\"NO_MUTATION\",\"output_sha256\":\"6ff513773ec1ebd20a3901b2f78df6c1df819b171f6ef343794266db30cc24ce\",\"output_truncated_in_json\":false,\"previous_exact_result\":{\"capsule_sha256\":\"f5e77d9db0c525ab690b399a890da6c71897fb2334c478740f68fde805589478\",\"command_id\":\"HOMELAB-CLUSTER-KB-V1-GITEA-PUSH-REJECTION-ROOT-CAUSE-READ-ONLY-20260805T155800Z\",\"identity_confirmed\":true,\"output_complete\":true,\"output_sha256\":\"0b90f060b557a2b73c9fca1232f2c60daa60a323537377fc0e851f823bf2abdf\",\"runner_document_rc\":0,\"runner_json_sha256\":\"03556bd432819e9d9389f7ab7155249b727e692e561a4019534788ca6c3da1e3\",\"runner_rc\":0,\"runner_text_sha256\":\"028cd35cccc7673af18b85f2e732a4c07c629951b0c2ca0284546b3a0eafe14f\",\"runner_wrapper_matches_document\":true,\"slot_directory_count\":12,\"slot_lane\":\"2\"},\"public_exact_result\":{\"available\":false,\"exact_error\":{\"code\":\"PUBLIC_EXACT_HTTP_ERROR\",\"evidence\":{\"status\":409},\"message\":\"Published exact-result link returned an HTTP error\"},\"lane\":\"6\",\"output_found\":false,\"published_resource_count\":0,\"runner_json_found\":false,\"runner_text_found\":false,\"slot_depth\":11},\"rc\":2,\"remote_main\":null,\"remote_unchanged_since_previous_rejection\":null,\"repository_policy_evidence\":{\"conflicting_direct_main_policy_found\":null,\"explicit_pr_policy_found\":null,\"policy_file_count\":null,\"workflow_count\":null},\"rollback_restored\":null,\"rollback_started\":false,\"runner_document_rc\":null,\"runner_json_sha256\":\"fbd402f8e0fa868a08982228f228e1dd28453b43f1d679347e505e5abbb88fd7\",\"runner_rc\":null,\"runner_text_sha256\":\"fb2e32e9a0b924d988421e7c483e964002ca7aab051eb09445e3773c02e41c62\",\"runner_wrapper_matches_document\":null,\"single_proven_safe_path\":{\"classification\":null,\"next_atomic_transaction\":\"None\",\"proof\":{},\"proven\":null,\"proven_path_count\":null,\"proven_paths\":[],\"scope_path_count\":null},\"status\":\"ERROR\",\"target_report_identity_confirmed\":true},\"target_command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R6-20260806T001200Z\"}\n"
}