homelab-admin/homelab-public-context
1
0
Fork 0
Code Activity

runtime: publish HOMELAB-GITEA-ALLOWED-PUSH-PATH-R6-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T003000Z

Browse Source
This commit is contained in:
homelab-runtime-publisher
2026-08-06 00:37:04 +00:00
parent 17706e65d6
commit 9b0d985920
4 changed files with 91 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files
runtime/latest.txt
+9 -9
View File
@@ -1,7 +1,7 @@
CHAT_OUTPUT_BEGIN
COMMAND_ID=HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R6-20260806T001200Z
STATUS=FAIL
RC=2
COMMAND_ID=HOMELAB-GITEA-ALLOWED-PUSH-PATH-R6-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T003000Z
STATUS=OK
RC=0
HOST=pve01
MODE=verify
COMPONENT=cluster-knowledge-base-error-system
@@ -9,14 +9,14 @@ REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83
COMMAND_SHA256=c3d56ffc46fea0569c3cbce438ff0757d334bd10e229fab9ec1b04dc01962f2d
COMMAND_SHA256=08e90ba54d74453ca55e2e9f5d9fa8e02d3076d5cd3c6658fd0a1db595d19223
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=2
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
@@ -24,11 +24,11 @@ MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=6ff513773ec1ebd20a3901b2f78df6c1df819b171f6ef343794266db30cc24ce
SANITIZED_OUTPUT_SHA256=6ff513773ec1ebd20a3901b2f78df6c1df819b171f6ef343794266db30cc24ce
RAW_EVIDENCE_SHA256=a5eca01f3acc3f2023dd04d231237bec1e0a0878cca99e26252ef9b3ec1b90b6
SANITIZED_OUTPUT_SHA256=a5eca01f3acc3f2023dd04d231237bec1e0a0878cca99e26252ef9b3ec1b90b6
OUTPUT_BEGIN
HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R6-20260806T001200Z","command_rc":2,"control_plane_error":null,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":2,"rollback_restored":null,"rollback_started":false,"status":"ERROR","version":1}
{"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R6-20260806T001200Z","command_rc":2,"control_plane_error":null,"error_system_v2_future_record":{"classification":"GITEA_BRANCH_PROTECTION_REJECTS_DIRECT_PUSHER","fingerprint":"40795f946c36fcaaf8413b2b46b1900a5df4771d93aeb24f2a596287df0a8023","id":"GITEA_PROTECTED_MAIN_DIRECT_PUSH_DRY_RUN_FALSE_POSITIVE","negative_control":"dry-run may return rc=0 without exercising the server-side protected-branch mutation decision","normalized_signature":"gitea protected main rejects direct push while git push --dry-run succeeds; dry-run does not prove that the server-side protected-branch pre-receive path will accept a real update","positive_control":"protected main has direct push disabled and the previous real push was rejected","prevention_rule":"A successful git push --dry-run must never be treated as proof that a real update to a protected branch is allowed; the configured branch-protection write path must be proven separately by read-only evidence.","regression_test_required":true,"space":"runtime"},"exact_error":{"code":"SUBPROCESS_FAILED","evidence":{"program":"git","rc":128,"stderr_sha256":"591344aa654102654e3f613438365c6071c792d6940b446f17161d298bacfd7a"},"message":"Read-only subprocess failed: git"},"identity_confirmed":true,"mode":"READ_ONLY","mutation_outcome":"NO_MUTATION","next_step":"Prepare no mutation command until this read-only proof failure is resolved by exact evidence.","output_truncated_in_json":false,"previous_exact_result":{"capsule_sha256":"f5e77d9db0c525ab690b399a890da6c71897fb2334c478740f68fde805589478","command_id":"HOMELAB-CLUSTER-KB-V1-GITEA-PUSH-REJECTION-ROOT-CAUSE-READ-ONLY-20260805T155800Z","identity_confirmed":true,"output_complete":true,"output_sha256":"0b90f060b557a2b73c9fca1232f2c60daa60a323537377fc0e851f823bf2abdf","published_resources_checked":3,"runner_document_rc":0,"runner_json_sha256":"03556bd432819e9d9389f7ab7155249b727e692e561a4019534788ca6c3da1e3","runner_rc":0,"runner_text_sha256":"028cd35cccc7673af18b85f2e732a4c07c629951b0c2ca0284546b3a0eafe14f","runner_wrapper_matches_document":true,"semantic_fields_verified":["changes_made","command_id","command_rc","control_plane_error","found","mutation_outcome","output_complete","output_truncated_in_json","output_truncated_in_runner_json","private_addresses_included","rc","rollback_restored","rollback_started","runner_document_rc","runner_rc","runner_status","runner_wrapper_matches_document","sanitized","secrets_included","status"],"slot_directory_count":12,"slot_lane":"2"},"rc":2,"rollback_restored":null,"rollback_started":false,"schema":"homelab.read-only-diagnostic.v3","status":"ERROR"}
HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R6-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T003000Z","command_rc":0,"control_plane_error":null,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"status":"OK","version":1}
{"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R6-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T003000Z","command_rc":0,"control_plane_error":null,"exact_error":null,"identity_confirmed":true,"mutation_outcome":"NO_MUTATION","next_step":"Use the target result only after its identity and all runner fields are reviewed. If the target proved one safe path, prepare the single atomic ten-path transaction through that path.","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"schema":"homelab.exact-result-state-bind.v2","status":"OK","target":{"adapter_state_sha256":"2728b93c82b733ff6a8f1d1593de40b232508caccda2393580b340af972348bb","allowed_path_diagnostics":{"actions_workflow_count":null,"admin_branch_protection_change_selected":null,"candidate_branch_exists":null,"documented_automation_write_path":null,"dry_run_corroborative_only":null,"main_user_can_merge":null,"main_user_can_push":null,"matching_protection_rule_count":null,"merge_styles":[],"other_write_capable_collaborator_count":null,"owner_admin_direct_push_bypass_proven":null,"pull_request_api_readable":null,"pull_requests_enabled":null,"read_write_deploy_key_count":null,"service_account_or_deploy_key_path_selected":null,"temp_branch_push_dry_run_allowed":null,"workflow_or_bot_path_selected":null,"write_capable_deploy_key_available_to_current_transaction":null,"write_capable_team_count":null},"capsule_sha256":"9f7ba29d042f6da4d31c23980d808e451f35502c3f5c1f426d4abb34678160a0","changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R6-20260806T001200Z","command_rc":2,"control_plane_error":null,"exact_error":{"code":"SUBPROCESS_FAILED","evidence":{},"message":"Read-only subprocess failed: git"},"main_protection":{"current_user_in_push_whitelist":null,"current_user_merge_allowed":null,"enable_merge_whitelist":null,"enable_push":null,"enable_push_whitelist":null,"enable_status_check":null,"protected":null,"require_signed_commits":null,"required_approvals":null},"mutation_outcome":"NO_MUTATION","output_sha256":"6ff513773ec1ebd20a3901b2f78df6c1df819b171f6ef343794266db30cc24ce","output_truncated_in_json":false,"previous_exact_result":{"capsule_sha256":"f5e77d9db0c525ab690b399a890da6c71897fb2334c478740f68fde805589478","command_id":"HOMELAB-CLUSTER-KB-V1-GITEA-PUSH-REJECTION-ROOT-CAUSE-READ-ONLY-20260805T155800Z","identity_confirmed":true,"output_complete":true,"output_sha256":"0b90f060b557a2b73c9fca1232f2c60daa60a323537377fc0e851f823bf2abdf","runner_document_rc":0,"runner_json_sha256":"03556bd432819e9d9389f7ab7155249b727e692e561a4019534788ca6c3da1e3","runner_rc":0,"runner_text_sha256":"028cd35cccc7673af18b85f2e732a4c07c629951b0c2ca0284546b3a0eafe14f","runner_wrapper_matches_document":true,"slot_directory_count":12,"slot_lane":"2"},"public_exact_result":{"available":false,"exact_error":{"code":"PUBLIC_EXACT_HTTP_ERROR","evidence":{"status":409},"message":"Published exact-result link returned an HTTP error"},"lane":"6","output_found":false,"published_resource_count":0,"runner_json_found":false,"runner_text_found":false,"slot_depth":11},"rc":2,"remote_main":null,"remote_unchanged_since_previous_rejection":null,"repository_policy_evidence":{"conflicting_direct_main_policy_found":null,"explicit_pr_policy_found":null,"policy_file_count":null,"workflow_count":null},"rollback_restored":null,"rollback_started":false,"runner_document_rc":null,"runner_json_sha256":"fbd402f8e0fa868a08982228f228e1dd28453b43f1d679347e505e5abbb88fd7","runner_rc":null,"runner_text_sha256":"fb2e32e9a0b924d988421e7c483e964002ca7aab051eb09445e3773c02e41c62","runner_wrapper_matches_document":null,"single_proven_safe_path":{"classification":null,"next_atomic_transaction":"None","proof":{},"proven":null,"proven_path_count":null,"proven_paths":[],"scope_path_count":null},"status":"ERROR","target_report_identity_confirmed":true},"target_command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R6-20260806T001200Z"}
OUTPUT_END
CHAT_OUTPUT_END