runtime: publish HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R8-20260806T005800Z

2026-08-06 00:59:23 +00:00
parent 583002c350
commit 9c4f595545
4 changed files with 93 additions and 21 deletions
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R8-20260806T005800Z",
+  "status": "FAIL",
+  "rc": 3,
+  "host": "pve01",
+  "mode": "verify",
+  "component": "cluster-knowledge-base-error-system",
+  "started_at_utc": "2026-08-06T00:59:15Z",
+  "finished_at_utc": "2026-08-06T00:59:23Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
+  "error_register_checked": true,
+  "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83",
+  "command_sha256": "d054b3d34ab9c107877d8c112d7f7ff2aa86dfcb5d0d9a9c80bbf061c31183da",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 3,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "300aa388656d7948d83225d09a8865728072e5d616a128b1e67ae6844acac798",
+  "sanitized_output_sha256": "300aa388656d7948d83225d09a8865728072e5d616a128b1e67ae6844acac798",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R8-20260806T005800Z\",\"command_rc\":3,\"control_plane_error\":null,\"mutation_outcome\":\"NO_MUTATION\",\"output_truncated_in_json\":false,\"rc\":3,\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"ERROR\",\"version\":1}\n{\"changes_made\":false,\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R8-20260806T005800Z\",\"command_rc\":3,\"control_plane_error\":null,\"error_system_v2_future_record\":{\"classification\":\"GITEA_BRANCH_PROTECTION_REJECTS_DIRECT_PUSHER\",\"fingerprint\":\"40795f946c36fcaaf8413b2b46b1900a5df4771d93aeb24f2a596287df0a8023\",\"id\":\"GITEA_PROTECTED_MAIN_DIRECT_PUSH_DRY_RUN_FALSE_POSITIVE\",\"negative_control\":\"dry-run may return rc=0 without exercising the server-side protected-branch mutation decision\",\"normalized_signature\":\"gitea protected main rejects direct push while git push --dry-run succeeds; dry-run does not prove that the server-side protected-branch pre-receive path will accept a real update\",\"positive_control\":\"protected main has direct push disabled and the previous real push was rejected\",\"prevention_rule\":\"A successful git push --dry-run must never be treated as proof that a real update to a protected branch is allowed; the configured branch-protection write path must be proven separately by read-only evidence.\",\"regression_test_required\":true,\"space\":\"runtime\"},\"exact_error\":{\"code\":\"UNEXPECTED_READ_ONLY_DIAGNOSTIC_FAILURE\",\"evidence\":{\"exception\":\"NameError\"},\"message\":\"Unexpected exception in read-only diagnostic\"},\"identity_confirmed\":true,\"mode\":\"READ_ONLY\",\"mutation_outcome\":\"NO_MUTATION\",\"next_step\":\"Prepare no mutation command until the read-only diagnostic implementation failure is resolved.\",\"output_truncated_in_json\":false,\"previous_exact_result\":{\"capsule_sha256\":\"b4fc5c6de740810ee29a24b4c1fe3c12063578466640ad21fcdb4ee8eae690fc\",\"command_id\":\"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z\",\"identity_confirmed\":true,\"output_complete\":true,\"output_sha256\":\"4086e3b3e2072c37c68046215cf7e09ecfd8b6561c9f92a5c356c076ada99096\",\"published_resources_checked\":3,\"runner_document_rc\":0,\"runner_json_sha256\":\"b4cab1d1da4cfa95f66b6824c1efa6805aed791608f6813f01cd940462970a5c\",\"runner_rc\":0,\"runner_text_sha256\":\"93b3331bec792b31638390b3a3c4c3d73de1d192d8e2edc2030c99c25a43b319\",\"runner_wrapper_matches_document\":true,\"semantic_fields_verified\":[\"changes_made\",\"command_id\",\"command_rc\",\"control_plane_error\",\"found\",\"mutation_outcome\",\"output_complete\",\"output_truncated_in_json\",\"output_truncated_in_runner_json\",\"private_addresses_included\",\"rc\",\"rollback_restored\",\"rollback_started\",\"runner_document_rc\",\"runner_rc\",\"runner_status\",\"runner_wrapper_matches_document\",\"sanitized\",\"secrets_included\",\"status\"],\"slot_directory_count\":12,\"slot_lane\":\"8\"},\"rc\":3,\"rollback_restored\":null,\"rollback_started\":false,\"schema\":\"homelab.read-only-diagnostic.v5\",\"status\":\"ERROR\"}\n"
+}
@@ -0,0 +1,34 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R8-20260806T005800Z
+STATUS=FAIL
+RC=3
+HOST=pve01
+MODE=verify
+COMPONENT=cluster-knowledge-base-error-system
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83
+COMMAND_SHA256=d054b3d34ab9c107877d8c112d7f7ff2aa86dfcb5d0d9a9c80bbf061c31183da
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=3
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=300aa388656d7948d83225d09a8865728072e5d616a128b1e67ae6844acac798
+SANITIZED_OUTPUT_SHA256=300aa388656d7948d83225d09a8865728072e5d616a128b1e67ae6844acac798
+OUTPUT_BEGIN
+HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R8-20260806T005800Z","command_rc":3,"control_plane_error":null,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":3,"rollback_restored":null,"rollback_started":false,"status":"ERROR","version":1}
+{"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R8-20260806T005800Z","command_rc":3,"control_plane_error":null,"error_system_v2_future_record":{"classification":"GITEA_BRANCH_PROTECTION_REJECTS_DIRECT_PUSHER","fingerprint":"40795f946c36fcaaf8413b2b46b1900a5df4771d93aeb24f2a596287df0a8023","id":"GITEA_PROTECTED_MAIN_DIRECT_PUSH_DRY_RUN_FALSE_POSITIVE","negative_control":"dry-run may return rc=0 without exercising the server-side protected-branch mutation decision","normalized_signature":"gitea protected main rejects direct push while git push --dry-run succeeds; dry-run does not prove that the server-side protected-branch pre-receive path will accept a real update","positive_control":"protected main has direct push disabled and the previous real push was rejected","prevention_rule":"A successful git push --dry-run must never be treated as proof that a real update to a protected branch is allowed; the configured branch-protection write path must be proven separately by read-only evidence.","regression_test_required":true,"space":"runtime"},"exact_error":{"code":"UNEXPECTED_READ_ONLY_DIAGNOSTIC_FAILURE","evidence":{"exception":"NameError"},"message":"Unexpected exception in read-only diagnostic"},"identity_confirmed":true,"mode":"READ_ONLY","mutation_outcome":"NO_MUTATION","next_step":"Prepare no mutation command until the read-only diagnostic implementation failure is resolved.","output_truncated_in_json":false,"previous_exact_result":{"capsule_sha256":"b4fc5c6de740810ee29a24b4c1fe3c12063578466640ad21fcdb4ee8eae690fc","command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R7-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T005500Z","identity_confirmed":true,"output_complete":true,"output_sha256":"4086e3b3e2072c37c68046215cf7e09ecfd8b6561c9f92a5c356c076ada99096","published_resources_checked":3,"runner_document_rc":0,"runner_json_sha256":"b4cab1d1da4cfa95f66b6824c1efa6805aed791608f6813f01cd940462970a5c","runner_rc":0,"runner_text_sha256":"93b3331bec792b31638390b3a3c4c3d73de1d192d8e2edc2030c99c25a43b319","runner_wrapper_matches_document":true,"semantic_fields_verified":["changes_made","command_id","command_rc","control_plane_error","found","mutation_outcome","output_complete","output_truncated_in_json","output_truncated_in_runner_json","private_addresses_included","rc","rollback_restored","rollback_started","runner_document_rc","runner_rc","runner_status","runner_wrapper_matches_document","sanitized","secrets_included","status"],"slot_directory_count":12,"slot_lane":"8"},"rc":3,"rollback_restored":null,"rollback_started":false,"schema":"homelab.read-only-diagnostic.v5","status":"ERROR"}
+
+OUTPUT_END
+CHAT_OUTPUT_END