runtime: publish HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z

runtime/history/HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z.txt

@@ -0,0 +1,34 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=verify
+COMPONENT=cluster-knowledge-base-error-system
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83
+COMMAND_SHA256=9dcdeb16462922e9c06293746594277b11569e1f618d68b339155dabbcd85a4e
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=fd30c254ca3ce565304bcc80899748c7b05f48cdaaae70246dd2aa9e5e2bd3c9
+SANITIZED_OUTPUT_SHA256=fd30c254ca3ce565304bcc80899748c7b05f48cdaaae70246dd2aa9e5e2bd3c9
+OUTPUT_BEGIN
+HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z","command_rc":0,"control_plane_error":null,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"status":"OK","version":1}
+{"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z","command_rc":0,"control_plane_error":null,"exact_error":null,"identity_confirmed":true,"mutation_outcome":"NO_MUTATION","next_step":"Use the target result only after its identity and all runner fields are reviewed. If the target proved one safe path, prepare the single atomic ten-path transaction through that path.","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"schema":"homelab.exact-result-state-bind.v5","status":"OK","target":{"adapter_state_sha256":"42bf8ec4ad6a6628aa7a18f0422eb3e01c278a998a304f2dbb6c59cbfbb08f6e","allowed_path_diagnostics":{"actions_workflow_count":null,"admin_branch_protection_change_capability":null,"admin_branch_protection_change_selected":null,"candidate_branch_exists":null,"documented_automation_write_path":null,"dry_run_corroborative_only":null,"main_user_can_merge":null,"main_user_can_push":null,"matching_protection_rule_count":null,"merge_styles":[],"other_write_capable_collaborator_count":null,"owner_admin_direct_push_bypass_proven":null,"pull_request_api_readable":null,"pull_requests_enabled":null,"read_write_deploy_key_count":null,"service_account_or_deploy_key_path_selected":null,"temp_branch_push_dry_run_allowed":null,"workflow_or_bot_path_selected":null,"write_capable_deploy_key_available_to_current_transaction":null,"write_capable_team_count":null},"capsule_sha256":"7f493ec3cb98128252e51e8222d534bce36f4085a3967b3a269c4c87c4af8329","changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R9-20260806T010500Z","command_rc":2,"control_plane_error":null,"exact_error":{"code":"GITEA_API_READ_FAILED","evidence":{"status":405},"message":"Gitea API read failed"},"identity":{"active":null,"api_auth_mode":"None","api_identity_verified":null,"candidate_count":null,"credential_source":"None","credential_values_exposed":null,"git_ls_remote_verified":null,"permission":null,"repository_permissions":{"admin":null,"pull":null,"push":null},"repository_pull_permission_verified":null,"repository_push_permission_verified":null,"restricted":null,"selected_alias_source_count":null,"source_detail_sha256":null,"source_path_sha256":null,"username_sha256":null,"valid_credential_set_count":null},"main_protection":{"current_user_in_push_whitelist":null,"current_user_merge_allowed":null,"effective_branch_protection_name_present":null,"enable_merge_whitelist":null,"enable_push":null,"enable_push_whitelist":null,"enable_status_check":null,"protected":null,"protected_file_patterns_present":null,"require_signed_commits":null,"required_approvals":null,"user_can_merge":null,"user_can_push":null},"mutation_outcome":"NO_MUTATION","output_sha256":"8f2549fd6ab655d5f17581e81e4e536c63c3a154363dcb26d25f6de2df03905e","output_truncated_in_json":false,"previous_exact_result":{"capsule_sha256":"40b0a483eaa5034980607b36aa5ea927d906a063dff1f4dcb2b83b6d9d557d7f","command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R8-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T010000Z","identity_confirmed":true,"output_complete":true,"output_sha256":"ae0ed3eefb47cd8bbe0968f320c365a913f4f0f1cc70b8b0eba891b6ab997195","runner_document_rc":0,"runner_json_sha256":"b69136768b52aa51798ef0a34f4d54ac6cf312acc21395f75c3d69419499a0d4","runner_rc":0,"runner_text_sha256":"f49c93d36fe0329ad07efc7cabda7696c04b8bfd0ac414bb316755ba08061897","runner_wrapper_matches_document":true,"slot_directory_count":12,"slot_lane":"0"},"public_exact_result":{"available":false,"exact_error":{"code":"PUBLIC_EXACT_HTTP_ERROR","evidence":{"status":409},"message":"Published exact-result link returned an HTTP error"},"lane":"1","output_found":false,"published_resource_count":0,"runner_json_found":false,"runner_text_found":false,"slot_depth":11},"rc":2,"remote_main":null,"remote_unchanged_since_previous_rejection":null,"repository_policy_evidence":{"conflicting_direct_main_policy_found":null,"explicit_pr_policy_found":null,"policy_file_count":null,"workflow_count":null},"rollback_restored":null,"rollback_started":false,"runner_document_rc":null,"runner_json_sha256":"c9f428db01efeb6950d881f2f0f3b5c54c67a750eaa6ff893b22574e6c9b20e7","runner_rc":null,"runner_text_sha256":"4426d05e6035eb86a0e36a79d53e723f8795ebe138c59ca5af3aa23ed8b26952","runner_wrapper_matches_document":null,"single_proven_safe_path":{"classification":null,"next_atomic_transaction":"None","proof":{},"proven":null,"proven_path_count":null,"proven_paths":[],"scope_path_count":null},"status":"ERROR","target_report_identity_confirmed":true},"target_command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R9-20260806T010500Z"}
+
+OUTPUT_END
+CHAT_OUTPUT_END

runtime/latest.txt

@@ -1,7 +1,7 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R9-20260806T010500Z
+COMMAND_ID=HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z
-STATUS=FAIL
+STATUS=OK
-RC=2
+RC=0
 HOST=pve01
 MODE=verify
 COMPONENT=cluster-knowledge-base-error-system
@@ -9,14 +9,14 @@ REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83
-COMMAND_SHA256=56a3b2c797bee2026156d56a1faa2ba4e1aaeb1b1bf9524ba4f5ae81c5918106
+COMMAND_SHA256=9dcdeb16462922e9c06293746594277b11569e1f618d68b339155dabbcd85a4e
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=false
 RESULT_CONTRACT_VALID=true
 RESULT_CONTRACT_STATUS=NOT_APPLICABLE
 RESULT_CONTRACT_ERROR=NONE
-COMMAND_RC=2
+COMMAND_RC=0
 CHANGES_MADE=false
 ROLLBACK_STARTED=false
 ROLLBACK_RESTORED=null
@@ -24,11 +24,11 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=8f2549fd6ab655d5f17581e81e4e536c63c3a154363dcb26d25f6de2df03905e
+RAW_EVIDENCE_SHA256=fd30c254ca3ce565304bcc80899748c7b05f48cdaaae70246dd2aa9e5e2bd3c9
-SANITIZED_OUTPUT_SHA256=8f2549fd6ab655d5f17581e81e4e536c63c3a154363dcb26d25f6de2df03905e
+SANITIZED_OUTPUT_SHA256=fd30c254ca3ce565304bcc80899748c7b05f48cdaaae70246dd2aa9e5e2bd3c9
 OUTPUT_BEGIN
-HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R9-20260806T010500Z","command_rc":2,"control_plane_error":null,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":2,"rollback_restored":null,"rollback_started":false,"status":"ERROR","version":1}
+HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z","command_rc":0,"control_plane_error":null,"mutation_outcome":"NO_MUTATION","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"status":"OK","version":1}
-{"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R9-20260806T010500Z","command_rc":2,"control_plane_error":null,"error_system_v2_future_record":{"classification":"GITEA_BRANCH_PROTECTION_REJECTS_DIRECT_PUSHER","fingerprint":"40795f946c36fcaaf8413b2b46b1900a5df4771d93aeb24f2a596287df0a8023","id":"GITEA_PROTECTED_MAIN_DIRECT_PUSH_DRY_RUN_FALSE_POSITIVE","negative_control":"dry-run may return rc=0 without exercising the server-side protected-branch mutation decision","normalized_signature":"gitea protected main rejects direct push while git push --dry-run succeeds; dry-run does not prove that the server-side protected-branch pre-receive path will accept a real update","positive_control":"protected main has direct push disabled and the previous real push was rejected","prevention_rule":"A successful git push --dry-run must never be treated as proof that a real update to a protected branch is allowed; the configured branch-protection write path must be proven separately by read-only evidence.","regression_test_required":true,"space":"runtime"},"exact_error":{"code":"GITEA_API_READ_FAILED","evidence":{"path_sha256":"80730d87f43707f670d9fd6aa13ead2145119a7618077edab82583506b71cd77","status":405},"message":"Gitea API read failed"},"identity_confirmed":true,"mode":"READ_ONLY","mutation_outcome":"NO_MUTATION","next_step":"Prepare no mutation command until this read-only proof failure is resolved by exact evidence.","output_truncated_in_json":false,"previous_exact_result":{"capsule_sha256":"40b0a483eaa5034980607b36aa5ea927d906a063dff1f4dcb2b83b6d9d557d7f","command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R8-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T010000Z","identity_confirmed":true,"output_complete":true,"output_sha256":"ae0ed3eefb47cd8bbe0968f320c365a913f4f0f1cc70b8b0eba891b6ab997195","published_resources_checked":3,"runner_document_rc":0,"runner_json_sha256":"b69136768b52aa51798ef0a34f4d54ac6cf312acc21395f75c3d69419499a0d4","runner_rc":0,"runner_text_sha256":"f49c93d36fe0329ad07efc7cabda7696c04b8bfd0ac414bb316755ba08061897","runner_wrapper_matches_document":true,"semantic_fields_verified":["changes_made","command_id","command_rc","control_plane_error","found","mutation_outcome","output_complete","output_truncated_in_json","output_truncated_in_runner_json","private_addresses_included","rc","rollback_restored","rollback_started","runner_document_rc","runner_rc","runner_status","runner_wrapper_matches_document","sanitized","secrets_included","status"],"slot_directory_count":12,"slot_lane":"0"},"rc":2,"rollback_restored":null,"rollback_started":false,"schema":"homelab.read-only-diagnostic.v6","status":"ERROR"}
+{"changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R9-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T011000Z","command_rc":0,"control_plane_error":null,"exact_error":null,"identity_confirmed":true,"mutation_outcome":"NO_MUTATION","next_step":"Use the target result only after its identity and all runner fields are reviewed. If the target proved one safe path, prepare the single atomic ten-path transaction through that path.","output_truncated_in_json":false,"rc":0,"rollback_restored":null,"rollback_started":false,"schema":"homelab.exact-result-state-bind.v5","status":"OK","target":{"adapter_state_sha256":"42bf8ec4ad6a6628aa7a18f0422eb3e01c278a998a304f2dbb6c59cbfbb08f6e","allowed_path_diagnostics":{"actions_workflow_count":null,"admin_branch_protection_change_capability":null,"admin_branch_protection_change_selected":null,"candidate_branch_exists":null,"documented_automation_write_path":null,"dry_run_corroborative_only":null,"main_user_can_merge":null,"main_user_can_push":null,"matching_protection_rule_count":null,"merge_styles":[],"other_write_capable_collaborator_count":null,"owner_admin_direct_push_bypass_proven":null,"pull_request_api_readable":null,"pull_requests_enabled":null,"read_write_deploy_key_count":null,"service_account_or_deploy_key_path_selected":null,"temp_branch_push_dry_run_allowed":null,"workflow_or_bot_path_selected":null,"write_capable_deploy_key_available_to_current_transaction":null,"write_capable_team_count":null},"capsule_sha256":"7f493ec3cb98128252e51e8222d534bce36f4085a3967b3a269c4c87c4af8329","changes_made":false,"command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R9-20260806T010500Z","command_rc":2,"control_plane_error":null,"exact_error":{"code":"GITEA_API_READ_FAILED","evidence":{"status":405},"message":"Gitea API read failed"},"identity":{"active":null,"api_auth_mode":"None","api_identity_verified":null,"candidate_count":null,"credential_source":"None","credential_values_exposed":null,"git_ls_remote_verified":null,"permission":null,"repository_permissions":{"admin":null,"pull":null,"push":null},"repository_pull_permission_verified":null,"repository_push_permission_verified":null,"restricted":null,"selected_alias_source_count":null,"source_detail_sha256":null,"source_path_sha256":null,"username_sha256":null,"valid_credential_set_count":null},"main_protection":{"current_user_in_push_whitelist":null,"current_user_merge_allowed":null,"effective_branch_protection_name_present":null,"enable_merge_whitelist":null,"enable_push":null,"enable_push_whitelist":null,"enable_status_check":null,"protected":null,"protected_file_patterns_present":null,"require_signed_commits":null,"required_approvals":null,"user_can_merge":null,"user_can_push":null},"mutation_outcome":"NO_MUTATION","output_sha256":"8f2549fd6ab655d5f17581e81e4e536c63c3a154363dcb26d25f6de2df03905e","output_truncated_in_json":false,"previous_exact_result":{"capsule_sha256":"40b0a483eaa5034980607b36aa5ea927d906a063dff1f4dcb2b83b6d9d557d7f","command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-R8-EXACT-RESULT-STATE-BIND-READ-ONLY-20260806T010000Z","identity_confirmed":true,"output_complete":true,"output_sha256":"ae0ed3eefb47cd8bbe0968f320c365a913f4f0f1cc70b8b0eba891b6ab997195","runner_document_rc":0,"runner_json_sha256":"b69136768b52aa51798ef0a34f4d54ac6cf312acc21395f75c3d69419499a0d4","runner_rc":0,"runner_text_sha256":"f49c93d36fe0329ad07efc7cabda7696c04b8bfd0ac414bb316755ba08061897","runner_wrapper_matches_document":true,"slot_directory_count":12,"slot_lane":"0"},"public_exact_result":{"available":false,"exact_error":{"code":"PUBLIC_EXACT_HTTP_ERROR","evidence":{"status":409},"message":"Published exact-result link returned an HTTP error"},"lane":"1","output_found":false,"published_resource_count":0,"runner_json_found":false,"runner_text_found":false,"slot_depth":11},"rc":2,"remote_main":null,"remote_unchanged_since_previous_rejection":null,"repository_policy_evidence":{"conflicting_direct_main_policy_found":null,"explicit_pr_policy_found":null,"policy_file_count":null,"workflow_count":null},"rollback_restored":null,"rollback_started":false,"runner_document_rc":null,"runner_json_sha256":"c9f428db01efeb6950d881f2f0f3b5c54c67a750eaa6ff893b22574e6c9b20e7","runner_rc":null,"runner_text_sha256":"4426d05e6035eb86a0e36a79d53e723f8795ebe138c59ca5af3aa23ed8b26952","runner_wrapper_matches_document":null,"single_proven_safe_path":{"classification":null,"next_atomic_transaction":"None","proof":{},"proven":null,"proven_path_count":null,"proven_paths":[],"scope_path_count":null},"status":"ERROR","target_report_identity_confirmed":true},"target_command_id":"HOMELAB-GITEA-ALLOWED-PUSH-PATH-DIAGNOSTIC-READ-ONLY-R9-20260806T010500Z"}
 
 OUTPUT_END
 CHAT_OUTPUT_END