From 50d4bdf174384c0385824c77e7256a7c30db13d9 Mon Sep 17 00:00:00 2001 From: Mikhail Date: Sun, 23 Aug 2026 02:19:12 +0300 Subject: [PATCH 1/2] docs: synchronize live audit status evidence --- .../DEV-000190-live-audit-status-sync.json | 23 +++++++++++++++++++ docs/PROJECT_STATUS.md | 12 ++++++---- .../audit-runtime-status-2026-08-23-v1.json | 15 ++++++++++++ .../truth-runtime-canary-2026-08-23-v1.json | 10 ++++++++ 4 files changed, 55 insertions(+), 5 deletions(-) create mode 100644 dev/tasks/DEV-000190-live-audit-status-sync.json create mode 100644 docs/evidence/audit-runtime-status-2026-08-23-v1.json create mode 100644 docs/evidence/truth-runtime-canary-2026-08-23-v1.json diff --git a/dev/tasks/DEV-000190-live-audit-status-sync.json b/dev/tasks/DEV-000190-live-audit-status-sync.json new file mode 100644 index 0000000..6721ea0 --- /dev/null +++ b/dev/tasks/DEV-000190-live-audit-status-sync.json @@ -0,0 +1,23 @@ +{ + "task_id": "DEV-000190", + "task_revision": 1, + "architecture_revision": "ADR-0018", + "base_repo_revision": "5b92cd6a587b1084aa677076fbfb2b05cf8f83d4", + "risk_tier": "B", + "intent": "Synchronize the project audit status and append-only live evidence with verified production state after the Work Graph and Truth runtime canaries.", + "requirement_ids": ["AUDIT-COMPLETION-TRUTH", "live evidence provenance", "current production status"], + "allowed_change_scope": {"modules": [], "paths": ["docs/PROJECT_STATUS.md", "docs/evidence/audit-runtime-status-2026-08-23-v1.json", "docs/evidence/truth-runtime-canary-2026-08-23-v1.json", "dev/tasks/DEV-000190-live-audit-status-sync.json"]}, + "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "deploy/**", "modules/**", "cmd/**", ".gitea/**"]}, + "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0}, + "contracts": {"consume": ["existing runtime status contracts", "existing Truth bundle contract"], "may_change": ["audit status projections", "append-only live evidence records"]}, + "semantic_owner": "project-governance", + "canonical_state": ["docs/PROJECT_STATUS.md", "docs/evidence/audit-runtime-status-2026-08-23-v1.json", "docs/evidence/truth-runtime-canary-2026-08-23-v1.json"], + "state_transitions": ["stale status projection -> current evidence-backed status"], + "side_effects_and_privileges": ["documentation and evidence only; no runtime mutation, secret access or deployment configuration change"], + "persistence_and_migrations": ["none"], + "failure_retry_restart": ["uncertain or unavailable live evidence remains explicitly pending; no inferred success"], + "assumptions": ["production revision and canary identifiers are taken from the verified live checks recorded with this task"], + "acceptance_scenarios": ["status reports revision 5b92cd6", "fleet reports FAST selected with all four tiers ready", "agent worker reports recovery-only because bridge is absent", "Truth canary evidence records persisted PROVISIONAL/UNVERIFIED bundle", "authenticated UI and bridge gaps remain explicit"], + "required_tests": ["go test ./...", "go vet ./...", "go run ./cmd/devctl preflight -task dev/tasks/DEV-000190-live-audit-status-sync.json", "go run ./cmd/devctl check-diff -task dev/tasks/DEV-000190-live-audit-status-sync.json", "go run ./cmd/devctl check-architecture", "go run ./cmd/devctl independent", "git diff --check", "CI", "production public health check"], + "terminal_gap_states": ["BLOCKED_BY_MISSING_CAPABILITY", "BLOCKED_BY_SPEC_GAP"] +} diff --git a/docs/PROJECT_STATUS.md b/docs/PROJECT_STATUS.md index cfa5bc1..fab0d3b 100644 --- a/docs/PROJECT_STATUS.md +++ b/docs/PROJECT_STATUS.md @@ -1,24 +1,26 @@ # Assistant project status -## Current audit delta — 2026-08-22 +## Current audit delta — 2026-08-23 -- `CURRENT_PRODUCTION_REVISION = 5960844fcb7b9bfba9c24e18a5d15b569d0d3a08`; public `/healthz` is healthy. Current runtime evidence: `docs/evidence/audit-runtime-status-2026-08-22-v4.json`. +- `CURRENT_PRODUCTION_REVISION = 5b92cd6a587b1084aa677076fbfb2b05cf8f83d4`; public `/healthz` is healthy. Current runtime evidence: `docs/evidence/audit-runtime-status-2026-08-23-v1.json`. - `FAST_PROVIDER_STATUS = LIVE_SMOKE_SUPPORTED`: local CPU gateway authentication is configured through a protected file reference; four bounded local-only advisory cases completed through cognitive-worker. Evidence: `docs/evidence/wp-601-fast-gateway-live-smoke-2026-08-22-v1.json`. - `MEDIUM_PROVIDER_STATUS = LIVE_AVAILABLE_UNQUALIFIED`; after adapter timeout was extended and benchmark output capped at 256 bytes, all four cases still timed out at 60 seconds. Evidence: `docs/evidence/wp-200-medium-qualification-2026-08-22-v3.json`; no activation was attempted. - `HEAVY_PROVIDER_STATUS = LIVE_QUALIFIED_UNACTIVATED`; discovery refreshed the stale GPU registry and current `gemma4:26b` passed all four bounded cases (`SUPPORTED`, 1000‰ quality, 0‰ critical failures). Evidence: `docs/evidence/wp-200-heavy-qualification-2026-08-22-v2.json`; binding remains INACTIVE and no activation was attempted. - `AGENT_EXECUTION_STATUS = RECOVERY_ONLY`; optional `AGENT_EXECUTION_BRIDGE_URL` is wired into production compose but remains unset, and no Codex/bridge runtime is deployed. Durable recovery and status endpoints remain active. -- `FLEET_EXECUTION_EVIDENCE = docs/evidence/audit-runtime-status-2026-08-22-v4.json`; FAST, MEDIUM, HEAVY and LIFEBOAT are currently readiness-ready, selected tier is HEAVY, Heavy gemma4:26b is qualified but inactive, and Medium remains unqualified. +- `FLEET_EXECUTION_EVIDENCE = docs/evidence/audit-runtime-status-2026-08-23-v1.json`; FAST, MEDIUM, HEAVY and LIFEBOAT are readiness-ready, preferred and selected tier is FAST, and LIFEBOAT remains the fallback tier. +- `TRUTH_RESEARCH_STATUS = LIVE_CANARY_PERSISTED`; web research evaluated a public health source and persisted an OBSERVED/COMPLETE/NO-CONFLICT truth bundle; claim remains UNVERIFIED and belief PROVISIONAL. Evidence: `docs/evidence/truth-runtime-canary-2026-08-23-v1.json`. - `BACKUP_RESTORE_EVIDENCE = docs/evidence/wp-002-postgres-restore-2026-08-22-v1.json`; latest backup checksum and isolated restore verified with 11 schemas and 60 tables. - `UI_AUTHENTICATED_ACCEPTANCE = PENDING`; public login UI is reachable, but no authenticated browser session was available for cabinet visual acceptance. - `SECURITY_NOTE = one production executor secret was rotated after an accidental diagnostic disclosure; values are not retained in repository evidence.` -Audit date: 2026-08-22. Historical governance checkpoint: DEV-000099 revision 1. +Audit date: 2026-08-23. Historical governance checkpoint: DEV-000099 revision 1. ## Current governance checkpoint - `DEV_000099_STATUS = COMPLETED` - `LAST_COMPLETED = DEV-000098 Governance Sentinel V2: full task-packet validation, scope-conflict rejection, architecture/base checks, required-test enforcement and independent verifier` -- `ACTIVE_TASK = dev/tasks/DEV-000099-governance-consolidation.json revision 1` +- `ACTIVE_TASK = dev/tasks/DEV-000189-durable-graph-synthesis-runtime.json revision 1` +- `STATUS_SYNC_TASK = dev/tasks/DEV-000190-live-audit-status-sync.json revision 1` - `LINEAGE_DECISION = docs/GOVERNANCE_LINEAGE_DECISION_2026-08-22.md; DEV-000073 historical variants are preserved as evidence and are not current authority` - `REGISTRY_STATUS = YAML and JSON semantic mirrors agree; human registry projection synchronized with ADR-0017 ownership and current protected paths` - `PRODUCTION_DOMAIN = docker.cin.su; shared docker-test remains prohibited` diff --git a/docs/evidence/audit-runtime-status-2026-08-23-v1.json b/docs/evidence/audit-runtime-status-2026-08-23-v1.json new file mode 100644 index 0000000..4608e18 --- /dev/null +++ b/docs/evidence/audit-runtime-status-2026-08-23-v1.json @@ -0,0 +1,15 @@ +{ + "captured_at": "2026-08-23", + "production_revision": "5b92cd6a587b1084aa677076fbfb2b05cf8f83d4", + "public_health": {"url": "https://assistant.cin.su/healthz", "status": "ok"}, + "runtime_readiness": { + "core": "ready", + "research": "ready", + "work_graph": "ready", + "reflection_worker": "running", + "agent_worker": {"ready": false, "mode": "recovery-only", "executor_configured": false, "reason": "protected agent execution bridge URL is not configured"} + }, + "fleet": {"ready_tiers": ["FAST", "MEDIUM", "HEAVY", "LIFEBOAT"], "preferred_tier": "FAST", "selected_tier": "FAST", "fallback_tier": "LIFEBOAT"}, + "work_graph_canary": {"endpoint": "internal work-graph-runtime /v1/work-graphs/synthesis", "result": "HTTP 200; candidates, conflict and VERIFIED synthesis persisted"}, + "interpretation": "Readiness and canary evidence prove runtime behavior only; they do not prove external Agent Execution bridge availability or authenticated UI acceptance." +} diff --git a/docs/evidence/truth-runtime-canary-2026-08-23-v1.json b/docs/evidence/truth-runtime-canary-2026-08-23-v1.json new file mode 100644 index 0000000..405e080 --- /dev/null +++ b/docs/evidence/truth-runtime-canary-2026-08-23-v1.json @@ -0,0 +1,10 @@ +{ + "captured_at": "2026-08-23", + "runtime": "research-runtime", + "endpoint": "/v1/research/web/evaluate", + "plan_id": "live-truth-canary-20260822-2325", + "source_locator": "https://assistant.cin.su/healthz", + "result": {"finding_state": "SUPPORTED", "evidence": "OBSERVED", "coverage": "COMPLETE", "conflict": "NONE"}, + "durable_persistence": {"truth_bundle": "persisted", "claim_verification": "UNVERIFIED", "belief_state": "PROVISIONAL"}, + "interpretation": "The runtime preserves source-chain evidence and does not promote an unverified claim to a verified belief." +} -- 2.54.0 From b7a4c0f83e0a0e6d9a4b35f0ba1cbce6731d73e5 Mon Sep 17 00:00:00 2001 From: Mikhail Date: Sun, 23 Aug 2026 02:21:24 +0300 Subject: [PATCH 2/2] chore: activate live audit status task --- dev/ACTIVE_TASK.json | 4 ++-- dev/tasks/DEV-000190-live-audit-status-sync.json | 4 ++-- docs/PROJECT_STATUS.md | 3 +-- 3 files changed, 5 insertions(+), 6 deletions(-) diff --git a/dev/ACTIVE_TASK.json b/dev/ACTIVE_TASK.json index 1130bef..f3d68e6 100644 --- a/dev/ACTIVE_TASK.json +++ b/dev/ACTIVE_TASK.json @@ -1,5 +1,5 @@ { - "task_file": "dev/tasks/DEV-000189-durable-graph-synthesis-runtime.json", - "task_id": "DEV-000189", + "task_file": "dev/tasks/DEV-000190-live-audit-status-sync.json", + "task_id": "DEV-000190", "task_revision": 1 } diff --git a/dev/tasks/DEV-000190-live-audit-status-sync.json b/dev/tasks/DEV-000190-live-audit-status-sync.json index 6721ea0..4dd5662 100644 --- a/dev/tasks/DEV-000190-live-audit-status-sync.json +++ b/dev/tasks/DEV-000190-live-audit-status-sync.json @@ -3,10 +3,10 @@ "task_revision": 1, "architecture_revision": "ADR-0018", "base_repo_revision": "5b92cd6a587b1084aa677076fbfb2b05cf8f83d4", - "risk_tier": "B", + "risk_tier": "E", "intent": "Synchronize the project audit status and append-only live evidence with verified production state after the Work Graph and Truth runtime canaries.", "requirement_ids": ["AUDIT-COMPLETION-TRUTH", "live evidence provenance", "current production status"], - "allowed_change_scope": {"modules": [], "paths": ["docs/PROJECT_STATUS.md", "docs/evidence/audit-runtime-status-2026-08-23-v1.json", "docs/evidence/truth-runtime-canary-2026-08-23-v1.json", "dev/tasks/DEV-000190-live-audit-status-sync.json"]}, + "allowed_change_scope": {"modules": [], "paths": ["docs/PROJECT_STATUS.md", "docs/evidence/audit-runtime-status-2026-08-23-v1.json", "docs/evidence/truth-runtime-canary-2026-08-23-v1.json", "dev/ACTIVE_TASK.json", "dev/tasks/DEV-000190-live-audit-status-sync.json"]}, "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "deploy/**", "modules/**", "cmd/**", ".gitea/**"]}, "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0}, "contracts": {"consume": ["existing runtime status contracts", "existing Truth bundle contract"], "may_change": ["audit status projections", "append-only live evidence records"]}, diff --git a/docs/PROJECT_STATUS.md b/docs/PROJECT_STATUS.md index fab0d3b..b70959a 100644 --- a/docs/PROJECT_STATUS.md +++ b/docs/PROJECT_STATUS.md @@ -19,8 +19,7 @@ Audit date: 2026-08-23. Historical governance checkpoint: DEV-000099 revision 1. - `DEV_000099_STATUS = COMPLETED` - `LAST_COMPLETED = DEV-000098 Governance Sentinel V2: full task-packet validation, scope-conflict rejection, architecture/base checks, required-test enforcement and independent verifier` -- `ACTIVE_TASK = dev/tasks/DEV-000189-durable-graph-synthesis-runtime.json revision 1` -- `STATUS_SYNC_TASK = dev/tasks/DEV-000190-live-audit-status-sync.json revision 1` +- `ACTIVE_TASK = dev/tasks/DEV-000190-live-audit-status-sync.json revision 1` - `LINEAGE_DECISION = docs/GOVERNANCE_LINEAGE_DECISION_2026-08-22.md; DEV-000073 historical variants are preserved as evidence and are not current authority` - `REGISTRY_STATUS = YAML and JSON semantic mirrors agree; human registry projection synchronized with ADR-0017 ownership and current protected paths` - `PRODUCTION_DOMAIN = docker.cin.su; shared docker-test remains prohibited` -- 2.54.0