Skip to content

Commit bfb82ec

Browse files
JuliaEdomJuliaEdom
committed
docs(ops): record r10 orchestration stop
1 parent 1fc959e commit bfb82ec

3 files changed

Lines changed: 156 additions & 3 deletions

File tree

‎ci-soak-r10-orchestration-stop-20260821-01.md‎

Lines changed: 108 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,108 @@
1+
# CI-soak r10 orchestration stop — 2026-08-21
2+
3+
## Goal
4+
5+
Execute one newly authorized post-fix `--count 2000` rehearsal from exact
6+
source HEAD `1fc959efcc1c871fd3057f27a8aef60db44fc878`, using fresh r10
7+
identities and unconditional protected-co-tenant restoration.
8+
9+
## Fixed r10 identities
10+
11+
| Identity | Reserved value |
12+
| --- | --- |
13+
| Source/gate HEAD | `1fc959efcc1c871fd3057f27a8aef60db44fc878` |
14+
| Snapshot | `/Users/julia/agentflow-fc5-7113966/ci-soak-rehearsal-1fc959e-r10` |
15+
| Compose project | `agentflow-ci-soak-1fc959e-r10` |
16+
| Output | `.artifacts/soak-rehearsal-2000-1fc959e-r10` under the snapshot |
17+
| Preflight attempt | `ci-soak-1fc959e-r10-preflight` |
18+
| Rehearsal attempt | `ci-soak-1fc959e-r10-rehearsal-20260821-01` |
19+
| Grok run | `deproject-ci-soak-r10-20260821-01` |
20+
21+
## Local gate and source evidence
22+
23+
The fresh exact-HEAD architecture gate passed before delegation:
24+
25+
```text
26+
ARCHITECTURE_READY=PASS blockers=0 head=1fc959efcc1c871fd3057f27a8aef60db44fc878
27+
```
28+
29+
Codex created one exact `git archive` in the ignored r10 control directory:
30+
31+
- path:
32+
`.codex-runtime/ci-soak-r10-rehearsal-20260821-01/source-1fc959e.tar`;
33+
- size: `17,971,200` bytes;
34+
- SHA-256:
35+
`26467251f43d17307d7f6e0d2e88b25f70c8a75f9d6680f7460024a91c9e96ed`.
36+
37+
The archive was never transferred to the Mac. It is local control evidence,
38+
not a runtime snapshot.
39+
40+
## Grok orchestration outcome
41+
42+
The bounded executor used `local_grok_cli` with pinned requested model
43+
`grok-4.6`, `dontAsk`, strict sandbox, web and subagents disabled, and no
44+
permission bypass. Prompt SHA-256 was
45+
`dffecc2040e863f75012f784587a19876f14a9926b73d3c1775e3eb105ff2bd5`;
46+
attempt fingerprint was
47+
`9a68c0d9ef0bc6418f294df89f3bbbe6e8cb172285936b5ad20a88cb3e3ba47b`.
48+
49+
The process remained alive for all six permitted status polls over roughly
50+
nine minutes but emitted no terminal stdout or stderr. It was cancelled once
51+
at the monitoring limit, and no duplicate or QA run was launched. The exact
52+
stdout and stderr files are both zero-byte artifacts with SHA-256
53+
`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`;
54+
launch metadata SHA-256 is
55+
`a5941c0da22c59e3a6cfa0e6e6dcb8213a2ee10212656b183d8e42700df9d7e0`.
56+
No completed Grok result exists, so no actual-model usage claim is available.
57+
58+
Grok created no r10 control file and did not modify the source archive,
59+
tracked files, ignored handoffs, or any protected source. Protected local
60+
hashes and clean tracked worktree/index were independently rechecked.
61+
62+
## Independent external safety proof
63+
64+
After cancellation, Codex ran one byte-exact read-only SSH postflight. Its
65+
first execution exposed only two probe-format defects: containers without a
66+
Docker healthcheck produced blank display rows, and PowerShell stdin added a
67+
terminal carriage return. The remote facts already showed no mutation. One
68+
narrow correction changed only display formatting and byte-exact stdin
69+
delivery; the single rerun exited `0`. The final local probe SHA-256 is
70+
`4b28d1ba7a398b76024bbc9484946044fe851b7249d71cd22c6d586db655a976`.
71+
72+
The final read-only evidence proved:
73+
74+
- r10 snapshot, remote control directory, output, and preflight evidence were
75+
all absent;
76+
- owner lock and r10 controller process were absent;
77+
- r10 project containers/networks/volumes were `0/0/0` and all four possible
78+
r10 probe-container counts were zero;
79+
- MinIO, Iceberg REST, dual-route ClickHouse, and Kind retained their exact
80+
recorded IDs, names, `running` state, and restart count `0`;
81+
- MinIO and ClickHouse were healthy; MinIO live, Iceberg `/v1/config`, host
82+
and Kind ClickHouse `SELECT 1`, Kind `/livez`, and exactly one
83+
kube-apiserver all passed;
84+
- the rollback ClickHouse remained at its exact ID, `exited(0)`, restart count
85+
`0`, with no network attachment;
86+
- the Mac checkout remained at
87+
`ae9fb69db7de737b469f868f218e8d623c206959` with exactly its three
88+
established untracked paths.
89+
90+
## Classification and next boundary
91+
92+
This slice is `ORCHESTRATION_STOP_BEFORE_MUTATION`. It is neither rehearsal
93+
PASS nor rehearsal FAIL:
94+
95+
```text
96+
STOP_COMMAND=NOT_INVOKED
97+
CONTROLLER=NOT_INVOKED
98+
REMOTE_R10_IDENTITIES=ABSENT
99+
PROJECT_RESOURCES=0/0/0
100+
OWNER_LOCK=ABSENT
101+
```
102+
103+
The r10 attempt name, prompt, local control directory, and authorization are
104+
consumed orchestration evidence. Do not resume or reuse them. A later external
105+
attempt must use fresh r11-or-later snapshot/project/output/control/attempt
106+
identities, a new exact-HEAD gate and preflight, and new explicit
107+
authorization. No full soak, rollback exercise, retained-evidence cleanup,
108+
production action, fetch, or push occurred or became authorized.

‎ci-soak-runtime-harness.md‎

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1341,3 +1341,29 @@ This is `CLOSED-LOCAL`, not new runtime acceptance. The consumed r9 evidence
13411341
remains immutable and failed. Any external validation of this correction needs
13421342
a new exact-HEAD architecture gate, fresh snapshot/project/output identities,
13431343
fresh preflight, and fresh authorization.
1344+
1345+
## r10 orchestration stop before mutation — 2026-08-21
1346+
1347+
The newly authorized post-fix r10 slice passed the complete local architecture
1348+
gate at exact HEAD `1fc959efcc1c871fd3057f27a8aef60db44fc878` and created a
1349+
local exact source archive only. A bounded `local_grok_cli` run with pinned
1350+
requested model `grok-4.6` remained active through all six permitted polls but
1351+
emitted no stdout or stderr. It was cancelled once at the monitoring limit;
1352+
no duplicate or QA run followed.
1353+
1354+
Independent byte-exact read-only Mac postflight proved the remote r10
1355+
snapshot, control directory, output, preflight evidence, owner lock,
1356+
controller, project resources, and probe containers were all absent. The four
1357+
protected exact IDs remained running with restart count zero; health/API,
1358+
dual-route ClickHouse, Kind `/livez`, and one-kube-apiserver checks passed. The
1359+
rollback ClickHouse and original Mac checkout remained unchanged. Therefore
1360+
the classification is `ORCHESTRATION_STOP_BEFORE_MUTATION`, with both
1361+
`STOP_COMMAND` and `CONTROLLER` `NOT_INVOKED`; there is no r10 rehearsal
1362+
verdict.
1363+
1364+
Canonical evidence is
1365+
`ci-soak-r10-orchestration-stop-20260821-01.md`. Treat the r10 prompt, local
1366+
control identity, attempt name, and authorization as consumed. A later
1367+
external attempt must use fresh r11-or-later identities, a new exact-HEAD gate
1368+
and preflight, and fresh authorization. Full soak, rollback, retained-evidence
1369+
cleanup, production action, fetch, and push remain unauthorized.

‎docs/operations/ci-soak-next-session-runbook.md‎

Lines changed: 22 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -15,10 +15,11 @@ not authorize an external action.
1515
| --- | --- |
1616
| Closing implementation commit | `726d171322dc8933d8788e7388f1bcd5d0d8e32e` — `fix(ops): reconcile ci soak verifier contract` |
1717
| Required ancestry | The current `HEAD` must contain the closing implementation commit before any post-fix validation |
18-
| Local architecture gate | `ARCHITECTURE_READY=PASS blockers=0 head=726d171322dc8933d8788e7388f1bcd5d0d8e32e` |
18+
| Latest local architecture gate | `ARCHITECTURE_READY=PASS blockers=0 head=1fc959efcc1c871fd3057f27a8aef60db44fc878` before the stopped r10 delegation |
1919
| Local verification | Focused gate: `129 passed`; Ruff check/format, `py_compile`, `git diff --check`, strict UTF-8/LF/no-BOM/no-NUL, and the clean-HEAD architecture gate passed |
20-
| Post-fix external rehearsal | **Not run** |
20+
| Post-fix external rehearsal | **Not run**; r10 orchestration stopped before external mutation |
2121
| Last external evidence | Retained r9 attempt: **FAIL** against older source `7e8ec87c25bbdc8f8aa58c116ded9914470789cb` |
22+
| Latest orchestration evidence | [r10 stopped before mutation](../../ci-soak-r10-orchestration-stop-20260821-01.md); no rehearsal verdict exists |
2223
| Push/fetch | Neither was performed for the closing slice; push remains unauthorized |
2324

2425
The local correction is closed. Counts below `1_440_000` use
@@ -72,7 +73,8 @@ The ancestry command must exit `0`. Then:
7273
new relevant change, a fresh failure, or a newly authorized exact-HEAD
7374
attempt.
7475
5. The next actionable runtime slice is at most one fresh post-fix
75-
`--count 2000` rehearsal, and only after fresh explicit authorization.
76+
`--count 2000` rehearsal using r11-or-later identities, and only after fresh
77+
explicit authorization. The stopped r10 orchestration must not be resumed.
7678

7779
If a new local change legitimately requires the architecture gate, run it from
7880
a clean tracked checkout:
@@ -100,6 +102,22 @@ evidence. Do not rerun the controller from them, overwrite them, or remove
100102
them. Do not weaken the `90 eps` full-soak floor to make a short rehearsal
101103
pass.
102104

105+
## Consumed r10 orchestration — no rehearsal ran
106+
107+
The authorized r10 slice used exact local HEAD
108+
`1fc959efcc1c871fd3057f27a8aef60db44fc878` and passed its fresh local
109+
architecture gate. The bounded Grok executor reached the six-poll monitoring
110+
limit without terminal output and was cancelled once. Independent read-only
111+
postflight proved that no r10 remote snapshot/control/output/preflight path,
112+
owner lock, controller, project resource, or probe existed. All protected
113+
co-tenants remained healthy under their exact IDs with restart count zero.
114+
115+
Treat the r10 attempt name, prompt, local control directory, and authorization
116+
as consumed evidence. The exact record is the
117+
[r10 orchestration-stop report](../../ci-soak-r10-orchestration-stop-20260821-01.md).
118+
Do not resume r10 or launch a duplicate. A future attempt starts at r11 or
119+
later with fresh identities, gate, preflight, and explicit authorization.
120+
103121
## Historical runtime safety snapshot
104122

105123
These identities were healthy after the r9 postflight, but they are historical
@@ -166,5 +184,6 @@ or push gates.
166184
- [Golden-soak source-pack README](../../scripts/golden_soak/README.md)
167185
- [Runtime harness history](../../ci-soak-runtime-harness.md)
168186
- [Immutable r9 failure report](../../ci-soak-r9-rehearsal-20260821-01.md)
187+
- [r10 orchestration-stop report](../../ci-soak-r10-orchestration-stop-20260821-01.md)
169188
- [Architecture audit and readiness contract](../../ci-soak-r1-r7-architecture-audit.md)
170189
- [Compose foundation context](ci-soak-compose-foundation.md)

0 commit comments

Comments
 (0)