Repository navigation
row 159: audit ledger records the pinned-plugin, transport-webrtc and xtask readings (stacked on #820) - #835
Open
MattJackson wants to merge 3 commits into
Open
MattJackson wants to merge 3 commits into
MattJackson wants to merge 3 commits into
Conversation
Re-audits recorded as new rounds (append-only; each tree_hash recomputed at the named commit and equal to the scope's hash on predev 00555bd): - crates/busbar-kernel-wal/src round 3 at 62fdbdf: HIGH 1 -> 0 (MEDIUM 2, LOW 3). The relabelled-version tail, swallowed directory fsyncs, forgotten poison, the failed-roll drop and the crash-tear-as-corruption findings are gone; tree unchanged since the reading. - crates/busbar-kernel-identity/src round 2 at 00555bd: HIGH 1 -> 0 (MEDIUM 1, LOW 3). The protocol-specific auth, the credential cache and the unshipped units are deleted. The reading at 62fdbdf plus the operator.rs change since (a Judgement now carries the replay claim and strips) read again at 00555bd; no finding moves. - crates/busbar-transport-stdio/src round 2 at 62fdbdf: HIGH 2 -> 1 (supervisor in core stands). - crates/busbar-plane-mcp/src round 2 at 00555bd: HIGH 6 -> 3. - crates/busbar/src round 2 at 00555bd: HIGH 1 -> 1 (stdio exit drains nothing). First readings of pinned plugin scopes whose pinned trees are byte-identical to the reading at f830faa (round 1 at f830faa): - busbar-auth-admin-tokens/src (MEDIUM 1), busbar-export-file/src (LOW 3), busbar-export-otlp/src (MEDIUM 1), busbar-export-webhook/src (HIGH 1), busbar-hook-ranking/src (MEDIUM 1), busbar-secret-env/src (MEDIUM 1), busbar-secret-file/src (HIGH 1). First readings of the twelve pinned declares.json scopes at 00555bd: five zero, export-file LOW 1, export-webhook LOW 1, secret-env MEDIUM 1, transport-grpc/tcp/ws LOW 1 each. Production scopes unaudited: 30 -> 11.
…d, as `ledger sync --write` derives it) Struck (their paths own no file): crates/busbar-kernel/build.rs, crates/store-memory/src, crates/store-memory/src/tests, crates/store-memory/tests, crates/busbar-transport-stdio/src/tests. Added: the default distribution's pinned busbar-auth-oauth, busbar-auth-sigv4 and busbar-store-memory (src, declares.json, tests), crates/busbar-transport-webrtc (src, src/tests, tests), xtask/src/tests, and the remainder scopes .ci and .latchkeyignore. The three new declares.json scopes are read at 00555bd: zero (auth and store kind versions, the superseded range the loader no longer reads).
…wly scoped pinned plugins, transport-webrtc and xtask (row 159) All at 00555bd, each tree_hash recomputed there (pinned crates mounted from their Cargo.lock commits). The pinned plugin and transport-webrtc trees are unchanged on predev 40a4080; xtask/src has moved since, so it reads stale until re-read. - busbar-auth-header/src HIGH 2, busbar-auth-oauth/src HIGH 3, busbar-auth-sigv4/src HIGH 1, busbar-export-prometheus/src 0, busbar-store-memory/src 0 (MEDIUM 5), busbar-transport-grpc/src HIGH 1, busbar-transport-http/src HIGH 3, busbar-transport-tcp/src 0, busbar-transport-webrtc/src HIGH 2. auth-header, grpc, http and tcp are numbered round 2: an earlier reading at an older pin was taken and never recorded. - xtask/src HIGH 49 (11 part readings summed, three shared root causes counted once), MEDIUM 79, LOW 118, NIT 11. Production scopes unaudited after this and the sync: busbar-plane-llm/src and busbar-transport-ws/src (readings running), and busbar-a2a/llm/voice src, which leave with their deletion PRs.
This was referenced Oct 13, 2026
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Ledger only (
qa/audit-ledger.json). Stacked on #820, so merge that first; this branch contains #820's commits.What. New rounds for:
crates/busbar-transport-webrtc/srcandxtask/src.All readings are at 00555bd, an ancestor of predev, and each
tree_hashwas recomputed there.Why. /status row 159: 0 unaudited production scopes. After #820 plus this PR, only these remain unaudited:
RED-able. No code.
cargo xtask ledger --check'sstamped/unreachablerows verify every new round on ModernCI.