Repository navigation
row 159: audit ledger records the transport-ws and plane-llm readings (stacked on #835) - #845
Open
MattJackson wants to merge 4 commits into
Open
MattJackson wants to merge 4 commits into
MattJackson wants to merge 4 commits into
Conversation
Re-audits recorded as new rounds (append-only; each tree_hash recomputed at the named commit and equal to the scope's hash on predev 00555bd): - crates/busbar-kernel-wal/src round 3 at 62fdbdf: HIGH 1 -> 0 (MEDIUM 2, LOW 3). The relabelled-version tail, swallowed directory fsyncs, forgotten poison, the failed-roll drop and the crash-tear-as-corruption findings are gone; tree unchanged since the reading. - crates/busbar-kernel-identity/src round 2 at 00555bd: HIGH 1 -> 0 (MEDIUM 1, LOW 3). The protocol-specific auth, the credential cache and the unshipped units are deleted. The reading at 62fdbdf plus the operator.rs change since (a Judgement now carries the replay claim and strips) read again at 00555bd; no finding moves. - crates/busbar-transport-stdio/src round 2 at 62fdbdf: HIGH 2 -> 1 (supervisor in core stands). - crates/busbar-plane-mcp/src round 2 at 00555bd: HIGH 6 -> 3. - crates/busbar/src round 2 at 00555bd: HIGH 1 -> 1 (stdio exit drains nothing). First readings of pinned plugin scopes whose pinned trees are byte-identical to the reading at f830faa (round 1 at f830faa): - busbar-auth-admin-tokens/src (MEDIUM 1), busbar-export-file/src (LOW 3), busbar-export-otlp/src (MEDIUM 1), busbar-export-webhook/src (HIGH 1), busbar-hook-ranking/src (MEDIUM 1), busbar-secret-env/src (MEDIUM 1), busbar-secret-file/src (HIGH 1). First readings of the twelve pinned declares.json scopes at 00555bd: five zero, export-file LOW 1, export-webhook LOW 1, secret-env MEDIUM 1, transport-grpc/tcp/ws LOW 1 each. Production scopes unaudited: 30 -> 11.
…d, as `ledger sync --write` derives it) Struck (their paths own no file): crates/busbar-kernel/build.rs, crates/store-memory/src, crates/store-memory/src/tests, crates/store-memory/tests, crates/busbar-transport-stdio/src/tests. Added: the default distribution's pinned busbar-auth-oauth, busbar-auth-sigv4 and busbar-store-memory (src, declares.json, tests), crates/busbar-transport-webrtc (src, src/tests, tests), xtask/src/tests, and the remainder scopes .ci and .latchkeyignore. The three new declares.json scopes are read at 00555bd: zero (auth and store kind versions, the superseded range the loader no longer reads).
…wly scoped pinned plugins, transport-webrtc and xtask (row 159) All at 00555bd, each tree_hash recomputed there (pinned crates mounted from their Cargo.lock commits). The pinned plugin and transport-webrtc trees are unchanged on predev 40a4080; xtask/src has moved since, so it reads stale until re-read. - busbar-auth-header/src HIGH 2, busbar-auth-oauth/src HIGH 3, busbar-auth-sigv4/src HIGH 1, busbar-export-prometheus/src 0, busbar-store-memory/src 0 (MEDIUM 5), busbar-transport-grpc/src HIGH 1, busbar-transport-http/src HIGH 3, busbar-transport-tcp/src 0, busbar-transport-webrtc/src HIGH 2. auth-header, grpc, http and tcp are numbered round 2: an earlier reading at an older pin was taken and never recorded. - xtask/src HIGH 49 (11 part readings summed, three shared root causes counted once), MEDIUM 79, LOW 118, NIT 11. Production scopes unaudited after this and the sync: busbar-plane-llm/src and busbar-transport-ws/src (readings running), and busbar-a2a/llm/voice src, which leave with their deletion PRs.
At 00555bd; both trees unchanged on predev since. busbar-transport-ws/src: HIGH 0, MEDIUM 6 (round 2; an earlier reading at an older pin was never recorded). busbar-plane-llm/src, read in three parts (plane/door/exchange/codec core; anthropic/bedrock/cohere; gemini/openai): HIGH 20 (one shared per-thread pool counted once), MEDIUM 27, LOW 19, NIT 4. With #820 and #835 this leaves busbar-a2a/src, busbar-llm/src and busbar-voice/src unaudited; they leave the ledger with their deletion PRs (ARCHITECT).
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Ledger only. Stacked on #835 (which carries #820); it contains their commits.
What.
crates/busbar-transport-ws/src: HIGH 0, MEDIUM 6.crates/busbar-plane-llm/src: HIGH 20, MEDIUM 27, LOW 19, NIT 4. It was read in three parts (plane/door/exchange/codec core; anthropic/bedrock/cohere; gemini/openai). One per-thread pool that two parts found is counted once.Both readings are at 00555bd (an ancestor of predev), and neither tree has changed on predev since. The plane-llm HIGHs (unregistered billing divergences from 1.5.5, the door path's failover, cut and protocol override) are routed by the ARCHITECT to the llm-billing-parity and row-155 lanes.
Why. /status row 159: 0 unaudited production scopes. After #820, #835 and this PR, only busbar-a2a/llm/voice src remain unaudited. They leave with their deletion PRs (#787, #503, row 155), per ARCHITECT.
RED-able. No code.
cargo xtask ledger --check(stamped,unreachable) verifies every new round on ModernCI.