Skip to content

row 159: audit ledger records the transport-ws and plane-llm readings (stacked on #835) - #845

Open
MattJackson wants to merge 4 commits into
predevfrom
lane-audit-159-readings-2
Open

MattJackson wants to merge 4 commits into
predevfrom
lane-audit-159-readings-2

Conversation

@MattJackson

Copy link
Copy Markdown
Collaborator

Ledger only. Stacked on #835 (which carries #820); it contains their commits.

What.

  • crates/busbar-transport-ws/src: HIGH 0, MEDIUM 6.
  • crates/busbar-plane-llm/src: HIGH 20, MEDIUM 27, LOW 19, NIT 4. It was read in three parts (plane/door/exchange/codec core; anthropic/bedrock/cohere; gemini/openai). One per-thread pool that two parts found is counted once.

Both readings are at 00555bd (an ancestor of predev), and neither tree has changed on predev since. The plane-llm HIGHs (unregistered billing divergences from 1.5.5, the door path's failover, cut and protocol override) are routed by the ARCHITECT to the llm-billing-parity and row-155 lanes.

Why. /status row 159: 0 unaudited production scopes. After #820, #835 and this PR, only busbar-a2a/llm/voice src remain unaudited. They leave with their deletion PRs (#787, #503, row 155), per ARCHITECT.

RED-able. No code. cargo xtask ledger --check (stamped, unreachable) verifies every new round on ModernCI.

Re-audits recorded as new rounds (append-only; each tree_hash recomputed at the named commit and
equal to the scope's hash on predev 00555bd):
- crates/busbar-kernel-wal/src round 3 at 62fdbdf: HIGH 1 -> 0 (MEDIUM 2, LOW 3).
  The relabelled-version tail, swallowed directory fsyncs, forgotten poison, the failed-roll drop
  and the crash-tear-as-corruption findings are gone; tree unchanged since the reading.
- crates/busbar-kernel-identity/src round 2 at 00555bd: HIGH 1 -> 0 (MEDIUM 1, LOW 3).
  The protocol-specific auth, the credential cache and the unshipped units are deleted. The reading
  at 62fdbdf plus the operator.rs change since (a Judgement now carries the replay claim and
  strips) read again at 00555bd; no finding moves.
- crates/busbar-transport-stdio/src round 2 at 62fdbdf: HIGH 2 -> 1 (supervisor in core stands).
- crates/busbar-plane-mcp/src round 2 at 00555bd: HIGH 6 -> 3.
- crates/busbar/src round 2 at 00555bd: HIGH 1 -> 1 (stdio exit drains nothing).

First readings of pinned plugin scopes whose pinned trees are byte-identical to the reading at
f830faa (round 1 at f830faa):
- busbar-auth-admin-tokens/src (MEDIUM 1), busbar-export-file/src (LOW 3), busbar-export-otlp/src
  (MEDIUM 1), busbar-export-webhook/src (HIGH 1), busbar-hook-ranking/src (MEDIUM 1),
  busbar-secret-env/src (MEDIUM 1), busbar-secret-file/src (HIGH 1).

First readings of the twelve pinned declares.json scopes at 00555bd: five zero, export-file
LOW 1, export-webhook LOW 1, secret-env MEDIUM 1, transport-grpc/tcp/ws LOW 1 each.

Production scopes unaudited: 30 -> 11.
…d, as `ledger sync --write` derives it)

Struck (their paths own no file): crates/busbar-kernel/build.rs, crates/store-memory/src,
crates/store-memory/src/tests, crates/store-memory/tests, crates/busbar-transport-stdio/src/tests.
Added: the default distribution's pinned busbar-auth-oauth, busbar-auth-sigv4 and
busbar-store-memory (src, declares.json, tests), crates/busbar-transport-webrtc (src, src/tests,
tests), xtask/src/tests, and the remainder scopes .ci and .latchkeyignore.

The three new declares.json scopes are read at 00555bd: zero (auth and store kind versions,
the superseded range the loader no longer reads).
…wly scoped pinned plugins, transport-webrtc and xtask (row 159)

All at 00555bd, each tree_hash recomputed there (pinned crates mounted from their Cargo.lock
commits). The pinned plugin and transport-webrtc trees are unchanged on predev 40a4080; xtask/src
has moved since, so it reads stale until re-read.

- busbar-auth-header/src HIGH 2, busbar-auth-oauth/src HIGH 3, busbar-auth-sigv4/src HIGH 1,
  busbar-export-prometheus/src 0, busbar-store-memory/src 0 (MEDIUM 5), busbar-transport-grpc/src
  HIGH 1, busbar-transport-http/src HIGH 3, busbar-transport-tcp/src 0, busbar-transport-webrtc/src
  HIGH 2. auth-header, grpc, http and tcp are numbered round 2: an earlier reading at an older pin
  was taken and never recorded.
- xtask/src HIGH 49 (11 part readings summed, three shared root causes counted once), MEDIUM 79,
  LOW 118, NIT 11.

Production scopes unaudited after this and the sync: busbar-plane-llm/src and
busbar-transport-ws/src (readings running), and busbar-a2a/llm/voice src, which leave with their
deletion PRs.
At 00555bd; both trees unchanged on predev since. busbar-transport-ws/src: HIGH 0, MEDIUM 6
(round 2; an earlier reading at an older pin was never recorded). busbar-plane-llm/src, read in
three parts (plane/door/exchange/codec core; anthropic/bedrock/cohere; gemini/openai): HIGH 20 (one
shared per-thread pool counted once), MEDIUM 27, LOW 19, NIT 4.

With #820 and #835 this leaves busbar-a2a/src, busbar-llm/src and busbar-voice/src unaudited; they
leave the ledger with their deletion PRs (ARCHITECT).

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant