Files
felhom.eu/documentation/audits/update-night-2026-09-21/apps/privatebin/log.txt
T
admin da20722e76
gates / gates (push) Successful in 27s
Update night 2026-09-21: Phase 0 and Phase 1 evidence, the drill method, and two instrument fixes
INTERIM CHECKPOINT — evidence off the machine at the end of the phase that produced it (R-320),
not at the end of the session. Phases 2-5 follow in a later commit.

Phase 0, all three mechanisms proven with their controls:
- the fleet floor to 0.261.0 with its declared MinAgent — both demo boxes in 13 s, the hub
  logging `managed floor SERVED ... from declared (golden 0.258.0)`.
- a PRIVATE DRILL CATALOG (admin/app-catalog-drill), so that broken, dummy, cross-repo and
  engine-major edges can be measured without the live catalog ever carrying one. Positive
  control quoted, and two negative controls: the live catalog's main and both real boxes'
  caches unchanged.
- a throwaway image store on the scratch guest, which is what makes an UNATTENDED HOLD
  measurable at all: an edge that PASSES the within-a-major test and still fails.
  CompareImageRefs was proven to order host:port/ references by RUNNING it (4 positive cases
  + 1 negative control), not by reading it.

Phase 1: real within-a-major upstream edges walked on guest 9202 through the product's own
guarded Update, each app seeded and read back through its OWN front door (R-156), with a
per-edge verdict record in 09's shape. `inconclusive` is never collapsed into `failed`.

TWO INSTRUMENT FIXES, both in this repo's own evidence code:
- 00-api-recipe.md said the app page is /app/<n>; it is /apps/<n>, and every call it described
  404s. Corrected, with the session-expiry note that cost the same time.
- unattended-caller.py's follow() read update_phase/updating off the API ENVELOPE, so both were
  always None and EVERY followed update ran to its 900 s timeout and was then recorded
  `timeout` and never-press-again. Fixed before B1 relied on it. R-623.

No controller, agent or hub code was written. The live catalog carries no broken reference.

Gates: repo_gates.py --fast — all 15 OK, exit 0.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-09-21 21:17:46 +02:00

26 lines
2.3 KiB
Plaintext
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
20:19:13 ==== privatebin: privatebin/pdo:2.0.5 -> privatebin/pdo:2.0.6 (sub=paste, class=file-leg)
20:19:14 [1] deploy -> 202 {'ok': True, 'message': 'Telepítés elindítva – az állapot a kártyán követhető'}
20:19:34 [1] deployed, state=running, pinned={'privatebin': 'privatebin/pdo:2.0.5'}
20:19:36 [2] seeding through the app's own front door
20:19:36 privatebin: seeded paste id=8f065541f7d1f3db
20:19:36 [3] control C1 — reading the seed back BEFORE the update
20:19:36 privatebin: readback http=200 marker_present=True
20:19:36 [4] „Mentés most" -> 200 {'ok': True, 'message': 'Mentés elindítva'}
20:20:02 [4] backup idle; last=None
20:20:02 [5] drill commit b721549910c5: privatebin privatebin/pdo:2.0.5 -> privatebin/pdo:2.0.6 (push rc=0)
20:20:07 [5] badge HU: [{'title': 'Újabb változat érhető el ehhez az alkalmazáshoz. A frissítés indításához nyomd meg a Frissítés gombot.', 'text': 'Frissítés elérhető — ma'}]
20:20:07 [5] badge EN: [{'title': 'A newer version of this app is available. Select the Update button to start it.', 'text': 'Update available — today'}]
20:20:07 [6] Update -> 202 {'ok': True, 'data': {'accepted': True, 'completed': False}, 'message': 'Frissítés elindult – az állapot a kártyán követhető'}
20:20:07 + 0.0s phase=safety-dump label=Adatbázis pillanatkép… err=None hold=None
20:20:08 + 1.0s phase=pulling label=Új verzió letöltése… err=None hold=None
20:20:11 + 4.1s phase=starting label=Indítás az új verzióval… err=None hold=None
20:20:12 + 5.1s phase=verifying label=Működés ellenőrzése… err=None hold=None
20:20:23 + 15.4s phase=done label=Frissítve err=None hold=None
20:20:23 [7] reading the seed back AFTER the update
20:20:23 privatebin: readback http=200 marker_present=True
20:20:25 [8] pinned = {'privatebin': 'privatebin/pdo:2.0.6'}
20:20:25 [8] installed = {'privatebin': 'privatebin/pdo:2.0.6'}
20:20:25 [8] compose = ['image: privatebin/pdo:2.0.6']
20:20:25 [8] inspect = ['privatebin privatebin/pdo:2.0.6 running=true restarts=0']
20:20:25 [9] verdict proven -> /mnt/5_hdd/felhom.eu/git/felhom.eu/documentation/audits/update-night-2026-09-21/apps/privatebin/verdict.json