Repository navigation
Experiment: real TrueNAS and Proxmox system RDTE on public GHA KVM - #39
Draft
mark-e-deyoung wants to merge 863 commits into
Draft
mark-e-deyoung wants to merge 863 commits into
mark-e-deyoung wants to merge 863 commits into
Conversation
Source-only Windows W1 media and PVE profile binding; runtime remains OPEN.
Non-mutating cross-platform Windows W1 lowering; runtime remains OPEN.
…ering-20261006 RDTE: lower TrueNAS V1 boot media through owned ZVOL DISK
…te-vm-v1-005-zvol-disk RDTE: request TrueNAS VM V1 rep005 ZVOL DISK
…rrency-20261006 CI: enforce repo-wide heavyweight RDTE queue for compute jobs
RDTE: adopt Avahi-capable FolioRelay Foundry authority
RDTE: request FolioRelay 25.10.7 Avahi F0-F5 rep
… work * fix(op4f): gate costly native ZIP lifecycle on early exact read-only Go credential observation * test(op4f): ensure bounded guest fails scoped readback before repeated native world lifecycle * test(op4f): use exact staged callback position without escape-dependent parsing
* admit(op4f): unique 009 early exact key-code and Go observer before stage * test(op4f): assert exact current one-time 009 request edge without replay * test(op4f): assert exact current one-time 009 request edge without replay
…agnostic * fix(op4f): classify scoped TrueNAS validation fields and count owned key after failure * test(op4f): adversarial validation-field redaction and one-shot postfailure read-only count
* admit(op4f): bind unique 010 validation-field guest edge config/truenas-rdte-run-request.json * admit(op4f): bind unique 010 validation-field guest edge tests/test_truenas_rdte_target.py * admit(op4f): bind unique 010 validation-field guest edge tests/test_vanilla263_t6_guest_routing.py
* fix(op4f): encode scoped one-hour expiry using frozen TrueNAS EJSON datetime * test(op4f): frozen EJSON one-hour typed expiry, timezone and malformed negatives
* admit(op4f): unique one-use 011 EJSON-native guest edge config/truenas-rdte-run-request.json * admit(op4f): unique one-use 011 EJSON-native guest edge tests/test_truenas_rdte_target.py * admit(op4f): unique one-use 011 EJSON-native guest edge tests/test_vanilla263_t6_guest_routing.py
* feat(op4g): fixed-owner disposable native ZFS rollback transaction helper * test(op4g): bounded real-native rollback seam red/blue source oracles * ci(op4g): source-admit bounded native rollback and replay/foreign-owner negatives * fix(op4g): support package unit tests and native top-level guest import
* feat(op4g): gated native pre-stage ZFS snapshot and post-reinstall injected-fault restore * feat(op4g): explicit disposable-only shell admission flag for native rollback * ci(op4g): exact one-use request-scoped native rollback admission and independent receipt gate * test(op4g): independently gate native rollback mechanics and healthy world receipt * test(op4g): independent G3 mechanics receipt cannot masquerade as managed COLLAGE APPLY * ci(op4g): native rollback opt-in runner and independent negative receipt tests
* admit(op4g): unique one-use 012 exact native rollback fixture config/truenas-rdte-run-request.json * admit(op4g): unique one-use 012 exact native rollback fixture tests/test_truenas_rdte_target.py * admit(op4g): unique one-use 012 exact native rollback fixture tests/test_vanilla263_t6_guest_routing.py * test(op4g): ensure 012 one-shot flag G2 prerequisites and independent native receipt gate * test(op4g): admit only explicit boolean rollback flag in exact 012 request
…usal contract * feat(op4h): bounded protocol777 offline native-world client action worker * feat(op4h): exact loopback client validator with sanitized staged results * test(op4h): native loopback protocol777 client positive/negative and no privilege promotion * ci(op4h): cheap Python/Node synthetic player contract and negative gates * fix(op4h): support package and native guest top-level immutable overlay imports * fix(op4h): accept concrete pathlib PosixPath while retaining directory/symlink gates
…lient visibility * feat(op4h): exact opt-in offline Mineflayer candidate and post-ZFS-rollback same native App * feat(op4h): QEMU loopback-only exact offline player path through existing native guest * ci(op4h): one-shot opt-in native synthetic Mineflayer client with pinned Node build * test(op4h): separate client-visible native positive/rollback oracle without backend promotion * test(op4h): independent native client receipt source negatives and no G4 backend inflation * ci(op4h): fail-closed native guest player receipt and JS syntax cheap gates * test(op4h): synthetic native player default-off and exact loopback/G3 request routing * fix(op4h): independently verify exact offline OP/no-RCON native App config before gameplay
* admit(op4h): unique 013 exact native synthetic client edge config/truenas-rdte-run-request.json * admit(op4h): unique 013 exact native synthetic client edge tests/test_truenas_rdte_target.py * admit(op4h): unique 013 exact native synthetic client edge tests/test_vanilla263_t6_guest_routing.py
* fix(op4h): build Mineflayer dependencies in TrueNAS guest job, not Proxmox * test: catch wrong native-client workflow job placement
* admit(op4h): new one-shot 014 corrected native client lane config/truenas-rdte-run-request.json * admit(op4h): new one-shot 014 corrected native client lane tests/test_truenas_rdte_target.py * admit(op4h): new one-shot 014 corrected native client lane tests/test_vanilla263_t6_guest_routing.py
…nded startup census * fix(op4h): pin offline UUIDv3 in native OPS to avoid Mojang username resolution before startup * fix(op4h): verify actual native App binds exact synthetic offline UUID operator * test(op4h): enforce Java offline UUIDv3 and forbid nickname in native startup OPS * diag(op4h): add safe bounded native startup state/count census without raw logs * diag(op4h): persist bounded app lifecycle/health-state census on failed startup * test(op4h): startup diagnosis reveals only allowlisted state counts, never provider metadata
…ication * admit(op4h): unique 015 offline UUID synthetic native Minecraft config/truenas-rdte-run-request.json * admit(op4h): unique 015 offline UUID synthetic native Minecraft tests/test_truenas_rdte_target.py * admit(op4h): unique 015 offline UUID synthetic native Minecraft tests/test_vanilla263_t6_guest_routing.py
…work * test(op4h): run pinned image offline UUID operator helper without TrueNAS/KVM * ci(op4h): public cheap OCI helper preflight to guard offline synthetic operator startup
…claim) * feat(G4): bounded independent Anvil block-state decoder without guest authority * test(G4): strict synthetic Anvil candidate/rollback and malformed-region negatives * ci(G4): add bounded Anvil NBT source/adversarial gates to existing public CPU job * fix(G4 CI): single shell continuation before Anvil parser static checks * fix(G4): fail fast and distinguish identical candidate/rollback Anvil replay
…t claim) * feat(G4): strict fixed-path quiesced middleware Anvil fetch seam, no guest admission * test(G4): read-only fixed guest path, quiesce, forged route, file drift negatives * ci(G4): adversarial fixed-path guest download seam on existing cheap runner * fix(G4 test): avoid overriding unittest TestCase.run with adapter helper
…admission) * feat(G4): check independent clean pre-action Anvil fixture state * feat(G4): add fixed preaction sample to owner/quiesce source seam * feat(G4): preserve established client gameplay and add bounded fixture-only setup phase * feat(G4): validate independent preaction client fixture with no false causal claim * feat(G4): integrate preaction candidate rollback Anvil checkpoints into native T6 guest * feat(G4): explicit runner-level native backend region admission flag gated by client * feat(G4): opt-in backend witness from new run manifest through router/verifier * feat(G4): independent three-checkpoint backend receipt admission with strict negative boundaries * test(G4): enforce independent empty-core preaction world negative * test(G4): independent guest receipt three-stage forgery replay owner and rollback rejection * test(G4): preserve old two-stage acceptance and test bounded client-only preparation * ci(G4): exercise full three-checkpoint receipt anti-forgery on free public CPU * test(G4): import canonical native fixture before strict standalone verifier * test(G4): prove new region gate is opt-in and cannot replay 015 * test(G4): avoid formatting-sensitive source regression assertion
… guest * admit candidate OP4I-016: distinct one-shot three-checkpoint backend native request, unmerged * test(OP4I-016): bind exactly one immutable fresh backend-world request ID * test(OP4I-016): bind exactly one immutable fresh backend-world request ID
…est replay) * feat(G4): emit fixed allowlisted readback phase codes without provider payload * feat(G4): fail-closed checkpoint phase census through native stop owner stat/download/restart * test(G4): differentiate stopped-owner stat/download/job/HTTP faults using only fixed phase codes
…umer (no guest) * feat(vanilla): stage exact 1.15.31 public Foundry source/consumer boundary; digest pending main receipt * ci(vanilla): exact 1.15.31 Foundry merged checkout/render/export for immutable consumer * test(vanilla): 1.15.31 producer-facing immutable SHA-bound source fixtures * feat(vanilla): exact 1.15.31 native catalog profile isolated from legacy Paper 1.15.30 * verify(vanilla): require new exact 1.15.31 native guest shape without promoting historical 015 * feat(vanilla): select new native App1.15.31 only under exact disposable vanilla263 shape * fix(vanilla): pin independently verified exact Foundry 11531 control digest at 5ee204df * ci(vanilla): assert 1.15.31 merged-main immutable control digest * ci(vanilla): call exact 1.15.31 Foundry exporter; preserve Paper 1.15.30 gate * test(vanilla): migrate only pinned exact 1.15.31 producer and guest fixture negatives * test(vanilla): migrate only pinned exact 1.15.31 producer and guest fixture negatives * test(vanilla): migrate only pinned exact 1.15.31 producer and guest fixture negatives * fix(native G4): tie runner-caller Foundry revision to verified 1.15.31 producer * qualify(vanilla): independently admit exact native App 1.15.31 signed source only * fix(regression): preserve independent COLLAGE Paper 1.15.30 native profile * fix(source): assert 016 immutable consumed identity, not stale old Paper product * ci(vanilla): source-only producer/consumer receipt exactly new 1.15.31 merged Foundry
… retain retired Paper hold * fix(native source): pin standalone vendor preflight to live 1.15.31; explicitly reject retired 1.15.30 * test: enforce distinct current vanilla1.15.31 vs retired Paper1.15.30 source claims
…n guest * admit(G4): distinct one-use OP4J-017 App1.15.31 backend phase and three-checkpoint disposable request * test(G4): enforce fresh 017 immutable one-use edge, consumed 016 negative and exact native G2/G3 conditions * test(rdte): update exact registered one-use request to 017 and retain independent authority constraints
* fix(G4): admit exact native1.15.31 CLI prior to parse, deny cross-product alias before DDP * test(G4): reproduce 017 argparse pre-DDP no-receipt failure and enforce product-scoped catalog admission * ci(G4): public source gate exercises parsed 1.15.31 CLI and hostile cross-product negatives * test(G4): import true CLI module via existing runner scripts path, no network/sessions
…l guest * admit(G4): distinct OP4K-018 one-use native parser-repaired Anvil request; 016/017 consumed * test(G4): enforce distinct 018 one-use request and preserve consumed 016/017 negative oracles * test(G4): enforce distinct 018 one-use request and preserve consumed 016/017 negative oracles * test(G4): enforce distinct 018 one-use request and preserve consumed 016/017 negative oracles * test(admission): explicit immutable 016 and 017 consumed history in new 018 cause/evidence
* fix(rdte): pin COLLAGE 1.15.31 and classify child readback refusals safely * chore(rdte): pin qualified COLLAGE 1.15.31 source in scripts/gha_kvm_truenas_rdte.sh * chore(rdte): pin qualified COLLAGE 1.15.31 source in .github/workflows/gha-kvm-system-rdte.yml * chore(rdte): pin qualified COLLAGE 1.15.31 source in tests/test_vanilla263_t6_guest_routing.py * test(rdte): source-only falsification of 018 collapsed failure planes and secret leakage * fix(preflight): keep fail-closed exit3 but distinguish safe HTTP, transport and schema failures * test(preflight): distinguish 403/429/404/transport/schema without secrets or fake drift
* admission(op4l): prepare fresh one-use 019 exact native G4 disposable request * test(op4l): accept only fresh 019 and refuse consumed 018 replay * test(op4l): accept only fresh 019 and refuse consumed 018 replay * test(op4l): accept only fresh 019 and refuse consumed 018 replay * test(op4l): assert exact qualified 1.15.31 readback instead of prior parser phase
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Authority
Private experiment authority: SemperSupra/agent-dispatch-private#396.
Purpose
Qualify real, disposable TrueNAS and Proxmox system targets on the already-qualified public/free x64 GitHub-hosted KVM substrate.
Initial implementation
gha-kvm-system-lab/v1evidence/guardrail contract;Active experiment workflow is temporarily push-triggered only on this experiment branch so evidence-driven harness corrections get real GHA reps. It must be frozen to manual workflow_dispatch after the active campaign.
No merge, release, placement promotion, private workload projection, paid runner use, or private GHA minutes are authorized by this PR.