|
Stage-5 grounding audit: lens 4 (gate integrity) + privileged creds re-run
LENS 4 broke seven gates with CONSTRUCTED, MEASURED fixtures. Independently re-verified by this session before landing: - repo-lint reports "PASS (0 fail, 0 warn)" over ZERO files when given a one-character typo of either its documented flag or the repo path. This is the gate whose 0-fail every GA-R6 stage-close commit cites; the verdict is not evidence the repo was read. Reproduced here exactly. - provider-bundle-check PASSES on decorative HA: `grep -rn cluster_count scripts/ tests/` returns NOTHING, while the overlay carries 20 such lines. A 3->1 rewrite of every cluster_count yields a byte-identical PASS. - preflight's aggregator ignores every sub-gate exit code that is not 1 or 2, so a gate that crashes (127) leaves "PREFLIGHT: PASS -- clear to deploy". - P3 verified ZERO of 33 charm-channel pins TODAY because juju is not on the host's PATH, and a missing BINARY is folded into the same WARN as an unreachable charmhub. This CORRECTS this session's own earlier capture, which waved the 33-warn line through as "expected" -- the count was expected, the cause was not. - G17's named check cannot fail: curl -sI exits 0 on 404/500 and the dc0 URL is an autoindex root that answers 200 with nothing behind it. Lens 4 also returned an 11-item COULD-NOT-BREAK list; notably the 2026-07-27 dc-mirror last-sync fix HOLDS under all five status arms, and creds-matrix's tier-2 probe states could not be made to turn "could not look" into green. CREDS: privileged sweep re-run (operator-authorized). Exit 1, still exactly the same 7 findings -- no drift in a day. All three root-owned locations read via sudo -n escalation, metadata only; ZERO E3 findings. Recorded as a RE-CONFIRMATION of the 2026-07-26 privileged run, not a newly-closed item. Six of seven lenses are now in docs/audit/stage5-committee-raw-20260727.md. Lens 5 (ordered preconditions) is still running after an API-error relaunch. Revert: git revert this commit; all files are audit artifacts plus additive CURRENT-STATE paragraphs. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01HvCyrwvYTTcDYnRErfMsNf |
|---|
|
|
| docs/CURRENT-STATE.md |
|---|
| docs/audit/stage5-committee-raw-20260727.md |
|---|
| docs/audit/stage5-creds-privileged-20260727.txt 0 → 100644 |
|---|
| docs/audit/stage5-live-measurement-20260727.txt |
|---|