diff --git a/docs/changelog-20260719-phase5-sweep.md b/docs/changelog-20260719-phase5-sweep.md index 304af28..38d63c3 100644 --- a/docs/changelog-20260719-phase5-sweep.md +++ b/docs/changelog-20260719-phase5-sweep.md @@ -68,6 +68,43 @@ full gauntlet + repo-lint results recorded in the batch completion report and the ledger entry for this session. +## Batch 1 -- D-130 verification pair, decision, and the plan gate rebuild +## (OPENED by operator 2026-07-19) + +1. **L10 flip WARN -> FAIL at batch open** -- commit `9683a18`. One constant + (`L10_FAIL = True`) + harness rc updates, 42/42. Per the Batch 0 revert note. + REVERT: `git revert 9683a18`. + +2. **1.1 v8 plan-only verification (GA-F01, G4)** -- captures + `docs/audit/outer-plan-20260719-baseline.txt` (7/2/7, zero drift from + 2026-07-18) and `outer-plan-20260719-v8-ignorechanges.txt` (6/2/6, ZERO + forces-replacement). Suppression CONFIRMED; the operator's contingent lean + survived its verification. + +3. **1.2 v7 throwaway exercise (GA-F01, G4)** -- capture + `docs/audit/throwaway-v7-20260719.txt`. Isolated `throwaway-v7-*` root + (own scratch pool under the AppArmor-covered parent, no networks, no OS): + defect reproduced (seed volume "must be replaced" after staging-ISO loss); + replacement applied UNDER the running domain, rc=0, NO bounce (domid 3->3); + teardown verified zero residue (0 domains, 0 pools, dir gone). New fact + recorded: the bounce path is the autostart/domain Update, not the volume + replace. + +4. **1.3+1.4 D-130 ADOPTED (a) + implemented** -- commit `dac10e0`. + GA-R5 ruling (question + utterance in the D-130 register entry); + `lifecycle { ignore_changes = [create] }` on `libvirt_volume.seed` in + `modules/cloudinit-vm`; NEW harness `tests/cloudinit-vm/run-tests.sh` (6/6: + guard placement, exact attribute, no leak onto the data disk, tofu + validate). G4 + G5 CLOSED. REVERT: `git revert dac10e0`. + +5. **1.5-1.7 G6 reconcile + triple + G7 re-plan** -- commit `5a4f5eb`. + Operator ruled (ii) state surgery (S3/GA-R5): autostart:true injected into + both domain resources (were None), serial 22->23, backup + `opentofu/terraform.tfstate.pre-G6-20260719`; guests untouched (ids 1/2, + running). Re-plan capture `docs/audit/outer-plan-20260719-postG6.txt` = + **6/0/6**, equals the section-5 recorded triple exactly -- G6 + G7 CLOSED. + REVERT: docs via `git revert 5a4f5eb`; state via push of the pre-G6 backup. + ## Out-of-batch: permission posture extension (operator-directed 2026-07-19) - WHAT: `.claude/settings.json` `ask` list extended -- `Bash(git merge*)`, diff --git a/docs/session-ledger.md b/docs/session-ledger.md index 1c3637e..8dd7840 100644 --- a/docs/session-ledger.md +++ b/docs/session-ledger.md @@ -1166,3 +1166,9 @@ - Status of gates/batches lives in docs/CURRENT-STATE.md ONLY (G3 row updated per-commit). - L10 severity flip (WARN -> FAIL, one constant) is DUE AT BATCH 1 OPEN -- do not forget. - Next gate: operator opens Batch 1 (D-130 verification pair v8/v7 -> ruling -> reconcile -> re-plan). + +- BATCH 1 COMPLETE (2026-07-19, same session): L10 flipped to FAIL (9683a18); v8 + v7 verifications + captured (suppression confirmed; no-bounce fact); D-130 ADOPTED (a) + implemented with harness + (dac10e0); G6 state surgery executed per operator ruling (ii), backup terraform.tfstate.pre-G6-20260719; + G7 re-plan = 6/0/6 == recorded triple (5a4f5eb). Gate status lives in CURRENT-STATE.md. +- Next gate: operator opens Batch 2 (record fixes, GA-F backlog, repo-only).