First workforce run: /api/uptime + /api/version with full-stack receipts

[webdevtodayjason]

Summary

• Problem: The Workshop board had no jobs — the full-stack demo needed its first real workforce run.
• Why it matters: this PR is the capstone proof that all six Frontier Infra tiers compose on one repo.
• What changed: two endpoints (/api/uptime, /api/version) + tests, built by machine-driver-dispatched claude -p workers under contract; signed AARs, Proctor meta-proof, board data generated from receipts; README case study.
• What did NOT change (scope boundary): no other routes, no dependencies, no changes to ops/ or the stamped gates.

Change Type

• Feature

Linked Issue / PR

• Closes: N/A (demo capstone, operator-ratified)
• Related: frontier-infra/Maintainer-Gate-Blueprint, frontier-infra/proctor, frontier-infra/adl, frontier-infra/machine-driver, frontier-infra/agentcontrolplane

Root Cause / Regression History

N/A — feature, not a bug fix. One defect found during the run: machine-driver resolved aar_priv relative to its own cwd (ENOENT), alerted loudly per design; fixed by absolute path in harness/goal.json, records signed after the fact.

• Root cause: N/A
• Missing detection / guardrail: N/A
• Prior context: N/A
• Why this regressed now: N/A
• If unknown, what was ruled out: N/A

Regression Test Plan

• Coverage level: unit tests (node:test)
• Target test or file: test/app.test.mjs — "uptime endpoint answers 200 with up:true" and "version endpoint returns the package.json version" (written by the workers themselves; full suite 7 tests)

Validation

• npm test — PASS (7/7)
• AVL validator — PASS (conformance L3)
• aar.mjs verify on both task AARs + meta-AAR — PASS (L2, live did:web resolution)
• Proctor goal-verify meta-proof — signed_off: true (3/3 checks)

Human Verification

• Verified scenarios: operator (Jason, via this session) reviewed the propose-mode diff — 23 insertions, exactly the contracted files (app/server.mjs, test/app.test.mjs), constraints held; board rendered and inspected locally at :4600; /api/uptime and /api/version curled and answered correctly.

Risk and Recovery

Demo repo; no production surface. Recovery = revert the merge commit. Signing key is gitignored, rotate by republishing /.well-known/did.json.

🤖 Generated with Claude Code

https://claude.ai/code/session_01DtpVQr2zSPXaUzbCS2BbW9