From caca89879d573031bd93fd3d5363b9727604066e Mon Sep 17 00:00:00 2001 From: bitkyc08-arch Date: Wed, 19 Aug 2026 01:15:21 +0900 Subject: [PATCH] docs(devlog): close the 260818 bug-PR resolution campaign to _fin 24/24 disposition rows terminal or recorded-hold; WP-V stabilization (12 failures fixed forward, no reverts), wp6/wp7/wp9/wp10 evidence, and the wp11 outcome ledger with final gates (lidge decisive run 13316 pass / 0 fail on a5ec64172; push CI success on e446607c8 with docs-only delta). Security gate: prior public disclosure via issue #1926 (r10-corrected rationale). --- .../000_disposition_matrix.md | 0 .../010_wpv_stabilization_audit.md | 0 .../020_wp6_redesigns_1748_1920.md | 0 .../030_wp7_landed_and_remaining.md | 0 .../040_wp9_issue_sweep_docs_drift.md | 0 .../050_wp10_followup_designs.md | 0 .../051_tsig_credential_scope.md | 0 .../060_wp11_closeout.md | 32 ++++++++ .../070_outcome_ledger.md | 82 +++++++++++++++++++ 9 files changed, 114 insertions(+) rename devlog/{_plan => _fin}/260818_bug_pr_resolution/000_disposition_matrix.md (100%) rename devlog/{_plan => _fin}/260818_bug_pr_resolution/010_wpv_stabilization_audit.md (100%) rename devlog/{_plan => _fin}/260818_bug_pr_resolution/020_wp6_redesigns_1748_1920.md (100%) rename devlog/{_plan => _fin}/260818_bug_pr_resolution/030_wp7_landed_and_remaining.md (100%) rename devlog/{_plan => _fin}/260818_bug_pr_resolution/040_wp9_issue_sweep_docs_drift.md (100%) rename devlog/{_plan => _fin}/260818_bug_pr_resolution/050_wp10_followup_designs.md (100%) rename devlog/{_plan => _fin}/260818_bug_pr_resolution/051_tsig_credential_scope.md (100%) create mode 100644 devlog/_fin/260818_bug_pr_resolution/060_wp11_closeout.md create mode 100644 devlog/_fin/260818_bug_pr_resolution/070_outcome_ledger.md diff --git a/devlog/_plan/260818_bug_pr_resolution/000_disposition_matrix.md b/devlog/_fin/260818_bug_pr_resolution/000_disposition_matrix.md similarity index 100% rename from devlog/_plan/260818_bug_pr_resolution/000_disposition_matrix.md rename to devlog/_fin/260818_bug_pr_resolution/000_disposition_matrix.md diff --git a/devlog/_plan/260818_bug_pr_resolution/010_wpv_stabilization_audit.md b/devlog/_fin/260818_bug_pr_resolution/010_wpv_stabilization_audit.md similarity index 100% rename from devlog/_plan/260818_bug_pr_resolution/010_wpv_stabilization_audit.md rename to devlog/_fin/260818_bug_pr_resolution/010_wpv_stabilization_audit.md diff --git a/devlog/_plan/260818_bug_pr_resolution/020_wp6_redesigns_1748_1920.md b/devlog/_fin/260818_bug_pr_resolution/020_wp6_redesigns_1748_1920.md similarity index 100% rename from devlog/_plan/260818_bug_pr_resolution/020_wp6_redesigns_1748_1920.md rename to devlog/_fin/260818_bug_pr_resolution/020_wp6_redesigns_1748_1920.md diff --git a/devlog/_plan/260818_bug_pr_resolution/030_wp7_landed_and_remaining.md b/devlog/_fin/260818_bug_pr_resolution/030_wp7_landed_and_remaining.md similarity index 100% rename from devlog/_plan/260818_bug_pr_resolution/030_wp7_landed_and_remaining.md rename to devlog/_fin/260818_bug_pr_resolution/030_wp7_landed_and_remaining.md diff --git a/devlog/_plan/260818_bug_pr_resolution/040_wp9_issue_sweep_docs_drift.md b/devlog/_fin/260818_bug_pr_resolution/040_wp9_issue_sweep_docs_drift.md similarity index 100% rename from devlog/_plan/260818_bug_pr_resolution/040_wp9_issue_sweep_docs_drift.md rename to devlog/_fin/260818_bug_pr_resolution/040_wp9_issue_sweep_docs_drift.md diff --git a/devlog/_plan/260818_bug_pr_resolution/050_wp10_followup_designs.md b/devlog/_fin/260818_bug_pr_resolution/050_wp10_followup_designs.md similarity index 100% rename from devlog/_plan/260818_bug_pr_resolution/050_wp10_followup_designs.md rename to devlog/_fin/260818_bug_pr_resolution/050_wp10_followup_designs.md diff --git a/devlog/_plan/260818_bug_pr_resolution/051_tsig_credential_scope.md b/devlog/_fin/260818_bug_pr_resolution/051_tsig_credential_scope.md similarity index 100% rename from devlog/_plan/260818_bug_pr_resolution/051_tsig_credential_scope.md rename to devlog/_fin/260818_bug_pr_resolution/051_tsig_credential_scope.md diff --git a/devlog/_fin/260818_bug_pr_resolution/060_wp11_closeout.md b/devlog/_fin/260818_bug_pr_resolution/060_wp11_closeout.md new file mode 100644 index 0000000000..a99410c16b --- /dev/null +++ b/devlog/_fin/260818_bug_pr_resolution/060_wp11_closeout.md @@ -0,0 +1,32 @@ +# 060 — WP11 closeout: final gates, outcome ledger, _fin + +## Steps + +1. Final lidge suite on origin/dev head a5ec64172 in a dedicated worktree + (~/.wp11-final): typecheck + bun test --isolate tests + privacy:scan, all + exit 0 (running). +2. Dev-head push CI green (a5ec64172 or the exact head at closeout time). +3. Outcome ledger 070_outcome_ledger.md: per-matrix-row terminal state (24 PRs), + wp-by-wp evidence, the two NEEDS_HUMAN/open holds (#1876 windows-leg + + review clearance; #1852 pending #1876), the recorded reasoned deviations, + and the pre-existing dev windows-dispatch redness note. +4. Move devlog/_plan/260818_bug_pr_resolution → devlog/_fin/. Security gate + (r10-corrected rationale): 050/051 describe the still-unfixed #1926 gaps, + but every detail there is ALREADY publicly disclosed in open issue #1926 + itself (and 051 is already public on dev via PR #2052) — prior public + disclosure, not fix-shipped, is the defense; nothing new is disclosed by + the move. The 020 SSRF discussion concerns the closed unmerged #1748 + (weakness never shipped, publicly visible in that PR). +5. PR (docs-only), CI green, merge. Campaign D close + goal completion audit. + +## Verifiers + +- lidge exit codes 0/0/0 on the exact final SHA. +- Push CI success on the nearest dev ancestor that covers CI-relevant paths + (currently e446607c8, success run 32147799485), with the docs-only delta to + head shown by git diff --stat — docs/devlog pushes do not trigger CI, so an + exact-head run may legitimately not exist. Caveat recorded: push CI SKIPS + the windows shards; the windows dispatch leg is red on dev pre-campaign + (since >= 8/06, last green 7/25) and is recorded as its own follow-up, not + a campaign gate. +- git log --oneline for the _fin merge; gh pr/issue states for the ledger rows. diff --git a/devlog/_fin/260818_bug_pr_resolution/070_outcome_ledger.md b/devlog/_fin/260818_bug_pr_resolution/070_outcome_ledger.md new file mode 100644 index 0000000000..f296e6da8d --- /dev/null +++ b/devlog/_fin/260818_bug_pr_resolution/070_outcome_ledger.md @@ -0,0 +1,82 @@ +# 070 — Campaign outcome ledger (260818 bug-PR resolution + stabilization) + +Two sessions: the original campaign session (interrupted by a Codex runtime +error mid-wp6) and this stabilization/continuation session. All evidence +against origin/dev; final head at closeout ≥ a5ec64172. + +## Matrix disposition — 24/24 terminal or recorded hold (r10-verified via gh) + +| PR | Matrix verdict | Terminal state | +|---|---|---| +| 2007 | MERGE (rebase) | MERGED via #2016 (891c8284b) | +| 1991 | MERGE | MERGED 263f8ca62 | +| 1935 | MERGE-SQUASH | SQUASHED 6779edb02 | +| 1931 | MERGE | MERGED e529927ab | +| 1920 | REDESIGN-SMALL | CLOSED w/ credit; redesign MERGED via #2038 (c42d1eb56); #1866 closed w/ deferral disclosure | +| 1912 | MERGE | MERGED f8b4b783e | +| 1883 | MERGE-SQUASH | SQUASHED b1ca78910 (security pass in WP-V Lane B) | +| 1876 | REDESIGN-SMALL | HOLD (NEEDS_HUMAN): candidate codex/land-1876 validated (rebased, fail-closed ancestors, both TTLs); windows dispatch failure proven pre-existing vs dev control run 32147924436; blocked on standing Wibias CHANGES_REQUESTED — evidence posted on the PR. #1852 stays open pending this. | +| 1859 | MERGE | MERGED d06b99d8b | +| 1847 | MERGE | MERGED 4d07a3d33 | +| 1845 | MERGE | MERGED af24e47bf | +| 1833 | CLOSE-STALE | CLOSED | +| 1990 | MERGE (rebase) | MERGED via #2017 (394b59b64) | +| 1940 | REDESIGN-LARGE-CLOSE | CLOSED w/ split directive | +| 1932 | REDESIGN-SMALL | CLOSED; redesign MERGED via #2021 (f2b507f83) | +| 1896 | REDESIGN-SMALL | CLOSED; redesign MERGED via #2020 (5f2b93979) | +| 1889 | REDESIGN-SMALL | CLOSED; redesign MERGED via #2018 (ea16f8613) | +| 1888 | REDESIGN-LARGE-CLOSE | CLOSED w/ restack directive | +| 1887 | REDESIGN-LARGE-CLOSE | CLOSED w/ re-cut directive | +| 1851 | MERGE-SQUASH | SQUASHED 444131edb | +| 1842 | REDESIGN-SMALL | CLOSED w/ credit; redesign MERGED via #2043 (e446607c8) after independent security review (APPROVE) | +| 1800 | MERGE (rebase) | MERGED via #2015 (3617e1cfa) | +| 1748 | REDESIGN-SMALL | CLOSED w/ credit; redesign MERGED via #2037 (8b9277fa7) | +| 1725 | MERGE-SQUASH | SQUASHED 991074e47 | + +## Stabilization (WP-V, this session) + +- 4-lane audit of all 125 commits e97fb2621..aaf04690e: no disposition + violations, no security regressions (Lane D over 302 files; #1883 + supply-chain pass). Two REGRESSION findings were stale-sibling-test class. +- 12 dev-head test failures bisect-attributed to the train and fixed FORWARD + in PR #2026 (69650fac4): #1851 transient-retry scope guard to the google + adapter (restored combo-failover first-5xx hop) + 5 stale test updates. + No reverts required. +- lidge full suite on aaf04690e-era head: 13281 pass / 0 fail (dedicated + worktree; first attempt VOID from a concurrent-session checkout hijack — + caught by the r1 plan audit). + +## Work-phase evidence (this session) + +- wp6: #1748 → PR #2037; #1920 → PR #2038 (decode-proven native wire fix). +- wp7: 1932/1896/1889 verified terminal; #1842 → PR #2043 (security APPROVE); + #1876 hold as above. +- wp9: structure/04:663 canonical-Fast drift fixed via PR #2049 (0da9e2016) — + provenance corrected by audit: FastWire B1 introduced the drift, not fixed + it. Issue sweep (26 issues, 2 lanes): closed #1549 (grok-4.6 landed) and + #1302 (CI batch-timeout mitigation) with commit evidence; status comment on + #1849; 23 verified still-open with per-issue mechanism evidence. +- wp10: decade-docs merged via PR #2052 (a5ec64172): 090 transactional-update + rollback (windows unit), 051 tsig credential scope + six-site + emit-after-commit barrier (campaign unit; reasoned residence deviation from + the matrix, recorded). Cross-links on #1942/#1926. + +## Recorded holds and follow-ups (not campaign gates) + +- #1876 / #1852: maintainer review clearance + windows-leg baseline. +- Windows workflow_dispatch leg red on dev pre-campaign (Log Guard suite + families; since >= 8/06, last green 7/25). Deserves its own unit. +- Push CI skips windows shards; windows coverage rides the dispatch leg only. +- 050/051 describe the still-open #1926 gaps — public via issue #1926 and + PR #2052 (prior public disclosure; nothing new disclosed by _fin). + +## Final gates (filled at close) + +- lidge (~/.wp11-final, exact SHA a5ec64172): TSC=0, privacy:scan pass, and a + decisive full-suite run 13316 pass / 0 fail / 15 skip, RUN_EXIT=0 + (/tmp/wp11-final-run.log). An earlier pass in the same worktree showed 7 + fails that did not reproduce on the decisive run — same flake class as the + WP-V first pass (19→0 on re-run). +- Push CI: success on e446607c8 (run 32147799485); the delta e446607c8..head + is docs-only (structure/04 one-paragraph fix + devlog), which does not + trigger the CI path filter — recorded per the r10-corrected verifier.