Skip to content

ci: phase 87/88 provenance run#36

Open
szTheory wants to merge 134 commits intomainfrom
ci/phase-88-provenance
Open

ci: phase 87/88 provenance run#36
szTheory wants to merge 134 commits intomainfrom
ci/phase-88-provenance

Conversation

@szTheory
Copy link
Copy Markdown
Owner

Purpose: run the current Phase 87/88 automated CI lanes from the committed local graph now pushed as ci/phase-88-provenance.\n\nHead SHA: d5034b1.\nLocal uncommitted workspace changes are not part of this PR.\n\nExpected jobs:\n- Install smoke (fresh phx.new + sigra.install)\n- OAuth E2E Playwright (mock issuer)\n- MFA backup-code rotation E2E

szTheory added 30 commits April 24, 2026 09:16
…dit_forced_password_change

Made-with: Cursor
…lestone archives

- Ship planning truth for AUD-04-043 / EX-44-05 (44 inventory, 09 verification, 09-03-SUMMARY)
- Add 80-01/80-02 SUMMARY, 80-REVIEW, 80-VERIFICATION; archive v1.17 ROADMAP/REQUIREMENTS
- Fix STATE/ROADMAP/PROJECT after phase completion; REQUIREMENTS marked complete

Made-with: Cursor
Remove live REQUIREMENTS.md for a clean next milestone; add MILESTONES
and RETROSPECTIVE entries; point ROADMAP at archived requirements; sync
STATE and PROJECT footers.

Made-with: Cursor
Implement commit_api_token_jwt_audit/3 mirroring verify-failure audit path:
Repo.transaction + Audit.log_multi_safe, telemetry from changes, invalid
changeset and constraint_violation handling. Replace log_safe in audit_jwt_*.

Refs: AUD-18-01, AUD-18-02
Made-with: Cursor
Happy path, audit-off, CHECK fault injection with log_safe_error telemetry
for api.jwt_refresh and api.jwt_refresh_reuse.

Refs: AUD-18-03
Made-with: Cursor
Align AUD-04-048/049 across 44/45 inventories and 09 C-1; CHANGELOG
[Unreleased]; 81-VERIFICATION merge gate; 09-03-SUMMARY bounded-batch note.

Refs: AUD-18-04
Made-with: Cursor
Mark AUD-18 requirements done; archive v1.18 in ROADMAP; fix STATE after
phase.complete; add 81-REVIEW quick pass; 81-VERIFICATION status passed.

Refs: AUD-18
Made-with: Cursor
szTheory added 11 commits April 28, 2026 05:05
- add oauth_e2e_playwright job for mock-issuer specs
- upload playwright bundle and failure diagnostics
- run MFA audit and backup-code rotation preflight tests
- normalize GAUAT-07 bundle to a transcript-first pending scaffold
- mark Task 2 human witness artifacts as the remaining blocker
- record passing getting-started contract as the mechanical floor
- reset evidence files to honest pending-human-witness placeholders
@szTheory szTheory marked this pull request as ready for review April 28, 2026 16:39
szTheory added 17 commits April 28, 2026 16:42
- Generated timestamped browser-flow transcript for the regenerate flow
- Captured explicit proof that a pre-rotation backup code fails after regeneration
- Captured mfa.backup_codes_regenerate audit proof
- Captured compact machine summary of the visible regenerate flow states
…acts

- Run MIX_ENV=test mix sigra.uat.report --phase=mfa-backup-rotation
- Kept transcript/query evidence primary in the README language
- Verified README points at machine-owned transcript, invalidation proof, audit proof, and UI summary
- Confirmed no artifact overstates what the UI alone proves
…acts

- Emit transcript, env, and reports via scripts/ci/install-smoke.sh
- Capture fresh-host prerequisites and lifecycle timestamps
- Emit manifest.json from getting-started run
- Update README.md with generated-host lifecycle context
- Verified README points to machine-owned transcript, env capture, and lifecycle report
- Confirmed no human-usability claims are over-claimed
- Modifies `hero_snapshot_relpath` to use `Path.wildcard` so it can find the existing snapshot on disk even if the current git sha has moved forward since the evidence was generated.
- Adds v1.20-GA-UAT-RESULTS.md with Phase 86/87/88 evidence links and status.
- Maintains SEED-001 as deferred because Phase 87 provenance is not yet resolved.
- Explicitly flags GAUAT-03..06 as BLOCKED per the 87-VERIFICATION truth.
- Asserts the Phase 87 provenance block correctly.
- Captures the hybrid manual/automated verification for GAUAT-07 and GAUAT-08.
- Sets launch-leg disposition to NO-GO (BLOCKED BY PROVENANCE) because of the pending Phase 87 URLs.
@szTheory szTheory force-pushed the ci/phase-88-provenance branch from e02f864 to f26212c Compare April 28, 2026 21:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant