From 1745c1a984ce49cae36108707f8911bb0f1a4404 Mon Sep 17 00:00:00 2001 From: zzstoatzz Date: Sat, 15 Aug 2026 20:50:51 -0500 Subject: [PATCH] handoff: a2652c4 deployed; layer-digest identity check replaces whole-tar md5 Co-Authored-By: Claude Fable 5 --- HANDOFF.md | 22 ++++++++++++++++++---- 1 file changed, 18 insertions(+), 4 deletions(-) diff --git a/HANDOFF.md b/HANDOFF.md index bd2f7a7..17c782a 100644 --- a/HANDOFF.md +++ b/HANDOFF.md @@ -1,12 +1,26 @@ # HANDOFF — stream operator context -Updated 2026-08-13 ~20:00Z (3pm CT). Replaces the 08-11 incident handoff; +Updated 2026-08-16 ~02:00Z. Replaces the 08-11 incident handoff; that arc (seal stall, idle watchdog, subscriber convoy, coral wedge) is closed and chronicled in git history 08-11..08-12. ## where things stand -- **prod runs `7e8f17e`** (2026-08-14 ~21:4xZ, receipt 21/21): CORS on every +- **prod runs `a2652c4`** (2026-08-16 ~01:46Z, receipt 21/21): the task #11 + PDS-direct-first retry port (see the incident block below), reviewed + line-by-line against upstream retry.go and corrected to exact parity + before admission. Restart reset both timers: next compaction pass AND + next failed-repo retry pass land ~01:50Z 2026-08-17 (24h from boot) — + that pass is the watch point: it should route direct + (stream_backfill_failed_repo_retry_pds_direct_total vs + _relay_fallback_total) and produce no ingest dip. Startup verified: + 2,204,972 tombstones rebuilt, ingest resumed, zero error lines. + DEPLOY-CHECK LESSON: whole-tar `docker save | md5` false-negatives + across docker versions (heavypad saves OCI, box re-serializes on load + → different image ID, same content). The correct identity check is + RootFS layer digests + semantic config equality (`docker inspect + --format '{{.Id}} {{.RootFS.Layers}}'` and diff `.Config` as JSON). +- Prior deploy `7e8f17e` (2026-08-14 ~21:4xZ, receipt 21/21): CORS on every response + preflights answered BEFORE the key gate (browser consumers appeared day-after-launch and our gate 401'd their preflights); client_closed split out of tail_closed; zat.Datetime adopted (four @@ -37,8 +51,8 @@ closed and chronicled in git history 08-11..08-12. from the direct path is rejected (GetRepoDidMismatch). Counters: stream_backfill_failed_repo_retry_{pds_direct,relay_fallback}_total. Regression tests: stale-stamp fallback + restamp, DID mismatch, in - resync.zig. After a clean retry pass with direct routing, consider - restoring the 4h interval. Shaping theory stays unproven (mitigation + resync.zig. PORT DEPLOYED as a2652c4 (2026-08-16 ~01:46Z). After a clean retry + pass with direct routing, consider restoring the 4h interval. Shaping theory stays unproven (mitigation restart reset the retry timer, cancelling the experiment); the port removes the relay-hammering pattern either way. - Prior deploy `56dbf2e` (receipt 21/21; 401 contract byte-identical to -- 2.51.2