Initial server source import

2026-09-30 20:30:56 +03:00
commit 170dd941b9
498 changed files with 261563 additions and 0 deletions
@@ -0,0 +1,78 @@
+# Current State
+
+Updated: 2026-09-26
+Workspace: `D:\truf-workers`
+
+## STATUS: Primary Objective Complete
+
+Extended production validation with exactly one native Windows worker slot and
+one WSL/Docker worker slot is complete. Run
+`e6ac8aec-ec20-4ba4-a924-abe5ee95d82c` exercised discovery, assignment, worker
+execution, progress, diagnostics, bundle upload and ingestion, projection,
+capacity release, and scheduled keycheck.
+
+The authoritative public-safe result is
+`docs/extended-live-validation-2026-09-26.md`. The machine-readable aggregate
+manifest is
+`build/extended-live-validation/runs/e6ac8aec-ec20-4ba4-a924-abe5ee95d82c/verification-manifest.json`.
+
+Conclusion: `pass_with_documented_deviations`.
+
+## STATUS: Terminal Validation Cut
+
+- Controller revision 143 was sealed with dispatch and discovery paused and the
+  validation drain complete.
+- All 314 reservations were terminal: 309 acknowledged and 5 refunded.
+- All 309 accepted bundles were ingested, projected, settled, and released.
+- No unresolved reservation, live assignment, pre-commit bundle, capacity use,
+  publication outbox item, quarantine row, waiting lock, or blocker remained.
+- All 348 projection jobs completed and released in one attempt without error.
+- The captured 39-candidate keycheck cohort completed, linked, projected, and
+  released; the global queue had no pending, leased, or deferred candidate.
+- Server and worker hash chains and all referenced objects verified.
+
+## STATUS: Production Restored
+
+Production restore completed through compare-and-swap revisions 143 to 146:
+
+1. Cancel the validation drain: 143 to 144.
+2. Resume discovery: 144 to 145.
+3. Resume dispatch: 145 to 146.
+
+Last verified state:
+
+- Controller revision 146, actor `validation-final-restore`.
+- Dispatch open, discovery open, drain normal.
+- Exactly one live assignment on Windows and one on WSL/Docker.
+- Runtime healthy with zero validation-run restarts.
+- Edge running with zero validation-run restarts.
+- Core services and discovery producers healthy.
+
+This is a recorded final snapshot, not a substitute for a fresh query in a
+future operational session.
+
+## STATUS: Documented Deviation
+
+The authenticated `recheck all` operation was accidentally used instead of
+rechecking only the two pending candidates, causing 35 broad provider checks
+contrary to `KEYCHECK-001`. All 35 were processed, none was skipped, the command
+returned success, and all effects settled. Do not repeat this probe.
+
+## STATUS: Remaining Defects
+
+- Windows GitLab filename-too-long checkout recovery is local and not deployed.
+- Invalid API-key classification is fixed locally and not deployed.
+- A roughly 20-second WSL clock-domain monotonic failure remains open.
+- Generic `WorkerContractError` diagnostics lose structured field detail.
+- Monitor aggregate queries produced six recovered statement timeouts under
+  load.
+
+Focused regression tests for the local checkout, long-path, and credential
+changes passed: 145 tests in 155.26 seconds.
+
+## NEXT: No Validation Work Pending
+
+Do not repeat the completed live validation or broad keycheck. Future work, if
+requested, is limited to reviewing and deploying the documented local fixes,
+investigating the remaining defects, and archiving the completed OpenSpec
+change. Do not archive OpenSpec without explicit user instruction.