loki-mode 10.6.10 → 10.6.12

package/docs/v10/PROGRESS.md

@@ -1974,3 +1974,71 @@ The swarm is stopped: .loki/V10-STOP exists, the loop has no wake-ups, and the c
 - Peer finding: `loki serve` is the deprecated alias of `loki api start`, not the Control Plane; docs and help disagreed. D65-UI-NAMING (62b592031) and D65-UI-NAMING-2 (e564d2423, bash fallback honors LOKI_CONTROL=0 and names bun) merged, both TL APPROVE.
 - P0-TC-SUPERSEDE merged (bd686b7c9): train-cycle now holds a green unpromoted train so Phase B promotes it first.
 - Train 88 was cut before the v10.6.9 release commit, so it is not a fast-forward of main. Merged origin/main into local main (7ad91e03f, no conflicts, dist rebuilt unchanged, dist guard 13/0) and pushed train 89 (8576564a7) carrying C11b, D65-BUG5, D65-BUG6, D65-BUG6-G, D61-04-F, P0-TC-SUPERSEDE, D65-UI-NAMING and -2.
+
+## 2026-10-03T07:55Z tick (CoS)
+- Train 89 and 90 never went all-green: Security Audit cancelled both because the gitleaks full-history scan hit its 15 min timeout (also trains 86, 88; passing runs took 8-15 min). Train 90 Tests had one P9 red; full rerun green (flake, same code green on 89).
+- D74 (5d4530b18): gitleaks timeout 15 -> 30 min, same scope. Train 91 all six checks green; train-cycle promoted it at 07:41:45Z and cut v10.6.10 (a5a4f0c95, release run in progress at 07:55Z; npm still reads latest=10.6.9, not announced).
+- D75 (cacc31400): peer proposal for a train-range gitleaks scan; CTO APPROVE-WITH-CONDITIONS after finding the full scan would no longer guard npm publish (E-160 reuse plus unfiltered required-ci parent reuse). Slice D75-GITLEAKS-RANGE built (30e96b09c, test 43/0); opus adversarial review in flight.
+- Local main merged origin/main v10.6.10 (a6ebe9897), dist guard 13/0.
+- Drift audit vs CONTROL.md (last 6h): release cadence and merged-unreleased age violated by the gitleaks timeouts (fixed D74/D75); D12/D13 held; active builders 1 vs target 6. Only one ready row is dependency-free (D65-SPEC-F2, needs architect card). engine10 budget.test.ts 27/0 on main, so P0-CORE-BUDGET no longer blocks trains.
+
+## 2026-10-03T07:56Z tick (CoS)
+- Correction: the previous entry is stamped 07:55Z but was written at 07:52Z (pulse FUTURE_TIMESTAMP). This entry's time comes from `date -u`.
+- D65-BUG7 merged as main b5a0085a0. Intake resolved `info/exclude` with a hard-coded `.git/` path, which threw ENOTDIR in linked worktrees. TL APPROVE (the mutation went red at 15/1). The intake test is 16/0 on main, the dist guard is 13/0, and `scripts/e2e-d65.sh` gives legs=9 fails=0. Documented in E2E-D65.md section 6.1.
+- D75-GITLEAKS-RANGE: opus r1 BLOCK B1 (a red daily scan did not halt releases). The r2 fix b11872776 adds a scheduled-run check in release.yml required-ci (47/0, W9 plus 2 mutations go red). The opus r2 re-review is running and also judges the fail-open path on an API error.
+- v10.6.10: the release workflow (a5a4f0c95) is still in_progress. npm shows latest=next=10.6.9. No push until it completes; the peer has not been told.
+- Drift audit (last 6h): 3 releases against the 18 that the 20 min cadence target implies (MISS; the main cause was Security Audit timeouts on trains 86-90, fixed by D74). 175 commits on local main. Ready rows: 25, of which 14 are dependency-blocked and most of the rest are eval, real-model or CTO-owned. Active builders: 3 (D65-SPEC-F2, D61-11 r3, and the D75 review), against a target of 6. Pulse budget projection: weekly 115.8%, max engineers 2. The D68 mandate floor (85% of live /usage) overrides this; live usage was 52% at 07:43 according to the peer, so it is within the floor.
+
+## 2026-10-03T08:31Z CoS
+- Train/93 (01b5753bb, target 10.6.11): Tier A, Bun Parity, First-run gate and Security Audit green; Tests and Coverage in progress (gh run list --branch train/93).
+- INTEL-3 r2 (d46385cf3) and A-103b (7b7931d7a) built; TL re-review and opus HIGH review dispatched. INTEL-1 opus review, A-04c r2, D61-11 r3 and P0-CORE-BUDGET TL r2 still running.
+- Pulse BUDGET_BURN (weekly 268.6% projected, max 0 engineers) stays overridden by the founder D68 mandate; the floor is 85% of the week on live /usage.
+
+## 2026-10-03T08:36Z CoS
+- INTEL-3 merged (0bab386c2, d4865ed9e; TL r2 APPROVE). INTEL-1 merged (c3031c9aa; opus APPROVE, 14 probes); dist rebuilt both times, guard 13/0. INTEL-1b opened for the 5 non-blocking findings (FAILED-run export, run_id binding, single read, all-unknown keyid, rotation keyid); builder dispatched.
+- D76 decided (A-121c): legacy unknown-kid verify exits rc 2; builder dispatched. EV-12D blocked: main has 0 large tasks (measure-size rc=0, validate rc=0).
+- Drift audit: 182 commits on main in 6h; 1 release in the last hour against the 20 min cadence target (MISS, train/93 Tests and Coverage still in progress). Seats: 6 agents active against the 8-16 target; 6 unblocked ready rows remain, most HIGH or CTO-owned (G-04, S41-06, S41-13, EV-9, D50-W1, E-160).
+
+## 2026-10-03T08:51Z CoS
+- v10.6.11 release run in progress on f9dbe5f4c (Tests green); npm dist-tags still 10.6.10, peer announcement waits for the registry.
+- INTEL-1b r1 HIGH BLOCK: export read hook reached verifyGroup, a genuine group receipt read TAMPERED (reproduced); r2 sent with group export test, stronger sign-bytes test, run_id-before-export and a zero core-line delta. A-121c HIGH review running.
+- D77 decided (CTO): Wall gets a sealed base-tree signatures manifest, never repo access; cap 90/180s, override max 300s; W1-S1..S4 on BOARD, core-budget gated.
+- PO batch: 7 LOW/MEDIUM slices carded with reproduced evidence; 6 builders dispatched (PO-HELP-1 waits for A-121c). PO-DOC-3 done (ac8ae0425).
+- Drift audit: 1 release in the last hour against the 20 min target (MISS: train/94 held on the engine10 core budget, 5007 of 5000, until P0-CORE-BUDGET merges). Seats: 12 agents active, inside 8-16. Ready queue still mostly HIGH or core-gated.
+
+## 2026-10-03T09:02Z CoS drift audit
+- Merged to main: INTEL-1b (d64de6b5b, 794566ce6, opus HIGH r2 APPROVE, 71/0, guard 13/0); PO-TEST-1..3 (41103e5c3, 8b3fa5af4, 75953c210; suites 15/0, 7/0, 39/0; shard/registration guards green).
+- A-121c opus HIGH BLOCK: standalone autonomy/verify.sh printed UNCHECKED then VERDICT: VERIFIED rc 0 on a forged or unsigned receipt (reproduced; loki verify correctly rc 2). r2 dispatched.
+- A-04c r3 opus BLOCK: four reproduced seal false greens (chat filter drops real promises, partial red counted covered, skipped test covers, block comment or docstring assert). r4 dispatched.
+- v10.6.11 Release run still in_progress at 08:56Z; npm latest 10.6.10. Train/94 held on P0-CORE-BUDGET.
+- Drift audit: 1 release last hour (MISS, same cause). Seats: 6 agents active, below 8; ready rows are core-budget gated or HIGH/CTO-owned, DOC-INTEL-1b added.
+
+## 2026-10-03T09:07Z CoS
+- v10.6.11 on npm next (npm view dist-tags 09:06Z: next 10.6.11, latest 10.6.10; Release run success); peer announced; latest waits for D49 auto-promote.
+- PO-TEST-3 late TL BLOCK (hardcoded /opt/homebrew and /usr/local bash paths) fixed forward on main a0bb364fc: structural-checks 11/0, no-hardcoded-paths 3/0, suite 39/0.
+- DOC-INTEL-1b merged 92c194e05 (TL APPROVE; exit-codes-documented 19/0, docs-cli-drift 0 failed).
+- A-121c r2 d0d2410d7 (standalone UNCHECKED returns 1; receipt-order 38/0, red 36/2 before) in opus HIGH re-review.
+- Drift audit: 0 releases to latest in the last hour (MISS; train/94 held on P0-CORE-BUDGET). Seats: 5 agents, below 8; no unblocked ready rows outside core-budget gating and parked real-model legs.
+
+## 2026-10-03T09:30Z CoS
+- Merged to main since 09:07Z: SEC-SCAN-1 04f62ff4e, PO-HELP-1 ef50958a5, PO-STANDALONE-COST-1 f99c8cc64, PO-AUDIT-CLI-1 db276a24e, PO-WEB-COST-1 4a429626b, PO-WEB-WORKSPACE-1 38ae6a29c, PO-WEB-DEPLOY-1 fd92d52f0, PO-DASH-HONEST-1 99674923f, PO-WS-METRICS-1 624b5d964. Each had a TL APPROVE (DEPLOY r2 closed its one finding) and its Wall tests pass on main.
+- Incident: scratchpad strip.py ignored its argument and rewrote CHANGELOG.md only, so shard-durations.tsv kept conflict markers (drift test 4/2). Fixed in 8106e6a72, script now takes argv; drift test now 6/0.
+- In review: A-04c r5 06638f484 (opus), PO-SESSION-COMMIT-1 187ed849e, P0-CORE-BUDGET r2, D62-VIS-F1 (opus). Rework: PO-COUNCIL-LABEL-TEST-1 (missing shard row). Building: D61-11 r3, PO-P7-SINKS-1, S-233, DEP-02.
+- Train/94 held on P0-CORE-BUDGET: engine10 budget.test.ts fails on main until it lands.
+
+## 2026-10-03T10:05Z CoS
+- Merged since 09:30Z: PO-COUNCIL-LABEL-TEST-1 c331cde1a, PO-SESSION-COMMIT-1 939e23126, A-04c (5 rounds, CHANGELOG deduped b3f162d61), S-233 1731c5e14, PO-P7-SINKS-1 b2b592b29, A-04d aa4770f57, seal fixture emoji escape a2ef80a49 (structural-checks green). E-160 found already shipped in v10.6.0.
+- Architect refill (1b9f50011): 11 slices built in workflow wf_8e664533-e5c, all red-then-green evidenced, now in D12 review (wtt8kgawz; opus on P2-FV-EXIT, S-215r, S-216r, S-218r).
+- Blocked and in rework: W1-S1 r1 (opus, 7 body-leak and hang blockers) r2 d88fe5281 in opus re-review; D62-VIS-F1 r2 (dev-server group not reaped on backstop, harness cost nulled) r3 building with supervisor.ts (net-zero core) and eval harness in scope.
+- Train/94 still held on P0-CORE-BUDGET TL r2. Next Architect refill (arch-refill-1010) in progress.
+
+## 2026-10-03T10:25Z CoS
+- Merged since 10:05Z: D62-VIS-F1 (r3, dist 0ab093f25), P2-FV-EXIT (r2), S-216r (r3, opus APPROVE; cwd-shadow 20/0, test-verify 25/0 on main; provider-file leg now measures only files created during the run, 6185c5249).
+- In rework: S-218r r3 e35f56e42 (GIT_CONFIG_COUNT overrides, GIT_NO_LAZY_FETCH) in opus re-review; W1-S1 r4 7ab0e37dd (ast-based python, fail-closed TS/JS) in opus re-review; D61-11 r3 building; 13 refill slices building in wf_9c739ca7-858.
+- Train/94 still held on the P0-CORE-BUDGET TL verdict (over budget, final demand sent 10:24Z); 115 commits unreleased since v10.6.11.
+
+## 2026-10-03T10:57Z CoS
+- Train/94 (4ad0d9426) Tests red in 3 suites, all real and fixed forward in 5ad559ad3: D78 fixture split tripped SC1078 (key now assembled from two vars), stale SEC-SCAN-1 .gitleaksignore entries pushed the baseline to 76 (removed, back to 74), PO-HELP-1 DSSE suffix vs the help-and-log-cap equality pin (prefix plus DSSE-only suffix). secret-scan 6/0, security-scan-coverage 31/0, help-and-log-cap 15/0.
+- Merged: S-218r r5 (opus APPROVE, 0b6604fd9). Train/95 pushed at 1ff144efb 10:56Z, superseding train/94.
+- Waste: re-dispatched PO-AUDIT-CLI-1 and PO-DASH-HONEST-1 from a stale scratch refill list; both were already merged (2a4c9ef0a, ece26c3f5). Duplicate picks reset locally before any push. Refill list retired; dispatch only from BOARD ready rows.
+- In review: SEAL-FORGED-LINES r2 58ee2065b (opus). Building: D61-11 r3. P0-CORE-BUDGET TL r2 still open.