SyslogSolution/prose-contracts
7
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

no-mistakes(review): Fix report-only gate, dedupe list, correct fleet map

Browse Source
This commit is contained in:
root
2026-09-12 18:38:19 +00:00
parent 7b8cc5f9ac
commit 4ea2d0309f
5 changed files with 85 additions and 76 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/disk-gc-plan.py
Regular → Executable
+3 -11
View File
@@ -61,7 +61,8 @@ def load_report_only_guests(contract_path: pathlib.Path) -> list[dict]:
def _keys(entry: dict) -> set[str]:
"""Guest/host identity keys for an exclusion entry."""
"""Guest/host identity keys, shared by exclusions and scan entries so the two
sides of the gate can never key on different fields."""
out: set[str] = set()
for field in ("guest", "id", "vmid", "hostname", "name", "ip"):
value = entry.get(field)
@@ -70,15 +71,6 @@ def _keys(entry: dict) -> set[str]:
return out
def _entry_keys(scan_entry: dict) -> set[str]:
out: set[str] = set()
for field in ("id", "guest", "vmid", "hostname", "name", "ip"):
value = scan_entry.get(field)
if value is not None and str(value).strip():
out.add(str(value).strip().lower())
return out
def level_for(pct: float) -> str | None:
if pct >= CRITICAL:
return "CRITICAL"
@@ -99,7 +91,7 @@ def build_plan(scan: list[dict], report_only: list[dict]) -> list[dict]:
level = level_for(float(pct))
if level is None:
continue # GREEN: log only, no action
scan_keys = _entry_keys(entry)
scan_keys = _keys(entry)
match = next((e for e, keys in excluded if keys & scan_keys), None)
target = next(
(entry.get(k) for k in ("id", "guest", "vmid", "hostname", "name", "ip")
scripts/prose-ai-review.sh
+7 -5
View File
@@ -47,17 +47,19 @@ You are a code reviewer for OpenProse infrastructure contracts in the Syslog Sol
The infrastructure-control.prose.md contract is the canonical reference for the cluster topology:
**Proxmox Cluster "Tabiri" (5 nodes):**
- amdpve (192.168.68.15): tanko, tdunna, baggy, scottdenya
- minipve (192.168.68.12): abiba, kagentz, adguard, authentik, gitea, syslog-api, infisical-vault
- storepve (192.168.68.6): docker-vm, ra-h-os, PBS, media, jdownloader, zulip
- amdpve (192.168.68.15): kagentz, tanko, baggy, scottdenya, adguard2
- minipve (192.168.68.12): abiba, adguard, authentik, gitea, syslog-api, infisical-vault
- storepve (192.168.68.6): docker-vm, ra-h-os, PBS, media, jdownloader, zulip, tdunna
- acerpve (192.168.68.9): llm-gpu
- ocupve (192.168.68.5): ocu-llm
**CT IDs (verified 2026-07-24 against PVE API):**
**CT IDs (verified 2026-09-12 against PVE API):**
100:abiba 102:adguard 104:authentik 105:kagentz 106:ra-h-os
107:pbs 108:media 110:gitea 111:tdunna 112:tanko
113:baggy 115:scottdenya 116:syslog-api 117:zulip
118:jdownloader 119:infisical-vault
118:jdownloader 119:infisical-vault 120:adguard2
**CT 111 (tdunna, 192.168.68.129) is REPORT-ONLY — Theo's box; alert only, never garbage-collect.**
**NO CT 122, CT 123, or .19 exist in the cluster.**