69 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
abiba-bot	c712d4faf0	Merge pull request 'fix(monitoring): make the reported key count self-describing instead of a bare number' (#109) from fix/litellm-key-count-self-describing-20260916 into master	2026-09-16 15:35:35 +00:00
abiba-bot	57bfe7e06a	Merge pull request 'docs(keys): state the acceptable key-placement pattern and the backup-file fix procedure' (#108) from fix/tanko-plaintext-key-in-config-backup-20260916 into master	2026-09-16 11:27:43 +00:00
abiba-bot	0f26119859	Merge pull request 'docs(contracts): add the missing agent-health-check contract' (#107) from fix/agent-health-check-contract-20260916 into master	2026-09-16 05:03:26 +00:00
abiba-bot	dae8d14880	Merge pull request 'fix(disk-gc): actually write the host-band state file so escalations and recoveries can fire' (#106) from fix/host-disk-band-state-file-20260916 into master	2026-09-16 01:00:28 +00:00
abiba-bot	6c616a9e58	Merge pull request 'fix(disk-gc): host filesystem bands, named volumes, report-only, and state-change alerts' (#105) from fix/host-filesystem-thresholds-20260915 into master	2026-09-15 14:40:20 +00:00
abiba-bot	4bdd88613b	Merge pull request 'docs: pm2/spoton AS-BUILT correction and the real Prometheus node coverage' (#104) from fix/contract-corrections-20260915 into master	2026-09-15 13:14:39 +00:00
abiba-bot	713b9ce80c	Merge pull request 'Remove client deliverable from the contracts repo (process fix)' (#77) from cleanup/remove-scot-deliverable-20260912 into master	2026-09-15 12:57:59 +00:00
abiba-bot	b451d6f81a	Merge branch 'master' into cleanup/remove-scot-deliverable-20260912	2026-09-15 12:53:37 +00:00
abiba-bot	fe6eb35291	Merge pull request 'ci: make PR validation unconditional - the paths filter silently skipped whole classes of pull requests' (#103) from fm/ci-paths-filter-skips-deliverables-prs-20260915 into master	2026-09-15 12:53:20 +00:00
abiba-bot	40cf057370	Merge pull request 'fix(backups): document the thin-pool headroom and staging-directory preconditions, with the incidents that justify them' (#97) from fix/backup-safety-preconditions-20260915 into master	2026-09-15 12:19:19 +00:00
abiba-bot	b386bd0c19	Merge pull request 'fix(keys): correct the key-lifecycle contracts to the measured truth' (#95) from fix/key-expiry-enforcement-20260915 into master	2026-09-15 05:37:45 +00:00
abiba-bot	1d20fbaa7f	Merge pull request 'fix(agent-health): gateway liveness reports a probe failure as a probe failure, never as an agent outage' (#93) from fix/agent-health-gateway-leg-deterministic-20260914 into master	2026-09-14 16:45:25 +00:00
abiba-bot	4fe4f3621d	Merge pull request 'fix(monitoring): probe precision - any HTTP status means alive, failed probes never become service verdicts' (#92) from fix/probe-precision-20260914 into master	2026-09-14 15:07:35 +00:00
abiba-bot	6a1c4967db	Merge pull request 'fix(disk-gc): deterministic reachability verdict and correctly labelled disk figures' (#91) from fix/disk-gc-probe-deterministic-20260914 into master	2026-09-14 14:43:43 +00:00
abiba-bot	cb26ee06d6	Merge pull request 'fix(hermes): separate POLICY observations from FAULT findings in the audit contracts' (#90) from fix/hermes-violation-classification-20260914 into master	2026-09-14 12:50:15 +00:00
abiba-bot	71ceda0042	Merge pull request 'fix(hermes): reachability verdict must not come from the remote command's exit code' (#89) from fix/hermes-reachability-20260914 into master	2026-09-14 12:20:09 +00:00
abiba-bot	cb36ff1ea5	Merge pull request 'fix(monitoring): litellm-health script - pool-alias timeout and leaked key-list debug output' (#88) from fix/litellm-health-timeout-and-debug-20260914 into master	2026-09-14 03:34:58 +00:00
abiba-bot	e648b5ac0e	Merge pull request 'feat(monitoring): add scripts/litellm-health-check.py so the litellm-health contract is executed, not improvised' (#87) from fix/litellm-health-executor-script-20260913 into master	2026-09-14 03:20:36 +00:00
abiba-bot	ba76f2c7d3	Merge pull request 'fix(contracts): abiba default model row + disk-gc access-method note' (#86) from fix-litellm-health-keylist-20260913 into master	2026-09-13 19:09:19 +00:00
abiba-bot	ef168d9690	Merge pull request 'fix(litellm-health): run the key-list admin call on the gateway host, not inside the container' (#84) from fix-litellm-health-registry-20260912 into master	2026-09-13 03:20:04 +00:00
abiba-bot	89651cf37c	Merge pull request 'fix(monitoring): make credential sourcing explicit and fail loudly when missing' (#83) from fix-litellm-health-registry-20260912 into master	2026-09-12 23:22:43 +00:00
abiba-bot	e38598eea4	Merge pull request 'fix: restore per-host probe coverage + sweep residual retired names' (#82) from fix-litellm-health-registry-20260912 into master	2026-09-12 22:35:55 +00:00
abiba-bot	b3644f0292	Merge pull request 'fix(disk-gc): hard guest-level report-only gate for CT 111/.129 + correct stale fleet map' (#81) from fix/disk-gc-report-only-129 into master	2026-09-12 19:13:45 +00:00
abiba-bot	d9e06863d8	Merge pull request 'fix(audit): stop requiring the retired gpu-light alias; derive model fields; sweep retired names' (#80) from fix/retired-alias-sweep-20260912 into master	2026-09-12 17:15:05 +00:00
abiba-bot	1dc040251d	Merge pull request 'docs(litellm-health): single source of truth, gpu-vision alias, litellm-health as live owner' (#79) from fix/litellm-health-drift-20260912 into master	2026-09-12 16:05:28 +00:00
abiba-bot	e3752af162	Merge pull request 'fix(zulip-health): retire the dead kagentz Zulip adapter leg' (#78) from fix/zulip-kagentz-adapter-20260912 into master	2026-09-12 14:34:08 +00:00
abiba-bot	9c8637bcaf	Merge pull request 'fix: correct Agent Zero A2A probe port in zulip-monitor.sh' (#76) from fix/a2a-port-20260911 into master	2026-09-11 22:17:37 +00:00
abiba-bot	862356bcac	Merge pull request 'fix(dsh-web-auth): Authentik-gated :80 login + non-disruptive token capture' (#73) from fm/dsh-web-auth-restart-20260911 into master	2026-09-11 18:21:02 +00:00
abiba-bot	767bd22d9c	no-mistakes(document): Align zulip-health v3.2.0 registry metadata and B4 formatting	2026-09-11 17:49:25 +00:00
abiba-bot	e97145c88f	no-mistakes(review): re-sample systemd invocation each pass during token wait	2026-09-11 17:34:53 +00:00
abiba-bot	55f1208eb8	no-mistakes(review): scope dsh token to invocation; log nginx diagnostics	2026-09-11 17:30:33 +00:00
abiba-bot	b9adf353ee	no-mistakes(review): guard missing include, non-fatal pending reload, chmod stash	2026-09-11 17:24:12 +00:00
abiba-bot	aeb66ea22d	no-mistakes(review): fix pending-reload path, token modes, restart check	2026-09-11 17:17:26 +00:00
abiba-bot	288f74cf84	no-mistakes(review): reprobe dsh tokens; persist pending nginx reload on failure	2026-09-11 17:12:11 +00:00
abiba-bot	c66671dbee	no-mistakes(review): simplify dsh token selection and reload state machine	2026-09-11 17:07:00 +00:00
abiba-bot	b80d3142aa	no-mistakes(review): harden dsh token reload retry, legacy bypass, cookie verification	2026-09-11 16:59:55 +00:00
abiba-bot	266fa1f835	fix(dsh-web-auth): Authentik-gated :80 login + non-disruptive token capture ... Correct the dsh-web authentication fix after parent correction: - Remove the unauthenticated :8081 endpoint (0.0.0.0 bind with no auth_request = full Authentik bypass for the LAN). The script now removes /etc/nginx/sites-enabled/dsh.token automatically if it reappears. - Put the login path inside the Authentik-gated :80 server block as location = /dsh-web-login; proxy to dsh-web with Host = tankodhs.sysloggh.net so the 30-day cookie is bound to the public authority, never to 127.0.0.1:3080. - Isolate the rotating token in a generated include /etc/dsh-web/nginx-login.conf; reload nginx only when it changes. - Replace the disruptive capture (systemctl stop/start dsh-web) with a non-disruptive read of the running service's journal, scoped to the current systemd invocation so a restarted process's stale token is never reused while the new banner is still pending. - Keep x-dsh-task-board-proxy-token and Host $ak_origin_host intact in '/'. - Document the corrected design (B4) in zulip-health.prose.md, v3.2.0. Live-verified 2026-09-11: no auth bypass (302), :8081 refused (000), a cookie minted before two dsh-web restarts still returns 200, the refreshed token mints a fresh cookie, and the systemd ExecStartPost/timer refreshes the token automatically without touching dsh-web.	2026-09-11 16:52:45 +00:00
abiba-bot	85ea1f4f3d	no-mistakes(review): harden dsh token capture: loopback bind, atomic nginx config	2026-09-11 15:22:41 +00:00
abiba-bot	b2a259fa23	fix: add dsh-web restart-persistent authentication ... - Add capture-dsh-token.sh script that captures the dsh-web launch token - Add login endpoint (/dsh-web-login on :8081) that mints 30-day auth cookie - Document the authentication flow in zulip-health.prose.md (Platform B4) - Cookie is authority-bound to 127.0.0.1:3080 with 30-day expiry - After first login, subsequent requests use the cookie — no token required	2026-09-11 14:56:57 +00:00
abiba-bot	a1ffeaad34	Merge pull request 'update(infrastructure-update): v1.3.0 — full 5-host Docker ecosystem coverage (live-verified 2026-09-08)' (#64) from update/docker-ecosystems-20260908 into master	2026-09-10 23:21:44 +00:00
abiba-bot	14bed6e916	Merge pull request 'fix(monitoring): stop monitoring Mumuni from this host (moved to CT105/.14)' (#71) from fm/denya-mumuni-monitor-removal-20260910 into master	2026-09-10 12:30:19 +00:00
abiba-bot	4f59b82404	no-mistakes(document): Refresh stale Mumuni roster docs and registry metadata	2026-09-10 10:26:00 +00:00
abiba-bot	8a4ee4cf5a	no-mistakes(review): Pin Mumuni removal behaviorally and fix digest import bug	2026-09-10 10:18:38 +00:00
abiba-bot	b1462f3e79	Merge pull request 'fix(monitoring): probe-drift round 2 — gpu port, PVE liveness, report-only visibility, report provenance' (#70) from fm/probe-drift-round2-20260909 into master	2026-09-10 02:17:01 +00:00
abiba-bot	19ed186d0a	no-mistakes(document): Scope gpu-monitor liveness rule to bare-200 probes	2026-09-10 02:04:07 +00:00
abiba-bot	88f27e75ed	no-mistakes(document): Refresh stale health-check version, provenance, and lint evidence	2026-09-10 02:01:20 +00:00
abiba-bot	bbdf6c1249	no-mistakes(review): Restore quiet-mode silence; keep provenance on failure alert	2026-09-10 01:52:38 +00:00
abiba-bot	1974959cc9	no-mistakes(review): Gate wrapper checks on executed infisical; scope liveness guide	2026-09-10 01:46:06 +00:00
abiba-bot	c59c9fb174	no-mistakes(review): Ignore commented infisical paths; normalize probe-model tests	2026-09-10 01:41:27 +00:00
abiba-bot	194e256ac5	no-mistakes(review): Harden health-check provenance, infisical verification, report-only JSON, tests	2026-09-10 01:35:44 +00:00
abiba-bot	c66d9c1e20	fix: probe-drift round 2 — stale monitoring expectations (health check, PVE API, GPU port 80, report provenance) ... Second probe-drift correction pass after #65/#66/#68. All four legs were stale consumer expectations, not live faults. 1. scripts/agent-health-check.py (v4) - abiba declared pi-only runtime (harness purge): Hermes-era gateway, config and wrapper legs are skipped instead of failing. - koby declared report_only (captain ruling 2026-08-17, Rule 17): every koby leg is detected and reported, never counted as a fleet failure or repaired. - koby's CT 111 mapping corrected to storepve (.6); the old amdpve mapping made `pct status 111` fail and read as ct-unreachable. - wrapper check no longer FAILs .env-based wrappers that legitimately never invoke infisical (koonimo). - keys load in main() (load_agent_keys) so the module is importable/testable. - every run prints absolute execution provenance (script + cwd), in the header and in --json. Before: 6 FAILURE(S). After: 0 failures, koby reported read-only. 2. infrastructure-monitoring.prose.md - PVE API probe repointed from CT 116 (no pveproxy, 000) to the five real nodes on https://<node>:8006/api2/json/version, all 401 = alive. - any-HTTP-response liveness rule added (401/3xx alive; 000/timeout = DOWN). - LiteLLM health documented as 301 -> /litellm/health/liveliness, not bare 200. 3. gpu-monitor.prose.md - GPU health probes on :8080 (or router /health/unified); bare port 80 on a GPU host is forbidden (no listener -> false DEGRADED). - router /health/unified 301 -> /gpu/gpu-data documented as alive. - port-discipline + liveness rule + direct-fallback execution step. 4. Report provenance (all contracts) - docs/AUTHORING-GUIDE.md documents the rule; scripts/prose-lint.sh enforces that any **Report format** contract states an absolute path (pwd -P). - provenance added to gpu-monitor, infrastructure-monitoring, proxmox-monitor. Tests: tests/test_probe_drift.py (23 passed); prose-lint.sh clean + shellcheck clean; CI frontmatter validation passes. Evidence with per-leg before/after and absolute paths: docs/probe-drift-round2-evidence.md.	2026-09-10 01:23:54 +00:00
abiba-bot	532250b017	Merge pull request 'fix(zulip-monitor): read nested zulip.connected; probe failures alert and never restart' (#69) from fm/zulip-monitor-false-selfheal-20260909 into master	2026-09-09 11:09:14 +00:00
abiba-bot	91d16d2693	Merge pull request 'fix(zulip-monitor): stream alert body carries real content; WARN on delivery failure' (#68) from fm/zulip-monitor-stream-body-20260909 into master	2026-09-09 04:21:37 +00:00
abiba-bot	95b4a0e6b0	Merge pull request 'fix(agent-health-check): correct unit names, abiba key path, pid crash, uptime math (script-only)' (#65) from fm/agent-health-probe-repoint-20260907 into master	2026-09-09 01:39:29 +00:00
abiba-bot	028f276be4	Merge pull request 'fix(zulip-health): tanko probe via amdpve pct + loopback-any-HTTP alive rule + zulip-monitor.sh stale-path fix' (#66) from fm/zulip-health-contract-tanko-probe-via-am-65 into master	2026-09-09 01:39:16 +00:00
abiba-bot	0e4eda0abb	Merge pull request #63: probe alignment across monitoring contracts (proxmox/docker-stats 9324, pve-exporter 9221 localhost-only; gpu-monitor, zulip-health)	2026-09-08 08:54:30 +00:00
abiba-bot	09065e7dee	Merge pull request 'Fix zulip-monitor.sh: Remove email spam, use Zulip #agent-hub only' (#57) from fix/zulip-monitor-email-fix into master	2026-08-30 12:24:51 +00:00
abiba-bot	b01469ba18	Merge pull request 'fix: standardize Hermes contract base URLs to authenticated path' (#53) from fix/hermes-key-enforcement-update into master	2026-08-28 17:16:18 +00:00
abiba-bot	b835986d44	Merge pull request 'Add check-health section with live probes to infrastructure-monitoring contract' (#51) from fix/infra-check-health into master ... Merged by captain approval 2026-08-22: add check-health section with live probes to infrastructure-monitoring contract	2026-08-23 00:01:39 +00:00
abiba-bot	2f0c3c1850	fix: update contracts for hwepve 6th node + Mumuni recovery	2026-07-23 18:47:17 +00:00
abiba-bot	8b09c78efd	Merge: PR #26 conflict resolution — hwepve 6th node + qwen model ref	2026-07-23 18:10:36 +00:00
abiba-bot	75381f9737	Captain decision batch 2026-07-21: ornith decommission, 256K→128K context, Mumuni Discord disable ... Three contract updates per captain decision batch. Validated through no-mistakes pipeline (green).	2026-07-23 09:13:06 +00:00
abiba-bot	190ceb9be4	Merge pull request 'GPU workload redistribution + lessons learned July 2026' (#15) from feat/gpu-workload-compression-jul2026 into master	2026-07-12 23:40:12 +00:00
abiba-bot	0134ad8be6	Merge pull request 'fix: cron alignment + VM→bare metal drift' (#11) from fix/cron-alignment-jul2026 into master	2026-07-09 06:28:04 +00:00
abiba-bot	c31dbad95f	Merge pull request 'fix: IP drift and container count from live testing' (#10) from fix/testing-drift-jul2026 into master	2026-07-09 06:24:07 +00:00
abiba-bot	4164ee5ed0	Merge pull request 'feat: consolidate litellm-health into litellm-self-heal' (#9) from feat/consolidate-litellm-contracts into master	2026-07-09 06:02:47 +00:00
abiba-bot	e4ab43f1c6	Merge pull request 'fix: LiteLLM contracts — align with 2026-07-08 architecture changes' (#8) from fix/litellm-contracts-jul2026 into master	2026-07-09 05:37:48 +00:00
abiba-bot	a7fedf71c6	Merge pull request 'fix: contract improvements from 2026-07-09 run log review' (#7) from fix/contract-improvements-jul2026 into master	2026-07-09 05:33:25 +00:00
abiba-bot	a3786ab289	Merge pull request 'disk-gc: 2026-07-09 run — amdpve Docker bloat resolved (11.56GB)' (#6) from feat/disk-gc-amdpve-2026-07-09 into master	2026-07-09 05:23:30 +00:00