Bronzeward #241: sanitized committed check results Revision: c9398d45c1b690e8e11ce541dbb76af0ec690308 Environment: Go 1.27.1 linux/amd64; PostgreSQL 17.11; OpenBao 2.6.1 OpenBao revision: ba7ad8861d0578cd4da4f7b9e5a6756d30484f8f TMPDIR and GOTMPDIR: /home//src/ginsys/_scratch/bronzeward/gotmp Full database/provider suite finished: 2026-10-19T13:48:57.862243+00:00 Checkout clean and unchanged during execution. No live Talos target configured. Command: mise run go-db Exit: 0 ok github.com/ginsys/bronzeward/cmd/bronzeward 47.451s ok github.com/ginsys/bronzeward/fixtures/oidc 0.003s ok github.com/ginsys/bronzeward/fixtures/oidc/issuer 0.012s ok github.com/ginsys/bronzeward/internal/api 438.133s ok github.com/ginsys/bronzeward/internal/auth 96.215s ok github.com/ginsys/bronzeward/internal/baotest 0.004s ok github.com/ginsys/bronzeward/internal/classify 0.007s ok github.com/ginsys/bronzeward/internal/compile 38.082s ok github.com/ginsys/bronzeward/internal/config 0.011s ok github.com/ginsys/bronzeward/internal/database 0.005s ok github.com/ginsys/bronzeward/internal/dbtest 2.582s ok github.com/ginsys/bronzeward/internal/id 0.004s ok github.com/ginsys/bronzeward/internal/ingest 3.266s ok github.com/ginsys/bronzeward/internal/migrate 108.237s ok github.com/ginsys/bronzeward/internal/monitor 102.452s ok github.com/ginsys/bronzeward/internal/orphans 19.919s ok github.com/ginsys/bronzeward/internal/provider 0.667s ok github.com/ginsys/bronzeward/internal/server 0.307s ok github.com/ginsys/bronzeward/internal/staging 94.182s ok github.com/ginsys/bronzeward/internal/talos 2.053s ok github.com/ginsys/bronzeward/internal/textdiff 0.012s ? github.com/ginsys/bronzeward/internal/seam [no test files] ? github.com/ginsys/bronzeward/internal/talos/talostest [no test files] Focused command: mise exec -- go test -count=1 -v -timeout 10m -run '^(TestDraftDiscard|TestInventoryPlatform|TestInventoryRefusals|TestNewKeyAfterDigestKeyLoss|TestObservationPurposeAccessFailure|TestFragmentPutRefusesOtherClusterReference|TestObserveDrift|TestObservationRecordsTheAccessItRead|TestExecutorRevocationHeld|TestExecutorRevokedControl|TestObserveAccessReadFails|TestObserveErrorTextControl|TestObserveNodeReadFails|TestCompileRefusesAnUntraceableFragment|TestMachineryCallsAllowlisted|TestMachinePlatform|TestReleaseConstraints|TestMachineryGate|TestSensitivityGate|TestLiveRead|TestLiveApply|TestLiveUnreachable|TestLiveRoleProbe)$' ./internal/api ./internal/compile ./internal/talos ./internal/migrate Focused environment: BW_REQUIRE_PG=1; BW_TEST_PG_DSN=postgres://bronzeward@127.0.0.1:55433/bronzeward?sslmode=disable Exit: 0; 17 top-level PASS, 63 total PASS lines, 6 explicit SKIP Additional command: mise exec -- go test -v -count=1 -run ^TestAdopterRetryOutlivesClosedScope$ ./internal/api (same PostgreSQL environment) Additional result: exit 0, PASS in 0.83s; its earlier nonverbose full-suite timing-skip outcome is not known. PASS TestDraftDiscard PASS TestInventoryPlatform PASS TestInventoryRefusals PASS TestNewKeyAfterDigestKeyLoss PASS TestObservationPurposeAccessFailure PASS TestFragmentPutRefusesOtherClusterReference PASS TestObserveDrift PASS TestObservationRecordsTheAccessItRead PASS TestExecutorRevocationHeld PASS TestExecutorRevokedControl PASS TestObserveAccessReadFails PASS TestObserveErrorTextControl PASS TestObserveNodeReadFails PASS TestCompileRefusesAnUntraceableFragment PASS TestMachineryCallsAllowlisted PASS TestMachinePlatform PASS TestReleaseConstraints SKIP TestMachineryGate SKIP TestSensitivityGate SKIP TestLiveRead SKIP TestLiveApply SKIP TestLiveUnreachable SKIP TestLiveRoleProbe SKIP reason: machinery/sensitivity require experiments/c10-machinery-gate/run/all; live tests require BW_TEST_TALOSCONFIG and BW_TEST_TALOS_ENDPOINT. Controls: same committed tests; one production carriedReference cluster predicate replaced by $1::text IS NOT NULL via go -overlay. fragment: exit 1 expected; TestFragmentPutRefusesOtherClusterReference/fragment saw status 200 instead of a refusal. import-base: exit 1 expected; TestFragmentPutRefusesOtherClusterReference/import-base saw status 200 instead of a refusal. Neither overlay changed tracked files. The ordinary run passed both foreign-refusal and same-cluster paths. Built-in controls passed: stale access version, error-text leakage, approval revocation comparison, mutating-call allowlist and platform constraints. Log screen: four named synthetic canaries and private-key header patterns; five retained logs, zero hits. Screen canaries (public synthetic inputs): synthetic-access-failure-key; bw-synthetic-label-2; bw-review-sentinel-7f3a; bw-access-error-canary-7q4z. Screen regex: -----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY----- Positive screen control: all four synthetic canaries plus private-key marker, five detections. Limit: stdout/stderr only. Database/timeline/log assertions run inside named tests; live fixture surface scans remain separate. Raw retained logs (local /home//tmp/bwtpl; SHA-256): 65aa33be05da9f7f5f969370e344bac6b7d200e14ff28d1938b2003ef513d384 bw241-go-db.log 194c6cbb6be91e39ee69103b0e85c369050c42c5579f6282f4cb050b4e819372 bw241-focused.log 33cec0980aee4face947c13ef22421691fa7d4c7c542ac56354f78f4035cc136 bw241-committed-control-fragment.log e7e1d8945bb4d45b66947755ab51b31065d39e95cc75a448c162edb651f5a66b bw241-committed-control-import.log 0c38952def5f8335c5488c414fb07723f259488757577c16eab53b6b7c00fbc6 bw241-timing-skip-check.log Review follow-up: synchronous draft-update failure (PA14-13) Revision: 02d012c222d51714a9ce08b7087f8c9d1fab35fb Same Go/PostgreSQL environment and TMPDIR/GOTMPDIR as above. Stand-in provider. Command: BW_REQUIRE_PG=1 BW_TEST_PG_DSN=postgres://bronzeward@127.0.0.1:55433/bronzeward?sslmode=disable mise exec -- go test -count=1 -v -timeout 10m -run '^TestFragmentPutDatabaseFailure$' ./internal/api Exit: 0; failed_commit PASS, successful_commit PASS; 1.028s. Assertions: safe HTTP 503, unchanged draft/ETag, held transient claim, retained synthetic provider generation; no fragment/reference/draft-source/act/replay commit, no asynchronous operation, no synthetic secret in response/log/database. Successful control commits atomically and releases its claim. Control: temporary copy of internal/api/tx.go; in fail's errUnavailable/connLost branch change only http.StatusServiceUnavailable to http.StatusInternalServerError. Map that file through Go -overlay. Control command: same command with -overlay /home//tmp/bwtpl/bw241-sync-control.json Control exit: 1 expected; failed_commit detects 500 instead of 503; successful_commit PASS; 0.983s. No tracked edits during either run. No full database suite rerun is claimed for this follow-up test-only change. Review diagnostic: publication node-minor mismatch (C13-17), tracked in #247 Revision: 0724177ae21553c1d0c7abfaa60f40a85f1c1760 Command: same Go/PostgreSQL environment; mise exec -- go test -count=1 -v -timeout 10m -overlay /home//src/ginsys/_scratch/bronzeward/bw241-review-vkk9vfp1/overlay.json -run '^TestReviewNodeMinorPublication$' ./internal/api Overlay appends the diagnostic to pipeline_build_test.go; it seeds a drift observation with running_version on newBuildEnv, then calls build and T3 commit. Observed: v1.13.6 control publishes contract v1.13; v1.12.4 also publishes contract v1.13. Exit: 1 expected, C13-17 node-minor mismatch did not refuse publication; 2.409s. Limit: isolated database and stand-in provider, synthetic stored observation; no live-node or dispatch claim. The probe's early return on any refusal is not a reusable successful-publication control; its retained log explicitly records both successful commits here. #247 must supply a strict regression test after refinement. R5 remains incomplete. Original suite passes above do not establish this missing publication behavior. Follow-up log screen: same four named canaries and private-key regex above, three logs, zero hits; positive control detects all five patterns. Scope stdout/stderr only. b916c810e42b262202f694d3c7ea48590723827e80996e34aa11ecbb287a8032 bw241-synchronous-db.log 53b85b67e147a659bfcfa286fedf1cef0899347ccd281ebe2cabee5ca05abf35 bw241-synchronous-db-control.log fb270eb50ed89f75e2b90adbbfd094af785681ca93f813c1af7172425d9ded96 bw241-minor-reproduction.log Expanded coverage after #247 landing (separate run) Revision: 1cc6ddc4960615e42db646e21e8428960d95606f Combined focused/full execution: 2026-10-19T19:17:12Z to 2026-10-19T19:26:18Z; 546 seconds go version go1.27.1 linux/amd64 postgres (PostgreSQL) 17.11 OpenBao v2.6.1 (ba7ad8861d0578cd4da4f7b9e5a6756d30484f8f), committed 2026-07-22T14:22:20Z Clean checkout unchanged throughout. No live Talos target configured. Base: b3a479c0c0a4170d95d33e71b0ce799cd51a5eb7 (PR248 merged, tree equal to assessed candidate). TMPDIR=GOTMPDIR=/home//src/ginsys/_scratch/bronzeward/gotmp Focused environment: BW_REQUIRE_PG=1; BW_TEST_PG_DSN=postgres://bronzeward@127.0.0.1:55433/bronzeward?sslmode=disable Focused command: mise exec -- go test -count=1 -v -timeout 15m -run '^(TestObservationPurposeAccessFailure|TestObservationRecordsTheAccessItRead|TestObserveDrift|TestObserveAccessReadFails|TestObserveNodeReadFails|TestObserveErrorTextControl|TestExecutorRevokedControl|TestExecutorRevocationHeld|TestMachineryCallsAllowlisted|TestFragmentPutRefusesOtherClusterReference|TestNewKeyAfterDigestKeyLoss|TestCompileRefusesAnUntraceableFragment|TestFragmentPutDatabaseFailure|TestDraftDiscard|TestPublicationRunningMinor|TestPublicationMixedCoverage|TestPublicationWorkerRefusal|TestPublicationIdentityAndAccess|TestPublicationEvidenceAtCommit|TestPublicationEndpointRace|TestPublicationReadFenced|TestPublicationLeaseAfterLockWait)$' ./internal/api ./internal/compile ./internal/talos Focused: exit 0, 22 top-level tests, 100 PASS records, 0 FAIL, 0 SKIP. Six purposes: 30 named failed-access combinations; 12 latest/stale loop assertions, not 12 named subtests. Publication uses its actual running owner, operation and generation; records path/version/creation identity. Stale-access control distinguishes version 1 from the normal publication version 52; it does not assert publication success or refusal. PASS TestDraftDiscard PASS TestFragmentPutDatabaseFailure PASS TestNewKeyAfterDigestKeyLoss PASS TestObservationPurposeAccessFailure PASS TestPublicationRunningMinor PASS TestPublicationIdentityAndAccess PASS TestPublicationEvidenceAtCommit PASS TestPublicationReadFenced PASS TestPublicationMixedCoverage PASS TestPublicationWorkerRefusal PASS TestPublicationEndpointRace PASS TestPublicationLeaseAfterLockWait PASS TestFragmentPutRefusesOtherClusterReference PASS TestObserveAccessReadFails PASS TestObserveNodeReadFails PASS TestExecutorRevokedControl PASS TestObserveErrorTextControl PASS TestExecutorRevocationHeld PASS TestObserveDrift PASS TestObservationRecordsTheAccessItRead PASS TestCompileRefusesAnUntraceableFragment PASS TestMachineryCallsAllowlisted Full command: GOFLAGS=-v mise run go-db Full: exit 0; 21 tested packages, 2 without tests; 1026 top-level PASS, 2135 total PASS records; 6 explicit SKIP. ok github.com/ginsys/bronzeward/cmd/bronzeward 56.425s ok github.com/ginsys/bronzeward/fixtures/oidc 0.003s ok github.com/ginsys/bronzeward/fixtures/oidc/issuer 0.011s ok github.com/ginsys/bronzeward/internal/api 494.379s ok github.com/ginsys/bronzeward/internal/auth 102.830s ok github.com/ginsys/bronzeward/internal/baotest 0.002s ok github.com/ginsys/bronzeward/internal/classify 0.006s ok github.com/ginsys/bronzeward/internal/compile 34.018s ok github.com/ginsys/bronzeward/internal/config 0.008s ok github.com/ginsys/bronzeward/internal/database 0.003s ok github.com/ginsys/bronzeward/internal/dbtest 2.561s ok github.com/ginsys/bronzeward/internal/id 0.028s ok github.com/ginsys/bronzeward/internal/ingest 2.560s ok github.com/ginsys/bronzeward/internal/migrate 116.021s ok github.com/ginsys/bronzeward/internal/monitor 106.294s ok github.com/ginsys/bronzeward/internal/orphans 23.589s ok github.com/ginsys/bronzeward/internal/provider 0.719s ok github.com/ginsys/bronzeward/internal/server 0.328s ok github.com/ginsys/bronzeward/internal/staging 94.504s ok github.com/ginsys/bronzeward/internal/talos 1.940s ok github.com/ginsys/bronzeward/internal/textdiff 0.035s no tests github.com/ginsys/bronzeward/internal/seam [no test files] no tests github.com/ginsys/bronzeward/internal/talos/talostest [no test files] SKIP TestMachineryGate SKIP TestSensitivityGate SKIP TestLiveRead SKIP TestLiveApply SKIP TestLiveUnreachable SKIP TestLiveRoleProbe Skip reasons are retained in the raw verbose log. Machinery/sensitivity require the dedicated C10 runner; live Talos checks require an explicitly configured target. These are no new live Talos results. Log screen: four exact synthetic canaries plus private-key headers, both complete logs; zero hits. Positive screen control: all five patterns detected. Limit: stdout/stderr only, not database/WAL, memory, unknown encodings or live surfaces. SHA256 388b54f66b3a917ae6e56a5ce49830a77759bcf568786ee352095006d149e1ed bw241-expanded-focused.log SHA256 42e915f448626f4ef3d0b318fcf3adddd3070c94e8eda38f7e7c4e90ea3dcb6e bw241-expanded-go-db.log