marchon/system-git-sync
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

S15: ns1 deployed; stop sm-leaf before binary replace
Some checks are pending
review / inventory (push) Waiting to run
Details

Browse source 
GATE table marked deployed. Historical-Information open items closed.
Admin-history seeded; PFC_REQUIRE_NPE left unset.
This commit is contained in:
George Lambert 2026-09-15 22:44:51 -04:00
parent d9bd1fd175
commit 9ba17747a4
5 changed files with 32 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

36
Historical-Information.MD
View file

@ -62,23 +62,33 @@ Update checkboxes in `TODO.md` as each is done.
1. [x] Historical file committed (this file)
2. [x] Expand `sm-leaf` health HTTP + sm subjects; linux/amd64 build
3. [x] `cicd/deploy-ns1.sh`: test then rsync; never skip tests
4. [ ] Generate Ed25519 config keys **on ns1**; signed config + admin-history
5. [ ] Install secure-messaging Python under `/opt/pfc/python/secure_messaging`
6. [ ] systemd `pfc-sm-leaf.service`; loopback health
7. [ ] Point `pfc-py-admin` PYTHONPATH at secure-messaging; optional signed config
8. [ ] Caddy/docs: hub + endpoints HTML/PDF under docs.pfc (docs already partial)
9. [ ] Smoke: pfc health 200, sm-leaf health, signed config load, PFC tests
4. [x] Generate Ed25519 config keys **on ns1**; signed config + admin-history
5. [x] Install secure-messaging Python under `/opt/pfc/python/secure_messaging`
6. [x] systemd `pfc-sm-leaf.service`; loopback health
7. [x] Point `pfc-py-admin` PYTHONPATH at secure-messaging; optional signed config
8. [x] Caddy/docs: hub + endpoints HTML/PDF under docs.pfc
9. [x] Smoke: pfc health 200, sm-leaf health, signed config load, PFC tests
10. [x] Promote SHA in `cicd/GATE.md`
11. [x] Re-run `cicd/run-review.sh`; second doc sync (after ns1)
12. [ ] NPE live: **only if** `/opt/pfc/bin/npe` exists; else leave fail-closed
12. [x] NPE live: binary exists at `/opt/pfc/bin/npe`; **`PFC_REQUIRE_NPE` left unset** (bus still lab-xor; fail-closed would take down the console). Cutover remains UserReview.
13. [x] Websites org: no NATS code; inventory remains complete
14. [ ] Push all git remotes; close S15
14. [x] Push all git remotes; close S15
Local review 2026-09-16: PFC 25/25, SM 5/5, Go leaf OK, catalog subjects OK.
Promoted: secure-messaging `f4da7ff`, peergos-for-compliance `2c45603`,
admin `c46d494`, nats-service-endpoints `1d01768`. `PFC_REQUIRE_NPE=1` stays unset
even though `/opt/pfc/bin/npe` exists (bus still lab-xor; fail-closed would
take down the console).
## ns1 validation (2026-09-16)
- Local review: PFC 25/25, SM 5/5, Go leaf OK, catalog subjects OK (twice).
- Host: `pfc-py-admin`, `pfc-sm-leaf`, `pfc-connector`, `pfc-peergos-bridge` active.
- `GET http://127.0.0.1:18783/health` → `{"ok":true,"service":"sm-leaf"}`
- `GET https://pfc.georgelambert.org/health` → 200 (ipfs 200, replication 503 pre-existing)
- `GET /v1/admin/config` unauthenticated → 401
- Signed wrapper `crypto.mode=lab-xor` `routing.mode=passthrough` verifies on host
- Admin-history seq 0 actor `deploy-ns1` has prev + new + unified diff
- Host SM tests (signed/tamper, lab-xor, NPE fail-closed, error bundle, history) OK
- Docs: `/sync/index.html` 200, `/sync/Historical-Information.MD` 200, `/nats-service-endpoints/` 200 + PDF
- Promoted SHAs: secure-messaging `f4da7ff`, peergos-for-compliance `2c45603`,
admin `c46d494`, nats-service-endpoints `1d01768`, system-git-sync `c570dc1`/`d9bd1fd`
**S15 closed.** Remaining UserReview only: NPE cutover, HSM custody, optional `sync.pfc` hostname, website deep-links, replication :8782 503.
## Do not