docs(codex): record isolated worktree migration 20260715T001652UTC8

2026-07-15 00:32:53 +08:00
parent bcbda0d048
commit 120fb909f8
1 changed files with 51 additions and 0 deletions
@@ -0,0 +1,51 @@
+# CODEX GitOps isolated worktree migration result
+
+- Run: 
+- Host: 
+- Source rollback workspace:  (preserved; no reset, clean, force-push, or prune performed)
+- Source head/branch:  / 
+- Untracked snapshot: 
+- Snapshot SHA256: 
+- Untracked files archived: 
+
+## Isolated roots
+
+| role | path | branch | HEAD |
+|---|---|---|---|
+| bare remote |  | n/a |  |
+| controller |  |  |  |
+| openclaw |  |  |  |
+| codex acceptance |  |  |  |
+
+The bare root, worktree root, and controller/openclaw/codex worktree roots are , mode  for directories, with default ACL entries for , , and mask . Recursive inheritance was tested as : new file named ACLs retain  and effective  due to its file mask. Bare .
+
+## Cutover
+
+Actual GitOps writers were drained before cutover. Systemd drop-ins route controller, autonomous daemon, agent command watcher, and active model API to ; OpenClaw receives  through safe environment overrides and remains stopped because it was inactive before this migration. All migrated writer units use ; controller/daemon/watcher/model API use , and root-run OpenClaw has primary group  to preserve its root-owned production home access.
+
+Model API restart health response:
+
+
+
+Gitea and its branch-consistency sentinel were not modified. The sentinel still references the preserved rollback source and was already failed/inactive at preflight; this report therefore makes no claim that every non-writer reference on the host is source-free.
+
+Scope note: normalizing the existing  parent recursively applied the requested aiman:gitops ACL/group policy to pre-existing worktrees below that parent. No repository contents, source workspace refs, source worktree files, reset/clean, force-push, or prune were changed.
+
+## Concurrent acceptance
+
+OpenClaw and Codex jobs ran concurrently on distinct branches/worktrees; each committed and pushed to the isolated bare remote without retry and without .
+
+| job | local OID | bare remote OID | verified |
+|---|---|---|---|
+| OpenClaw |  |  | yes |
+| Codex acceptance |  |  | yes |
+
+Raw-log count scope: initial orchestration, resumed orchestration, and both acceptance jobs.
+
+| pattern | count |
+|---|---:|
+| permission denied | 0 |
+| checkout collision | 0 |
+| lock collision / index.lock | 0 |
+
+Raw logs: , , .