1.6 KiB
1.6 KiB
AIOS V2R1C4 Autonomy Patch v2
This package completes the capabilities that were missing from the first handoff.
Newly delivered
- Idempotent, credential-isolated governance request publisher.
- Authenticated Unix-socket development writer server with SO_PEERCRED checks.
- Root-owned task/branch/repository/path-bound Writer Grant and idempotent quota ledger.
- Writer credential revocation, old-token HTTP 401 proof, encrypted credential removal, and read-only revoked Grant evidence.
- Persistent watcher, mirror, projection, and renewal service entrypoints.
- Complete release hook implementation:
- Owner exact-head and machine-status validation.
- Approved governance Manifest verification.
- Governed merge and tag transports.
- Remote/Gitea tag verification.
- Safe Artifact extraction and atomic release symlink deployment.
- systemd health checks.
- rollback and restore.
- Registry/Baseline snapshots, compensation, and final consistency.
- Unified V2R1C4 release executor with automatic failure rollback.
- 11 installed console entrypoints and 10 systemd/timer contracts.
Offline verification
- compileall: PASS
- pytest: 21 passed
- Secret scan: REVIEW
- Path traversal archive test: PASS
- Metadata compensation test: PASS
- Publisher idempotency test: PASS
- Grant replay/quota test: PASS
- Old credential 401 test: PASS
Integration rule
Apply this package to patch/v2r1c4-release-completion-20260729.
Agent should only supply environment configuration, existing governed endpoint
addresses, encrypted credentials, exact Git object IDs, and online acceptance.
Do not redesign or replace the delivered control-plane logic.