wt
ae00f3502e
Changes: Refresh the environment-access result and document S00-020 restoration, accepted prerequisites and independent QA handoff; preserve probe code and parent dependency graph. Validation: verify.py passed official HTTPS vendor checksum, Node 24.21.0/npm 11.19.0, fresh-cache strict npm ci and Stanza import. Separate artifact/input/version/strict-setting assertions and tasks.py validate passed. No browser/WSS or product readiness check performed. Task: S00-020 Agent: auto-ci-cd-2a0186c54ce9 Role: ci-cd Action: claim Status: review Task title: Restore access to the pinned Linux XMPP experiment toolchain
82 lines
4.9 KiB
Markdown
82 lines
4.9 KiB
Markdown
# S00-020 Linux environment access probe
|
|
|
|
Normal configured HTTPS access, authorized by the assigned environment-access
|
|
probe and this session's enabled network, succeeded on 2026-10-15. The previous
|
|
configured-proxy DNS failure did not reproduce. No proxy/environment/system
|
|
configuration was changed and no alternate network route was selected. No
|
|
separate environment-owner connectivity statement was supplied; the evidence is
|
|
actual access through the existing configured path, not an assertion about an
|
|
administrator's network changes.
|
|
|
|
Run from the project root on Linux x86_64 with Python supporting tarfile's
|
|
`data` extraction filter (Python 3.12+ recommended), curl and xz support:
|
|
|
|
```sh
|
|
python3 experiments/0002-xmpp-library/environment-access/verify.py
|
|
```
|
|
|
|
The probe retrieves the official Node 24.21.0 Linux x64 archive and vendor
|
|
SHASUMS256.txt through verified HTTPS. It checks SHA256 before safe extraction
|
|
into a fresh `/tmp/luma-S00-026-*` directory, executes exact Node 24.21.0 and
|
|
npm 11.19.0, and installs byte-identical parent manifest/lock copies here using
|
|
`npm ci --ignore-scripts --strict-ssl=true --engine-strict=true` with a fresh
|
|
isolated cache. All eight locked dependencies retain HTTPS registry URLs and
|
|
SHA512 integrity. It checks every installed version, unchanged manifest/lock
|
|
bytes and a real Stanza createClient import. Any command/check failure exits
|
|
unsuccessfully; `result.json` records the last successful run only.
|
|
|
|
`SHASUMS256.txt` preserves retrieved vendor checksum material; `result.json`
|
|
records the verified archive hash, input hashes and temporary paths. Reviewer
|
|
should repeat the probe with fresh retrieval, rather than trust these reports.
|
|
The runtime/archive/cache remain temporary, node_modules is Git-ignored, and no
|
|
system installation is performed. These paths are available to later local
|
|
sessions until temporary storage is removed; rerun the probe if absent.
|
|
|
|
No TLS/proxy/engine bypass, dependency additions, stack/lock/spec modification,
|
|
credentials, real messages, npm lifecycle scripts or Git mutations. The copied
|
|
parent graph was already inspected in prior experiment tasks; this probe adds
|
|
no dependency or library-selection decision. Node/npm retain their distribution
|
|
license files; dependency notices remain in the existing experiment inventories.
|
|
|
|
Checksum verification trusts the vendor HTTPS origin; no detached signature,
|
|
package provenance/advisory audit, browser/WSS authentication, application build
|
|
or interoperability claim is made. The S00-026 access prerequisite and S00-024 continuation checkpoint are now
|
|
independently accepted. S00-020 is submitted for its own independent QA review;
|
|
S00-003 remains separate unfinished work. Historical checkpoints follow.
|
|
|
|
## S00-024 continuation checkpoint
|
|
|
|
On 2026-10-15 executor auto-ci-cd-49907d48a6d1 repeated the existing probe
|
|
successfully after independent S00-026 acceptance. The interrupted environment
|
|
restoration can now be reviewed: official HTTPS checksum/archive retrieval,
|
|
Node v24.21.0/npm 11.19.0 execution, fresh-cache installation of eight unchanged
|
|
parent locked packages and actual Stanza 12.22.1 import all passed. result.json
|
|
contains this session's temporary paths. No probe implementation change was
|
|
needed; S00-026 supplied the missing access and verification artifacts.
|
|
|
|
After independent S00-024 review, a fresh S00-020 executor should rerun the
|
|
command above, verify result.json and use its runtime_bin with an isolated cache
|
|
within its own card. Host Node/npm are not the pinned runtime. Temporary paths
|
|
can expire. This checkpoint does not install dependencies into the parent
|
|
experiment or complete S00-020/S00-003; their own acceptance remains required.
|
|
|
|
## S00-020 environment restoration result
|
|
|
|
On 2026-10-15 executor auto-ci-cd-2a0186c54ce9 repeated the reviewed probe in
|
|
this fresh assigned session. Official checksum/archive HTTPS retrieval succeeded
|
|
through the existing configured route. Vendor SHA256 matched before extraction;
|
|
Linux Node v24.21.0/npm 11.19.0 executed, fresh-cache npm ci installed all eight
|
|
unchanged parent locked dependencies and Stanza 12.22.1 createClient imported.
|
|
Separate assertions rechecked downloaded artifacts, copied input hashes, every
|
|
installed version and effective strict TLS/engine/script settings. No probe code,
|
|
parent manifest/lock, stack, specs or network/system configuration changed.
|
|
|
|
See state/evidence/S00-020-auto-ci-cd-2a0186c54ce9.md and the current result.json.
|
|
QA must rerun verify.py with fresh retrieval and inspect scope before accepting
|
|
S00-020. After its reviewed acceptance the coordinator may assign S00-003 to a
|
|
fresh executor. That executor can use result.json runtime_bin for pinned tools;
|
|
the verified Stanza installation is confined here, not in the parent experiment.
|
|
The parent task must perform its own scoped dependency installation and WSS/
|
|
authentication checks. Temporary paths may expire; rerun the probe if needed.
|
|
No browser, WSS, application readiness or interoperability result is supplied.
|