blog: hold KVM note for editorial review (TIN-2979)#232
Conversation
📝 Blog Post ReviewFound 1 blog post(s) in this PR:
Schema Validation✅ All posts pass schema validation. Slash Commands
|
|
Comparison vs #234 (now closed as superseded, per operator ruling to compare first): this PR is a strict superset and the right durable mechanism — same one-line flip, plus the generated hold registry closes the broker-revival path #234's analysis missed (broker hydration is additive; the coming tier-import wave makes the slug's future broker presence likely). #234's verified blast radius carries over: posts.ts listing/feeds/sitemap filter, search-index generator, and the /blog/[slug] loader all honor the flag; the hub broker is currently absent the slug (140 items). One behavior note for the record: the 35 pre-existing published:false slugs were already statically hidden — the registry only additionally blocks their broker revival, so this is behavior-preserving for them. Recommend merge once GF checks are genuinely green. |
78b1352 to
366586d
Compare
|
Adversarial final-asset review found and blocked a real publication leak on the prior head: the direct route and indexes returned no post, but the broad Vite Markdown glob still emitted the full unpublished body into a public JS chunk. Exact head
The local developer-machine GF contract correctly refused to run without |
366586d to
ac9bba4
Compare
GitHub Actions
Inactive
|
Exact-head PR-environment QA at
gstack browser QA against the tailnet shadow:
The public hold registry necessarily carries the slug so broker hydration can suppress it; it carries no post title/body. No prose or flagship reader UI changed. GF remote gates remain the final merge authority. |
Keep source-file lookup keys while generating a statically analyzable Vite glob that excludes held posts and passes svelte-check in the GF Bazel sandbox. Refs TIN-2979
|
GF failure follow-up on exact head
Focused diagnostics on this head:
These are preflight diagnostics only. Merge remains gated on current-head GF checks plus a fresh immutable shadow deployment and browser QA. |
|
GF failure follow-up on exact head :\n\n- Root cause: the generated loader map used literal absolute dynamic imports. Vite resolved them, but Bazel's correctly rejected all 140 imports.\n- Fix: generate a statically enumerated containing only published source files. Lookup keys remain the canonical values used by ; unpublished files are never included in the module graph.\n- Added a fail-closed generator assertion rejecting a broad glob.\n\nFocused diagnostics on this head:\n- checked 3 tinyland projected posts (0 changed) /private/var/folders/z6/7m3zpx6j3x982j_fzwg1lppw0000gn/T/ghio-sveltekit-check-0tcyuw/workspace/src/routes/blog/+page.svelte:23:35 ==================================== ✓ built in 26.78s ✓ built in 51.60s Run npm run preview to preview your production build locally.
Frontmatter validation: 175 posts scanned Result: 175/175 passed. All frontmatter valid.BLOG LINK & CONTENT AUDITScanned 175 post files FAIL: Broken Internal Links (page not found) (9)2017-04-08-pt-1-reflecting-on-stunt-culture-theories-and-frisbee.md:20 PASS: Broken Image References (file not in static/) (0)(none) FAIL: Relative Links (likely broken, not starting with /) (3)2026-03-21-week-notes-indeterminism-passkeys-and-spring.md:14 FAIL: WordPress URLs Still in Post Content (transscendsurvival.org) (18)2026-03-13-the-winrm-forkbomb-how-ansible-molecule-locks-you-out-of-active-directory.md:45 FAIL: Empty Posts (0 words in body) (4)2017-01-22-the-canon-takes-its-shape.md - "The Canon Takes its Shape!" (0 words) FAIL: Short Posts (< 50 words, published only) (21)2016-12-13-the-audeasy-build.md - "The Audeasy Build" (30 words) INFO: Stale Posts (> 3 years old, published only) (118)2016-12-13-example-photo-work.md - "Example Photo Work" (2016-12-13, 9y old) ========================================================================
|
GitHub Actions
Inactive
|
Exact-head immutable shadow proof for
gstack browser QA against the tailnet PR environment:
No reader UI, avatar, stream, Pulse, or constellation files changed. GF remote check/test are green; remote e2e is still the final pending code gate. |
Keep the generated published-module list literal and fail closed if a future filename could broaden Vite glob matching. Refs TIN-2979
|
Independent exact-head review caught one pre-merge issue on Signed head Focused checks:
The prior shadow proof remains useful evidence for the unchanged generated runtime, but it is not exact-head acceptance. Current-head GF and immutable shadow workflows are restarting; merge remains held until both are green and the shadow is re-QA'd. |
GitHub Actions
Error
|
Exact-head review follow-up:
|
GitHub Actions
Inactive
|
Exact-head immutable shadow QA is complete for
The remaining merge gate is exact-head GF run |
|
Production source/artifact closeout is green: merge 7cd7155, Cloudflare deploy 29555900418, rollback Pages 29555900408, main CI/GF 29555900425, and production-health all passed. The post is absent from /blog, feeds, sitemap, search/Pagefind, immutable Pages deployments, www, and cache-busted apex. One stale bare-apex cache object still returns the pre-deploy 200. PR #235 added and merged a fixed-host exact-path purge workflow, but run 29557526031 failed closed because the repository Cloudflare token is invalid (HTTP 401/code 1000). No purge occurred. TIN-2727 carries the replacement-token gate; TIN-2979 remains In Review until the exact bare route is 404. |
|
Final production proof: the source-level publication hold remains intact, and follow-up PR #239 merged the exact Pages edge guard as |
1 participant
Summary
published: falsepublished: falsefrontmatter entryGrounding
The post is currently visible from the checked-in static source. The live Tinyland broker projection has no matching slug today, but broker hydration is additive; the generated hold registry closes that future reappearance path without changing federation or delivery state.
Validation
94941d0,bd9824bgit diff --check: passednode_modules; no formatting result is claimed/blogand direct-route QA is required after fix(ci): dispatch immutable shadow image digest (TIN-2902) #230 restores the shadow handoffLinear: TIN-2979