V33 잔여 마무리 — W-4 검증 + GA Store 준비 + 식별자 정합 + 테스트 안전망 - #34
Open
yellowhama wants to merge 242 commits into
Open
Conversation
…WS-5b/7 docs WS-1: runtime detection 4스크립트 blossompark-first OR-compat, canonical artifact 3 hard-replace, fixture 6(test-release-evidence) 교체(presence-only+current-package sibling 근거). 호환 audit 5파일 보존. WS-5b: E2E 3-state 플레이북 'transited:true relay forward' 모순 정정(표시 flip≠relay 라우팅, V34 큐잉). WS-7: GA EV 직접서명 설계 문서 큐잉(Store 메인, EV 대안 트랙).
Assert-VersionSourcesCoherent가 3소스(musu-rs Cargo/tauri.conf/publicRelease)만 검사하던 사각지대 → src-tauri\Cargo.toml(4번째) 추가. dry-run 실증: 현재 rc.20 통과 + 기대버전 변조 시 src-tauri가 mismatch 목록에 잡힘. Edit 도구로만 수정(인코딩 안전).
실측: prepare-store-submission-bundle.ps1은 버전 하드코딩 없음 — build-msix.ps1 호출(VERSION 추종)+ Find-LatestMsixArtifact로 현재 산출물 집음. 1.13.0.0은 옛 디스크 산출물이지 스크립트 결함 아님. 남은 Store blocker는 전부 외부/operator 게이트(Partner Center 제출/MS 인증/restricted-capability 리뷰). 코드/스크립트 측 준비 정합 완료.
WS-3: install-msix.ps1 견고화 4종 이식 — (a)Root에도 cert 추가(thumbprint 핀 검증 AFTER), (b)0x800B0109 try/catch+actionable+rethrow, (c)elevated 자식창 trap+Read-Host(비대화형/-NoLaunch 가드), (d)로컬파일 $PSCommandPath -File 재사용 vs irm|iex scriptblock 분기. 부수 버그: irm|iex param() 재선언이 $NoLaunch 리셋하던 latent 버그를 scriptblock 바인딩으로 수정. thumbprint 핀(65F5926…) byte-identical 보존. WS-5a: probe 응답→FleetNodeStatus 변환을 순수함수 map_probe_response(ProbeOutcome enum)로 추출, 클로저는 HTTP→ProbeOutcome만. MED-2 direct-override+last_seen-insert(0 커버리지였음) 테스트 2개. cargo 519/519.
… CI 연결 audit 발견 test-wiring 2 구멍 봉합: (1) cockpit-contract RED 3개는 전부 테스트 drift(코드 회귀 아님, 기능 실존)였음 — 의미 기반으로 갱신: #12 3-state nodeFleetState/fleetState/targetable(relay 보존), #39 fleetState===online + ProbeOutcome + peer_last_seen(no-fabrication), #53 U-C 주석 reword 반영 + cloud_deregister_self positive 단언. #53 보안 단언 7종(exact-phrase/no-injection/-File/no-DownloadString/no-remove-self) 전부 보존. (2) test:tauri-shell을 CI(test.yml)에 연결(PR#30 jargon 가드가 비로소 작동). meshBearer.test.ts→test:p2p, 신규 mesh-bearer/route.test.ts(auth-denied/503/success+owner-binding)→test:routes. 검증: cockpit 53/53, route 4/4, meshBearer 7/7, test:routes 40/40, test:p2p 124/124, fail 0.
V33 closure HTML(8 WS + Auditor SHIP 0H/0M + 검증 519/53/4). NEXT_STEPS_V34(relay transport/Store 제출/ EV/DPAPI retroactive 큐잉). 핸드오프에 V33 섹션 + Auditor SHIP 반영.
FLEET_RETRY_AND_LAST_SEEN_CONTRACT의 relay state 기술이 'delegated work routes over the relay'로 코드(router.rs:170 relay 미선택, transport 미구현)와 모순됐음. 표시/판정 레이어임을 명문화 + 실제 relay forward는 V34 후속(relay transport)이어야 참이 됨을 명시.
세 리서치(P2P 발견/musu 코드/stale 청소) + business-panel 4인 전략게이트 결과. self-advertise 단일주소 폐기→후보집합+observed-IP(additive)+mDNS 코디네이터독립 1순위+서버 TTL prune+reconcile. Taleb F2(서버=진실은 같은LAN 오프라인 SPOF) reshape 수용, Kim&M F5(진짜 차별점=재설치 자가치유) co-equal scope. 다음 세션 마스터 플랜 입력.
다른 에이전트가 musu.pro 사이트를 배포할 수 있는 매뉴얼. Vercel CLI(pull/build/deploy)가 메인 엔진, push는 CI가 같은 CLI를 자동 실행하는 래퍼. 실제 deploy-musu-bee.yml 명령과 일치. 토큰은 yellow.txt vercel 섹션 위치만 참조(실값 미포함). WIKI_INDEX 등록. scripts/codex-deploy.md(bridge 배포)의 사이트 배포 짝.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
V29~V31 reinstall resilience work and the V33 residual branch are still useful, but the current release claim must stay evidence-scoped.
Yellowhama.MUSU->blossompark.musuidentifier alignmentsrc-tauri\Cargo.tomlInstall-MUSU.ps1hardened for root cert/0x800B0109/elevated error display/PSCommandPath and `irmVERSIONfleet.rsprobe/fallback integration coveragefleet-proof.ps1;hugh_secondandhugh-mainphysical direct proof are greenCurrent Evidence
design-gate.verify-musu-pro-install-channel.ps1 -Jsonreturnedok=true,failure_count=0.hugh_secondpackaged rc.22 proof passed: installed package1.15.0.22, remote-usable advertised URLhttp://192.168.1.154:11105, direct-onlyonline_nodes=1at that capture point, and brain token ACL restricted.hugh-mainhosted proof now passed from the public command:docs/evidence/fleet-proof/1.15.0-rc.22/hugh-main-20260627T010201Z.fleet-proof.jsonmusu.fleet_node_proof.v1,ok=true,fail_count=0,warn_count=0blossompark.musu_1.15.0.22_x64__f5h38pf4yt4gc, installed version1.15.0.22bridge_bind_addr=0.0.0.0:4387,advertised_public_url=http://192.168.1.192:4387online_nodes=2,direct_healthy_nodes=2, expected direct peerhugh_secondremote_cloud_warning_count=0,brain_ingest_token_acl_restrictedpassingmusu status --jsonfromhugh_secondshows bothhugh_secondandhugh-mainhealthy via direct routes.Required Before Merge / Release Claim
design-gateand the product evidence both remain green.fleet-proof.ps1if the package, installer route, node identity, or release claim changes.Docs
docs/PRODUCT_PURPOSE_AND_IMPLEMENTATION_GATE_2026_06_27.mddocs/MUSU_PRODUCT_READINESS_CODE_AUDIT_2026_06_27.mddocs/FLEET_NODE_PROOF_RUNBOOK_2026_06_27.mddocs/evidence/fleet-proof/1.15.0-rc.22/hugh-main-20260627T010201Z.fleet-proof.jsondocs/PR34_RC22_TWO_PC_PROOF_CODE_AUDIT_NEXT_STEPS_2026_06_27.mddocs/RELEASE_1_15_0_RC22_INSTALL_CHANNEL_AUDIT_NEXT_STEPS_2026_06_27.mdDesign Gate Status
Design: Pending
Design brief issue: #35
Design artifacts:
Approval comment: pending explicit CEO/design approval on issue Design approval request: PR #34 fleet/install UI #35.