rdmbair15m5-changelog-20260923-1125-feat-20260901-42-nightly-fleet-audit
rdmbair15m5-changelog-20260923-1125-feat-20260901-42-nightly-fleet-audit
Verified and closed FEAT-20260901-42 (Nightly fleet
audit: detect and file automatically; auto-resolve only behind an
allowlist Phase 1).
Scope
- Hosts:
rdmbair15m5(verifier),rdmsm4x(canonical hub) - Repos:
fleet(fleet/ops/audit/nightly_audit.zsh),issues(commit8a75031)
Files Touched
fleet/ops/audit/nightly_audit.zsh(onrdmsm4x): Production audit engine implementing 14 positive-controlled inspection routines across ticket-store integrity, repo upstream/remote reachability, uncommitted-and-verified age, reverse mtime detection, agent bus unread counts, library adoption, dead session leases, version cadence, and boot contract steps.~/Library/LaunchAgents/com.eastcoastscience.nightlyaudit.plist: Scheduled launchd agent onrdmsm4xexecuting daily at 06:15 EDT infilemode.- Deduplication engine: Content-fingerprinted deduplication
(
subject-fingerprint) viaticket search --jsonandticket comment, ensuring recurring findings update existing open tickets rather than flooding the issue store with duplicates.
Verification Evidence
- Live execution on canonical
rdmsm4x:/Users/richh/dev/fleet/ops/audit/nightly_audit.zsh report- 199 repos scanned, 101 provenance repos checked.
- 0 broken checks (all 14 positive controls fired cleanly).
- 6 live findings correctly identified (
bus-unread-high,git-mirror,intel-bottles,dead-sessions,version-cadence,boot-contract). - Exit code: 0.
- Resolved
FEAT-20260901-42onrdmsm4xwith full reproduction and verification evidence. - Committed and pushed
issuestofleet(git.ecs0.net:git/dev/issues.git) andbackup(github.com/richhdoty/rdmsm4x-dev-issues.git). - Broadcast message sent and synchronized across all reachable fleet Macs.
Rollback / Undo
ticket reopen FEAT-20260901-42onrdmsm4x.