Fleet changelogs · dev.ecs0.net
rdmsm4x-changelog-20260903-1304-fleet-pr1-integration-and-pointer-map-fix

rdmsm4x-changelog-20260903-1304-fleet-pr1-integration-and-pointer-map-fix

[2026-09-03 13:04:52 EDT · rdmsm4x · claude@rdmsm4x session 158c9525 (notes-republish-pending-changelog)]

Fleet PR #1 (fleet pointer map and nightly-audit detector repair) is merged into canonical fleet main with one additional bounded fix, the regenerated pointer map is installed and verified on all five spokes, and the merged audit reports zero no-repo and zero unreachable rows.

Scope

What changed

  1. Reviewed PR #1 (83baee1): read the full diff; both hermetic suites rc 0 from the worktree; zsh -n clean on all three scripts.
  2. Commit cad789bf on the PR branch (files: ops/git/fleet_project_pointers.zsh, ops/git/test_fleet_project_pointers.zsh, ops/git/FLEET-PROJECT-POINTERS.md):
    • Root-level _* names excluded (domain=root and name starts with _): removes ~/dev/_ops and ~/dev/_fleet rows, matching the footer policy _*/** (the 11:14 EDT finding on ISSUE-20260903-26).
    • export LC_ALL=C: row order depended on the caller's locale (60 rows moved under en_US.UTF-8 relative to the C-collated maps codex generated). Byte-identical spoke installs require deterministic order.
    • Negative assertions in the pointer test were ! rg ..., which ERR_EXIT never acts on (verified: zsh -c 'set -e; ! true; echo reached' prints). All assertions now go through must_match / must_not_match. Both directions verified: the new _ops fixture fails against the previous generator (UNEXPECTED: | **_ops** |) and passes against the new one.
    • Regenerated map: 144 rows (was 146), SHA-256 93eef52480982fab0b00539bb5ab6f4a1369076d22d85b9dfcb896f7301e71b4. Diff against the installed 223aa51 map: exactly the two removed rows, the count line, and the timestamp.
  3. Merged with git merge --no-ff into canonical main: merge commit 37acfe8e2030847f42945dcfde1852ecaff413c0. Pre-merge guard: local, backup and fleet main all at 34b9538; no PR path dirty in canonical (the one dirty entry under ops/ is an unrelated untracked nightly_audit.zsh.bak-165638). Canonical dirty count 585 before, 586 after (the merge added nothing to the working tree beyond its own files; the +1 is that pre-existing untracked backup now visible next to the new lib/ directory). No force push, no rewrite.
  4. Pushed main to GitHub backup and git.ecs0.net fleet; all three read back 37acfe8. PR #1 shows MERGED at 16:56:13Z with that merge commit.
  5. Installed the map on five spokes by read-then-write: each spoke's current SHA was checked (all 223aa51) before scp; each verified 93eef524 afterwards. Spoke .git-root counts unchanged: 5 / 1 / 0 / 0 / 1.
  6. Audit confirmation: direct nightly_audit.zsh report from the merged code, rc 0, 434 s, 148 repos scanned, 65 provenance-checked, 2 findings (bus-unread-high 612, intel-bottles) and none of apps-no-repo / repos-unpushed / repos-no-remote. The scheduled LaunchAgent com.eastcoastscience.nightlyaudit runs ~/dev/fleet/ops/audit/nightly_audit.zsh file, i.e. the merged canonical path.
  7. Tickets: resolved ISSUE-20260903-26, -15, -14 and the deduped nightly tickets ISSUE-20260902-09 (apps-no-repo) and -08 (repos-unpushed) with the evidence above. Claims were held as claude@rdmsm4x/158c9525-fleet-pr1.
  8. Bus: 20260903-124947-A24610D1 (ownership acknowledgement to codex@rdmsm4x, codex@rdmbair15m5, codex@rdmpw3275m) and the integration report topic fleet-pr1-integrated-20260903.

Commands that reproduce the verification

cd ~/dev/fleet && git log --oneline -3 && git rev-parse main && git ls-remote backup refs/heads/main && git ls-remote fleet refs/heads/main
zsh ~/dev/fleet/ops/git/test_fleet_project_pointers.zsh; echo rc=$?
zsh ~/dev/fleet/ops/audit/tests/test_repository_detection.zsh; echo rc=$?
for h in rdmbair13m5 rdmbair15m5 jdmbair13m5 rdmpw3265m rdmpw3275m; do ssh $h 'shasum -a 256 ~/dev/FLEET-PROJECT-POINTERS.md'; done
zsh ~/dev/fleet/ops/audit/nightly_audit.zsh report   # ~7 min, print-only

Undo

Left for the owner

Secrets

None written. No credentials referenced.