Fix native observations, canonical storage and Coolify runtime checks

PlasticDigits commented

2026-10-14 06:55:20 +00:00

Owner

Production startup exposed native Terra RPC configuration that was never attached to the client, pooled sessions selecting an old schema, readiness probes used as restart probes, and Coolify static wrapping discarding the frontend runtime. This change wires native observations, pins every ledger/API connection to the trusted path, separates restart liveness, and verifies Docker runtime deployment mode and resource identity.

A bounded read-only inspection mode reports allowlisted catalog/count/mismatch metadata before any migration or worker, so deployment can audit existing storage without copying credentials or guessing which electorate to retain. It exposes liveness200/readiness503 and handles graceful shutdown. Normal mode retains the signed lifecycle, immutable histories and frozen power.

Pinned Rust1.88.0 full release verification passed73unit/supervisor tests,92integration tests,245OpenAPI response validations,146frontend tests, production build, both nginx configurations and Gitleaks. Additional evidence includes11Chromium workflows, a real second-origin signed amendment/retry,4optimized timestamp tests, actual Docker valid build and9guard rejections, actual native-RPC recovery/registration/restart, full signed lifecycles through the restricted pool, every pooled connection against hostile startup paths, and captured sentinel log/response failures.

Evidence and invariants crosslinks operator/ledger/protocol agent guidance and the release controls. Initial release failures are documented in issues36–43; no issue is automatically closed. Production read-only inventory, recovery, exact-commit deployments, proxy verification and live tests follow merge; skipped exhaustive matrices will remain explicit in final comments.

Production startup exposed native Terra RPC configuration that was never attached to the client, pooled sessions selecting an old schema, readiness probes used as restart probes, and Coolify static wrapping discarding the frontend runtime. This change wires native observations, pins every ledger/API connection to the trusted path, separates restart liveness, and verifies Docker runtime deployment mode and resource identity. A bounded read-only inspection mode reports allowlisted catalog/count/mismatch metadata before any migration or worker, so deployment can audit existing storage without copying credentials or guessing which electorate to retain. It exposes liveness200/readiness503 and handles graceful shutdown. Normal mode retains the signed lifecycle, immutable histories and frozen power. Pinned Rust1.88.0 full release verification passed73unit/supervisor tests,92integration tests,245OpenAPI response validations,146frontend tests, production build, both nginx configurations and Gitleaks. Additional evidence includes11Chromium workflows, a real second-origin signed amendment/retry,4optimized timestamp tests, actual Docker valid build and9guard rejections, actual native-RPC recovery/registration/restart, full signed lifecycles through the restricted pool, every pooled connection against hostile startup paths, and captured sentinel log/response failures. [Evidence and invariants](docs/verification/2026-10-14-issues-36-43.md) crosslinks operator/ledger/protocol agent guidance and the release controls. Initial release failures are documented in issues36–43; no issue is automatically closed. Production read-only inventory, recovery, exact-commit deployments, proxy verification and live tests follow merge; skipped exhaustive matrices will remain explicit in final comments.

PlasticDigits added 6 commits

2026-10-14 06:55:20 +00:00

test(ledger): cover transport faults and empty block progress db26143cf6

Exercise BSC HTTP 429, malformed successful JSON, bounded timeout recovery, and complete empty log ranges through persisted accounting. Verify empty Terra blocks, repeated pagination keys, and canonical hash fetch failure readiness without cursor or epoch corruption.

test(voting): verify complete lifecycles through restricted database role 77d4700728

Run both signed lifecycle and concurrency paths using restricted sessions, reverify superseded receipts, and check required database refusal and ordinary clock boundaries.

test(security): capture redacted API and provider failure logs e844e57387

fix(deploy): probe ledger liveness and validate deployed resource identity d3e4555412

test(ledger): verify native RPC startup recovery and safe diagnostics 653464bb7d

Exercise the real entrypoint with configured native Terra RPC, a height-headerless LCD, explicit baseline recovery, queued registration, readiness and restart idempotence. Expose only validated SQLSTATE identifiers or fixed SQLx classes in database Debug diagnostics while keeping Display generic.

fix(deploy): wire native Terra observations and retain frontend runtime image

ci/woodpecker/pr/woodpecker Pipeline was successful

Details

6a204abb17

PlasticDigits referenced this pull request

2026-10-14 07:09:17 +00:00

fix(ledger): validate complete Terra execution responses and BSC provider events #36

PlasticDigits referenced this pull request

2026-10-14 07:09:18 +00:00

fix(ledger): make transfer accounting exactly once across registration and concurrent writers #37

PlasticDigits referenced this pull request

2026-10-14 07:09:20 +00:00

fix(voting): preserve ledger continuity and require fresh canonical dual-chain snapshots #38

PlasticDigits referenced this pull request

2026-10-14 07:09:21 +00:00

fix(ledger): isolate chain workers and expose supervised readiness and intent progress #39

PlasticDigits referenced this pull request

2026-10-14 07:09:22 +00:00

fix(api): make revision approval, signed action consumption and audit receipts transactional #40

PlasticDigits referenced this pull request

2026-10-14 07:09:23 +00:00

fix(api): enforce CORS, trusted rate limits, safe errors and production network boundaries #41

PlasticDigits referenced this pull request

2026-10-14 07:09:25 +00:00

fix(database): secure balance definers, least-privilege grants and destructive test isolation #42

PlasticDigits referenced this pull request

2026-10-14 07:09:26 +00:00

fix(protocol): centralize safe HTML rendering and versioned cross-language API contracts #43

PlasticDigits added 4 commits

2026-10-14 07:23:21 +00:00

fix(ledger): pin trusted schema on every pooled connection 2a74931aec

Override database, role, and startup search paths before writer queries. Keep migration creation in public and restore the trusted catalog/public path afterward. Exercise all pool slots and a new replacement against old-schema shadow registrations while preserving public history and frozen weights; document the storage invariant and inventory requirement.

fix(api): share canonical database connection initialization c43037e5e3

Initialize every API pool connection through the ledger factory so role defaults and URL options cannot select legacy shadow tables. Verify six pooled connections read canonical registration data with a hostile search path.

test: publish release guard evidence and storage inspection controls 73e0ca4406

feat(ledger): add bounded read-only storage inspection mode

ci/woodpecker/pr/woodpecker Pipeline is pending

Details

dceb0b6acf

Inspect allowlisted public and voting ledger storage before migrations, recovery or workers. Emit only bounded metadata and common-column difference counts under a read-only snapshot; expose liveness with failed readiness and graceful shutdown. Verify the actual process preserves histories, frozen weights and cursors, omits sensitive values, and survives bounded count failures.

PlasticDigits changed title from ~~Fix release wiring and expand hardening fault coverage~~ to Fix native observations, canonical storage and Coolify runtime checks

2026-10-14 07:23:22 +00:00

PlasticDigits added 1 commit

2026-10-14 07:24:08 +00:00

docs: record final storage inspector release verification

ci/woodpecker/pr/woodpecker Pipeline was successful

Details

4c7c929a9c

PlasticDigits merged commit 1562434c42 into main

2026-10-14 07:27:50 +00:00

PlasticDigits referenced this pull request

2026-10-14 14:19:41 +00:00

fix(ledger): validate complete Terra execution responses and BSC provider events #36