From 6b541fb5573c5c30e3da37bac569d1c10188c65f Mon Sep 17 00:00:00 2001 From: Vuong Hoang Date: Sat, 10 Oct 2026 17:35:52 -0700 Subject: [PATCH] =?UTF-8?q?memory:=20U13=20payload=207d7ed1f=20=E2=80=94?= =?UTF-8?q?=20whole=20app=20directories=20move=20at=20E2;=20hashes=20fille?= =?UTF-8?q?d=20from=20the=20vault?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- persistent-memory.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/persistent-memory.md b/persistent-memory.md index 640283f..2773eff 100644 --- a/persistent-memory.md +++ b/persistent-memory.md @@ -186,7 +186,7 @@ Every vLLM seat on a shared card (GPU 0, GPU 1) has byte-pinned KV (`--kv-cache- ## Recent decisions -- `[2026-10-10]` **Prime's U13 rulings (~1705): seat roles `dev` + `ops`; artifact host label KEPT `nh3-svos` (old inbox links keep working; infra-ops copies `/var/lib/svos/apps/{terminal/injects,postoffice/mail}` to nh3-dev at the same paths during E2, after the nh3-svos units stop); Matrix relay persona `matrix-relay`.** A two-label hybrid is impossible: `svos_connector.artifacts.relative()` refuses any host but the app's one `artifact_host`. Relay secret `nh3-svos/matrix-relay-enrollment-secret` minted. svos-dev's payload: svoperatingsystem `docs/operations/u13-edit-payload.md`. +- `[2026-10-10]` **Prime's U13 rulings (~1705): seat roles `dev` + `ops`; artifact host label KEPT `nh3-svos` (old inbox links keep working; infra-ops copies the WHOLE `/var/lib/svos/apps/terminal` (E2 step 2) and `/var/lib/svos/apps/postoffice` (step 6) to nh3-dev at the same paths, owner lkraven, modes kept, each after its nh3-svos unit stops and before the nh3-dev one starts: the artifacts.sqlite index and the bridge's journal must travel with the files); Matrix relay persona `matrix-relay`.** A two-label hybrid is impossible: `svos_connector.artifacts.relative()` refuses any host but the app's one `artifact_host`. Relay secret `nh3-svos/matrix-relay-enrollment-secret` minted. svos-dev's payload: svoperatingsystem `docs/operations/u13-edit-payload.md` @ `7d7ed1f` (enrollment sha256 placeholders: fill at E2 from `secret get | sha256` — never commit them). - `[2026-10-10]` **U13 phase B built (Prime 1639: "implement as asked")**: B1 kernel 0.0.9 + schema 12 (vzdump `vm/111/2026-10-10T23:45:41Z` + offline `pre-afab123` copy first), B2 `svos-kernel.phasefinal.com` → `--app-listen 127.0.0.1:8410` (allowlist nh3-dev; `/auth/kernel-key` ADDED to svos-dev's path list because every connector client fetches it), B3 seat-host origin + bridge env on nh3-dev, B4 app-high-seat origin; then svos-dev's dc241f8 amendment: full method-pinned path list, Miranda's app + agent env and `svos-miranda` origin on nh3-dev, three secrets minted to the vault, app-high-seat declared. Found + fixed: nh3-dev's fleet Caddy shared admin :2019 with ttyd-caddy (SO_REUSEPORT), now :2021. Kernel answers 401 `no principal` through the origin; other sources 403. - `[2026-10-10]` **esh-nas-pve `nvme/ROOT@pre-pve9` destroyed 0750 (607M)** after a week clean on PVE 9.2.21 / 7.0.14-20 (up 6 d, no err-level journal in 7 d, pools healthy, all guests up; only `openipmi.service` failed, the known item). Left: `nvme/ROOT/pve-1@pre-upgrade-20260818T141652Z` (now 1.43G, a pre-PVE-9 rollback point that is useless as one) and `nvme/subvol-105-disk-0@pre-vaapi-20260911`. - `[2026-10-09]` **vh gets every albok read group (Prime 2244: "vh gets albok-everything")**: albok-read, albok-personal and albok-feedback (the restricted wing's default-deny ends for vh only), plus his four Macs' keys on vh (`playbooks/nh3-albok-vh-viewer.yaml`). No net new root path: those Macs already reach root there via lkraven@nh3-dev and the infra-ops key. Later restricted groups (1513+) are NOT included.