feat(svos): v0.0.16 (b51aa5e) staged on nh3-svos — kernel 0.0.16, app-judge 0.0.1, UI 0.0.20; cutover held for Prime

playbooks/svos-releases/nh3-svos-b51aa5e-v0.0.16-stage.yaml

@@ -0,0 +1,24 @@
+# nh3-svos: STAGE SVOS v0.0.16 (b51aa5e) beside the live release. Installs into /opt/svos/releases/b51aa5e and runs the
+# new kernel's check-config against the live configuration. Does NOT switch current, stop or start anything.
+# svos-dev's ask (thread 01M57XAEZVQ39DKNYXRTMC29S5), pushed on Prime's 0351 go. Adds app-judge 0.0.1 to apps-env.
+steps:
+  - name: Private staging dir
+    shell: install -d -m 0700 /tmp/svos-stage-b51aa5e
+  - {name: stage release, upload: {src: /tmp/claude-1000/-home-lkraven-development-eshpfi-management/a0a50e2d-b274-4f8c-b8e6-0606c48d35b5/scratchpad/svos-b51aa5e/svos-release-b51aa5e.tar.gz, dest: /tmp/svos-stage-b51aa5e/release.tar.gz, mode: "0644"}}
+  - {name: stage uv, upload: {src: /home/lkraven/bin/uv, dest: /tmp/svos-stage-b51aa5e/uv, mode: "0755"}}
+  - {name: stage installer, upload: {src: /tmp/claude-1000/-home-lkraven-development-eshpfi-management/a0a50e2d-b274-4f8c-b8e6-0606c48d35b5/scratchpad/svos-b51aa5e/install-release.py, dest: /tmp/svos-stage-b51aa5e/install-release.py, mode: "0644"}}
+  - name: Verify staged hashes
+    shell: cd /tmp/svos-stage-b51aa5e && printf '%s  %s\n' 25f781951b7705ffd2cec0df0050c1af9447005b6994c0035cb081f420309f37 release.tar.gz 83aa128da93e168283ed32cf75cd819fe17b135b3fc1f7ccb3c912eec198d9fb uv | sha256sum -c -
+    changed_when: "false"
+  - name: Install release b51aa5e beside the live one (current NOT switched)
+    sudo: true
+    shell: python3 /tmp/svos-stage-b51aa5e/install-release.py
+    creates: /opt/svos/releases/b51aa5e/apps-env/pyvenv.cfg
+verify:
+  - name: New kernel 0.0.16 accepts the live configuration as it is
+    sudo: true
+    shell: runuser -u svc-svos -- /opt/svos/releases/b51aa5e/kernel-env/bin/svos-kernel check-config --data-root /var/lib/svos
+    changed_when: "false"
+  - name: current still points at the live release
+    shell: readlink /opt/svos/current
+    changed_when: "false"