Skip to content

fix(native-cluster): reuse the deployed quarantine producer's pair cache - #269

Merged
hannesrudolph merged 1 commit into
mainfrom
fix/native-cluster-cache-predecessor
Oct 22, 2026
Merged

hannesrudolph merged 1 commit into
mainfrom
fix/native-cluster-cache-predecessor

Conversation

@hannesrudolph

Copy link
Copy Markdown
Member

Deploying #268 failed on its first ordinary native maintenance run, and the maintenance job was immediately rolled back to the previous producer:

RuntimeError: native prepare failed: unrecognized complete-cache producer; evidence retained

The complete identity-quarantine pair cache records the SHA-256 of the binary that wrote it, and loadPairs accepts only the running binary or the one reviewed predecessor (db85fc43…). Any rebuild changes the hash, and #268 changes only what the producer writes after the graph. Its pair algorithm, encoding, model, basis and lineage checks are unchanged.

This PR accepts the deployed identity-quarantine combined producer (1b423688…, written by the 2026-10-20 delivery) as a second reviewed predecessor. All format, algorithm, model, basis, source and lineage checks still apply, and unreviewed producers are still refused.

Tests: go test -tags native_cluster_overlay ./scripts/native-cluster/cmd (with the existing original-graph test bridge overlay) passed, including the reviewed-parent and unreviewed-refusal cases.

The complete pair cache is bound to its producer binary hash. A new build
that only adds post-graph writes (v3 candidate generations) was refused
with 'unrecognized complete-cache producer'. Accept the deployed
identity-quarantine producer as a reviewed predecessor, with the same
format, algorithm, model and lineage checks.
@clawsweeper

clawsweeper Bot commented Oct 22, 2026

Copy link
Copy Markdown

🦞👀
ClawSweeper picked this up.

Pull request received. I will update this pull request when review starts.

@hannesrudolph
hannesrudolph merged commit 38d6aee into main Oct 22, 2026
13 checks passed
@hannesrudolph
hannesrudolph deleted the fix/native-cluster-cache-predecessor branch October 22, 2026 17:11
@hannesrudolph

Copy link
Copy Markdown
Member Author

Proven in production: the rebuilt producer (38d6aee) reused the deployed 1b423688 pair cache and completed ordinary maintenance run 896 (exit 0, combined_published), committing v3 generation 1. Details are in #268.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant