docs(ssh): record exact artifact validation

This commit is contained in:
OrcaWin
2026-07-28 20:18:01 -07:00
parent 5611bb45b5
commit 2d14651db5
2 changed files with 21 additions and 9 deletions
+3 -3
View File
@@ -3509,7 +3509,7 @@
"summary": "Sixteen deterministic SSH relay/session/source/decoder files passed 192 tests, including exit-sealed private recovery, retained stale-transfer cancellation authority, exact private-frame proof watermarks, one retirement record across 10,000 same-PTY token rotations, stale-owner fallback, and scheduler rejection isolation; no live topology was exercised."
},
{
"date": "2026-07-28",
"date": "2026-07-29",
"runner": "local",
"platform": "macos",
"command": "pnpm exec vitest run --config config/vitest.config.ts src/relay/git-response-stream-ownership.test.ts src/relay/pty-handler.test.ts --reporter=dot",
@@ -3559,8 +3559,8 @@
"platform": "macos",
"command": "ORCA_E2E_SSH_DOCKER=1 ORCA_SSH_PTY_SOURCE_CREDIT_V1=1 SKIP_BUILD=1 pnpm exec playwright test tests/e2e/ssh-docker-relay-perf.spec.ts --config tests/playwright.config.ts --project electron-headless --workers=1",
"result": "passed",
"durationSeconds": 66,
"summary": "All four deployed Linux relay/direct-SSH cases passed against one artifact: direct typing 6.2/7.4 ms median/worst, ACK-stalled typing 5.5/16.3 ms at exactly 262,144 held source units, fixed-size filesystem/Git churn 141.2/151.5 ms with 95 bulk reads, and owner-lease reconnect in 16.0 seconds."
"durationSeconds": 60,
"summary": "All four deployed Linux relay/direct-SSH cases passed after an exact-current E2E rebuild at code commit 5611bb45b51a/tree 8e85c3afedec: main bundle SHA-256 cbaf4e997d74bbe0ae1179bc20e52b122c60f0b56ee49ca607e12ae4125a4342 and Linux-x64 relay SHA-256 a7438fc47c4da0223ceaafab621086e14b6cdee427f53a3bf2e710fa99bcf2e6. Direct typing was 3.7/109.1 ms median/worst, ACK-stalled typing was 5.1/109.7 ms at exactly 262,144 held source units, fixed-size filesystem/Git churn was 144.9/153.2 ms with 104 bulk reads, and owner-lease reconnect completed in 15.8 seconds."
},
{
"date": "2026-07-28",
@@ -8,7 +8,7 @@ HEAD; live topology gaps remain explicit below
Historical unbounded baseline: `badf91101babf96fa09cb79a8294f7e23b9f081c`
(the implementation branch parent). The implementation was rebased onto
`origin/main@c8dba6d72caa60aeb663ec0cd525d0216e485f63`; final GitHub CI remains
`origin/main@d9fec8fd61d0349ae8cdf0eea594de7425db94c9`; final GitHub CI remains
the merge gate.
## Scope
@@ -74,7 +74,7 @@ The implementation is intentionally scoped:
| Surface | State in this PR | Evidence |
| ------------------------------------------- | ------------------------------------------------------- | ------------------------------------------------------------------------------------------------ |
| Same-build direct SSH/deployed relay, V1 on | implemented | current-head deterministic relay/main contracts; exact-current-artifact Docker rerun pending |
| Same-build direct SSH/deployed relay, V1 on | implemented | current-head deterministic contracts plus provenance-bound macOS-hosted Docker OpenSSH |
| Same-build SSH, V1 off | implemented bounded legacy mode | deterministic rollout and writer contracts |
| Reconnect/owner recovery | implemented | exact contiguous recovery, fail-closed cancellation, eight-wide reattach tests, Docker reconnect |
| Headed/headless remote consumers | source-range rotation/replacement implemented | deterministic runtime/main seam only; no live paired-runtime claim |
@@ -89,10 +89,14 @@ not prove headed or headless paired-runtime behavior, WSL, Windows ConPTY or
named pipes, local daemon/provider behavior, folder workspaces, prior-version
processes, mixed-version clients, or the Ubuntu 20.04 packaging floor.
The recorded Docker rerun used the private-recovery-transfer checkpoint. It
predates the final exit-sealed recovery, exact private-watermark, and bounded
retirement fixes, so it is not exact-current-artifact evidence. No additional
live topology proof is inferred from that run.
The exact-current-code Docker rerun rebuilt the E2E main bundle and all relay
targets immediately before execution. It is bound to code commit
`5611bb45b51abe0b35d5bedc66124f158cfdcdc7`, tree
`8e85c3afedec23f94cb3ff89b75c378ddd0e4ec7`, main bundle SHA-256
`cbaf4e997d74bbe0ae1179bc20e52b122c60f0b56ee49ca607e12ae4125a4342`,
and Linux-x64 relay SHA-256
`a7438fc47c4da0223ceaafab621086e14b6cdee427f53a3bf2e710fa99bcf2e6`.
No additional live topology proof is inferred from that run.
## Verified baseline and migration boundary
@@ -2471,6 +2475,14 @@ at exactly 262,144 held source units; fixed-size filesystem/Git churn was
141.2/151.5 ms with 95 bulk reads; reconnect completed in 16.0 seconds. All
other live topologies remain separate.
After the final lifecycle fixes and rebase, `electron-vite build --mode e2e`
and `pnpm run build:relay` produced the exact artifact hashes recorded above.
The four-case Docker command then passed in 1.0 minute: direct typing was
3.7/109.1 ms median/worst; ACK-stalled typing was 5.1/109.7 ms at exactly
262,144 held source units; fixed-size filesystem/Git churn was 144.9/153.2 ms
with 104 bulk reads; reconnect completed in 15.8 seconds. This is direct
SSH/deployed Linux relay evidence only.
At the current working tree, the source/intake slice passed 12 files and 205
tests, the provider/session slice passed 16 files and 192 tests, and this
complementary lifecycle slice passed 13 files and 150 tests: