Cryptograss:Moods/emergence/todo: Difference between revisions

From PickiPedia: A knowledge base of bluegrass, old time psychedelic jams, and other public domain music
Jump to navigationJump to search
Magent (talk | contribs)
renumber (via update-page on MediaWiki MCP Server)
Magent (talk | contribs)
+ merge #265 (least privilege, step 1); the secrets item narrows to step 2 (via update-page on MediaWiki MCP Server)
Line 22: Line 22:
   link: "https://pickipedia.xyz/wiki/Cryptograss:Hunter/Bot"
   link: "https://pickipedia.xyz/wiki/Cryptograss:Hunter/Bot"
   note: "#264 deployed 1 Nov ~18:50Z. At least: the image is magenta:latest; containers have no -arthel suffix; magent lives in emergent-magent with its own home; the watcher is retired (#254); the README was rewritten (#261); --remove-orphans; and the three home keys: home_from (an agent's home between containers), renamed_from (a container's directory to its new name), home_moved_from (one container's home becoming another's, #263)."
   note: "#264 deployed 1 Nov ~18:50Z. At least: the image is magenta:latest; containers have no -arthel suffix; magent lives in emergent-magent with its own home; the watcher is retired (#254); the README was rewritten (#261); --remove-orphans; and the three home keys: home_from (an agent's home between containers), renamed_from (a container's directory to its new name), home_moved_from (one container's home becoming another's, #263)."
- task: "Secrets, least privilege: a table of container → secrets it reads, for Justin and re to check; then the inventory ships only those; then files under /run/secrets instead of environment variables where the process allows"
- task: "Merge maybelle-config#265 (each container gets only the secrets it reads; startup takes back what earlier deploys left in homes) and redeploy hunter"
  who: justin
  kind: merge
  link: "https://github.com/cryptograss/maybelle-config/pull/265"
  note: "CI green; render-diff shows each container losing exactly what the table in the PR says. re to review."
- task: "Least privilege, step 2: secrets as files under /run/secrets instead of environment variables, where the process allows"
   who: magent
   who: magent
   kind: docs
   kind: code
   note: "Justin, 16:39–16:42Z: the vault is in no container (checked), but every container carries the shared secrets in its environment for its whole life, and some in home files (.bashrc, poller.env, arthel .env)."
   note: "Step 1 is #265. Justin, 16:39–19:23Z."
- task: "magent's hand-started test wiki (pickipedia-magent-wiki-1, -db-1) and pg-magent-test: remove, or recreate from the moved home if still needed"
- task: "magent's hand-started test wiki (pickipedia-magent-wiki-1, -db-1) and pg-magent-test: remove, or recreate from the moved home if still needed"
   who: magent
   who: magent

Revision as of 19:26, 1 November 2026

What people in the emergence Mood have been left to do. Kept by magent; anyone may tick an item. Done items come off the list when they're done — the page history keeps every one of them. Justin's next steps come first, in the order to do them.

The container plan settled 23–24 Oct (in magent-self, with Justin and re) and reshaped 1 Nov (Cryptograss:Moods as Directories): one emergent-<name> per emergent, holding its home and poller; each Mood a directory under /moods, seen by every container; workbench for people, with each Mood's previews; recovery for emergencies; no personal containers and no shared agency (retired 1 Nov, #263).