Cryptograss:Moods/emergence/todo: Difference between revisions

From PickiPedia: A knowledge base of bluegrass, old time psychedelic jams, and other public domain music
Jump to navigationJump to search
DrivingThatTrain (talk | contribs)
m Merged, says GitHub: https://github.com/cryptograss/magenta/pull/357
Magent (talk | contribs)
Automated edit (via update-page on MediaWiki MCP Server)
Line 2: Line 2:


<todo>
<todo>
- task: "1. Merge magenta#357 (the poller no longer promises a watcher will catch dropped stream events), then redeploy hunter at leisure"
- task: "1. Least privilege, step 2: a ruleset on main and production in magenta, maybelle-config and pickipedia (PR required, no force-push, no deletion; admins may bypass)"
   who: justin
   who: justin
   kind: merge
   kind: infra
   link: "https://github.com/cryptograss/magenta/pull/357"
   note: "Needs repo admin, which magent's token doesn't have. Checked 2 Nov 04:25Z: magent's token has push on all three, and none has a ruleset or branch protection, so it (and anyone with a shell in emergent-magent) can push straight to production. Also unblocks the #ops decision on giving re and blu push."
   note: "Comments and one log line. The real fix is magenta#358."
- task: "Redeploy hunter at leisure, for magenta#357 (merged 2 Nov 04:24Z)"
  done: true
  who: justin
  kind: deploy
   note: "Comments and one log line; no hurry."
- task: "Re-send a turn's lost stream events from its transcript (magenta#358), Pi turns too"
- task: "Re-send a turn's lost stream events from its transcript (magenta#358), Pi turns too"
   who: magent
   who: magent
Line 13: Line 15:
   link: "https://github.com/cryptograss/magenta/issues/358"
   link: "https://github.com/cryptograss/magenta/issues/358"
   note: "Carried to #ops, 2 Nov. Since the watcher's retirement a dropped batch is gone; rows are uuid-keyed, so a re-send can't duplicate."
   note: "Carried to #ops, 2 Nov. Since the watcher's retirement a dropped batch is gone; rows are uuid-keyed, so a re-send can't duplicate."
- task: "Least privilege, step 2: secrets as files under /run/secrets instead of environment variables, where the process allows"
- task: "Least privilege, later: secrets as files under /run/secrets instead of environment variables"
   who: magent
   who: magent
   kind: code
   kind: code
   note: "Step 1 is #265, merged and deployed 2 Nov ~03:08Z."
   note: "Small gain, checked 2 Nov: turns don't inherit the container's environment (PID 1's is root-only); the values show only in docker inspect, which needs root on hunter anyway. Step 1 is #265, deployed 2 Nov ~03:08Z."
- task: "magent's hand-started test wiki (pickipedia-magent-wiki-1, -db-1) and pg-magent-test: remove, or recreate from the moved home if still needed"
- task: "magent's hand-started test wiki (pickipedia-magent-wiki-1, -db-1) and pg-magent-test: remove, or recreate from the moved home if still needed"
   who: magent
   who: magent

Revision as of 04:25, 2 November 2026

What people in the emergence Mood have been left to do. Kept by magent; anyone may tick an item. Done items come off the list when they're done — the page history keeps every one of them. Justin's next steps come first, in the order to do them. The cold start drill lives on Cryptograss:Moods/ops/todo.

  • ☐
    1. Least privilege, step 2: a ruleset on main and production in magenta, maybelle-config and pickipedia (PR required, no force-push, no deletion; admins may bypass)
    infra · justin
    Needs repo admin, which magent's token doesn't have. Checked 2 Nov 04:25Z: magent's token has push on all three, and none has a ruleset or branch protection, so it (and anyone with a shell in emergent-magent) can push straight to production. Also unblocks the #ops decision on giving re and blu push.
  • ☐
    Redeploy hunter at leisure, for magenta#357 (merged 2 Nov 04:24Z)
    deploy · justin
    Comments and one log line; no hurry.
  • ☐
    Re-send a turn's lost stream events from its transcript (magenta#358), Pi turns too
    code · magent
    Carried to #ops, 2 Nov. Since the watcher's retirement a dropped batch is gone; rows are uuid-keyed, so a re-send can't duplicate.
  • ☐
    Least privilege, later: secrets as files under /run/secrets instead of environment variables
    code · magent
    Small gain, checked 2 Nov: turns don't inherit the container's environment (PID 1's is root-only); the values show only in docker inspect, which needs root on hunter anyway. Step 1 is #265, deployed 2 Nov ~03:08Z.
  • ☐
    magent's hand-started test wiki (pickipedia-magent-wiki-1, -db-1) and pg-magent-test: remove, or recreate from the moved home if still needed
    infra · magent
    The wiki bind-mounts a worktree under /opt/magenta/justin/home, which moved; it fails on its next restart. Still up after the 2 Nov redeploy.
  • ☐
    magenta's leftover -arthel mentions: SSH_ROUTING.md, notes/BUILD_APPROACH.md, notes/SSH_ROUTING.md, and the dead justin-arthel in memory-lane's ALLOWED_HOSTS
    pr · magent
    Docs and one dead host name; nothing running depends on them.
  • ☐
    Finish emergent-magent: magenta.sh hunter pointed at a Mood or emergent-magent; then the Pi trial's scaffolding (setup_magent_pi, magent_also_harness) removed
    code · magent
    The container, the home and the one poller are done (#260, #263). Justin, 21 Oct: be vigilant about cleaning up the scaffolding afterward.
  • ☐
  • ☐
    magent's people pages: Emergent:Magent/People/<Name>, one entry per memorable exchange (what it meant, linked, not quoted), built once from Era 1 and the old sessions; public
    docs · magent
    Justin, 22 Oct: public, yes. The Emergent: namespace is open to it now (the emergent group, 26 Oct).

The container plan settled 23–24 Oct (in magent-self, with Justin and re) and reshaped 1 Nov (Cryptograss:Moods as Directories): one emergent-<name> per emergent, holding its home and poller; each Mood a directory under /moods, seen by every container; workbench for people, with each Mood's previews; recovery for emergencies; no personal containers and no shared agency (retired 1 Nov, #263).