bingshuo
c5be48e6a1
Part 3/4 of the recovered Fifth Domain upgrade. Applies the persona continuity skill guard from local source commit 18dfdfd without rewriting remote history.
27 lines
1.5 KiB
JSON
27 lines
1.5 KiB
JSON
{
|
|
"schema": "guanghu.ops-experience-receipt/v1",
|
|
"receipt_id": "EXP-20260726-007-AUTHENTICATED-ROUTE-IS-NOT-HEALTH",
|
|
"intent": "Start and health-check the isolated enterprise code-channel candidate.",
|
|
"scope": "service-health-verification",
|
|
"input": "The start script checked /api/v1/version while REQUIRE_SIGNIN_VIEW was enabled.",
|
|
"evidence": [
|
|
"Forgejo started and remained alive.",
|
|
"The version route returned HTTP 403.",
|
|
"The error trap stopped the candidate cleanly.",
|
|
"The public /api/healthz route later returned status pass."
|
|
],
|
|
"decision": "A protected functional route must not be used as an unauthenticated liveness probe.",
|
|
"action": "Changed the candidate health probe to /api/healthz and repeated the full one-time Agent unlock.",
|
|
"observed_result": "Cache and database checks passed, the process stayed running, and a deployment receipt was written.",
|
|
"correction": "Separate liveness, readiness, authenticated functionality, and owner-login checks in every deployment plan.",
|
|
"invariant_id": "INV-HEALTH-PROBE-AUTH-SEPARATION",
|
|
"invariant": "A 401 or 403 from an authenticated product route does not prove service failure; health must use a designated probe.",
|
|
"verification": [
|
|
"Check the designated health endpoint.",
|
|
"Confirm the process and loopback listener.",
|
|
"Test authenticated product functionality as a separate proof."
|
|
],
|
|
"receipt_path": "deployment/AW-HLCC-DEPLOYMENT-CHECKPOINT-20260726.hdlp",
|
|
"promotion_state": "CANDIDATE_ONLY",
|
|
"recorded_at": "2026-07-26T22:15:00+08:00"
|
|
}
|