F34.us
Menu
ACTIVEPROJECT 14

SYSTEMS ENGINEERING RECORD

TotalInfra

Runs the services behind Polinaria. It makes deployments repeatable and keeps data recoverable when something goes wrong.

RolePlatform architect and operator

ImpactCreated a serialized exact-source deployment platform with backups, one-shot migrations, readiness checks, and defined rollback for independently owned services.

  • Python
  • Docker
  • Caddy
  • MariaDB
  • CI/CD
  • Reliability

andrew Project record ·

TotalInfra: The Guarded Release Lane IMAGETotalInfra: The Guarded Release Lane

PROJECT TIMELINE

Activity

88 records

Recent updates and connected-system signals.

Shared heavy-work guard installed and Wake runner resumed as the sole canary

Impact: The approved installation blocker is resolved. Wake alone is enabled; the rest of the hosted runner fleet and protected web-delivery timer remain held. No application deployment or browser-login fix is claimed.

Workspace dashboard foundation published as draft PR 73

Impact: The workspace inventory foundation is reviewable; no dashboard service, authentication, route, or timer is deployed.

Fixed shared-guard installer cgroup-path validation; activation still pending

Impact: Removes a source-level activation blocker for the pending shared heavy-work RAM/swap guard without changing its limits. The live guard and Wake diagnostic deployment remain pending.

OIDC rollout paused after overlapping uncapped local analysis, repository CI, and failed delivery retries exhausted host swap

Impact: World, Home, and F34 promotion is delayed; no accepted production application revision was lost or rolled back.

Wake v2 evidence readiness regression corrected

Impact: Wake evidence collection now remains ready under the v0.5.3 collaboration generation without requiring the conflicting legacy writer gateway.

Issue 66 Phase 0 pull-request control surface activated

Impact: Repo-local draft pull requests are now available as durable review checkpoints for the rolling OIDC migrations while issues remain completion authority.

Collaboration v0.5.3 deterministic replay canary passed

Impact: Phase 0 may proceed to whole-generation rollback rehearsal before repository pull-request activation.

Collaboration v0.5.1 Wake gateway canary passed

Impact: Phase 0 can proceed to rollback rehearsal before repository pull-request units are enabled.

Started the staged hosted OIDC library rollout under TotalInfra issue 66.

Impact: Phase 0 is restoring managed Forgejo PR activation while Wake issue 22 is the sole Authlib pilot; later application deployments remain gated and serialized.

Verified Wake production feed persistence at signed revision 7a2e1690.

Impact: The protected reader can retrieve the bounded deployment canary through Wake's incremental project feed.

Added the ProjectMan pilot project registry and bounded read-only Home status compiler.

Impact: Stable handles now join ProjectMan to its repository, F34 record, Wake stream, and deployable application while preserving denied and unknown source states.

Fixed TotalInfra #58: F34 cache callback failures no longer abort unrelated refreshes; exact commit fast-forwarded to dev.

Impact: Failed cache callbacks preserve Wake checkpoints for retry while later integrations and README refreshes continue. Four regression tests pass; related coverage has 23 passes and one sandbox socket-permission gap. Compilation and whitespace checks pass. Compose validation lacks deployment environment values; runtime adoption and configured CI/CD outcomes were not verified.

Completed the audited TotalInfra rollout: hardened rollback recovery and deployed the latest reviewed dev revisions for Routine, Inventory, Calendar, ProjectMan, Home, World, and TimeTrack.

Impact: All targeted public services now run immutable, revision-labelled images; health and OIDC checks pass, rollback artifacts are recorded, the shared capacity lane is released, and all eight Forgejo tickets are closed with evidence.

A Deployment Is a Transaction, Not a Command

A release binds tested source, runtime image, schema, durable state, acceptance, and recovery.

Open signal

Made TotalInfra service collaboration clients operational and verified the F34 reader worker.

Impact: The F34 worker can now use the protected Forgejo and ProjectMan helpers from its service account; all 16 Forgejo caches and the Wake cache refreshed healthy.

Activated managed Wake publishing across TotalInfra canonical repositories.

Impact: All 18 reviewed worktrees are bound to stable Wake project keys through the protected credential-free gateway.

F34.us Background Image