Record SCV staging qualification

b28e76eaf5c1 · AtlantisPleb · · parent 5229b42bbf7c

Record SCV staging qualification

Deploy story

What this commit did to the running system — joined from the forge receipt chain, the part a commit page elsewhere cannot show.

Not deployed through the forge lane

No push, promotion, build, or deploy receipt references this commit (receipts are scanned over a bounded recent window). Changes shipped by full node replacement carry their proof in the release gate receipt instead.

Changed files

  • modified docs/operations/scv-staging-qualification.md
  • modified docs/scv-planning.md

Diff

2 files changed, +58 -5

docs/operations/scv-staging-qualification.md modified +20 -2

@@ -2,7 +2,7 @@

2 2
3 3
Date: 2026-08-20
4 4
5
Status: Read-only qualification procedure
5
Status: Read-only qualification procedure; first shared-project proof passed
6 6
7 7
Use this procedure to prove the first complete SCV image in staging. This lane
8 8
qualifies one OpenCode-driven SCV run. It does not admit repository writes,

@@ -57,7 +57,7 @@ The Cloud Logging stream must contain these records for one run ID:

57 57
58 58
- `run_preparing`;
59 59
- `process_started`;
60
- at least one `resource_heartbeat` during a long-enough run;
60
- at least one `heartbeat` during a long-enough run;
61 61
- normalized `opencode_event` records;
62 62
- `process_finished`;
63 63
- `run_finished`;

@@ -74,3 +74,21 @@ not call it an isolated-staging pass or enable writes. Before an SCV can write,

74 74
add the durable coordinator and worker protocol, process-tree or cgroup
75 75
enforcement, run-scoped inference grants, persistent per-effect barriers,
76 76
artifact storage, cancellation, and the isolated Forge staging lane.
77
78
## First qualification receipt
79
80
The first shared-project qualification passed on 2026-08-20:
81
82
| Field | Value |
83
| --- | --- |
84
| Source revision | `09a775b83fa05b6a92854b0ad1f7b5c23b3aee88` |
85
| Build | `9721075d-ed17-491c-af9a-85be8f46bf52` |
86
| Image digest | `sha256:ee2a74660faa6137e4021a2870380f5977796d33ca9dcaabcb0b958f35e0e36b` |
87
| Job execution | `openagents-scv-staging-wrppq` |
88
| SCV run | `db8a6849-1e59-41fb-ba7d-461c9a4fa4a3` |
89
| Result | `succeeded` in 11,008 milliseconds with two completed read calls and no output truncation |
90
91
Cloud Logging received lifecycle events, five two-second heartbeats, eight
92
normalized OpenCode events, resource measurements, and the terminal worker
93
result before the container exited with status `0`. This receipt proves the
94
read-only image and event path. The safety limitation above remains in force.
docs/scv-planning.md modified +38 -3

@@ -2,9 +2,9 @@

2 2
3 3
Date: 2026-08-20
4 4
5
Status: First complete OpenCode SCV environment implemented and locally proven;
6
staging qualification in progress; durable coordination, durable tool effects,
7
and autonomous deployment remain disabled
5
Status: First complete OpenCode SCV environment implemented and proven locally
6
and in the shared-project read-only staging lane; durable coordination, durable
7
tool effects, isolated staging, and autonomous deployment remain disabled
8 8
9 9
## Outcome
10 10

@@ -225,6 +225,41 @@ proof does not admit repository writes or autonomous deployment. Add the

225 225
durable worker protocol, process-tree or cgroup enforcement, run-scoped
226 226
credential proxy, and effect-persistence sidecar before enabling writes.
227 227
228
### Proven staging qualification
229
230
On 2026-08-20, Cloud Build built commit
231
`09a775b83fa05b6a92854b0ad1f7b5c23b3aee88` on native `linux/amd64`
232
in build `9721075d-ed17-491c-af9a-85be8f46bf52`. Artifact Registry stored the
233
image as
234
`sha256:ee2a74660faa6137e4021a2870380f5977796d33ca9dcaabcb0b958f35e0e36b`.
235
Cloud Run job execution `openagents-scv-staging-wrppq` ran that digest with one
236
task, zero retries, and the dedicated
237
`openagents-scv-staging@openagentsgemini.iam.gserviceaccount.com` identity.
238
239
The job configuration referenced only the staging provider secret. It did not
240
contain database, GitHub, Forge, release-cookie, deployment, or general cloud
241
credentials. The SCV emitted `run_preparing`, process-start, heartbeat,
242
normalized OpenCode, process-finish, run-finish, and terminal worker-result
243
records through Cloud Logging before it exited with status `0`.
244
245
The terminal result recorded:
246
247
- `succeeded` in 11,008 milliseconds;
248
- eight normalized OpenCode events, two completed `read` calls, and no tool
249
  errors;
250
- 5,520 input, 173 output, 158 reasoning, and 3,072 cache-read tokens;
251
- an estimated cost of `$0.0058599`;
252
- 666,734,592 bytes of peak direct-process RSS, 114% maximum sampled CPU, and
253
  44 resource samples with no sampling errors;
254
- 16,910 observed and captured bytes with no truncation;
255
- event artifact digest
256
  `sha256:506e4cbd02eb19abd5078d73832be45049b707e06f8c73ef1b4ef7dcc53c1e83`.
257
258
This result qualifies the complete read-only SCV image in the existing shared
259
Google Cloud project. It does not pass the isolated-staging gate described in
260
this plan and does not authorize writes, Forge handoff, or autonomous
261
deployment.
262
228 263
## Goals
229 264
230 265
An SCV should:

This page updates live while a promote is in flight · changelog