mirror of
https://github.com/block/buzz.git
synced 2026-10-29 21:41:33 +00:00
c15c77fd40
Add a repeatable staging runbook and versioned evidence template. Execution remains gated on deployed prerequisites and a disposable community owner. Co-authored-by: Codex <noreply@openai.com> Signed-off-by: Brad Seiler <seiler@squareup.com>
51 lines
2.7 KiB
Markdown
51 lines
2.7 KiB
Markdown
# Community access verification evidence
|
|
|
|
Status: NOT RUN. Copy this template into a private evidence record. Replace
|
|
placeholders with verified facts; keep reusable credentials and payloads out.
|
|
|
|
## Deployment and ownership
|
|
|
|
- UTC start/end:
|
|
- Execution owner / setup-cleanup owner / deployment owner:
|
|
- Approved disposable community aliases and scope:
|
|
- Source SHA and prerequisite PR merge SHAs:
|
|
- Immutable image digest:
|
|
- Serving pod/runtime revisions and rollout state:
|
|
- Relevant membership / NIP-FI / accessory configuration:
|
|
- V1 cutoff (UTC or unset), last possible issuance, drain end, rollback versions:
|
|
- Candidate validation commands, exact HEAD, failures and skips:
|
|
|
|
## Case results
|
|
|
|
Use one row per principal/route/pod combination. Replace NOT RUN only after
|
|
capturing actual evidence. Include baseline and unban controls, not just denial.
|
|
|
|
| Case / fixture aliases | Runtime / revision | Expected | Actual | UTC / monotonic latency | Sanitized evidence | Result / follow-up owner |
|
|
|---|---|---|---|---|---|---|
|
|
| Baseline member/admin/owner-linked agent | | allowed | | | | NOT RUN |
|
|
| Outstanding v2 invite after issuer ban | | denied, no membership | | | | NOT RUN |
|
|
| Revoked v2 invite after issuer unban | | remains denied | | | | NOT RUN |
|
|
| New v2 invite after issuer unban | | allowed | | | | NOT RUN |
|
|
| Restricted claimant / owner-linked claimant | | denied | | | | NOT RUN |
|
|
| V1 current expiry/cutoff behavior | | deployed contract | | | | NOT RUN |
|
|
| Ban route matrix, one row per enforced route and principal | | denied / allowed controls | | | | NOT RUN |
|
|
| Timeout read/session/write controls | | write-only restriction | | | | NOT RUN |
|
|
| Root/audio direct and owner-linked existing sessions | | policy close / bystander stays | | | | NOT RUN |
|
|
| Root/audio reconnect | | denied | | | | NOT RUN |
|
|
| Tenant B controls | | unaffected | | | | NOT RUN |
|
|
| Cross-pod ordinary revocation | | recorded propagation | | | | NOT RUN |
|
|
| Missed-delivery local bound; staging if separately authorized | | documented bound | | | | NOT RUN |
|
|
| Database failure/grace isolated rehearsal | | bounded fail closed | | | | NOT RUN |
|
|
| Webhook ban / unban / wrong secret / timeout controls | | no denied run; allowed run | | | | NOT RUN |
|
|
|
|
## Cleanup and closure recommendation
|
|
|
|
- Fixture cleanup actions and owner-confirmed completion:
|
|
- Required failed/skipped cases and concrete follow-ups:
|
|
- Human verification confirmation (if any):
|
|
- Remaining hosted fleet, mixed-version, topology, and v1-drain requirements:
|
|
- Recommendation: PENDING (pass/fail/partial, evidence and scope):
|
|
|
|
A draft runbook, source tests, or merge is not deployed verification. Do not
|
|
claim complete fleet coverage from one staging run.
|