tkmind/memind
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Harden zero-impact Orchestrator Shadow rollout #31

Merged
tkmind merged 1 commits from codex/orchestrator-zero-impact-hardening into codex/langgraph-phase5-merge-fix 2026-07-25 00:57:37 +00:00
Conversation 0 Commits 1 Files Changed 33
+1569 -108
tkmind commented 2026-07-24 23:45:02 +00:00
Owner
Copy Link
Copy Source

Scope

Stacked on #30 (codex/langgraph-phase5-merge-fix). This PR contains only commit 6df8281 and must be reviewed against the Phase 5 branch, not merged independently into main.

Safety boundary

  • Portal Shadow wiring remains opt-in and defaults off.
  • Native Agent Run remains the only effective executor.
  • Shadow observation is bounded; failures and queue overflow cannot change Native state.
  • The Shadow payload is control-plane-only and excludes user content, user ID, and session ID.
  • Non-loopback service exposure and executor workers fail closed without distinct tokens.
  • Retention is disabled by default; manual purge is dry-run unless apply=true.
  • No production runtime, service restart, release, or user-data migration is included.

Operational visibility

  • memindadm shows requested versus effective Portal Shadow wiring.
  • Canary readiness blocks on disabled wiring or any skipped observation.
  • Terminal workflow and linked Executor Job cleanup are authenticated and terminal-only.

Validation

  • Root npm test passed.
  • Root and Ops builds passed.
  • Orchestrator tests: 84/84 passed.
  • Required MindSpace publish, page-sync, and H5 session regression guards passed.
  • Isolated loopback-memory Portal → HTTP Orchestrator → LangGraph → cleanup E2E passed.

Stacked integration order

  1. Review and validate this PR (#31).
  2. Merge #31 only into codex/langgraph-phase5-merge-fix. Do not retarget #31 to main.
  3. Re-run and record CI for #30 with this hardening included.
  4. Merging #30 into main requires a separate explicit approval and all repository release gates.

This Draft PR does not authorize a main merge or any production action.

## Scope Stacked on #30 (`codex/langgraph-phase5-merge-fix`). This PR contains only commit `6df8281` and must be reviewed against the Phase 5 branch, not merged independently into `main`. ## Safety boundary - Portal Shadow wiring remains opt-in and defaults off. - Native Agent Run remains the only effective executor. - Shadow observation is bounded; failures and queue overflow cannot change Native state. - The Shadow payload is control-plane-only and excludes user content, user ID, and session ID. - Non-loopback service exposure and executor workers fail closed without distinct tokens. - Retention is disabled by default; manual purge is dry-run unless `apply=true`. - No production runtime, service restart, release, or user-data migration is included. ## Operational visibility - memindadm shows requested versus effective Portal Shadow wiring. - Canary readiness blocks on disabled wiring or any skipped observation. - Terminal workflow and linked Executor Job cleanup are authenticated and terminal-only. ## Validation - Root `npm test` passed. - Root and Ops builds passed. - Orchestrator tests: 84/84 passed. - Required MindSpace publish, page-sync, and H5 session regression guards passed. - Isolated loopback-memory Portal → HTTP Orchestrator → LangGraph → cleanup E2E passed. ## Stacked integration order 1. Review and validate this PR (#31). 2. Merge #31 only into `codex/langgraph-phase5-merge-fix`. Do not retarget #31 to `main`. 3. Re-run and record CI for #30 with this hardening included. 4. Merging #30 into `main` requires a separate explicit approval and all repository release gates. This Draft PR does not authorize a `main` merge or any production action.
tkmind added 1 commit 2026-07-24 23:45:03 +00:00
feat(orchestrator): harden zero-impact shadow rollout 6df82818c5 
Gate and bound Portal shadow observations while preserving Native execution. Add fail-closed service boundaries, terminal retention controls, Canary readiness telemetry, ops visibility, and isolated regression coverage.
tkmind marked the pull request as ready for review 2026-07-25 00:57:22 +00:00
tkmind merged commit 5d08d56f91 into codex/langgraph-phase5-merge-fix 2026-07-25 00:57:37 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
tkmind
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: tkmind/memind#31
Delete Branch "codex/orchestrator-zero-impact-hardening"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?