docs: swarm Phase 2 — cargo-check witness arming recipe (macro-aware verdicts) #82

Merged

triform-admin merged 1 commit from agent/swarm-phase2-witness into main 2026-06-29 11:58:10 +00:00

Conversation 0 Commits 1 Files changed 4 +266

triform-admin commented 2026-06-29 11:20:05 +00:00

Owner

Copy link

Phase 2 of "make cargoless usable for a swarm" — the trust fix: make a served GREEN mean "compiles" for Leptos SSR code via the cargo-check witness, escalated to only on macro-touching pushes.

Key finding (no correctness code needed): investigation confirmed the witness mechanism already ships on main (Hard-mode kind:command check → compose_hard_mode_payload real RED; macro-blind escalation compute_macro_blind_hit + effective_project_checks_mode Warn→Hard; off-loop witness + 25m watchdog), AND tf-multiverse already commits the ssr-compiler-witness check. So Phase 2 is pure configuration in the live tf-multiverse Flux manifest — this PR ships the operator recipe, example, and Gate-2 env so it can be armed safely.

• docs/operator/WITNESS-FOR-SWARM.md — the arming recipe (PROJECT_CHECKS_MODE=warn + CARGOLESS_MACRO_BLIND_PATHS + _ESCALATE=1), the SSR-correct invocation (host-native, -p triform-server -p triform-portal --features ssr-frontend,telephony,webrtc), the fail-closed composition table (an unwitnessed macro-green is downgraded to unknown — never a false green), and the swarm cost caveats (no concurrency cap, no cold-target reuse — measure before scaling).
• docs/operator/examples/cargoless.checks.ssr-witness.yaml — reference manifest (the daemon loads it from the SERVED repo root, i.e. tf-multiverse).
• D-PROJECT-CHECKS.md — cross-ref; cargoless-serve-test.k8s.yaml — inline env recipe for Gate-2 differential validation.

Docs + YAML only; no Rust changed.

🤖 Generated with Claude Code

Phase 2 of "make cargoless usable for a swarm" — the trust fix: make a served GREEN mean "compiles" for Leptos SSR code via the cargo-check witness, escalated to only on macro-touching pushes. **Key finding (no correctness code needed):** investigation confirmed the witness mechanism already ships on main (Hard-mode kind:command check → compose_hard_mode_payload real RED; macro-blind escalation compute_macro_blind_hit + effective_project_checks_mode Warn→Hard; off-loop witness + 25m watchdog), AND tf-multiverse already commits the ssr-compiler-witness check. So Phase 2 is pure configuration in the live tf-multiverse Flux manifest — this PR ships the operator recipe, example, and Gate-2 env so it can be armed safely. - **docs/operator/WITNESS-FOR-SWARM.md** — the arming recipe (PROJECT_CHECKS_MODE=warn + CARGOLESS_MACRO_BLIND_PATHS + _ESCALATE=1), the SSR-correct invocation (host-native, -p triform-server -p triform-portal --features ssr-frontend,telephony,webrtc), the fail-closed composition table (an unwitnessed macro-green is downgraded to unknown — never a false green), and the swarm cost caveats (no concurrency cap, no cold-target reuse — measure before scaling). - **docs/operator/examples/cargoless.checks.ssr-witness.yaml** — reference manifest (the daemon loads it from the SERVED repo root, i.e. tf-multiverse). - **D-PROJECT-CHECKS.md** — cross-ref; **cargoless-serve-test.k8s.yaml** — inline env recipe for Gate-2 differential validation. Docs + YAML only; no Rust changed. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

triform-admin added 1 commit 2026-06-29 11:20:05 +00:00

docs(serve): compiler-witness arming recipe for macro-aware swarm verdicts (Phase 2) ... 1d15065642

Phase 2 makes a served GREEN mean "compiles" for Leptos SSR code via the
compiler witness (a kind:command project-check), escalated to only on
macro-touching pushes. Investigation confirmed the mechanism ALREADY ships
(Hard-mode command check -> compose_hard_mode_payload real RED;
compute_macro_blind_hit + effective_project_checks_mode Warn->Hard escalation;
off-loop witness + watchdog) and tf-multiverse already commits the
ssr-compiler-witness check -- so Phase 2 needs NO cargoless correctness code,
only configuration in the live tf-multiverse Flux manifest.

Documents the arming recipe so an operator can turn it on safely:
- docs/operator/WITNESS-FOR-SWARM.md -- recipe (PROJECT_CHECKS_MODE=warn +
  CARGOLESS_MACRO_BLIND_PATHS + _ESCALATE=1), the SSR-correct invocation
  (host-native, server+portal, ssr-frontend feature set), the fail-closed
  composition table (unwitnessed macro-green -> unknown, never false-green),
  and the swarm cost caveats (no concurrency cap, no cold-target reuse).
- docs/operator/examples/cargoless.checks.ssr-witness.yaml -- reference
  manifest (the daemon loads cargoless.checks.yaml from the SERVED repo root,
  i.e. tf-multiverse, not here).
- D-PROJECT-CHECKS.md -- cross-reference from the design doc.
- cargoless-serve-test.k8s.yaml -- the macro-blind env recipe inline
  (commented) for Gate-2 validation.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

triform-admin merged commit 01b7d40958 into main 2026-06-29 11:58:10 +00:00

triform-admin referenced this pull request from a commit 2026-06-29 11:58:11 +00:00

Merge pull request 'docs: swarm Phase 2 — cargo-check witness arming recipe (macro-aware verdicts)' (#82) from agent/swarm-phase2-witness into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

triform/cargoless!82

No description provided.