From 591384f2b7b54646bde4590cfdc4aa18affa365e Mon Sep 17 00:00:00 2001 From: SimpleTest Date: Thu, 23 Jul 2026 23:01:37 +0300 Subject: [PATCH] Record isolated clean deployment evidence --- docs/operations.md | 13 ++++++++----- docs/verification.md | 12 ++++++++++++ 2 files changed, 20 insertions(+), 5 deletions(-) diff --git a/docs/operations.md b/docs/operations.md index ebaa167..7ddea63 100644 --- a/docs/operations.md +++ b/docs/operations.md @@ -641,15 +641,18 @@ independent one-run PostgreSQL, Phoenix, handover, BEAM-cookie, and metrics secrets with mode `0600`; optional GitHub OAuth and push delivery stay disabled. -The drill uses a unique Compose project, application image, router/service -name, internal network, PostgreSQL volume, database, and dynamic host ports. +The drill uses a unique Compose project, application image, Docker socket +proxy image, PostGIS image, Traefik image, router/service name, internal +network, PostgreSQL volume, database, and dynamic host ports. It requires exactly two healthy web and two running worker replicas, all tracked migrations, seeded categories, an idempotent repeated migration, working readiness/home/registration/Mailpit routes, four connected BEAM nodes, and a cross-replica PubSub message. It then removes the exact project -including volumes, its one-run image, and the temporary archive, and verifies -that those scoped resources are absent. Evidence is retained under -`output/portability//`. +including volumes, all four one-run images, and the temporary archive, and +verifies that every scoped resource is absent. If Compose validation fails +before project creation, cleanup avoids invoking an unrenderable Compose +configuration and still verifies that the generated scope is absent. Evidence +is retained under `output/portability//`. This is a local Docker portability observation. It does not establish production SMTP, OAuth, push-provider, TLS, database-HA, storage, capacity, or diff --git a/docs/verification.md b/docs/verification.md index 8eb906a..7a6b50f 100644 --- a/docs/verification.md +++ b/docs/verification.md @@ -64,6 +64,18 @@ edit, branch, or tag was made during this audit. checks on two web and two worker replicas. Evidence is `output/upgrade-rehearsal/20260723195143-1759181`; the exact rehearsal containers, networks, volume, database, and image were absent afterward. +- A clean deployment from the tracked archive at commit + `71510a2ab4fb5e2fb2aa65bdf05a358e5045923b` passed on Docker Engine + 29.6.2 and Compose 5.3.1. It independently built the application, Docker + socket proxy, PostGIS, and Traefik images, applied all 18 migrations twice + without changing the 14 seeded categories, started two healthy web and two + healthy worker replicas, formed a four-node BEAM cluster, passed a + cross-node PubSub probe, and returned ready HTTP plus working home, + registration, and Mailpit responses. Evidence is + `output/portability/20260723195646-1902488-616f83`. After the run, exact + checks found zero project containers, networks, volumes, and one-run images; + the temporary tracked-archive workspace was absent, while both local and + public DEV readiness remained HTTP 200. - Two web and two worker replicas, PostGIS, Mailpit, Traefik, and the scoped Docker socket proxy were running after the audit. Both web replicas and both workers were healthy; public liveness and readiness returned `ok` and