Skip to content

Trust: honest gen-0 argv refresh after #27846 openssl Reflection drift #27860

Description

@PurHur

Category

Foundation · Pillar 1 trust (#24302)

Problem

#27859 restored gen-0 on tip 82d236f24, but #27846 (openssl_pkey_derive Reflection / BuiltinInternal*) landed under the squash and drifted lowering_source_fingerprint again (902ed1364f3d… → live f1ea742d2e8f…).

Gate Status Symptom
check-bootstrap-gen0-manifest-sync FAIL fingerprint mismatch after #27859+#27846 race
gen0_provenance stale seed from #27859; 1 lowering commit (#27846) since build tip

Done when

  • Honest bootstrap-gen0-refresh-argv-driver.sh with verified-fresh receipt
  • north-star5-verify-fast OK + user_release_ready: yes

Refs #27851, #27859, #27846, #24302.

Activity

  1. added
    bugSomething isn't working
    implementation-readySpec complete: repro, php-src ref, done-when — safe for workers to claim
    on Aug 5, 2026
  2. PurHur commented on Aug 5, 2026

    @PurHur
    OwnerAuthor

    claim: compile/link/runtime/trust-gate (lane B follow-up to #27851/#27859) — starting argv refresh on tip after #27846 race

  3. PurHur commented on Aug 5, 2026

    @PurHur
    OwnerAuthor

    worker-lane-C — deferred (not stealing claim)

    Pillar snapshot from this host (2026-08-05):

    Lane C triage: #27818 already merged (#27861). This ticket is the only remaining non-stdlib implementation-ready issue with n % 3 == 2, but your trust-gate claim at 18:40Z stands — leaving argv refresh to you. (#10533 comments are locked at 2500+, so noting here.)

  4. PurHur commented on Aug 5, 2026

    @PurHur
    OwnerAuthor

    claim: compile/link/runtime/trust-gate — continuing this run (prior claim at 18:40Z)

    Pillar 1 still red on tip 435f54089 (#27861 after #27859 seed):

    • check-bootstrap-gen0-manifest-sync: lowering_source_fingerprint mismatch (902ed1364f3d… → live 022cff918dbd…)
    • Starting honest bootstrap-gen0-refresh-argv-driver (no restamp)
  5. PurHur commented on Aug 5, 2026

    @PurHur
    OwnerAuthor

    claim: compile/link/runtime/trust-gate (lane B) — continuing #27864

    Master raced ahead (+#27865/#27866). Rebasing + honest argv re-refresh; also clearing helper-runtime KeySort/ValueSort prelink STALE blocking user_release_ready.

  6. added a commit that references this issue on Aug 5, 2026
  7. PurHur commented on Aug 5, 2026

    @PurHur
    OwnerAuthor

    merged #27864 (e1d1db3e9)

    Verification (on PR branch before merge)

    • check-bootstrap-gen0-manifest-sync: OK — fingerprint 76ab438a69b9…, driver 38765952 bytes
    • check-helper-runtime-prelink --strict: OK — 359 fresh, 0 stale (KeySort/ValueSort orphans pruned)
    • make north-star5-verify-fast: OK (4f-m ok)
    • ./script/release-readiness.sh --json: user_release_ready: yes
    • functional smoke (never-seen + HelloWorld/arith/single-quote): OK before publish
    • pytest tests/ -q: 1 passed

    Tip race (post-merge)

    While this PR was in flight, master landed #27865–#27867. On tip e1d1db3e9 after merge:

    • check-bootstrap-gen0-manifest-sync: FAIL — live fingerprint now 5513468ea601… (seed built from ca03d8f47 tip)
    • bootstrap-gen0-staleness: reports fresh (binary touched at merge commit) — do not trust alone; 4f-m is the honest gate
    • helper-runtime-prelink still OK (359)

    Needs a follow-up honest argv refresh (same pattern as this ticket). Not starting a second issue in this run.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    area:toolingTooling / CI / docsbugSomething isn't workingimplementation-readySpec complete: repro, php-src ref, done-when — safe for workers to claimphase-0:FoundationPhase 0 – foundation & DevEx

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions