aipackage/specs/001-enterprise-experience/evidence/phase1-provenance-partial.md
2026-07-12 12:14:26 +05:30

67 lines
3.3 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Phase 1 Provenance Check — Partial
**Checked**: 2026-07-12
## Source State
- Local repository HEAD before uncommitted Phase 1 work: `b3eec341586551023b05db7a82bf19446186c768`
- Accepted Phase 1 source revision: `ebaa2e721954f793dc166ccb1bafd37c6f48765d`.
- `origin/main` was verified at that exact revision after push.
- The unrelated untracked `how-it-flows.gif` was excluded from the commit.
## Local ISO Evidence
| Path | Size | SHA-256 | Result |
|---|---:|---|---|
| `cezen-ai-ubuntu2204.iso` | 0 bytes | `e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855` | Placeholder; invalid evidence |
| `autoinstall/cezen-ai-ubuntu2204.iso` | 0 bytes | `e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855` | Placeholder; invalid evidence |
No local Workstation ISO artifact exists. Build scripts remain separate for Server and Workstation.
## Build-Host Check
Authenticated read-only verification succeeded against `cezen@172.16.10.145` at
`/home/cezen/aipackage/cgit`. No remote state changed.
| Artifact | Size | Timestamp (UTC) | SHA-256 |
|---|---:|---|---|
| `autoinstall/cezen-ai-ubuntu2204.iso` | 2,136,397,824 bytes | 2026-07-09 05:52:52 | `bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d` |
| `cezen-ai-ubuntu2204.iso` | 2,136,397,824 bytes | 2026-07-09 05:53:40 | `bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d` |
No `cezen-ai-workstation-ubuntu2204.iso` artifact exists in either checked build-host location.
The host is Ubuntu with approximately 8.0 GB free on `/`; capacity must be monitored during rebuild.
The existing Server ISO predates the uncommitted Phase 1 implementation and is not valid provenance
evidence for this feature.
## Remaining Evidence
- Complete representative Workstation and Server install/recovery journeys.
T036 and T037 remain incomplete.
## Authorized Rebuild Results — 2026-07-12
The accepted source was synchronized to `/home/cezen/aipackage/cgit` with Git metadata,
credentials, caches, unrelated `how-it-flows.gif`, and existing ISO binaries excluded. Both builds
completed and their internal `md5sum.txt` manifests verified successfully.
| Artifact | Size | Timestamp (UTC) | SHA-256 |
|---|---:|---|---|
| `autoinstall/cezen-ai-ubuntu2204.iso` | 2,136,397,824 bytes | 2026-07-12 06:37:08 | `b7ba156e9eae6de5595fa85354468836d582db093d1c3cb85eceb9caaca5dfcf` |
| `autoinstall/cezen-ai-workstation-ubuntu2204.iso` | 2,136,399,872 bytes | 2026-07-12 06:39:55 | `46c0ec277a711e7075082e362bcf5f5882812e8cbf9baf6ca35c4b5afc68e171` |
The older root-level `cezen-ai-ubuntu2204.iso` remains unchanged with SHA-256
`bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d`; it MUST NOT be confused with
the rebuilt Server artifact.
### Online package provenance
Both online installer images clone `https://cgit.cezentech.com/jinojose/aipackage.git` during first
boot. The accepted Phase 1 source was committed and pushed, and `refs/heads/main` was verified at
`ebaa2e721954f793dc166ccb1bafd37c6f48765d`. Build-host hashes for the backend, browser setup,
console setup, and shared portal experience file matched the accepted synced source. A first boot now
resolves to the Phase 1 package revision.
T038 is complete. T036T037 remain pending real representative installs; successful builds and
manifests are not substitutes for appliance journey validation.