aipackage/specs/001-enterprise-experience/evidence/phase1-provenance-partial.md

3.4 KiB
Raw Blame History

Phase 1 Provenance Check — Partial

Checked: 2026-07-12

Source State

  • Local repository HEAD before uncommitted Phase 1 work: b3eec341586551023b05db7a82bf19446186c768
  • Phase 1 implementation is currently uncommitted and therefore has no immutable release revision.
  • Working tree contains the intended Spec Kit, test, backend, installer and portal changes plus the pre-existing unrelated untracked how-it-flows.gif.

Local ISO Evidence

Path Size SHA-256 Result
cezen-ai-ubuntu2204.iso 0 bytes e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Placeholder; invalid evidence
autoinstall/cezen-ai-ubuntu2204.iso 0 bytes e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Placeholder; invalid evidence

No local Workstation ISO artifact exists. Build scripts remain separate for Server and Workstation.

Build-Host Check

Authenticated read-only verification succeeded against cezen@172.16.10.145 at /home/cezen/aipackage/cgit. No remote state changed.

Artifact Size Timestamp (UTC) SHA-256
autoinstall/cezen-ai-ubuntu2204.iso 2,136,397,824 bytes 2026-07-09 05:52:52 bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d
cezen-ai-ubuntu2204.iso 2,136,397,824 bytes 2026-07-09 05:53:40 bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d

No cezen-ai-workstation-ubuntu2204.iso artifact exists in either checked build-host location. The host is Ubuntu with approximately 8.0 GB free on /; capacity must be monitored during rebuild. The existing Server ISO predates the uncommitted Phase 1 implementation and is not valid provenance evidence for this feature.

Remaining Evidence

  • After explicit sync/rebuild authorization, sync the accepted source and build Server and Workstation artifacts from that exact revision.
  • Prove the artifact contains the accepted portal, backend, installer, deployment and license copies.
  • Complete representative Workstation and Server install/recovery journeys.

T036, T037 and T038 remain incomplete.

Authorized Rebuild Results — 2026-07-12

Current uncommitted source was synchronized to /home/cezen/aipackage/cgit with Git metadata, credentials, caches, unrelated how-it-flows.gif, and existing ISO binaries excluded. Both builds completed and their internal md5sum.txt manifests verified successfully.

Artifact Size Timestamp (UTC) SHA-256
autoinstall/cezen-ai-ubuntu2204.iso 2,136,397,824 bytes 2026-07-12 06:37:08 b7ba156e9eae6de5595fa85354468836d582db093d1c3cb85eceb9caaca5dfcf
autoinstall/cezen-ai-workstation-ubuntu2204.iso 2,136,399,872 bytes 2026-07-12 06:39:55 46c0ec277a711e7075082e362bcf5f5882812e8cbf9baf6ca35c4b5afc68e171

The older root-level cezen-ai-ubuntu2204.iso remains unchanged with SHA-256 bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d; it MUST NOT be confused with the rebuilt Server artifact.

Provenance limitation

Both online installer images clone https://cgit.cezentech.com/jinojose/aipackage.git during first boot. The Phase 1 implementation is still uncommitted and unpushed, so the rebuilt ISO boot layer is current but a real install would still pull the older remote package. T038 cannot pass until the accepted source is committed/pushed and artifact/source evidence is rechecked. T036T037 also remain pending real representative installs.