aipackage/specs/001-enterprise-experience/evidence/phase1-provenance-partial.md

67 lines
3.4 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Phase 1 Provenance Check — Partial
**Checked**: 2026-07-12
## Source State
- Local repository HEAD before uncommitted Phase 1 work: `b3eec341586551023b05db7a82bf19446186c768`
- Phase 1 implementation is currently uncommitted and therefore has no immutable release revision.
- Working tree contains the intended Spec Kit, test, backend, installer and portal changes plus the
pre-existing unrelated untracked `how-it-flows.gif`.
## Local ISO Evidence
| Path | Size | SHA-256 | Result |
|---|---:|---|---|
| `cezen-ai-ubuntu2204.iso` | 0 bytes | `e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855` | Placeholder; invalid evidence |
| `autoinstall/cezen-ai-ubuntu2204.iso` | 0 bytes | `e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855` | Placeholder; invalid evidence |
No local Workstation ISO artifact exists. Build scripts remain separate for Server and Workstation.
## Build-Host Check
Authenticated read-only verification succeeded against `cezen@172.16.10.145` at
`/home/cezen/aipackage/cgit`. No remote state changed.
| Artifact | Size | Timestamp (UTC) | SHA-256 |
|---|---:|---|---|
| `autoinstall/cezen-ai-ubuntu2204.iso` | 2,136,397,824 bytes | 2026-07-09 05:52:52 | `bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d` |
| `cezen-ai-ubuntu2204.iso` | 2,136,397,824 bytes | 2026-07-09 05:53:40 | `bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d` |
No `cezen-ai-workstation-ubuntu2204.iso` artifact exists in either checked build-host location.
The host is Ubuntu with approximately 8.0 GB free on `/`; capacity must be monitored during rebuild.
The existing Server ISO predates the uncommitted Phase 1 implementation and is not valid provenance
evidence for this feature.
## Remaining Evidence
- After explicit sync/rebuild authorization, sync the accepted source and build Server and Workstation
artifacts from that exact revision.
- Prove the artifact contains the accepted portal, backend, installer, deployment and license copies.
- Complete representative Workstation and Server install/recovery journeys.
T036, T037 and T038 remain incomplete.
## Authorized Rebuild Results — 2026-07-12
Current uncommitted source was synchronized to `/home/cezen/aipackage/cgit` with Git metadata,
credentials, caches, unrelated `how-it-flows.gif`, and existing ISO binaries excluded. Both builds
completed and their internal `md5sum.txt` manifests verified successfully.
| Artifact | Size | Timestamp (UTC) | SHA-256 |
|---|---:|---|---|
| `autoinstall/cezen-ai-ubuntu2204.iso` | 2,136,397,824 bytes | 2026-07-12 06:37:08 | `b7ba156e9eae6de5595fa85354468836d582db093d1c3cb85eceb9caaca5dfcf` |
| `autoinstall/cezen-ai-workstation-ubuntu2204.iso` | 2,136,399,872 bytes | 2026-07-12 06:39:55 | `46c0ec277a711e7075082e362bcf5f5882812e8cbf9baf6ca35c4b5afc68e171` |
The older root-level `cezen-ai-ubuntu2204.iso` remains unchanged with SHA-256
`bb2d0ab26c34f179dba9e34e8610d8a17763f8d2e38f948900509bfb8fd83b5d`; it MUST NOT be confused with
the rebuilt Server artifact.
### Provenance limitation
Both online installer images clone `https://cgit.cezentech.com/jinojose/aipackage.git` during first
boot. The Phase 1 implementation is still uncommitted and unpushed, so the rebuilt ISO boot layer is
current but a real install would still pull the older remote package. T038 cannot pass until the
accepted source is committed/pushed and artifact/source evidence is rechecked. T036T037 also remain
pending real representative installs.