8000 T80 — Run bep_signing_rotation_keeps_running_box_working on the macOS lane · Issue #2565 · gominimal/minimal · GitHub
[go: up one dir, main page]
Skip to content

T80 — Run bep_signing_rotation_keeps_running_box_working on the macOS lane #2565

New issue
New issue
Closed
Closed
T80 — Run bep_signing_rotation_keeps_running_box_working on the macOS lane#2565
Labels
executor:humanHand-guided; an agent must not pick this upkind:taskA task the plan skill rendered; the body carries ## Taskmodel:standardA standard model: work that needs care, or routine work that is largesize:M200 to 500 net lines; one PR

Description

@norrietaylor
norrietaylor
opened on Oct 25, 2026

Task

slice size difficulty model who estimated lines
macOS lane proofs M routine standard a person 100 (0 code, 100 tests)

On the macOS lane, a running box keeps cloning and pushing across a signing-certificate rotation, and the case records OK.

Covers:

  • BEP-061

Layers:

Waits on:

Plan block 
### T80 — Run bep_signing_rotation_keeps_running_box_working on the macOS lane
  slice: S11
  kind: task
  covers: BEP-061
  size: M
  est: 0 code, 100 tests
  executor: human
  difficulty: routine
  model: standard
  diagnostics: the case prints PASS or NOT RUN with its gate
  observability: the case output, posted on #2565
  layers:
    - mac:
      - scripts/session-e2e.sh: run on the manual macOS lane of #2500 against `main`, with a GitHub sign-in, unchanged
      test: ./scripts/session-e2e.sh bep_signing_rotation_keeps_running_box_working
  produces: none
  consumes: none
  proof: On the macOS lane, a running box keeps cloning and pushing across a signing-certificate rotation, and the case records OK.
  depends on:
    - blocked by #2533
    - blocked by #2785

Generated by Claude Code

Activity

  1. norrietaylor
    added
    kind:featureA new feature or capability. Applied by the inbox-route classifier.
    on Oct 25, 2026

  2. norrietaylor commented on Oct 26, 2026

    @norrietaylor
    norrietaylor
    on Oct 26, 2026 – with Claude
    MemberAuthor

    The epic owner added this residual to the plan on 2026-10-26 as T80 (slice S11). Its body is now the rendered task. The residual text it replaces is kept below.

    Residual text

    Residual from T52 #2551, arch C1 (review threads 4369769719, 4369784790), epic #1501. Filed under the epic owner's 2026-10-25 decision to merge the PR and run its macOS legs later against main, on the manual macOS lane of #2500. Linux runners record these legs NOT RUN because bep serve runs on macOS only (bep_live_gate in scripts/session-e2e.sh).

    What closes this

    Generated by Claude Code

  3. norrietaylor
    changed the title [-]Run bep_signing_rotation_keeps_running_box_working on the macOS lane (BEP-061)[/-] [+]T80 — Run bep_signing_rotation_keeps_running_box_working on the macOS lane[/+] on Oct 26, 2026
  4. norrietaylor
    added
    kind:taskA task the plan skill rendered; the body carries ## Task
    size:M200 to 500 net lines; one PR
    model:standardA standard model: work that needs care, or routine work that is large
    executor:humanHand-guided; an agent must not pick this up
    and removed
    kind:featureA new feature or capability. Applied by the inbox-route classifier.
    on Oct 26, 2026
  5. norrietaylor
    added a parent issue on Oct 26, 2026
  6. norrietaylor
    marked this as blocked on Oct 26, 2026
  7. norrietaylor
    marked this as blocking on Oct 26, 2026

  8. norrietaylor commented on Nov 4, 2026

    @norrietaylor
    norrietaylor
    on Nov 4, 2026
    MemberAuthor

    T80 passed on the manual macOS lane, on main at 964a71b5, against a throwaway private repository.

    ::group::Box Egress Proxy signing rotation: a running grant box clones and pushes before and after
root CA before the rotation: SHA256:7A:D4:C0:CE:24:08:31:29:93:5E:6E:A1:B9:E9:D5:E4:31:CC:9C:39:90:8F:75:42:1F:54:84:EF:30:9D:2C:84
grant box: 01a1a7c6-3bbf-7192-ae0c-cc3e2ffd2c59
git clone before the rotation: OK
git push before the rotation: OK
git delete before the rotation: OK
rotation: Signing certificate rotated from 86:46:7A:4B:2E:DF:50:EC:DA:DE:AF:8F:A4:2D:A8:FC:2A:08:D1:E5:7B:FD:BE:9E:69:F1:2E:E6:E1:48:D8:5B to 0E:BD:72:29:80:23:46:62:0B:D9:B5:8F:B9:FE:27:3A:29:D1:D6:38:A6:3A:A3:FE:2A:14:CA:69:ED:A6:F8:CA. Running boxes keep working; nothing inside them changes.
git clone after the rotation: OK
git push after the rotation: OK
git delete after the rotation: OK
root CA after the rotation: SHA256:7A:D4:C0:CE:24:08:31:29:93:5E:6E:A1:B9:E9:D5:E4:31:CC:9C:39:90:8F:75:42:1F:54:84:EF:30:9D:2C:84
Box Egress Proxy signing rotation OK (the box 01a1a7c6-3bbf-7192-ae0c-cc3e2ffd2c59 cloned and pushed <private repository> before and after the rotation, never re-created, root CA SHA256:7A:D4:C0:CE:24:08:31:29:93:5E:6E:A1:B9:E9:D5:E4:31:CC:9C:39:90:8F:75:42:1F:54:84:EF:30:9D:2C:84 unchanged)
::endgroup::
session e2e OK

    The case function ran unchanged. The run used a debug build with a device-flow GitHub sign-in.

    Generated by Claude Code

  9. norrietaylor
    closed this as completedon Nov 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    executor:humanHand-guided; an agent must not pick this upkind:taskA task the plan skill rendered; the body carries ## Taskmodel:standardA standard model: work that needs care, or routine work that is largesize:M200 to 500 net lines; one PR

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions
      0