ops(honcho): honcho-api 3.0.6 declared but 3.0.3 live — land or revert #731

Closed
opened 2026-06-05 14:45:48 +02:00 by claude · 0 comments
Collaborator

From the 2026-06-05 deslop audit + a live rs2000 check (claude).

Finding (live-verified)

modules/honcho-api/module.yaml declares artifact.tag / source.ref = 3.0.6, but the running containers are 3.0.3:

home-platform-honcho-api-1      home-platform-honcho:3.0.3   Up 38h (healthy)
home-platform-honcho-deriver-1  home-platform-honcho:3.0.3   Up 38h (healthy)

So the 3.0.6 upgrade never landed on the host (criticality: core). Operator intent: "should be current" → most likely a partially-failed upgrade.

Fix (operator-gated — runtime, core DB-adjacent)

  1. Investigate WHY 3.0.6 didn't land: does the home-platform-honcho:3.0.6 image actually exist (built/published)? Check the build/deploy logs for a failed apply.
  2. If 3.0.6 is real + intended → deploy it (gated platformctl apply path), then re-audit so image_observed refreshes to 3.0.6.
  3. If 3.0.6 was aspirational / the upgrade is abandoned → revert artifact.tag/source.ref to 3.0.3 to match reality.
  4. Do NOT hand-edit image_observed — it is plan.py's drift-detection source of truth; it must only change via a real deploy + re-audit.

Acceptance

  • Manifest tag and live image_observed agree (both 3.0.6 after deploy, or both 3.0.3 after revert).
  • The decision (deploy vs revert) recorded with the root-cause of the failed upgrade.

Authored from the deslop audit (claude). Runtime apply = operator-gated; Codex authors, operator approves.

From the 2026-06-05 deslop audit + a live rs2000 check (claude). ## Finding (live-verified) `modules/honcho-api/module.yaml` declares `artifact.tag` / `source.ref` = **3.0.6**, but the running containers are **3.0.3**: ``` home-platform-honcho-api-1 home-platform-honcho:3.0.3 Up 38h (healthy) home-platform-honcho-deriver-1 home-platform-honcho:3.0.3 Up 38h (healthy) ``` So the 3.0.6 upgrade **never landed on the host** (criticality: core). Operator intent: "should be current" → most likely a partially-failed upgrade. ## Fix (operator-gated — runtime, core DB-adjacent) 1. Investigate WHY 3.0.6 didn't land: does the `home-platform-honcho:3.0.6` image actually exist (built/published)? Check the build/deploy logs for a failed apply. 2. If 3.0.6 is real + intended → **deploy it** (gated `platformctl apply` path), then re-audit so `image_observed` refreshes to 3.0.6. 3. If 3.0.6 was aspirational / the upgrade is abandoned → revert `artifact.tag`/`source.ref` to **3.0.3** to match reality. 4. **Do NOT hand-edit `image_observed`** — it is `plan.py`'s drift-detection source of truth; it must only change via a real deploy + re-audit. ## Acceptance - [ ] Manifest tag and live `image_observed` agree (both 3.0.6 after deploy, or both 3.0.3 after revert). - [ ] The decision (deploy vs revert) recorded with the root-cause of the failed upgrade. *Authored from the deslop audit (claude). Runtime apply = operator-gated; Codex authors, operator approves.*
Sign in to join this conversation.
No labels
W6d-automerge-calibration
agent/claude-code
agent/codex
agent/hermes
agent/iskra
agent/ollama
agent/patchwarden
automerge-candidate
class/security-sensitive
cutover-gate
dependency/blocked
dependency/blocks-others
dependency/cross-repo
dependency/needs-confirmation
domain:agents
domain:ci
domain:docs
domain:forgejo
domain:infra
domain:memory
domain:runtime
domain:signal
domain:ux
flow/architecture
flow/blocked
flow/deployed
flow/done
flow/implementation
flow/intake
flow/maintained
flow/observed
flow/ready
flow/refining
flow/retired
flow/review
iterating
judge/codex-candidate
judge/hermes-candidate
judge/low-confidence
judge/needs-refinement
judge/operator-needed
judge/p0
judge/p1
judge/p2
judge/p3
judge/park
judge/patchwarden-candidate
judge/stale-priority
kind/adr
kind/bug
kind/chore
kind/feature
kind/infra
kind/ops
kind/refactor
kind/research
large-impact
merge/auto
merge/manual
merge/manual-dependency-conflict
merge/manual-failing-tests
merge/manual-merge-conflict
merge/manual-missing-review
merge/manual-operator-preference
merge/manual-red-zone
merge/manual-security-sensitive
merge/manual-unclear-scope
merge/manual-unknown
meta
mode:operator-only
mode:patchwarden-iskra-approved
mode:safe-auto
needs-operator-decision
needs-triage
not-ready
observed/erroring
observed/needs-followup
observed/pending
observed/retire-candidate
observed/unused
observed/used
operator-emotional
owner-attention
phase/02
phase/03
priority:p0
priority:p1
priority:p2
priority:p3
proposed
ready-for-agent
ready-for-operator
recovery
review:claude-reviewed
review:codex-reviewed
review:dziadek-reviewed
review:needs-human
risk/exposure
risk/process
risk/product
risk/runtime
safety:external-write
safety:no-prod-mutation
safety:prod-impact
safety:secret-touch
size/large
size/medium
size/small
size/tiny
size/unknown
source/adr
source/agent-generated
source/manual
source/operator-chat
source/voice-note
status:blocked
status:codex-ready
status:merged:pending-evidence
status:needs-evidence
status:operator-needed
status:parked
tier/full
tier/lite
tier/stacked
tier:0-platform-substrate
tier:1-iskra-value-layer
tier:2-tools-products-modules
type:bug
type:chore
type:docs
type:feat
type:policy
type:research
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
pdurlej/platform#731
No description provided.