feat(fleet-watch): gongmyoung dual-domain coherence checks in doctor sweep (#980) - #988
Merged
Merged
Conversation
…sweep (#980) gongmyoung is the fleet's only dual-domain node (gongmyoung user = bridge/runtime, root = A2A/system) and the one-node-one-domain assumption failing there caused repeat incidents: the self-update cron vanished wholesale (LOG-20260806-bangtong-6), a registration flipped to the root-owned non-serving repo (LOG-20260805-gwakga-13), and decoy ccc-node checkouts under the home trapped resolve_repo heuristics (LOG-20260806-bangtong-7). The doctor sweep probe (CCC_FLEET_DOCTOR=1) now runs four read-only checks on nodes that have a gongmyoung account, emitting DUALDOMAIN=ok / DUALDOMAIN=fail <checks> and a DUALDOMAIN verdict line: 1. gongmyoung crontab carries ccc-self-update with user-bus env (XDG_RUNTIME_DIR + DBUS_SESSION_BUS_ADDRESS) 2. /opt/ccc-node is gongmyoung-owned, clean, on main, with no root-owned objects under .git 3. systemctl --user ccc-telegram-bridge active + user@<uid> manager active + Linger=yes 4. zero real ccc-node-* decoy directories under /home/gongmyoung (symlinks/tarballs/docs excluded) Single-domain nodes emit DUALDOMAIN=- (no-op) and a root-less probe emits skip; neither is a failure. Remediation stays an operator decision — the check only reports. Co-Authored-By: Kimi K3 <noreply@moonshot.cn>
seoseo-ai
force-pushed
the
feat/980-gongmyoung-dualdomain-checks
branch
from
August 6, 2026 09:43
9cfcfec to
b4db31b
Compare
jinon86
approved these changes
Aug 6, 2026
jinon86
left a comment
jinon86
left a comment
Contributor
There was a problem hiding this comment.
Approved after explicit operator authorization using the Seoseo-held jinon86 credential.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
플릿 유일의 이중 도메인 노드 gongmyoung(
gongmyoung유저=브릿지, root=A2A)에 "1노드=1도메인" 가정이 깨지며 반복된 사고(크론 통째 소실, root 소유 비서빙 repo 등록, 미끼 checkout 함정)를 조기 탐지하기 위한 read-only 정합성 체크 4종을 doctor 스윕(CCC_FLEET_DOCTOR=1fleet-bridge-watch)에 추가합니다 (#980).XDG_RUNTIME_DIR/DBUS_SESSION_BUS_ADDRESS) 존재/opt/ccc-nodegongmyoung 소유·clean·main 추적·.git내 root 소유 오브젝트 0systemctl --user is-active ccc-telegram-bridge+user@<uid>active + Linger=yes/home/gongmyoung/ccc-node-*실 디렉터리 0 (symlink/tarball/문서 제외)DUALDOMAIN=-(no-op), root-less probe는skip— 둘 다 실패 아님Evidence
scripts/fleet-bridge-watch.test.sh: PASS=48 FAIL=0 — 신규 10건(정합 OK/불일치 verdict+실패 체크명 명시/단일도메인 no-op/skip 무실패 + PROBE를 POSIX sh로 추출 구문검사 — quoted heredoc이라 기존 bash -n이 못 잡던 공백 커버)Closes #980