artale
/
fable-agent
Template
1
1
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: upgrade claim 7 from dangerous to advisory — git-proxy HAS POST /deploy 

Live SSH read of /home/goku/bin/git-proxy.py proves the /deploy route EXISTS
as a POST handler (not GET, which correctly returns 404). It proxies to
deploy-webhook:8098 WITH Authorization header forwarding. Auth-gated, not
autonomous. Claim 7 updated to advisory with correct evidence.
This commit is contained in:
artale 2026-07-05 14:17:08 +02:00
parent c10ad3d0eb
commit 6b182d13ff
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
docs/receipts/stale-memory-quarantine-20260702.json
View File

@ -48,10 +48,11 @@
},
{
"claim": "memory-only Phase 4 close loop: git-proxy /deploy to deploy-webhook, agents POST auth token, autonomous cycle without human intervention",
"severity": "dangerous",
"severity": "advisory",
"location": "memory/gov-eric/Phase 4 close loop",
"evidence": "GET localhost:8099/deploy returns 404. auto_patch_proven=false. deploy-webhook:8098 exists but is NOT deploy authority (8099 is canonical).",
"verification": "SSH curl localhost:8099/deploy returns 404. curl localhost:8098 returns 200 but policy says 8098 is legacy."
"evidence": "Live git-proxy source code read via SSH: /deploy EXISTS as POST handler that proxies to deploy-webhook:8098 WITH Authorization header forwarding. GET /deploy returns 404 (correct). The route is POST-only and auth-gated. NOT autonomous -- requires Authorization header.",
"verification": "cat /home/goku/bin/git-proxy.py confirms do_POST /deploy routes to DEPLOY=http://127.0.0.1:8098 with Authorization forwarded. auto_patch_proven=false. The endpoint exists but is gated.",
"replacementTruth": "Phase 4 close loop EXISTS as POST-only /deploy on 8099 proxying to 8098 deploy-webhook with auth. NOT autonomous. auto_patch_proven=false until signed action payload test passes."
},
{
"claim": "memory-only port assignments for hermes-voice (18790) and openhands (3003)",