[tiye]

本提案已按维护者 2026-10-19 的决定撤回：Actions 只承担现有构建、验证和资源上传，不获得服务器内部状态的访问权限，也不检查生产进程、Caps 安装记录或加载库。服务器不可读不再阻塞 Calcit 0.30.1 发布。

中文

Refs #119、calcit-lang/calcit#2080、milestone #62。

• 关闭本 PR，不合并新增的 inspect-production.yaml，也不改造为另一个服务器内部探测入口。
• 保留现有 Upload 中 runner 的正式工具链配对、严格检查、原测试、构建及资源上传；不扩大部署账户、SSH 或服务器权限。
• 先前 inspect 失败保留为历史记录，不标成成功。实际生产 CLI、安装模块和运行状态仍未验证，但不属于本次语言发布验收。
• Calcit 的九消费者、真实隔离后端/浏览器回归、review/CI、精确维护线 SHA、配对 registry/provenance/资产及成果 Discussion 门槛保留。
• 不执行新的生产探测、安装、部署或重启。

English

Withdrawn by the maintainer's explicit 2026-10-19 decision. Actions retains its existing runner-side build/validation and resource-upload responsibility, without access to server internals or checks of production processes, Caps installation records or loaded libraries. Unavailable production internals no longer block Calcit 0.30.1.

Close this PR without merging inspect-production.yaml or replacing it with another internal-server probe. Preserve existing Upload checks, tests and uploads, with no account/SSH/server permission expansion. Keep prior inspection failures as historical failures, not successful runs. Production CLI/modules/runtime remain unverified, but outside this language-release acceptance. Retain all nine-consumer, isolated real-backend/browser, review/CI, exact-maintenance-SHA, paired registry/provenance/assets and outcomes Discussion gates. No new production probe, install, deployment or restart.

[tiye]

使用者影响：本 PR 的失败不能靠放宽条件“修绿”。它负责证明生产服务与 #115 配对，缺少运行进程证据时必须保留未验证状态；本次没有安装、重启或部署后端。

按维护者本轮要求，重跑原有只读生产检查：attempt 3，仍失败。当前证据：

• deps.cirru 已声明 Calcit 0.30.1-alpha.4，但声明不能证明已安装或正在运行。
• SSH 部署账户 PATH 中无 Calcit；这本身不是运行服务版本证据。
• 可读 Caps state 仍列旧模块图，例如 Respo 0.16.96、js-ffi 0.1.13、recollect 0.0.45 等，与升级图不符。
• 精确工作目录 /servers/timegrass 下未获取到可读 Calcit 进程证据；不能据此断言服务已停止，也不能称已完成配对。

需要由生产服务管理账户完成/核实 CLI、模块和实际服务进程的配对，并让只读检查获得必要证据，再重跑本 workflow。构建 Upload job 原本通过；这与其他 PR 的 CDN 证书过期是独立问题。不改 expected 版本、不把 missing 改成 success、不从本机 SSH 或读取业务数据。

[tiye]

中文：已将只读目标对齐#119的正式alpha.5图；仅改预期版本和两处PR引用，完整YAML/嵌入Bash语法检查通过，原检查/SSH权限/失败条件未变。精确3dcc9bd的inspect Actions39147695923仍真实失败：没有取得实际服务CLI证据，安装元数据仍为旧Respo0.16.96/js-ffi0.1.13/Recollect0.0.45，不能把deps声明的新版本当作已安装。按维护者决定等待管理员处理；未安装/部署/重启，不将#119或stable标为可合并发布。

English: Aligned the read-only target with#119/published alpha.5, changing only expected version/two references; YAML/full embedded Bash syntax passes and checks/SSH permissions/failure conditions are unchanged. Exact3dcc9bd inspect Actions39147695923 still genuinely fails: no actual service CLI evidence and installed metadata remains old Respo0.16.96/js-ffi0.1.13/Recollect0.0.45, not matching declared versions. Await administrator action as explicitly required; no install/deploy/restart or readiness claim for#119/stable.

[tiye]

中文：独立完整审查结果

按维护者本轮明确授权，独立 agent 已完成整个 PR 的审查：a6dfb53c54734c6fcde2f6622203f725639a28e5 → 3dcc9bd9a8b894e5681c0e3b7592b5f9346d2d48，覆盖完整新增 96 行 workflow，不只是最后三行版本调整。未发现需要修复的代码问题。

• 检查全部触发、secret/权限、SSH 主机信任、shell 引用、进程路径/版本、元数据与失败分支，以及 PR 说明、实际 CI 和 review threads。
• 独立通过 YAML、完整 runner/远端 Bash 的语法、diff 检查；9 项本地合成分支验证正常/已删除可执行路径，以及缺元数据、无可读进程、错误 cwd/可执行文件/版本、版本读取失败的行为。没有连接生产或读取业务数据，也没有重跑 Actions。
• 重要限制：workflow 成功只表示收集到其要求的证据，不自动证明完整 16 模块图或实际加载 WSS 的身份。maps 不可读分支仍需要管理员人工核实；第 83–91 行的人工比对要求不能省略。不能以绿色收集结果替代生产配对验收。

当前真实 inspect 39147695923 仍为 completed/failure，Upload 成功，无 review threads。独立审查不把失败 CI 改为通过，不证明实际服务已配对，也不授权安装、部署、重启或合并。本 PR 和稳定发布继续等待管理员证据及原门槛。

English: independent full review

Under the maintainer's new explicit authorization, an independent agent reviewed the complete base-to-head change above, including all 96 added workflow lines rather than only the latest three-line update. No actionable code findings.

The review covered triggers, secret/permissions, SSH host trust, quoting, process executable/version and metadata collection, fail-closed paths, PR explanations and actual CI/threads. Independent YAML/full runner and remote Bash syntax/diff checks passed, as did nine local synthetic branches covering matching/deleted executables and missing metadata/processes, wrong cwd/executable/version and version-read failure. No production connection, business-data access or workflow rerun occurred.

A successful workflow is evidence collection, not automatic verification of the complete 16-module graph or loaded WSS identity. Unreadable maps still require administrator verification; the explicit manual comparison in lines83–91 remains mandatory. Actual inspect39147695923 is still completed/failure, Upload succeeds and threads are empty. This review neither turns CI green nor proves production pairing, authorizes installation/deployment/restart or permits merge. Retain all administrator and release gates.

[tiye]

使用者视角：目前不是代码编译失败，而是生产配对证据尚不满足要求；本次未安装、部署或重启服务，也未放宽检查条件。

中文：最新只读复查

按维护者本轮要求，对 PR #116 精确 HEAD 3dcc9bd9a8b894e5681c0e3b7592b5f9346d2d48 重跑现有 inspect：attempt 4。2026-10-18 23:14 UTC 已完成，仍 exit 2。SSH 连接和读取均正常，未发现本次可通过修改 workflow 修复的 shell/网络错误。

• deps 声明目标已为 Calcit 0.30.1-alpha.5，但声明不是安装或运行证明。
• 可读 Caps 记录仍为旧图：Cumulo Reel 0.0.38（目标 0.0.58）、Respo 0.16.96（0.16.122）、Recollect 0.0.45（0.0.63）、WSS 0.2.27（0.2.36）、std 0.2.31（0.2.43）。
• 未取得精确 cwd /servers/timegrass 下可读 Calcit 进程的实际可执行版本；不能因此断言服务已停。
• SSH 账户 PATH 无 calcit，JS 声明读取提示 jq 或 package.json 不可用；这些也不能替代实际服务证据。

#119 的精确 main 0387f949 Upload 已成功，但该流程只在 runner 安装工具和模块，生产端仅接收上传文件，不安装服务器 CLI/模块或重启。因此重复 Upload 不能修复配对问题。

按此前明确选择，继续保留管理员门槛。管理员须使用实际服务管理身份核实/处理 CLI 与完整模块图，并使现有只读检查能取得实际服务版本及加载 WSS 身份的证据，然后再重跑。不要提供密钥、密码、业务数据或进程环境。本任务未执行本机 SSH、生产安装、权限修改或重启；PR 保持开放，生产配对与稳定发布不标记完成。

English: latest read-only verification

Reran the existing inspect at exact PR HEAD above under this request. Attempt 4 completed on 2026-10-18 at 23:14 UTC and still exits 2. SSH and collection work; no actionable shell/network defect was found.

Declarations target published alpha.5, but recorded installations remain the old graph listed above, and no readable exact-cwd service executable/version was obtained. This does not prove the service stopped. Missing PATH/JS-declaration evidence is not runtime evidence either.

The successful exact-main #119 Upload installs tools/modules on the runner and uploads files to production; it does not install server tools/modules or restart the service. Keep the administrator gate as previously requested: verify/remediate the actual service CLI, full module graph and loaded WSS identity, expose the necessary read-only evidence, then rerun. No local SSH, production install/deploy/permission change/restart, fail-open change or release-readiness claim occurred. PR remains open.

[tiye]

维护者已明确：Actions 仅承担现有构建和资源上传，不承担服务器内部状态检查。撤回本提案，不合并 workflow、不扩大权限；保留历史失败，不再作为 Calcit 0.30.1 的发布前置。其余类型、语义、消费者及配对发布门槛保持。 / The maintainer explicitly limits Actions to its existing build/resource-upload responsibilities. Withdraw this proposal without merging the workflow or expanding permissions. Preserve historical failures, remove this production-internal prerequisite from Calcit 0.30.1, and retain all other type/semantic/consumer/paired-release gates.