Source identity
| Field | Recorded value |
|---|---|
| Source type | GitHub source |
| Original record | Janady13/missionmatch / docs/evidence/phase2/drift/session-start-drift-2.txt |
| Date | Not specified in source |
| Repository | Janady13/missionmatch |
| Revision | 720d47fae476b0d38477ae4401697d372b1ea2bc |
| Branch | feature/opportunity-to-outcome |
| Path or archive member | docs/evidence/phase2/drift/session-start-drift-2.txt |
| Original SHA-256 | 2ce1820e31251b0b83402b2c0ff54ed01bebea2920ef1e440e17607e9beabf11 |
| Git blob SHA | 47cd1a51a9772518b3342d8381c88308d5e09e09 |
| Reading-copy SHA-256 | 2ce1820e31251b0b83402b2c0ff54ed01bebea2920ef1e440e17607e9beabf11 |
Recovered source transcript
Download complete source text ↓73 lines · 3.2 KB
SESSION START DRIFT VERIFICATION, second session of 28 July 2026. Run BEFORE any
change, as the protocol requires. HEAD 867bf42, 376 commits, working tree CLEAN.
1. FROZEN SCORING ENGINE, diff against the 462eb81 baseline
engine diff lines: 0 (must be 0)
POSITIVE CONTROL, the detector must see a diff that DOES exist:
auth/service.go diff lines: 2 (nonzero proves the check runs)
2. NO PYTHON
.py files: 0
POSITIVE CONTROL, with one planted: 1 (must be 1)
after removal: 0
3. NO DASHES IN AUTHORED PROSE, em or en, all zero
BUILD_STATE.md, ARCHITECTURE.txt, BUILD_CONTINUATION_PROTOCOL.md,
PHASE2_DOCUMENT_TRIAL.md, RUNBOOK_RESTORE.md, IMPROVEMENTS.md
4. SCHEMA VERSIONS, queried per database on the host that owns it
tenant 100.94.8.94:5432/missionmatch v80
staging 100.94.8.94:5432/missionmatch_staging v81
control plane 100.77.114.40:5433/missionmatch v80
accounts 6, real last_login 6
UNCHANGED from the phase close reading. Staging one ahead at v81 is the
intended staging only state of migration 0081.
5. SECRETS
key material in the working tree: 0
key material in git history: 0
ARCHITECTURE.txt secret free: yes, 0 hits
BUILD_STATE.md: finding D4 is RECORDED and still open. This file knowingly
carries three plaintext passwords and the decision to rotate or purge is
Joseph's. Not a new finding, not silently redacted.
6. BUILD ROUTES DARK IN PRODUCTION, unauthenticated leg
POST requirement-drafts approve : 404
POST opportunities scope : 404
POST opportunities/tracked : 405 (405 is the pre build shape)
production site : 200
POSITIVE CONTROL, GET /api/auth/csrf : 200. A live route must answer, or a
uniform 404 would prove the host is down rather than the routes dark.
7. THE MERGE GATE
make build-test-gates: PASS
8. BOTH NODES CARRY THE SAME BINARY
Bubbles 8f24414531e80a9a
megamind-agi 8f24414531e80a9a
Matched, and matching the handoff.
9. TRACK H INFRASTRUCTURE
11 timers installed. mm-db-backup last Result=success, next firing
29 July 03:06.
Backup set 20260728 holds all THREE databases plus MANIFEST.sha256:
control-plane, staging, tenant-missionmatch.
mm-fairness-snapshot Result=exit-code, which is finding D1 and is EXPECTED
to be failing until the queued deploy.
AN INSTRUMENT DEFECT IN THIS VERY CHECK, found and corrected before it was
recorded: the first probe counted /var/backups/missionmatch and reported
ZERO backup sets. The real root is /var/backups/missionmatch-db. A zero from
a wrong path is exactly the false negative this protocol exists to catch, and
it would have read as catastrophic drift. The path was resolved from the
script rather than guessed a second time.
10. THE QUEUED FINDINGS ARE STILL OPEN, as recorded, none silently fixed
D1 MM_COMPLIANCE_DATABASE_URL in api.env: absent
D2 units carrying OnFailure: 2 of many
D3 control plane migrator credential: refused
D4 plaintext passwords in this ledger: present, decision pending
VERDICT: NO DRIFT. Every check that could pass by doing nothing carries a
positive control. Recorded before any change this session.