BUILD-CLP-001-S — Repository Governance Observability + Health Projection

.github/workflows/build-clp-001-s-postgres.yml

@@ -0,0 +1,126 @@
+name: BUILD-CLP-001-S Governance Health Gate
+on:
+  pull_request:
+    paths:
+      - 'governance/clp-001/builds/BUILD-CLP-001-S/**'
+      - '.github/workflows/build-clp-001-s-postgres.yml'
+jobs:
+  postgres-s-health:
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: postgres:16
+        env:
+          POSTGRES_PASSWORD: postgres
+        ports: ['5432:5432']
+        options: >-
+          --health-cmd "pg_isready -U postgres"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+    env:
+      PGHOST: 127.0.0.1
+      PGPORT: 5432
+      PGUSER: postgres
+      PGPASSWORD: postgres
+      PGDATABASE: postgres
+      FROZEN_S_MANIFEST_SHA256: aba8841c7e0c175c308e7e6410367874a9e41ec562de53bfd38e5820a728ea25
+    steps:
+      - uses: actions/checkout@v4
+      - name: Report exact S source hashes
+        run: |
+          root=governance/clp-001/builds/BUILD-CLP-001-S
+          for f in \
+            migrations/003_clp001_s_governance_health.sql \
+            migrations/004_clp001_s_review_hardening.sql \
+            migrations/005_clp001_s_canonical_binding.sql \
+            migrations/006_clp001_s_exact_evidence_binding.sql \
+            tests/s-health.sql \
+            tests/s-health-v102.sql \
+            fixtures/repository-observations.sql \
+            fixtures/G0-STATUS-SUPERSESSION.json \
+            fixtures/R-INDEPENDENT-REVIEW-RECEIPT.json \
+            README-S.md \
+            docs/BUILD-CLP-001-S-SPEC.md \
+            docs/2026-10-04-build-clp-001-s-plan.md; do
+              bytes=$(wc -c < "$root/$f" | tr -d ' ')
+              hash=$(sha256sum "$root/$f" | awk '{print $1}')
+              echo "S_SOURCE $f $bytes $hash"
+          done
+      - name: Verify frozen S source manifest
+        run: |
+          python3 - <<'PY'
+          import hashlib, json, os, pathlib, sys
+          root = pathlib.Path('governance/clp-001/builds/BUILD-CLP-001-S')
+          manifest_path = root / 'receipts/S-source-manifest.json'
+          receipt_path = root / 'receipts/BUILD-CLP-001-S-verification.json'
+          manifest_bytes = manifest_path.read_bytes()
+          manifest_sha = hashlib.sha256(manifest_bytes).hexdigest()
+          manifest = json.loads(manifest_bytes)
+          receipt = json.loads(receipt_path.read_text())
+          frozen_sha = os.environ['FROZEN_S_MANIFEST_SHA256']
+          failures = []
+          if manifest_sha != frozen_sha:
+              failures.append(f'MANIFEST_DIGEST expected={frozen_sha} observed={manifest_sha}')
+          if receipt.get('source_manifest_sha256') != manifest_sha:
+              failures.append(f"RECEIPT_MANIFEST_DIGEST expected={receipt.get('source_manifest_sha256')} observed={manifest_sha}")
+          required = {
+              'migrations/003_clp001_s_governance_health.sql',
+              'migrations/004_clp001_s_review_hardening.sql',
+              'migrations/005_clp001_s_canonical_binding.sql',
+              'migrations/006_clp001_s_exact_evidence_binding.sql',
+              'tests/s-health.sql',
+              'tests/s-health-v102.sql',
+              'fixtures/repository-observations.sql',
+              'fixtures/G0-STATUS-SUPERSESSION.json',
+              'fixtures/R-INDEPENDENT-REVIEW-RECEIPT.json',
+              'README-S.md',
+              'docs/BUILD-CLP-001-S-SPEC.md',
+              'docs/2026-10-04-build-clp-001-s-plan.md',
+          }
+          listed = [item['path'] for item in manifest['files']]
+          if set(listed) != required or len(listed) != len(required):
+              failures.append(f'INVENTORY expected={sorted(required)} observed={sorted(listed)}')
+          for item in manifest['files']:
+              path = root / item['path']
+              if not path.is_file():
+                  failures.append(f"MISSING {item['path']}")
+                  continue
+              data = path.read_bytes()
+              observed_hash = hashlib.sha256(data).hexdigest()
+              observed_bytes = len(data)
+              print(f"S_MANIFEST {item['path']} {observed_bytes} {observed_hash}")
+              if observed_bytes != item['bytes']:
+                  failures.append(f"SIZE {item['path']} expected={item['bytes']} observed={observed_bytes}")
+              if observed_hash != item['sha256']:
+                  failures.append(f"HASH {item['path']} expected={item['sha256']} observed={observed_hash}")
+          if failures:
+              print('\n'.join(failures), file=sys.stderr)
+              raise SystemExit(1)
+          print(f'S_SOURCE_MANIFEST_PASS {manifest_sha}')
+          PY
+      - name: Report workflow hash
+        run: sha256sum .github/workflows/build-clp-001-s-postgres.yml
+      - name: Install PostgreSQL client
+        run: sudo apt-get update && sudo apt-get install -y postgresql-client
+      - name: Apply Q, R, S migrations
+        run: |
+          psql -v ON_ERROR_STOP=1 -f governance/clp-001/builds/BUILD-CLP-001-Q/migrations/001_clp001_q.sql
+          psql -v ON_ERROR_STOP=1 -f governance/clp-001/builds/BUILD-CLP-001-R/migrations/002_clp001_r.sql
+          psql -v ON_ERROR_STOP=1 -f governance/clp-001/builds/BUILD-CLP-001-S/migrations/003_clp001_s_governance_health.sql
+          psql -v ON_ERROR_STOP=1 -f governance/clp-001/builds/BUILD-CLP-001-S/migrations/004_clp001_s_review_hardening.sql
+          psql -v ON_ERROR_STOP=1 -f governance/clp-001/builds/BUILD-CLP-001-S/migrations/005_clp001_s_canonical_binding.sql
+          psql -v ON_ERROR_STOP=1 -f governance/clp-001/builds/BUILD-CLP-001-S/migrations/006_clp001_s_exact_evidence_binding.sql
+      - name: Load repository governance observations
+        run: psql -v ON_ERROR_STOP=1 -f governance/clp-001/builds/BUILD-CLP-001-S/fixtures/repository-observations.sql
+      - name: Run deterministic S health rules T1-T14
+        run: psql -v ON_ERROR_STOP=1 -f governance/clp-001/builds/BUILD-CLP-001-S/tests/s-health.sql
+      - name: Run deterministic S v1.0.2 rules T15-T16
+        run: psql -v ON_ERROR_STOP=1 -f governance/clp-001/builds/BUILD-CLP-001-S/tests/s-health-v102.sql
+      - name: Verify live EdOpSys projection
+        run: |
+          row=$(psql -At -F '|' -c "SELECT overall_health,blocking_reason_count,governance_status,build_status,ci_status,integrity_status,review_status,authority_status,drift_status FROM edopsys_observability.v_repository_health WHERE repository='JaeTierce31/EdOpSys'")
+          test "$row" = "DEGRADED|0|CURRENT|HEALTHY|PASS|HEALTHY|HEALTHY|DEGRADED|HEALTHY"
+          json=$(psql -Atc "SELECT dashboard::text FROM edopsys_observability.v_dashboard_summary_json WHERE repository='JaeTierce31/EdOpSys'")
+          test -n "$json"
+          echo "$json"

governance/clp-001/builds/BUILD-CLP-001-S/README-S.md

@@ -0,0 +1,37 @@
+# BUILD-CLP-001-S — Repository Governance Observability + Health Projection
+
+Parent baseline: `b0f19f2d0ce8a086604ed1f08d1202cd5650dae8` (merged BUILD-CLP-001-R).
+
+S adds an append-only PostgreSQL observability schema and deterministic views for repository/build/authority/integrity/CI/review/drift health. It does not alter CLP domain semantics and does not authorize domain actions.
+
+## Canonical boundary
+
+> Observability projections are descriptive and MUST NOT authorize CLP state transitions, worker eligibility, verification, payout, or policy execution.
+
+## Health model
+
+- `BLOCKED`: unresolved P0/P1, required artifact failure, canonical CI failure, blocking authority conflict, or blocked canonical build.
+- `UNKNOWN`: required observations are absent or verification is incomplete.
+- `DEGRADED`: stale-head CI, authority freshness debt, unresolved P2, or non-blocking open drift.
+- `HEALTHY`: all required gates present and passing.
+
+## Dashboard views
+
+- `v_build_health`
+- `v_authority_health`
+- `v_integrity_health`
+- `v_ci_health`
+- `v_review_health`
+- `v_governance_assertion_current`
+- `v_governance_drift`
+- `v_governance_timeline`
+- `v_repository_health`
+- `v_dashboard_summary_json`
+
+## Stale G0 supersession
+
+`governance/clp-001/g0/G0-STATUS.json` is preserved as historical evidence. `fixtures/G0-STATUS-SUPERSESSION.json` records why its earlier blocked operational status is superseded by the later G0 designation without rewriting history.
+
+## Verification
+
+`tests/s-health.sql` contains deterministic T1–T10 tests. The GitHub Actions PostgreSQL 16 gate applies Q→R→S migrations, loads repository observations, runs T1–T10, and checks the live EdOpSys projection.

governance/clp-001/builds/BUILD-CLP-001-S/docs/2026-10-04-build-clp-001-s-plan.md

@@ -0,0 +1,51 @@
+# BUILD-CLP-001-S Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Build an append-only PostgreSQL governance observability projection and deterministic repository-health views without granting execution authority.
+
+**Architecture:** Source evidence is ingested as append-only observations/snapshots in `edopsys_observability`; deterministic SQL views compute domain health. A dedicated assertion/supersession model preserves stale historical facts while resolving current truth through higher-authority later evidence.
+
+**Tech Stack:** PostgreSQL 16, SQL/PLpgSQL, GitHub Actions.
+
+**Spec:** `docs/BUILD-CLP-001-S-SPEC.md`
+
+## Global Constraints
+- Parent baseline MUST be merged R `b0f19f2d0ce8a086604ed1f08d1202cd5650dae8`.
+- Observability MUST NOT mutate CLP domain history or authorize domain actions.
+- Existing Q/R constraints and triggers MUST remain unchanged.
+- UNKNOWN MUST NOT collapse into HEALTHY.
+- Historical stale G0 evidence MUST be superseded, never rewritten/deleted.
+
+## Review Focus
+- Missing observation sets return UNKNOWN rather than optimistic health.
+- CI success on a stale head returns STALE_HEAD/DEGRADED.
+- Resolved/superseded P1 findings no longer block.
+- Historical G0 blockage remains queryable while current G0 status resolves designated.
+- Append-only protections reject mutation in both CLP and observability tables.
+
+---
+
+### Task 1: Schema + append-only observation model
+**Files:** migration and SQL tests.
+- [ ] Write failing schema contract tests.
+- [ ] Implement schema/tables/comments/triggers.
+- [ ] Verify schema contract passes.
+
+### Task 2: Deterministic health views
+**Files:** migration and health-rule tests.
+- [ ] Write T1-T9 failing health tests.
+- [ ] Implement build/integrity/CI/review/authority/drift/repository/timeline/JSON views.
+- [ ] Verify all health tests pass.
+
+### Task 3: Stale-G0 supersession fixture
+**Files:** `fixtures/repository-observations.sql`.
+- [ ] Write fixture assertions for historical blockage + current designation + resolved drift.
+- [ ] Insert machine-readable assertions, supersession receipt and resolved drift record.
+- [ ] Verify current G0 projection is not BLOCKED by the historical assertion.
+
+### Task 4: PostgreSQL 16 gate + immutable-domain test
+**Files:** workflow and `tests/s-health.sql`.
+- [ ] Add T10 mutation rejection test for CLP and observability.
+- [ ] Run migration + fixture + tests against PostgreSQL 16 in CI.
+- [ ] Record exact-head run before review.

governance/clp-001/builds/BUILD-CLP-001-S/docs/BUILD-CLP-001-S-SPEC.md

@@ -0,0 +1,29 @@
+# BUILD-CLP-001-S — Repository Governance Observability + Health Projection
+
+Baseline: `b0f19f2d0ce8a086604ed1f08d1202cd5650dae8` (merged BUILD-CLP-001-R).
+
+## Purpose
+Create a PostgreSQL-backed, append-only observability projection for repository governance health. The projection ingests evidence-derived observations and exposes deterministic views suitable for a future dashboard.
+
+## Authority boundary
+Observability projections are descriptive and MUST NOT authorize CLP state transitions, worker eligibility, verification, payout, or policy execution.
+
+GitHub governance artifacts, signed/hashed receipts, authority records, CI evidence, and independent reviews remain source evidence. SQL views are derived projections only.
+
+## Required health states
+`HEALTHY`, `DEGRADED`, `BLOCKED`, `UNKNOWN`.
+
+## Required rules
+- Unresolved P0/P1 -> BLOCKED.
+- Missing required artifact or hash/size mismatch -> BLOCKED.
+- Failed canonical CI -> BLOCKED.
+- Authority conflict that blocks execution -> BLOCKED.
+- Missing required observation -> UNKNOWN (never HEALTHY).
+- Non-blocking governance drift -> DEGRADED.
+- Authority freshness review due -> DEGRADED unless an explicit fail-closed policy marks it blocking.
+- Unresolved P2 -> DEGRADED.
+- Stale-head CI -> DEGRADED.
+- HEALTHY only when every required gate is present and passing.
+
+## Stale G0 rule
+`governance/clp-001/g0/G0-STATUS.json` is retained as historically valid evidence of an earlier blocked state. It is superseded, not deleted or rewritten, by the later G0 designation chain. The supersession relationship must be machine-readable.

governance/clp-001/builds/BUILD-CLP-001-S/fixtures/G0-STATUS-SUPERSESSION.json

@@ -0,0 +1,22 @@
+{
+  "receipt_id": "CLP001-G0-STATUS-SUPERSESSION-001",
+  "repository": "JaeTierce31/EdOpSys",
+  "historical_assertion": {
+    "source_path": "governance/clp-001/g0/G0-STATUS.json",
+    "git_blob_sha1": "1a12cc327460748fdb24b306cac6dced83d05a71",
+    "status": "BLOCKED_PENDING_SOURCE_BUNDLE_UPLOAD",
+    "g0_designated": false,
+    "interpretation": "Historically valid fail-closed status before byte-exact source-bundle materialization completed."
+  },
+  "superseding_assertion": {
+    "source_path": "governance/clp-001/g1/G0-designation.json",
+    "git_blob_sha1": "1217f749311ee24c2b31a6d702e75e9d2eb9863f",
+    "g0_commit_sha": "adab09caa0093c9490a8f1ab215a719bf0fa9aa4",
+    "designated_at": "2026-10-04T09:03:06.661926Z",
+    "designation": "G0",
+    "source_bundle_integrity": "PASS"
+  },
+  "resolution": "SUPERSEDED",
+  "rule": "Retain the historical status artifact unchanged. Current G0 status resolves from the later higher-authority designation chain; historical replay retains both artifacts.",
+  "current_baseline_at_receipt_creation": "b0f19f2d0ce8a086604ed1f08d1202cd5650dae8"
+}

governance/clp-001/builds/BUILD-CLP-001-S/fixtures/R-INDEPENDENT-REVIEW-RECEIPT.json

@@ -0,0 +1,16 @@
+{
+  "receipt_id": "BUILD-CLP-001-R-INDEPENDENT-REVIEW-001",
+  "repository": "JaeTierce31/EdOpSys",
+  "reviewer": "Mistral Vibe",
+  "reviewed_sha": "32a2064cf0aa179e2b0f2c8f40e56e705cf37fec",
+  "base_sha": "5427aff8c10370085546cf98ae83dacd5939bb0a",
+  "artifact_integrity": "PASS_16_OF_16",
+  "ci_run_id": 37206695993,
+  "ci_result": "SUCCESS",
+  "p0": 0,
+  "p1": 0,
+  "p2": 0,
+  "p3": 3,
+  "decision": "MERGE_APPROVED",
+  "source_note": "Structured from the user-supplied Mistral Vibe exact-head independent review transcript; this file is an observability receipt, not a cryptographic reviewer signature."
+}

governance/clp-001/builds/BUILD-CLP-001-S/fixtures/repository-observations.sql

@@ -0,0 +1,29 @@
+BEGIN;
+SET search_path=edopsys_observability,public;
+
+INSERT INTO obs_observations VALUES
+('obs-base-r','JaeTierce31/EdOpSys','REPOSITORY_HEAD','refs/heads/main','b0f19f2d0ce8a086604ed1f08d1202cd5650dae8','2026-10-04T15:19:10Z','sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa','{}'),
+('obs-build-r','JaeTierce31/EdOpSys','BUILD_RECEIPT','PR#3','32a2064cf0aa179e2b0f2c8f40e56e705cf37fec','2026-10-04T15:19:10Z','sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb','{}'),
+('obs-ci-r','JaeTierce31/EdOpSys','CI_RUN','actions/37206695993','32a2064cf0aa179e2b0f2c8f40e56e705cf37fec','2026-10-04T13:45:19Z','sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc','{}'),
+('obs-review-r','JaeTierce31/EdOpSys','PR_REVIEW','Mistral-Vibe-review','32a2064cf0aa179e2b0f2c8f40e56e705cf37fec','2026-10-04T14:47:00Z','sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd','{}'),
+('obs-int-r','JaeTierce31/EdOpSys','ARTIFACT_INTEGRITY','R-source-manifest','0609035dc2373e8b2224e739761df88b5f2c7030b25b8db7434b5bf8638e680a','2026-10-04T14:47:00Z','sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee','{}'),
+('obs-auth-av','JaeTierce31/EdOpSys','AUTHORITY_RECORD','authority-registry-v2','17145394aa274dfca76003ac6e8be07082a997c1','2026-10-04T15:19:10Z','sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff','{}'),
+('obs-auth-mn','JaeTierce31/EdOpSys','AUTHORITY_RECORD','authority-registry-v2','17145394aa274dfca76003ac6e8be07082a997c1','2026-10-04T15:19:10Z','sha256:abababababababababababababababababababababababababababababababab','{}');
+
+INSERT INTO repository_baseline VALUES('obs-base-r','JaeTierce31/EdOpSys','b0f19f2d0ce8a086604ed1f08d1202cd5650dae8','BUILD-CLP-001-R','adab09caa0093c9490a8f1ab215a719bf0fa9aa4','dddd7d91494a5c3916146387828efd643b957fa2','95a1da390d81d3fefe611c74405505aa28fa686d','5427aff8c10370085546cf98ae83dacd5939bb0a','b0f19f2d0ce8a086604ed1f08d1202cd5650dae8','2026-10-04T15:19:10Z');
+INSERT INTO build_status VALUES('obs-build-r','JaeTierce31/EdOpSys','BUILD-CLP-001-R',true,'32a2064cf0aa179e2b0f2c8f40e56e705cf37fec','b0f19f2d0ce8a086604ed1f08d1202cd5650dae8','5427aff8c10370085546cf98ae83dacd5939bb0a',61,61,'success','APPROVED_EXTERNAL',0,true,'2026-10-04T15:19:10Z');
+INSERT INTO ci_runs VALUES('obs-ci-r','JaeTierce31/EdOpSys','BUILD-CLP-001-R',37206695993,'32a2064cf0aa179e2b0f2c8f40e56e705cf37fec','32a2064cf0aa179e2b0f2c8f40e56e705cf37fec','completed','success','success','2026-10-04T13:45:19Z');
+INSERT INTO pr_reviews(id,repository,pr_number,reviewed_sha,expected_head_sha,reviewer,severity,finding_status,resolved,superseded,merge_blocking,observed_at,finding_key)
+VALUES('obs-review-r','JaeTierce31/EdOpSys',3,'32a2064cf0aa179e2b0f2c8f40e56e705cf37fec','32a2064cf0aa179e2b0f2c8f40e56e705cf37fec','Mistral Vibe',NULL,'APPROVED',true,false,false,'2026-10-04T14:47:00Z','__summary__');
+INSERT INTO artifact_integrity VALUES('obs-int-r','JaeTierce31/EdOpSys','governance/clp-001/builds/BUILD-CLP-001-R/receipts/R-source-manifest.json',true,'PASS','0609035dc2373e8b2224e739761df88b5f2c7030b25b8db7434b5bf8638e680a','0609035dc2373e8b2224e739761df88b5f2c7030b25b8db7434b5bf8638e680a',2413,2413,'2026-10-04T14:47:00Z');
+INSERT INTO artifact_integrity_scope VALUES('obs-int-r','JaeTierce31/EdOpSys','BUILD-CLP-001-R','2026-10-04T14:47:00Z');
+INSERT INTO authority_records VALUES
+('obs-auth-av','JaeTierce31/EdOpSys','AUTH-APPLEVALLEY-155360','2025-S21','SC-0','US-MN-DAKOTA-APPLE-VALLEY','sha256:00b53bf9346e8e89debff50503783b2bcbe311715c6cb1a560c3076a2b971004','FRESHNESS_REVIEW_DUE',false,'2026-10-04T15:19:10Z'),
+('obs-auth-mn','JaeTierce31/EdOpSys','AUTH-MN-PLUMBING-4714','2020-MN-PLUMBING-CODE','SC-0','US-MN','sha256:1a49eaa526cffbc39613fc0b64fd70daeb8e41a025baed00f708fc5b013b0bc2','CURRENT',false,'2026-10-04T15:19:10Z');
+
+INSERT INTO governance_status_assertions VALUES
+('G0-BLOCKED-HIST','JaeTierce31/EdOpSys','G0','designation_status','"BLOCKED_PENDING_SOURCE_BUNDLE_UPLOAD"','governance/clp-001/g0/G0-STATUS.json',NULL,'2026-10-04T08:50:00Z','2026-10-04T09:03:06Z','G0-DESIGNATED-CURRENT',1,'SUPERSEDED'),
+('G0-DESIGNATED-CURRENT','JaeTierce31/EdOpSys','G0','designation_status','"DESIGNATED"','governance/clp-001/g1/G0-designation.json','adab09caa0093c9490a8f1ab215a719bf0fa9aa4','2026-10-04T09:03:06Z',NULL,NULL,2,'CURRENT');
+INSERT INTO governance_supersession_receipts VALUES('G0-SUPERSESSION-001','JaeTierce31/EdOpSys','G0-BLOCKED-HIST','G0-DESIGNATED-CURRENT','Earlier fail-closed G0 status was historically valid; later byte-exact G0 designation supersedes its current operational interpretation.','sha256:1111111111111111111111111111111111111111111111111111111111111111','2026-10-04T09:03:06Z');
+INSERT INTO governance_drift_findings VALUES('DRIFT-G0-001','JaeTierce31/EdOpSys','STALE_STATUS_ASSERTION','G0','P2','SUPERSEDED','G0-SUPERSESSION-001','2026-10-04T15:19:10Z');
+COMMIT;