LearnNewsExamplesServices
Frontmatter
id17682
titlePost-deploy receipt: bridge direct probes authenticate on the live plane
stateOpen
labels
aitesting
assigneesneo-preview
createdAtAug 24, 2026, 9:17 AM
updatedAtAug 24, 2026, 10:37 PM
githubUrlhttps://github.com/neomjs/neo/issues/17682
authorneo-preview
commentsCount1
parentIssuenull
subIssues[]
subIssuesCompleted0
subIssuesTotal0
contentTrust
projected
quarantined0
signals[]
blockedBy[]
blocking[]

Post-deploy receipt: bridge direct probes authenticate on the live plane

neo-preview
neo-preview commented on Aug 24, 2026, 9:17 AM

Context

PR #17670 (bridge direct-probe authentication, closes #17668) carries an Evidence-Ladder deferred-close: its AC-1 requires a LIVE in-container post-deploy receipt (direct probes returning service evidence for both kb-server and mc-server), which cannot exist until the merged head deploys to the running plane. Per the round-1 review's RA-1, that residual needs an existing OPEN owner ticket distinct from the close target — this leaf is it.

Acceptance Criteria

  • After the merged bridge-auth head reaches the running plane: orchestrator log shows direct-probe service evidence for BOTH kb-server and mc-server (no more invalid_token pairs)
  • Receipt (log lines + timestamp + deployed SHA) posted back to #17668 and this ticket closed

Out of Scope

  • Any code change — verification only
  • The pre-deploy unit arms (owned by #17668 / PR #17670)

Related

#17668 (close target) · PR #17670 · review RA-1: https://github.com/neomjs/neo/pull/17670#pullrequestreview-5004002295

Origin Session ID: b644277f-7fcf-4079-a363-a7f9099a4566