Skip to content

ci: standing Alpha boot-LOGIN acceptance gate — green-by-SHA (vms-341) - #692

Merged
baron-3dl merged 1 commit into
mainfrom
vms-341-alpha-cigate
Aug 21, 2026
Merged

baron-3dl merged 1 commit into
mainfrom
vms-341-alpha-cigate

Conversation

@baron-3dl

Copy link
Copy Markdown
Contributor

Makes the Alpha authentic-login proof a standing green-by-SHA release-acceptance gate, not an ad-hoc conductor-run command — the 4th-arch authenticity dimension of the 0.5 flip.

What it adds

One job, alpha-boot-login (+62 lines, ci.yml only): OVMX/Linux-Alpha (LP64) boots under qemu-system-alpha to an authenticated interactive DCL $ over the genuine Files-11 ODS-2 executive ACP — SYSTEM/MANAGER authenticated by Purdy against the binary $UAFDEF SYSUAF, then SHOW TIME. Exit 0 iff that whole chain holds.

Tier & rationale

  • schedule || workflow_dispatch — exactly the tier the netbsd-vax-boot SIMH gate and the other heavy-emulator jobs already use. Deliberately NOT the per-PR path (a full Alpha cross-build + boot is ~25-30 min); the fast PR wall (vms-fb8: CI tier-split + KVM accel — per-PR loop off the 46m e2e wall #669's ~8.8 min) is untouched. Confirmed zero per-PR/push impact.
  • The conductor fires it via workflow_dispatch on the frozen SHA at cut time → a machine-observable green-by-SHA Alpha authenticity proof (mirrors the frozen-verify pattern). The nightly schedule catches drift between cuts.
  • qemu-system-alpha is pure TCG (no KVM / nested virt), so it runs on a stock ubuntu-latest runner — same as the VAX SIMH gates.
  • No persistent .boot-cache: a fresh runner cross-builds the full Alpha userland + vms.ko + ODS-2 disk from the checked-out SHA, so the gate can never pass on a stale artifact (the V0.4-6-on-a-V0.5-tree false-green class, vms-46f5).

⚠ Merge order — depends on #691

This job invokes tools/cross-alpha/run-boot-alpha.sh login, whose login mode + the genuine-ODS-2 disk master + IMGACT.EXE staging + the LOGINOUT SYSUAF-engine anchor all live on #691 (vms-alpha-login-gate). Merge #691 first, then this. The job is schedule/dispatch-only, so nothing runs (or reddens) until the gate is actually dispatched — but a dispatch before #691 lands would fail.

Shared file

This touches ci.yml (CI structure, adjacent to the #669 latency work) — flagging for conductor / CI-owner review. It adds only a new isolated job on the existing heavy-emulator tier; it modifies no existing job and no per-PR path.

rd: vms-341 / vms-8954

Adds the alpha-boot-login job: OVMX/Linux-Alpha (LP64) boots under
qemu-system-alpha to an AUTHENTICATED interactive DCL $ over the genuine
Files-11 ODS-2 executive ACP -- SYSTEM/MANAGER authenticated by Purdy against
the binary $UAFDEF SYSUAF, not just boot-to-Username. This makes Alpha
authenticity a STANDING green-by-SHA proof (the 4th-arch dimension of the 0.5
flip), not an ad-hoc conductor-run command.

Tier: schedule || workflow_dispatch, exactly like the netbsd-vax-boot SIMH
gate and the other heavy-emulator jobs -- deliberately NOT the per-PR path (a
full Alpha cross-build + boot is ~25-30 min; the PR wall stays fast). The
conductor fires it via workflow_dispatch on the frozen SHA at cut time for a
machine-observable green-by-SHA proof; nightly schedule catches drift.
qemu-system-alpha is pure TCG (no KVM), so it runs on a stock ubuntu-latest
runner. No persistent .boot-cache -- a fresh runner cross-builds the full
userland+vms.ko+ODS-2 disk from the checked-out SHA, so the gate can never
pass on a stale artifact (the false-green class of vms-46f5).

DEPENDS ON #691 (vms-alpha-login-gate): that PR lands run-boot-alpha.sh's
'login' mode + the genuine-ODS-2 disk master + IMGACT staging + the LOGINOUT
SYSUAF-engine anchor this job exercises. Merge #691 first; this job only
matters when the gate is actually dispatched.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@baron-3dl
baron-3dl merged commit 8d0fee5 into main Aug 21, 2026
96 checks passed
baron-3dl added a commit that referenced this pull request Aug 22, 2026
)

Bump OVMX_PRODUCT_VERSION V0.5 -> V0.5-1. Point release packing the V0.5-x train:
the NetBSD/VAX executive Files-11 ODS-2 ACP flip completing the flip on all three
substrates (#690, vms-d9c green), Alpha authentic binary-SYSUAF login + standing
green-by-SHA CI gate (#691/#692), C++ first-light 3-way-gated (#695), the
executable-own .vms$wimp binding fix (#694), and the 1.0=hardening roadmap
re-scope (#693). Release notes: docs/release-notes-0.5-1.md.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
baron-3dl added a commit that referenced this pull request Aug 22, 2026
* release: OVMX V0.5-1 — 3-substrate flip complete + C++ first-light

Bump OVMX_PRODUCT_VERSION V0.5 -> V0.5-1. Point release packing the V0.5-x train:
the NetBSD/VAX executive Files-11 ODS-2 ACP flip completing the flip on all three
substrates (#690, vms-d9c green), Alpha authentic binary-SYSUAF login + standing
green-by-SHA CI gate (#691/#692), C++ first-light 3-way-gated (#695), the
executable-own .vms$wimp binding fix (#694), and the 1.0=hardening roadmap
re-scope (#693). Release notes: docs/release-notes-0.5-1.md.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* roadmap: reconcile for V0.5-1 (regenerate doc + build json from rd/tags)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant