Description
The pinned runtime uses delivery-aware -healthcheck for chart startup. With an explicitly selected blueprint and DRY_RUN=true, LiveReady and Ready remain false, so a valid nonemitting bootstrap cannot pass startup. Sparse live request-driven lanes also have no guaranteed first-event deadline. Preserve existing delivery readiness and healthcheck semantics; add a distinct backward-compatible boot/startup proof and opt-in chart wiring rather than raising traffic, loosening existing deadlines or declaring live delivery ready.
Acceptance Criteria
- #1 Real CLI/control-boundary red reproduction demonstrates selected dry-run startup failure before the change; distinct startup proof passes after initialization while existing healthcheck/readiness still refuses unacknowledged live delivery
- #2 Existing readiness, live_ready, HA fencing, request/observation bounds and sparse-rate semantics are unchanged; startup success makes no delivery or source-admission claim
- #3 Chart wiring is backward compatible with existing pinned images and uses the new startup command only with an explicitly compatible image; canonical operator guidance and focused public-boundary proof agree
Definition of Done
- #1 just check (fmt-check, lint, gen-check, env-check, docs-check, test, race, hygiene, ui-check, compose-check, helm-test, lab-check, signal-fidelity)
- #2 just gen (only if a blueprint field, construct/workload config struct, or a skill under plugins/synthkit/skills/ changed)
- #3 just dump — inventory diffed against signals/
Implementation Plan
Runtime-first bounded startup seam: real selected-dry-run CLI reproduction, distinct boot/startup proof preserving all existing readiness/healthcheck/HA semantics. Return frozen compatible CLI/control contract and separate optional chart-wiring hunk; integration owner applies only with compatible-image behavior and independent guarded review. Do not change rates, old deadlines or default old-image probe command.
Implementation Notes
Runtime and opt-in chart command landed7573924 with real CLI/control red-green, unchanged existing readiness/auth/HA/bounds, old-image default preserved, full independent/CodeRabbit reviews and exact fullcheck/race passed. AC3 retained pending root exact published-image/binary verification before private opt-in; chart rendering is not image execution or delivery proof.
Final Summary
Published757 startup/chart source passed full independent/delta reviews, CodeRabbit, exact fullcheck/race and hosted CI. Actual immutable arm64 publication executed startup HTTP200 while existing delivery readiness remained503; full binary revision, signature/provenance and negative controls verified. Existing closed index-with-platform-descriptor runtime identity independently reviewed; strict config-ID literal remains false and documentation discrepancy is separately tracked. Live private deployment remains separate.