mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-10-24 12:42:49 +00:00
pulse-triage[bot]
b052d29b19
## What changed and why Reduce configuration-fetch audit overhead without hiding access events (#2320). The suppression tracker now remembers at most 4,096 organisation/agent pairs and uses an expiry index instead of repeated full-map scans. Existing agents keep daily suppression; unremembered agents at capacity are conservatively audited on every fetch. Token/configuration changes and every failure remain audited. No audit history is deleted. The Apprise confidentiality test now observes the autonomous queue dispatcher instead of starting a competing manual batch. Its lifecycle, retry, configuration and confidentiality assertions remain intact. Preserve the exact 6.4.6 release-line mapping for the already-published packet. The fallback to main incorrectly rejected its immutable source during convergence. This maps that version only, not future patches, and changes no candidate product source. ## Included source and upstream reconciliation Complete new publication range: `e6540da45da4de4bcb954463373d8ea9f196eb56..35d8c7c13d3665b2ffe2fe4fd61e8952c46e21b1`. - Reviewed Delivery correction: `3578b0044740087e7589f19bca450245f610aced`. - Reviewed Core changes: `e225bf2abcb4189dcedd457292248e72a945dc74` and `6ab5383412f156f286c38623f9b86f2b0d3151f0`, integrated by `94ce8496b7d79e9b77d43493adc432c954d5e8b7`. - Additive upstream merge: `35d8c7c13d3665b2ffe2fe4fd61e8952c46e21b1`, incorporating published Proxmox table repairs at `e6540da45da4de4bcb954463373d8ea9f196eb56`. Every reviewed commit identity and ancestry is preserved. No upstream frontend source or dependency manifest changes in this proposal. ## Validation and limits Recorded independent-review evidence: Core returned four complete source-proof receipts covering connected configuration-fetch/authorization tests, five race repeats, notifications correctness/races and ten queue-fixture repeats, vet/builds, 135 governance tests, 23 docs-sync tests and frontend production build/budgets. Its fixed controls retained a maximum of 4,096 keys versus 12,288 in the predecessor; saturated in-memory lookup measurements are not installed write-rate or CPU acceptance. Delivery returned a complete offline source proof of 947 release-control tests (8 skipped), with guest shutdown. The exact-version tests reject unrelated versions. These are reviewed owner returns, not new qualification executions by this publication gate. On the combined committed source, provenance, whitespace, ancestry, canonical completion, browser-verification scope, control-plane audit, all 62 shipped-document mirrors and the 211-file public-document check pass. Core runtime and Go manifests are byte-identical to the reviewed Core candidate; release-control source/policy is byte-identical to the reviewed Delivery candidate; frontend runtime and graph are byte-identical to current upstream. Sufficient heavy/browser evidence was therefore not replayed. Core used Go 1.26.7 rather than declared 1.26.8, with an explicit backend embed fixture and a separately proved frontend build. Required exact-head CI remains necessary before landing. This proposal does not establish installed outcomes, release readiness, successful convergence or stable delivery, and does not replace or recut the published v6.4.6 candidate. [How Pulse handles triage](https://github.com/rcourtman/Pulse/blob/main/docs/AI_TRANSPARENCY.md)