test: make v2.4.1 Axis B IVNP gate deterministic #92

Merged

ada merged 16 commits from ada/axis-b-v241-port-20260912 into master 2026-09-12 09:30:57 +00:00

Conversation 1 Commits 16 Files changed 3 +1715 -118

ada commented 2026-09-11 17:59:55 +00:00

Collaborator

Copy link

Problem

The public-IVNP Axis-B fixture was network-flaky and could not reliably prove the required Rust middle-hop topology. PR #91 superseded v2.4.0 with v2.4.1, so the deterministic proof must preserve the exact v2.4.1 client/upstream defaults and produce secret-safe release evidence.

Approach

• Add an isolated five-router signed-RouterInfo IVNP mesh using authenticated NTCP2/tunnel transport.
• Keep one fixed upstream Go ingress and shared infrastructure alive across both arms; swap only the gateway implementation (upstream Go control vs Rust /sdk/connect candidate).
• Pin upstream v2.4.1 commit and official ARM64 client checksum, bind proof to clean candidate HEAD/tree/harness/binary hashes, and require native Linux ARM64 for IVNP_AXIS_B_PASS.
• Require run-unique application responses, exact lease/capability/Rust-marker correlation, no direct/protocol-8 fallback, active signed runtime evidence, semantic shared-mesh parity, bounded retryable cleanup, and removal of private state/raw bearer capabilities.

Validation

Exact PR HEAD: f76f53825d0103d5f987c5bea48ca31945068e3e

• bash -n scripts/v240-axis-b-ivnp-smoke.sh scripts/test-v240-axis-b-ivnp-smoke.sh
• scripts/test-v240-axis-b-ivnp-smoke.sh
• PYTHONOPTIMIZE=1 scripts/test-v240-axis-b-ivnp-smoke.sh
• git diff --check origin/master..HEAD
• Forgejo CI #1024: success at the exact HEAD.
• Native Linux ARM64 signed-IVNP Axis-B gate: IVNP_AXIS_B_PASS at the exact HEAD.
  • official upstream v2.4.1 client and pinned upstream commit
  • Go control and Rust candidate both returned distinct run-unique responses
  • Rust authenticated gateway marker correlated with the active lease/capability
  • shared ingress/mesh and active runtime parity verified
  • final process/container/helper cleanup verified
  • sensitive state absent and preserved raw ov1.* bearer count zero

No production tag, image, or deployment is included in this PR. Post-merge tagged-dev verification and production promotion remain separate release steps.

## Problem The public-IVNP Axis-B fixture was network-flaky and could not reliably prove the required Rust middle-hop topology. PR #91 superseded v2.4.0 with v2.4.1, so the deterministic proof must preserve the exact v2.4.1 client/upstream defaults and produce secret-safe release evidence. ## Approach - Add an isolated five-router signed-RouterInfo IVNP mesh using authenticated NTCP2/tunnel transport. - Keep one fixed upstream Go ingress and shared infrastructure alive across both arms; swap only the gateway implementation (upstream Go control vs Rust `/sdk/connect` candidate). - Pin upstream v2.4.1 commit and official ARM64 client checksum, bind proof to clean candidate HEAD/tree/harness/binary hashes, and require native Linux ARM64 for `IVNP_AXIS_B_PASS`. - Require run-unique application responses, exact lease/capability/Rust-marker correlation, no direct/protocol-8 fallback, active signed runtime evidence, semantic shared-mesh parity, bounded retryable cleanup, and removal of private state/raw bearer capabilities. ## Validation Exact PR HEAD: `f76f53825d0103d5f987c5bea48ca31945068e3e` - `bash -n scripts/v240-axis-b-ivnp-smoke.sh scripts/test-v240-axis-b-ivnp-smoke.sh` - `scripts/test-v240-axis-b-ivnp-smoke.sh` - `PYTHONOPTIMIZE=1 scripts/test-v240-axis-b-ivnp-smoke.sh` - `git diff --check origin/master..HEAD` - Forgejo CI #1024: success at the exact HEAD. - Native Linux ARM64 signed-IVNP Axis-B gate: `IVNP_AXIS_B_PASS` at the exact HEAD. - official upstream v2.4.1 client and pinned upstream commit - Go control and Rust candidate both returned distinct run-unique responses - Rust authenticated gateway marker correlated with the active lease/capability - shared ingress/mesh and active runtime parity verified - final process/container/helper cleanup verified - sensitive state absent and preserved raw `ov1.*` bearer count zero No production tag, image, or deployment is included in this PR. Post-merge tagged-dev verification and production promotion remain separate release steps.

ada added 2 commits 2026-09-11 17:59:56 +00:00

test: make v2.4.0 Axis B IVNP smoke deterministic f5727b5e30

test: fix Axis B tunnel peer selection 7a7aa60725

ada added 1 commit 2026-09-11 18:07:55 +00:00

test: adapt Axis B fallback guard to v2.4.1 a0248f131b

ada added 1 commit 2026-09-11 18:15:14 +00:00

test: correlate Axis B marker after client re-registration d03764ac4e

ada added 1 commit 2026-09-11 18:20:08 +00:00

test: bind Axis B marker to exact capability hash ddd64ff51e

ada added 1 commit 2026-09-11 19:37:11 +00:00

test: preserve shared Axis B ingress parity e9f2e7c899

ada added 1 commit 2026-09-11 19:49:47 +00:00

test: scrub Axis B fixture secrets 02c0338014

ada added 1 commit 2026-09-12 07:44:21 +00:00

test: harden Axis B release evidence f661c26f92

ada added 1 commit 2026-09-12 07:49:49 +00:00

test: isolate Axis B client identity 6f3aa0f18a

ada added 1 commit 2026-09-12 08:03:14 +00:00

test: harden Axis B proof execution b65c008d25

ada added 1 commit 2026-09-12 08:25:47 +00:00

test: wait for active Axis B proof ed5a9390fd

ada added 1 commit 2026-09-12 08:32:02 +00:00

test: permit public Axis B certificate mode 5786497252

ada added 1 commit 2026-09-12 08:47:34 +00:00

test: stabilize Axis B route selection a71f0d8d59

ada added 1 commit 2026-09-12 08:53:00 +00:00

test: admit deterministic Axis B peers 34b3659d42

ada added 1 commit 2026-09-12 09:07:27 +00:00

test: scope deterministic Axis B selection 582967f9d5

ada added 1 commit 2026-09-12 09:13:18 +00:00

test: compare Axis B routes semantically f76f53825d

ada reviewed 2026-09-12 09:30:40 +00:00

ada left a comment

Copy link

Independent release-gate review result for exact head f76f53825d0103d5f987c5bea48ca31945068e3e: APPROVE, no P0/P1 findings. Semantic parity, fail-closed proof handling, bounded cleanup, secret scrubbing, exact-head CI #1024, and native Linux ARM64 IVNP_AXIS_B_PASS were verified. Forgejo does not allow the PR author to submit an APPROVED review, so this records the independent review verdict without bypassing repository policy.

Independent release-gate review result for exact head `f76f53825d0103d5f987c5bea48ca31945068e3e`: **APPROVE**, no P0/P1 findings. Semantic parity, fail-closed proof handling, bounded cleanup, secret scrubbing, exact-head CI #1024, and native Linux ARM64 `IVNP_AXIS_B_PASS` were verified. Forgejo does not allow the PR author to submit an APPROVED review, so this records the independent review verdict without bypassing repository policy.

ada merged commit 4ac00a6d42 into master 2026-09-12 09:30:57 +00:00

ada deleted branch ada/axis-b-v241-port-20260912 2026-09-12 09:30:57 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

gofix/portal-tunnel-rs!92

No description provided.