Repository navigation
Open
Labels
app/idPackage/app: id (pkgs/ or apps/ in this repo)Package/app: id (pkgs/ or apps/ in this repo)effort/lLarge: multi-day or open-ended; expect staged check-insLarge: multi-day or open-ended; expect staged check-inskind/testTest coverage, test infrastructure, or test-only fixesTest coverage, test infrastructure, or test-only fixesmeta/enrichedIntake review done: acceptance criteria, links, and normalized labels addedIntake review done: acceptance criteria, links, and normalized labels addedmode/hybridOnline work plus a physical step (power, cabling, KVM access to a real device)Online work plus a physical step (power, cabling, KVM access to a real device)priority/lowNice to have; do when convenientNice to have; do when convenientqueue/blockedQueue or user escalation stateQueue or user escalation statequeue/queuedHas a queued task in the Supabase agent queueHas a queued task in the Supabase agent queuestatus/blockedQueue or user escalation stateQueue or user escalation stateuser/escalatedQueue or user escalation stateQueue or user escalation statework/assignedQueue worker lifecycle stateQueue worker lifecycle state
Description
Finding
P7.5 (deployments and real-network tests) is owner-blocked on external networks/accounts and is tracked only in plan/brief prose, not as a standalone issue.
Evidence
doc/2026-10-11T11-08-42Z_design_remaining_work/plan-phases.md§12 Phase 7, step P7.5: "Deployments and real-network tests (owner-blocked)" with "owner accounts and networks" in the Blocked-by column, tests "the C2 matrix; N29 on real networks".doc/2026-10-12T21-22-53Z_phase_7_connectivity/2026-10-12T21-22-53Z_phase_7_connectivity.mdP7.5 row: "owner-blocked ... accounts and networks"; the 2026-10-12T21:40:00Z note spells out what was not done: "Owner-blocked (P7.5): running either mode on a real host, with a Cloudflare Tunnel or a VPS, and checking/ping,/generate_204, and the systemd KillSignal behaviour. Not deployed here."doc/2026-10-14T_platform_completion/acceptance-brief.mdline 75 (unchecked): "P7.5/P3.7: real two-network and account-backed deployment matrix cannot be truthfully verified without the required networks/accounts. Keep the code-side test harness ready and leave the live matrix explicitly blocked, not falsely passed."
Why it matters
The relay kit (connectivity/relay/relay.kit.toml with tunnel and vps modes) has unit-level tests but has never been exercised on a real host. The live matrix stays explicitly blocked, which is correct, but there is no issue to re-open when the owner supplies networks/accounts.
What's needed
Owner-provided: two separate networks and the accounts (Cloudflare Tunnel and/or a VPS). Then run the C2 matrix and N29 real-network checks and record results, or close as superseded by later connectivity work.
Acceptance criteria
- Owner-provided inputs exist and are identified: two separate networks, plus Cloudflare Tunnel and/or VPS account access (this is the blocker — see the intake review comment).
- The relay kit is run on a real host in tunnel and/or vps mode, and
/ping,/generate_204, and the systemd KillSignal behaviour are checked, with results recorded on this issue. - The C2 matrix and N29 real-network checks are run and recorded — OR this issue is closed as superseded by later connectivity work, with the superseding work linked.
Metadata
Metadata
Assignees
Labels
app/idPackage/app: id (pkgs/ or apps/ in this repo)Package/app: id (pkgs/ or apps/ in this repo)effort/lLarge: multi-day or open-ended; expect staged check-insLarge: multi-day or open-ended; expect staged check-inskind/testTest coverage, test infrastructure, or test-only fixesTest coverage, test infrastructure, or test-only fixesmeta/enrichedIntake review done: acceptance criteria, links, and normalized labels addedIntake review done: acceptance criteria, links, and normalized labels addedmode/hybridOnline work plus a physical step (power, cabling, KVM access to a real device)Online work plus a physical step (power, cabling, KVM access to a real device)priority/lowNice to have; do when convenientNice to have; do when convenientqueue/blockedQueue or user escalation stateQueue or user escalation statequeue/queuedHas a queued task in the Supabase agent queueHas a queued task in the Supabase agent queuestatus/blockedQueue or user escalation stateQueue or user escalation stateuser/escalatedQueue or user escalation stateQueue or user escalation statework/assignedQueue worker lifecycle stateQueue worker lifecycle state
Activity
dezren39 commentedon Oct 26, 2026
Intake review
Related: #795 (P3.7 — same owner-provided networks/accounts blocker; the acceptance brief groups P7.5/P3.7 at line 75). Plan §12 Phase 7 step P7.5 and the Phase 7 record's P7.5 row are cited in the body. Relay kit:
connectivity/relay/relay.kit.toml(tunnel and vps modes).Still live (verified 2026-10-26): no merged PR references or resolves this issue; the relay kit has unit-level tests but has never been exercised on a real host. Not solved; do not close.
Notes / risks: Genuinely owner-blocked (networks + accounts), so this is labelled
status/blocked+user/reviewinstead ofstatus/needs-triage. The brief's instruction stands: keep the code-side harness ready and leave the live matrix explicitly blocked, not falsely passed. Nothing here is agent-actionable until the owner inputs exist.Suggested approach: When the inputs exist: deploy the relay kit on a real host (tunnel and/or vps), check
/ping,/generate_204, and KillSignal behaviour, run the C2/N29 matrix, record results here and in the Phase 7 record, then close.🤖 Agent note · intake enrichment
dezren39 commentedon Oct 28, 2026
🤖 Agent note · picked up
user/review— reviewed by the worker first, per protocol)dezren39 commentedon Oct 28, 2026
🤖 Agent note · escalated
user/review, reviewed here firstTriage read — facts verified at HEAD (2026-10-28)
relay.kit.tomlexists at HEAD both in the design tree (doc/2026-10-11T03-44-33Z_design_groups_events_delegation/connectivity/relay/, alongsidetunnel.toml,vps.toml, andiroh-relay.service) and as a test fixture (pkgs/id/tests/fixtures/relay/relay.kit.toml). Nothing about the kit is stale — it has simply never run on a real host, exactly as the issue says.What Drew needs to provide (the whole ask)
With those, the run is mechanical: deploy the kit in tunnel and/or vps mode on a real host, check
/ping,/generate_204, and the systemd KillSignal behaviour, run the C2 matrix + N29 checks, record results here and on #795. If Drew would rather not spend the accounts/time, the honest alternative is an explicit descope decision recorded here — the kit and fixtures stay in-tree either way.dezren39 commentedon Oct 28, 2026
Owner constraints recorded (Drew, 2026-10-28, from the #795 ruling)