docs(plans): Phase 2 check 8 PASS — full suite exit 0 on the cutover SHA, run against the live rig

Claude-Session: https://claude.ai/code/session_014WNM4vjoVksyyBraTXSZE1
This commit is contained in:
Joseph Doherty
2026-08-06 11:13:59 -04:00
parent bcc91268ba
commit eaf14e0177
@@ -1104,7 +1104,7 @@ pre-flip build first (see Baseline section, `1bb3a937`).
| 5 | Stop the site-b pair entirely, dispatch: per-node dispatch failures logged immediately (contrast with Baseline (b)'s silence); deadline backstop still marks the deployment; **no duplicate applies** after the pair returns (boot-replay path only) | **PASS** — deploy `e5a14c5f`: BOTH `NOT delivered to site-b-{1,2}:4053 (Unavailable…)` WRN lines in the SAME SECOND as dispatch (baseline (b): zero correlated lines, sampled-deadLetters INF); `timed out after 00:02:00 (4/6…). No ack from: site-b-1:4053, site-b-2:4053`; pair restart → boot-replay only (`FetchAndCache boot — restored served state`), rows stay 0/0, ack count stays 4 — no dupes, no resurrection |
| 6 | **Zero ClusterClient activity under `Grpc`:** `docker logs <every node> \| grep -ci "clusterclient"` = 0 new lines post-boot | **PASS (interim + final at soak end)** — `grep -ic "clusterclient\|receptionist"` = **0 on all six nodes** after checks 1–5 (incl. every kill/restart cycle) |
| 7 | Soak ≥ 2 h under periodic deploys + command traffic: 0 `PermissionDenied`/`Unauthenticated` across all six nodes (PSK drift detector), 0 unexplained `Unavailable` | **RUNNING** — driver started 15:03:44Z, 135-min target: deploy+seal check per 10-min cycle + Restart(site-a)/AlarmCommand(site-b) traffic; whitelist-aware final grep (excludes the standby `/health/active` 503 + `Health check cluster-primary` ERR noise — Health 0.3.0 by-design standby behaviour, pre-existing) |
| 8 | Full suite green on the cutover SHA | **RUNNING** — `dotnet test ZB.MOM.WW.OtOpcUa.slnx` started in parallel with the soak, on `master` with the cutover committed (`caf2eec6` + gate-record commits) |
| 8 | Full suite green on the cutover SHA | **PASS** — `dotnet test ZB.MOM.WW.OtOpcUa.slnx --nologo` exit 0, **zero failures across every assembly**, run in parallel with the live rig + soak traffic. Spot totals match every baseline: ControlPlane 245 (Task 2.0 set), Host 95 (role-scoping pins), Runtime 558+3skip, AdminUI 1109, Commons 346, Cluster 193, Host.IntegrationTests 212+4skip |
**Extra (plan-text requirement): PSK negatives on RUNNING containers, both services** — **PASS**:
`NodeCommandService/Execute` @ site-a-1: no bearer → `PermissionDenied: Node command