The Principia Machina/Diagrams/C5 Certification pipeline: Difference between revisions
m 1 revision imported |
Diagram layer page C5 Certification pipeline, TPS 0.1.0 |
||
| Line 4: | Line 4: | ||
* GENERATED FROM: declared by the human 2026-09-17; TPS 5.14, 6.1, 6.5, 7.2 | * GENERATED FROM: declared by the human 2026-09-17; TPS 5.14, 6.1, 6.5, 7.2 | ||
* STATUS: hand-authored at TPS 0.1.0; conceptual, kept by the human; never generated | * STATUS: hand-authored at TPS 0.1.0; conceptual, kept by the human; never generated | ||
* SOURCE SHA-256: <code> | * SOURCE SHA-256: <code>d1ba869a28ea83935bc5e16d02e11890de59ff0c664ad1e2453f4a6040eca572</code> | ||
* KEY: [[The Principia Machina/Diagrams/Key for process diagrams|key for process diagrams]]: what each shape and arrow means | * KEY: [[The Principia Machina/Diagrams/Key for process diagrams|key for process diagrams]]: what each shape and arrow means; [[The Principia Machina/Diagrams/Terms|definition of terms]]; [[The Principia Machina/TPS 0.1.0/Contents|contents of the specification]] | ||
Rendered live from the source below, which is the text equivalent; if rendering is unavailable the source still stands. | Rendered live from the source below, which is the text equivalent; if rendering is unavailable the source still stands. | ||
{{#mermaid: | {{#mermaid: | ||
%% C5 Certification pipeline with canaries and the push-time checks. | %% C5 Certification pipeline with canaries and the push-time checks. TPS 0.1.0: 5.14 CR1-CR9, 6.1, 6.5, 7.2. | ||
flowchart TD | flowchart TD | ||
subgraph S1 ["1. Suite (CR4, 7.2)"] | subgraph S1 ["1. Suite (CR4, 7.2)"] | ||
T0[(synthetic certification container and suite pages)] --> T1[six probes planted on staging and return pages] | T0[(synthetic certification container<br/>and suite pages)] --> T1[six probes planted on<br/>staging and return pages] | ||
T1 --> T2[candidate refuses every probe and reports each as a detection] | T1 --> T2[candidate refuses every probe<br/>and reports each as a detection] | ||
T2 --> T3[supervised trial of N operations, N = 6] | T2 --> T3[supervised trial of<br/>N operations, N = 6] | ||
T3 --> T4[/human reviews the trial/] | T3 --> T4[/human reviews the trial/] | ||
end | end | ||
subgraph S2 ["2. Admission (CR3, CR5)"] | subgraph S2 ["2. Admission (CR3, CR5)"] | ||
T4 --> M1[/H-DECL declares admission on the DECLARATIONS page/] | T4 --> M1[/H-DECL declares admission<br/>on the DECLARATIONS page/] | ||
M1 --> M2[(certificate: account, snapshot ID, suite version, D-IS, date)] | M1 --> M2[(certificate: account, snapshot ID,<br/>suite version, D-IS, date)] | ||
M2 --> M3[membership in the agent group, platform-enforced] | M2 --> M3[membership in the agent group,<br/>platform-enforced] | ||
M3 --> M4[(CAPABILITY: CERTIFIED with suite version, snapshot ID, D-IS, date)] | M3 --> M4[(CAPABILITY: CERTIFIED with suite<br/>version, snapshot ID, D-IS, date)] | ||
end | end | ||
subgraph S3 ["3. Work under canaries (CR6, CR8)"] | subgraph S3 ["3. Work under canaries (CR6, CR8)"] | ||
M4 --> C1[live probes planted by TPX, one per five work blocks] | M4 --> C1[live probes planted by TPX,<br/>one per five work blocks] | ||
C1 -- refused and reported --> C2[(canary pass rate on the control panel)] | C1 -- refused and reported --> C2[(canary pass rate<br/>on the control panel)] | ||
C1 -- failed --> C3[/human removes the account from the agent group; decision item/] | C1 -- failed --> C3[/human removes the account from<br/>the agent group; decision item/] | ||
end | end | ||
subgraph S4 ["4. Push-time checks (CR9, 6.1, 4.2 rows 33 and 36)"] | subgraph S4 ["4. Push-time checks (CR9, 6.1, 4.2 rows 33 and 36)"] | ||
M4 --> P1[PRB computes D-IS over the TPS version the agent holds] | M4 --> P1[PRB computes D-IS over the<br/>TPS version the agent holds] | ||
P1 --> P2[push carries D-IS and the conformance declaration] | P1 --> P2[push carries D-IS and the<br/>conformance declaration] | ||
P2 --> P3[TPX: D-IS matches the published value and the declared TPS version is current] | P2 --> P3[TPX: D-IS matches the published value<br/>and the declared TPS version is current] | ||
P3 -- pass --> P4[(landing accepted; implementation digest recorded in CAPABILITY)] | P3 -- pass --> P4[(landing accepted; implementation<br/>digest recorded in CAPABILITY)] | ||
P3 -- fail --> P5[(push refused; STATUS NEEDS RECERTIFICATION)] | P3 -- fail --> P5[(push refused;<br/>STATUS NEEDS RECERTIFICATION)] | ||
end | end | ||
subgraph S5 ["5. Lapse and re-certification (CR3, CR9)"] | subgraph S5 ["5. Lapse and re-certification (CR3, CR9)"] | ||
L1[snapshot retired, or suite version changed, or D-IS changed] --> L2[certificate lapses] | L1[snapshot retired, or suite version<br/>changed, or D-IS changed] --> L2[certificate lapses] | ||
L2 --> L3[re-certification is the suite; abbreviated run for a PATCH-level TPS change] | L2 --> L3[re-certification is the suite;<br/>abbreviated run for a<br/>PATCH-level TPS change] | ||
L3 --> T0 | L3 --> T0 | ||
P5 --> L2 | P5 --> L2 | ||
end | end | ||
<!-- A DOT-drawn preview of this pipeline exists as a derived image | classDef task fill:#eaecf0,stroke:#a2a9b1,color:#202122 | ||
classDef human fill:#eaf3ff,stroke:#36c,color:#202122 | |||
classDef data fill:#fef6e7,stroke:#ac6600,color:#202122 | |||
classDef bad fill:#fee7e6,stroke:#d33,color:#202122 | |||
classDef good fill:#d5fdf4,stroke:#14866d,color:#202122 | |||
style S1 fill:#f8f9fa,stroke:#c8ccd1,color:#202122 | |||
style S2 fill:#f8f9fa,stroke:#c8ccd1,color:#202122 | |||
style S3 fill:#f8f9fa,stroke:#c8ccd1,color:#202122 | |||
style S4 fill:#f8f9fa,stroke:#c8ccd1,color:#202122 | |||
style S5 fill:#f8f9fa,stroke:#c8ccd1,color:#202122 | |||
class T1,T2,T3,M3,C1,P1,P2,P3,L1,L2,L3 task | |||
class T4,M1,C3 human | |||
class T0,M2,M4,C2 data | |||
class P4 good | |||
class P5 bad | |||
|config.theme=neutral}} | |||
<!-- A DOT-drawn preview of this pipeline exists as a derived image, tagged with this source's hash; it is not a second source. --> | |||
== Text equivalent == | == Text equivalent == | ||
Revision as of 20:15, 17 September 2026
Conceptual diagram 5 of 5. Part of the TPM hub.
- KIND: process
- LANGUAGE: Mermaid flow
- GENERATED FROM: declared by the human 2026-09-17; TPS 5.14, 6.1, 6.5, 7.2
- STATUS: hand-authored at TPS 0.1.0; conceptual, kept by the human; never generated
- SOURCE SHA-256:
d1ba869a28ea83935bc5e16d02e11890de59ff0c664ad1e2453f4a6040eca572 - KEY: key for process diagrams: what each shape and arrow means; definition of terms; contents of the specification
Rendered live from the source below, which is the text equivalent; if rendering is unavailable the source still stands.
Text equivalent
Stage 1 Suite: six probes in a synthetic container, each refused and reported, then N supervised operations reviewed by the human (CR4, 7.2). Stage 2 Admission: H-DECL declares admission; the certificate names the account, snapshot ID, suite version, D(IS) and date; membership in the agent group is platform-enforced and CAPABILITY carries CERTIFIED (CR3, CR5). Stage 3 Work under canaries planted one per five blocks; a failed probe removes the account and opens a decision item; the pass rate is recorded (CR6, CR8). Stage 4 Push-time checks: D(IS) and the declared TPS version must match the published values; the implementation digest is recorded (CR9, 6.1). Stage 5 Lapse: a retired snapshot, a changed suite or a changed D(IS) lapses the certificate; re-certification is the suite, abbreviated for a PATCH-level change (CR3, CR9).