Prepare BROray 2.2.6 release candidate - #12
Conversation
Дополнено ссылкой на источник файлов для настройки стандартной маршрутизации Кинетиков
Add donation link
Publish the new WebUI, server and subscription management, Keenetic integration, route manifests, OPKG packaging, tests, release documentation, and the CloudTips support link.
The release hardens the 2.1.0-1 → 2.1.0-2 transition with BusyBox-compatible backups, a true OPKG downgrade rollback, five-service health checks, staging cleanup, and dedicated regression tests. Validated with ALL VERIFICATIONS PASS and a reproducible fixed-epoch release build.
Publish the safe user BAT route importer, canonical WebUI source, BROray 2.1.1 documentation, OPKG build scripts, and the updated BROvibe Docs page. Verified on real Keenetic and in GitHub Actions. User BAT files, runtime state, servers, subscriptions, logs, backups, and other local data are excluded.
Publish the verified BROray 2.1.1-2 source overlay, universal safe updater, clean installer, route lifecycle fixes, release notes, documentation, and Telegram discussion/support link.
|
Field test on a physical router with BROray 2.2.5 exposed a release-blocking defect in candidate r10. Observed result:
Root cause:
This violates the accepted product requirement that any installed supported BROray version must be able to update to the current release. Decision:
|
Candidate r11: universal update without previous IPKr10 is rejected because its compatibility repair required the exact previously installed IPK in staging. This violated the accepted requirement that BROray must update from any installed version without a source-version allowlist. New immutable builder prepared:
Architecture changes:
Static result: Promotion remains blocked until physical WebUI tests from |
Universal candidate r11 immutable buildServer build and independent verification completed. Immutable artifacts:
Verified:
Next step: publish staging r11 only, verify public bytes and revoke r10. Promotion remains blocked pending the physical source-version matrix and rollback tests. |
r11 staging publication defect: directory permissionsThe r11 publisher created the destination under Observed state:
Immediate remediation for the staged tree: set directories to Release-process fix required before final promotion: publisher must explicitly normalize directory modes as part of the immutable candidate workflow, e.g. |
r11 staging publication evidenceStaging r11 was published and the immutable runtime bytes were verified publicly after correcting directory permissions from Public verification result:
Candidate feed contains one BROray record and one IPK only. No previous-version IPK is present or required. r10 was moved to Stable remains unchanged at BROray 2.2.4. Publication-tool defect recorded: |
r11 blocked before physical update; r12 preparedDuring preparation of the physical 2.2.5 → 2.2.6-r11 test, a second blocking data-preservation defect was found by reading the success path:
r11 must not be applied to a router and is superseded by r12. r12 builder:
r12 changes:
Static checks passed, including a mock restore proving that unmanaged sentinels survive while old package-managed code does not overwrite the candidate. Result remains |
Candidate r13: validated universal update with optional persistent backupFinal server builder bytes:
Architecture
Exact-byte validation completed
Result: Stable promotion remains blocked until production server build, staging SHA verification, physical updates from multiple source versions, USB keep, internal-flash keep rejection and skip success, forced rollback, user-data comparison, singleton S28, and two same-version reinstalls. |
Candidate r14: exact preinst model made host-independent and revalidatedr13 was rejected before publication and before any router mutation. Its exact preinst model failed on the release server while validating Final builder r14:
Changes:
Exact-byte validation completed:
Result: Stable promotion remains blocked pending production server build, independent production-IPK validation, staging r14, source-version physical matrix, USB keep, internal-storage keep rejection and skip success, forced rollback, data/service verification, singleton S28 and two same-version reinstalls. |
Immutable production candidate r14 built and independently verifiedProduction build completed successfully from exact builder and source IPK bytes. Immutable hashes
Build/validation result
Next gate: publish only staging r14, verify public bytes, then revoke staging r11. Stable promotion remains blocked pending physical router tests. |
Staging r14 publication completedPublished and publicly verified:
All public files returned HTTP 200 on first attempt and matched exact immutable bytes. Published directories are 0755, files 0644, owner root:root. The staging feed contains only the single 2.2.6-r14 package. r11 moved to: Public r11 feed returns HTTP 404. Stable remains BROray 2.2.4 and was byte-identical before/after publication. Next gate: physical update from BROray 2.2.5 to 2.2.6-r14, exercising persistent backup keep/skip, full user-data comparison, singleton S28 and service/Xray/WebUI verification. |
Physical test r14: safe preflight stop; candidate rejectedPhysical router state before test:
Staging r14 feed and exact SHA checks passed. Universal compatibility repair applied successfully and detected source version dynamically as
The test wrapper confirmed OPKG remained on Blocking defects found
r14 is rejected and must not be promoted. Required replacement behavior:
|
r14 rejected after physical preflight: dirty baseline and incorrect space accountingPhysical test on a real BROray 2.2.5 router did not start package installation. It safely stopped at preflight:
Additional field evidence:
Required next-candidate gates:
r14 remains staging-only and must not be promoted. |
Physical r14 retry: keep preflight still blocked after cleanupRouter was cleaned before retry:
The second physical
Blocking r14 defect: r14 remains rejected. Required replacement:
|
Candidate r15 prepared after r14 physical failuresImmutable builder bytes:
Accumulated defects addressed
Exact-byte validation completed
Result: Production build, staging publication and all physical tests remain mandatory. r14 must not be retried or promoted. |
r15 REJECTED — production builder model mismatchThe exact production build on 2026-08-01 failed before candidate creation: Root cause: the validation harness was proven only against the mock source IPK. That mock preserved the injected Safety result:
Required process changes before any next candidate is handed off:
r15 is superseded/revoked. |
Internal hardening status — r26 is NOT a release candidateFull-control work has progressed through private/internal iterations r16–r26. None of these bytes have been handed off for production or published. Current internal r26 smoke result:
This is explicitly NOT a production PASS:
Therefore no builder, server command, staging publication or router test is authorized yet. Stable and the physical router remain untouched by r16–r26. |
Status correction — only verified state countsThe previous internal-hardening note mentioning r16–r26 (and any later conversational claim about r37) is not backed by committed builder bytes, server logs, workflow artifacts, or exact production-source build evidence in this repository. It must not be treated as a release-engineering result. Verified current state:
The next revision must start from the exact r15 failure and complete the full-control gates before any new builder or command is handed to the user. This correction supersedes unsupported internal-version status statements. |
Internal full-control status — r41 (not yet production-authorized)Work has advanced beyond r40 to internal r41. No r41 bytes have been handed off, published or installed on a router. Completed locallyThree independent full-control controller cycles were executed. Each cycle performed three clean builds A/B/C under
Passed gates in every controller cycle:
The exact-size faithful test source is 13,997,155 bytes, matching the required production source size, but its SHA is Remaining mandatory gater41 is not yet a release candidate because the controller has not been run on the exact server-side production source:
The next authorized step is exact production execution on the release server, followed by comparison of its actual output identities against three clean exact-source cycles. Stable, staging and the physical router remain unchanged by r41. |
Full-control hardening update — r41 controller prepared, exact production gate still pendingNo release candidate is being declared yet. Error documentationA blocking error register was added:
It records all confirmed defects from r4 through r15 and the mandatory non-regression gates: destructive same-version reinstall, S28 duplicates, Current internal execution controllerThe current internal full-control revision is r41:
The controller is self-contained and, in production mode, is pinned to the exact r10 source:
It refuses poisoned test variables, refuses pre-existing work/final paths, performs A/B/C clean builds under Completed local evidenceUsing a production-faithful test IPK with the exact production size (
Additional controller gate negatives all passed without modifying protected fixtures:
An independent audit initially produced a false negative because it searched for an invented literal token StatusCurrent status is exactly:
The controller has not yet run against the exact production r10 bytes on |
STOP CHECKPOINT — последнее подтверждённое состояние BROrayРабота остановлена по прямому указанию пользователя. Никакие новые builder, candidate, staging-публикации или команды обновления после этой точки не выполняются. РоутерПоследняя подтверждённая установленная версия:
Последний физический тест r14 завершился безопасным preflight-stop:
Последняя прямая проверка перед этим повторным тестом после очистки:
Важно: точные feed/S28/free-space после последнего r14 safe-stop отдельным терминальным аудитом не выводились. При возобновлении их необходимо сначала перечитать, а не считать неизменными. StableТекущий подтверждённый stable:
Во время неудачной production-сборки r15 оба stable-файла были проверены до запуска и остались неизменными. Последняя staging-публикация
Идентификаторы r14:
Последний кандидатr15 отклонён на production-сборке до создания candidate: Подтверждено:
Builder r15, который нельзя использовать:
Production sourceЕдинственный утверждённый production source IPK для будущей работы:
Статус кандидатов r10–r15
Правило возобновленияСначала только read-only аудит текущего роутера, stable и staging. Новый артефакт не выдавать до двух чистых production-сборок из точного r10 IPK и трёх независимых проверок точных финальных байтов. Mock-тест не считается доказательством. |
r46 full-control exact-production gate prepared — exact source execution still requiredNo staging/stable publication and no router action has been performed. Delivered gate bytes
Required exact production source remains:
Local full-control evidenceA production-faithful source of the exact same size ( All three cycles reported PASS and produced byte-identical:
These are faithful-source test identities only and are not the final production candidate identities. Passed gates include:
One controller attempt was deliberately invalidated when the local test filesystem reached 100% capacity; it stopped before PASS. Obsolete internal workspaces were removed, and the complete third controller cycle was rerun from a clean root and passed. The server launcher now performs a separate 6 GiB free-space preflight before exact execution. Independent audit result:
Remaining gateThe exact immutable production candidate does not yet have a production SHA. It is created only after this exact gate runs on |
r46 single-file ready gate wrapperA single uploadable wrapper has been produced around the independently validated controller:
Wrapper behavior before controller execution:
A separate locator command was syntax-checked and tested with the wrapper located under |
1 participant
BROray 2.2.6 release candidate preparation.
Updated server builder identity:
BROray-2.2.6-release-candidate-builder.sh36914bytes888502163d790b62ce9a9e76adf3212f802309492da89a32f997732a1cf22858The builder validates packaged shell files with BusyBox ash, JavaScript with Node.js, and JSON with Python. It performs deterministic A/B builds of both the IPK and candidate archive. It creates staging artifacts only and does not promote the stable public feed.
The PR remains draft until the exact candidate bytes pass the required physical WebUI test matrix.