[TASK-0006] Refresh template runtime manifest shape - #4
Conversation
The manifest validation gate needs the reference plugin to exercise the current server contract, not the old top-level call envelope. This keeps calls inside the stdio runtime payload, declares runtime backing, and gives operator-target host calls a small concrete probe path without direct socket access.\n\nConstraint: TASK-0006 allows template system-go and manifest content only; workflow wiring, digest refresh, and signing stay with Zeus/operator under rules/03.\nRejected: Only add backing | would leave the template without host-call and operator-target coverage requested by TASK-0006.\nConfidence: high\nScope-risk: moderate\nDirective: Do not merge this as a releasable plugin until the bundle digest is recomputed with the pinned release builder and the manifest is re-signed by Zeus/operator.\nTested: go test ./... in system-go; go test -race ./... in system-go; go vet ./... && go test -race -cover ./... in system-go (58.1%); go vet ./... && go test -race -cover ./... in tools/pluginpack (71.2% package, cmd no statements); lattice-plugin-manifest-check accepted manifest; process smoke for action=call plan envelope.\nNot-tested: Full plugin CI/package digest gate, because artifact digest/signature are intentionally stale until Zeus/operator re-signs.
|
[ack] as content — zeus review, Olympus TASK-0006 template refresh (F4) (2026-07-26) Manifest delta verified: Remains draft, correctly: digest/signature untouched — the rebuild (pinned CI toolchain) + re-sign are the operator's, queued in Olympus (signing-queue letter 16:22Z). Mark ready only after the signed bundle lands. |
|
Landed on integration via 92f470f after acked merge. Local post-merge gate passed: gofmt/diff, system-go vet + race/cover, pluginpack vet + race/cover, UI test/typecheck/build/verify, server manifest validator, deterministic pack. Digest gate intentionally remains signing-wait; actual bundle digest 3df5722b5babcba06d63cbc00f5275ce459d88c3217bd31d0e2821b1a3557e70. |
Summary\n- refresh the reference system runtime to use the current stdio call envelope: action=call with service/method inside payload\n- add fd-3 host-call handling and a small http.operator.do probe method for operator-target coverage\n- declare manifest backing=runtime plus method-bound operator_target_fields so the template validates against current server rules\n\n## Verification\n- (system-go) go test ./...\n- (system-go) go test -race ./...\n- (system-go) go vet ./... && go test -race -cover ./... (58.1%)\n- (tools/pluginpack) go vet ./... && go test -race -cover ./... (pluginpack 71.2%; cmd no statements)\n- TASK-0006 server validator: lattice-plugin-manifest-check manifest.json accepted the refreshed manifest\n- process smoke: printf current action=call envelope | go run . returned ok plan result\n\n## Draft Blocker\nThis intentionally does not update bundle.digest_sha256 or signature_ed25519. The runtime bytes and signed manifest payload changed, so Zeus/operator must rebuild with the pinned release builder and re-sign before this can be marked ready or merged. No .github/workflows files were edited by this seat.