Alpha8 runtime authority and physical findings

[Deadbytes101]

Purpose

Turn Alpha7 physical evidence into the next appliance stability candidate without weakening local ownership, fail-closed mining, or identity secrecy.

Alpha7 evidence carried forward

Passed on source commit 043974e9f1f1c26055a39ac607bf78d920ac952b:

• exact USB boot-device attestation
• STATE growth from the 256 MiB seed to remaining USB capacity
• offline EFI configuration and identity import
• atomic revision commit and activation
• huge pages 1280/1280 and XMRig huge-page allocation at 100%
• pool connection and accepted shares before and after reboot
• persistent revision and recovery password restoration
• zero failed systemd units
• internal SATA layout and filesystem identity unchanged across reboot

Alpha8 source changes

• explicitly package and enable OpenSSH while disabling socket activation
• expose rigosd and rigosctl in the normal user PATH
• derive SSH remote-access truth from service state and kernel TCP listener state
• render private XMRig runtime configuration under /run/rigos
• preserve max-threads-hint as a percentage hint
• convert explicit RandomX thread intent into an exact CPU profile (threads: 2 -> cpu.rx: [-1, -1])
• publish a separate redacted public runtime view
• require both committed-state and rendered-runtime miner gates
• rerender and revalidate policy before every miner start
• exercise runtime authority, profile mismatch rejection, listener truth and appliance wiring in the workspace verification suite

Verified source gate

Verified locally on commit 24c4f0cf9cedd636055b27f3773935a3b1290e6a:

• formatting and clippy
• all workspace tests and doc tests
• Alpha8 runtime authority fixture
• systemd ordering verification
• optimized release build
• final RIGOS verification passed

Release identity

Staged as:

• RIGOS_PRODUCT_VERSION=0.0.4-alpha.8
• RIGOS_IMAGE_VERSION=0.0.4-alpha.8
• RIGOS_BUILD_ORDINAL=8
• release source commit 627bef1d655460d7a1bf3fe4511ebef629c805a4

Known limitations for this alpha

• SSH host identity is not yet persisted across the ephemeral live root, so a host-key change across reboot remains a known issue.
• unprivileged miner inspection still requires a follow-up integration with the redacted public runtime view.

These limitations must be stated in Alpha8 physical evidence. They do not weaken miner state/config/runtime gates, but they block any claim that remote administration identity is final.

Required remaining gates

• rerun scripts/verify.sh on exact release commit 627bef1d...
• clean rootful image build
• manifest and artifact checksum verification
• physical confirmation of two active RandomX threads
• truthful SSH listener telemetry
• reboot and outage recovery

Do not merge or promote beyond alpha until physical evidence is attached.

[Deadbytes101]

/apply-alpha8-physical-fixes

[Deadbytes101]

/apply-alpha8-physical-fixes

[Deadbytes101]

Source verification evidence

Local verification completed successfully on 24c4f0cf9cedd636055b27f3773935a3b1290e6a before the release-only Alpha8 bump.

Observed gates:

• workspace compile and clippy passed
• all unit, integration and doc tests passed
• alpha8_appliance_wiring_is_explicit passed
• alpha8_runtime_authority_is_exact_and_fail_closed passed
• runtime gate returned allowed for the valid exact-thread profile
• profile-count mismatch was rejected by the fixture
• RIGOS Alpha8 runtime and remote truth verification passed
• systemd ordering verification passed
• optimized release build passed
• final RIGOS verification passed

Release identity was then staged at 627bef1d655460d7a1bf3fe4511ebef629c805a4 with 0.0.4-alpha.8 / ordinal 8. The exact release commit must receive one final verify run before image build.