docs(hux): record enforcement-live canary evidence

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BvMSXH8VH2tMWXanb8SJdf
This commit is contained in:
jenkins 2026-08-24 06:29:07 -03:00
parent 91cfb901a2
commit 852d37c087

View File

@ -430,3 +430,16 @@ remain untouched). Tenant-3 tool calls now require HUX release for real.
Remaining: real-traffic validation of the approvals UX on tenant-3, then
partition 3 -> 0 to take flags+enforcement fleet-wide; HUX-12 needs the
Vault evidence key (runbook above); Worker integration separate.
## Enforcement live on the canary (2026-08-24 ~09:35 UTC)
Canary at 4a6d4fdf+17037773: HUX_TOOL_ENFORCEMENT=1 and HUX_RUNTIME_ENABLED=1
verified in the live hermes container; identity hashes unchanged across a
third roll (8a1c474d/c4ebe353); /healthz ok with retention healthy; all five
containers ready, zero restarts. The earlier hux exit-137s were transient
probe kills under roll churn (threaded server, no OOM/liveness events, clean
logs) — bump the hux exec probe timeoutSeconds 3->5 with the
partition-widening commit. Voice fixes pushed as 91cfb901 (continuous mic,
barge stitching, 1.15x TTS); build 22 queued — its digest bump rolls the
fleet including this canary.