From 852d37c0872e2ca61e0ea7061b206d3d855a1b56 Mon Sep 17 00:00:00 2001 From: jenkins Date: Mon, 24 Aug 2026 06:29:07 -0300 Subject: [PATCH] docs(hux): record enforcement-live canary evidence Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01BvMSXH8VH2tMWXanb8SJdf --- docs/hux/HANDOFF.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/docs/hux/HANDOFF.md b/docs/hux/HANDOFF.md index 79bb58b8..dce9601e 100644 --- a/docs/hux/HANDOFF.md +++ b/docs/hux/HANDOFF.md @@ -430,3 +430,16 @@ remain untouched). Tenant-3 tool calls now require HUX release for real. Remaining: real-traffic validation of the approvals UX on tenant-3, then partition 3 -> 0 to take flags+enforcement fleet-wide; HUX-12 needs the Vault evidence key (runbook above); Worker integration separate. + + +## Enforcement live on the canary (2026-08-24 ~09:35 UTC) + +Canary at 4a6d4fdf+17037773: HUX_TOOL_ENFORCEMENT=1 and HUX_RUNTIME_ENABLED=1 +verified in the live hermes container; identity hashes unchanged across a +third roll (8a1c474d/c4ebe353); /healthz ok with retention healthy; all five +containers ready, zero restarts. The earlier hux exit-137s were transient +probe kills under roll churn (threaded server, no OOM/liveness events, clean +logs) — bump the hux exec probe timeoutSeconds 3->5 with the +partition-widening commit. Voice fixes pushed as 91cfb901 (continuous mic, +barge stitching, 1.15x TTS); build 22 queued — its digest bump rolls the +fleet including this canary.