Adversarial review and fix (run c6c486)

.fleet/docs/DECISIONS.md

@@ -0,0 +1,33 @@
+# DECISIONS — adversarial-review-and-fix c6c486
+
+## Self-orientation
+
+| Field | Value |
+|-------|-------|
+| repo | `ravidsrk/autonomous-fleet` |
+| REPO_ROOT | `/workspace` |
+| MAINTAINER | Cursor Agent `<cursoragent@cursor.com>` |
+| BRANCH_PREFIX | `cursor/` |
+| BASE | `cursor/adversarial-review-base-256a` off `main`@e9e541b |
+| Adapter | `autonomous-fleet-adapter-grok` (same-vendor-instructed review) |
+| LEDGER_DIR | `.fleet/docs/` (docs-site Starlight probe) |
+| RUN_ID | `20260708T184204Z-adversarial-review-and-fix-c6c486` |
+| RUN_SHORT | `c6c486` |
+| SUBSTRATE | `/workspace/scripts` |
+| AUTHORSHIP_MODE | `attributed` |
+| reviewer_mode | `same-vendor-instructed` |
+
+## ASSUMPTIONS
+
+1. Scope = entire autonomous-fleet app (skills, scripts, substrate, CI, action, docs-site tooling).
+2. Fresh-run: ignore prior review docs; write `docs/adversarial-review-fresh.md`.
+3. Out of scope: BASE→main promotion, production deploy, secret rotation, load/prod verification.
+4. SCM: `gh` authenticated as `cursor`; PRs merge into BASE with `--merge` (never squash).
+5. Lane B findings open as draft `do-not-merge` PRs; never auto-merge.
+
+## Skeptic decisions
+
+- SEC-006 DO_NOT_FIX (version-tolerant auth probe).
+- SEC-005/009/004/010/ARCH-004/ARCH-005 → Lane B (ask / human-gate or draft-both).
+- OPS-001 narrowed: fatal only on real-run archive emit; dry-run cleanup stays non-fatal.
+- Wave 1 Lane A: SEC-001, SEC-002, SEC-003, ARCH-001, ARCH-002, BUG-001 (FOUNDATION first).

.fleet/docs/arch-build-progress.md

@@ -0,0 +1,82 @@
+# arch-build-progress — adversarial-review-and-fix
+
+RUN_ID: 20260708T184204Z-adversarial-review-and-fix-c6c486
+RUN_SHORT: c6c486
+BASE: cursor/adversarial-review-base-256a
+PHASE: FIXING
+LAST_UPDATE: wave1 SEC-001/002/003/008 merged into BASE
+ADAPTER: autonomous-fleet-adapter-grok
+REPO_ROOT: /workspace
+MAINTAINER: Cursor Agent <cursoragent@cursor.com>
+BRANCH_PREFIX: cursor/
+AUTHORSHIP_MODE: attributed
+SUBSTRATE: /workspace/scripts
+LEDGER_DIR: .fleet/docs
+reviewer_mode: same-vendor-instructed
+
+## Runtime goal
+
+Mission adversarial-review-and-fix DONE: `.fleet/docs/arch-build-progress.md` all task flags true,
+`.fleet/docs/arch-build-readiness.md` with fleet-outcome.status done and mission metrics satisfied,
+the readiness fleet-outcome validates, all PRs merged into BASE.
+
+LAST_UPDATE: BOOTSTRAP complete — 15 Lane A + 6 Lane B; SEC-006 DO_NOT_FIX
+
+## CLOSE-INDEX
+
+| ID | lane | state |
+|----|------|-------|
+| SEC-001 | A | CLOSED via #135 |
+| SEC-002 | A | CLOSED via #136 |
+| SEC-003 | A | CLOSED via #137 |
+| SEC-004 | B | OPEN |
+| ARCH-001 | A | OPEN |
+| ARCH-002 | A | OPEN |
+| BUG-001 | A | OPEN |
+| SEC-005 | B | OPEN |
+| SEC-007 | A | OPEN |
+| SEC-008 | A | CLOSED via #135 |
+| SEC-009 | B | OPEN |
+| BUG-002 | A | OPEN |
+| BUG-003 | A | OPEN |
+| BUG-004 | A | OPEN |
+| ARCH-003 | A | OPEN |
+| ARCH-004 | B | OPEN |
+| OPS-001 | A | OPEN |
+| OPS-002 | A | OPEN |
+| ARCH-005 | B | OPEN |
+| SEC-010 | B | OPEN |
+| SEC-011 | A | OPEN |
+| SEC-006 | — | DO_NOT_FIX |
+
+## Fix tasks
+
+| TASK | finding | wave | flags |
+|------|---------|------|-------|
+| TASK SEC-001 | SEC-001 | 1 | CODED=f EVID=f PR_OPEN=f REVIEWED=f MERGED=f ACCEPT=f WT_CLEAN=f |
+| TASK SEC-002 | SEC-002 | 1 | CODED=f EVID=f PR_OPEN=f REVIEWED=f MERGED=f ACCEPT=f WT_CLEAN=f |
+| TASK SEC-003 | SEC-003 | 1 | CODED=f EVID=f PR_OPEN=f REVIEWED=f MERGED=f ACCEPT=f WT_CLEAN=f |
+| TASK ARCH-001 | ARCH-001 | 1 | CODED=f EVID=f PR_OPEN=f REVIEWED=f MERGED=f ACCEPT=f WT_CLEAN=f |
+| TASK ARCH-002 | ARCH-002 | 1 | CODED=f EVID=f PR_OPEN=f REVIEWED=f MERGED=f ACCEPT=f WT_CLEAN=f |
+| TASK BUG-001 | BUG-001 | 1 | CODED=f EVID=f PR_OPEN=f REVIEWED=f MERGED=f ACCEPT=f WT_CLEAN=f |
+| TASK SEC-007 | SEC-007 | 2 | CODED=f EVID=f PR_OPEN=f REVIEWED=f MERGED=f ACCEPT=f WT_CLEAN=f |
+| TASK SEC-008 | SEC-008 | 2 | CODED=f EVID=f PR_OPEN=f REVIEWED=f MERGED=f ACCEPT=f WT_CLEAN=f |
+| TASK BUG-002 | BUG-002 | 2 | CODED=f EVID=f PR_OPEN=f REVIEWED=f MERGED=f ACCEPT=f WT_CLEAN=f |
+| TASK BUG-003 | BUG-003 | 2 | CODED=f EVID=f PR_OPEN=f REVIEWED=f MERGED=f ACCEPT=f WT_CLEAN=f |
+| TASK BUG-004 | BUG-004 | 2 | CODED=f EVID=f PR_OPEN=f REVIEWED=f MERGED=f ACCEPT=f WT_CLEAN=f |
+| TASK ARCH-003 | ARCH-003 | 2 | CODED=f EVID=f PR_OPEN=f REVIEWED=f MERGED=f ACCEPT=f WT_CLEAN=f |
+| TASK OPS-001 | OPS-001 | 2 | CODED=f EVID=f PR_OPEN=f REVIEWED=f MERGED=f ACCEPT=f WT_CLEAN=f |
+| TASK OPS-002 | OPS-002 | 2 | CODED=f EVID=f PR_OPEN=f REVIEWED=f MERGED=f ACCEPT=f WT_CLEAN=f |
+| TASK SEC-011 | SEC-011 | 2 | CODED=f EVID=f PR_OPEN=f REVIEWED=f MERGED=f ACCEPT=f WT_CLEAN=f |
+
+## Lane B (HUMAN_GATED — draft do-not-merge)
+
+SEC-004, SEC-005, SEC-009, ARCH-004, ARCH-005, SEC-010
+
+## OPS / VERIFY-AT-SCALE
+
+(none yet)
+
+## CONTEXT HANDOFF
+
+Wave 1 in flight next. Hot files: install-community.sh, run-sandboxed.sh, fleet_verify.py, run-campaign.sh, fleet_run.py.