Skip to content

Commit ad7b477

Browse files
ssharkkkyssharkkky
committed
docs: record release artifact cap provenance recheck
1 parent e448b5e commit ad7b477

2 files changed

Lines changed: 21 additions & 0 deletions

File tree

‎docs/current-deployment.md‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,14 @@ performed. Server configuration validation, process SHA verification, and the
5757
expected unauthenticated CONNECT `407` check passed; `NRestarts=0` after the
5858
manual restart does not imply that no restart occurred.
5959

60+
Release-6 provenance recheck: the artifact binary SHA256 matches the deployed
61+
process; `go version -m` shows the `_product/forwardproxy` replacement and
62+
`caddy list-modules` includes `http.handlers.forward_proxy`. Pinned forwardproxy
63+
`cad30c35` contains the 512-total/128-per-client constants from `25b4cd60`,
64+
and the workflow passes that checkout to `build-m7-caddy.sh`. Historical peak
65+
samples do not establish a cap; active/peak values are process-local metrics
66+
and require a live pressure run.
67+
6068
After the server replacement, the existing client passed 96/96 TCP and 4/4 UDP
6169
DNS requests; a failed target completed in 5.205 s. After the client replacement,
6270
three batches each passed 96/96 TCP and 4/4 UDP DNS; failed-target samples completed

‎docs/native-udp-status.md‎

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -30,6 +30,19 @@ the historical milestone evidence below:
3030
Linux validation client `cdcff06ca5ecaabf839e298b9c1f298482af763c9c7e1f8c8828b83c218e49df`,
3131
server `3a5b1aa0e467415d93f3c8a13ffb71fcff47e65452a0a178db01be75e4c00daa`.
3232

33+
Release-6 provenance recheck (2026-09-08): downloaded artifact `10051577336`
34+
has archive SHA256 `9c39c0caa3ea9922f4d681959178222e5b88fca9cbf2fa199faa710a9ddd5845`;
35+
its `caddy` binary SHA256 is
36+
`3a5b1aa0e467415d93f3c8a13ffb71fcff47e65452a0a178db01be75e4c00daa`.
37+
`go version -m` reports `go1.26.0`, an embedded replacement of
38+
`github.com/caddyserver/forwardproxy` by `_product/forwardproxy`, and the
39+
locked Caddy/quic-go replacements; `caddy list-modules` reports
40+
`http.handlers.forward_proxy`. The checked-out forwardproxy `cad30c35` contains
41+
`25b4cd60` and its production constants are exactly 512 total and 128 per
42+
client/source. The explicit-value contract assertion is covered by
43+
forwardproxy test commit `eb7c78e` (`GOTOOLCHAIN=go1.26.0 go test ./...` passed).
44+
No release or deployment replacement is required by this recheck.
45+
3346
## Incremental DNS acceptance and release 6 deployment (2026-09-08)
3447

3548
Forwardproxy `0d4e10f` was reviewed before release. Independent deterministic

0 commit comments

Comments
 (0)