sysadminandClaude Opus 4.8 3428fb4190 feat(mcp-health): inventory and guard MCP restart/reload/kill paths (#657) ...

Enumerate every code/script/host path that can restart, reload, reconnect,
kill, or force-recreate an MCP process, classify each, and link it to the
guard that constrains it.

- mcp_restart_paths.py: machine-readable registry (single source of truth)
  with classifications (sanctioned_narrow / guarded_fail_closed / forbidden /
  removed / host_residual) plus fail-closed guards:
  * assert_restart_attempt_registered() -- unknown restart attempts fail closed
  * assert_no_daemon_self_replacement() -- daemon never os.execv/os.kill/os._exit
    itself (source-tree scan; comment/docstring mentions ignored)
  * assert_auto_restart_helper_absent() -- keeps the #685-removed
    _trigger_mcp_auto_restart from returning
  * assert_registry_wellformed() -- every path classified, guarded, referenced
- docs/mcp-restart-path-inventory.md: complete inventory table linked from
  #655; documents residual host behaviors (/mcp reconnect) and rollout.
- tests/test_mcp_restart_paths.py: 17 tests -- registry well-formedness,
  unknown-attempt fail-closed, daemon-self-replacement scan (with injected
  violation + comment/docstring negative case), legacy-helper-removed
  regression, pkill-stays-contamination (#630), and doc/module lock-step.

No behavior change to existing modules; regression assertions codify invariants
that already hold (per #657 flag-free-before-hard-block rollout). Links
#652 #653 #655 #656.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

2026-07-24 00:57:33 -04:00

..

architecture

docs(webui): add MCP Control Plane Web Console architecture ADR (Closes #632)

2026-07-22 04:52:21 -05:00

examples

feat: add Controller Handoff + Thread State Ledger validation (#507)

2026-07-08 03:46:25 -04:00

observability

feat: add Sentry-to-Gitea incident bridge for MCP workflow failures (Closes #607)

2026-07-19 22:35:18 -04:00

wiki

docs: ADR for stable MCP control runtime vs dev runtime (#615) (#616)

2026-07-16 14:58:43 -05:00

bootstrap-review-path.md

docs: define bootstrap review path for self-hosted MCP fixes (Closes #557)

2026-07-08 22:36:10 -04:00

canonical-repository-root.md

fix(mcp): consume canonical target root in cross-repository operations (Closes #741)

2026-07-18 12:02:31 -04:00

canonical-state-comments.md

feat: require canonical next-action state comments (#495)

2026-07-08 03:17:38 -04:00

canonical-thread-handoff.md

feat: add Canonical Thread Handoff protocol (Closes #505)

2026-07-08 03:44:58 -04:00

credential-isolation.md

docs: update safety and boundary docs for Jenkins/GlitchTip (#79) (#89)

2026-07-02 14:21:49 -05:00

developer-testing-guidelines.md

test: keep webui CI hermetic offline

2026-07-09 11:59:23 -04:00

gitea-dual-namespace-deployment.md

fix: align example config with reviewer merger separation

2026-07-08 02:19:37 -04:00

gitea-execution-profiles.md

fix(mcp): bind post-merge moot-lease cleanup to the reconciler capability (Closes #745)

2026-07-18 12:59:51 -04:00

issue-acceptance-gate.md

feat: add controller issue-acceptance gate (Closes #500)

2026-07-08 03:27:37 -04:00

label-taxonomy.md

fix(workflow): retire status:pr-open on every terminal PR transition (Closes #780)

2026-07-21 15:41:24 -04:00

llm-agent-sha.md

docs: LLM-Agent-SHA opaque attribution convention, Phase 0 (#86) (#87)

2026-07-02 14:00:46 -05:00

llm-workflow-runbooks.md

fix(workflow): retire status:pr-open on every terminal PR transition (Closes #780)

2026-07-21 15:41:24 -04:00

mcp-client-registration.md

docs: pin GlitchTip filing orchestrator contract (Closes #153)

2026-07-07 04:27:02 -04:00

mcp-daemon-import-guard.md

fix(guard): pin session-state authority and reject direct-import mutation (#695)

2026-07-13 21:48:28 -04:00

mcp-menu.md

feat: add workflow dashboard for queue, leases, and next safe action (Closes #605)

2026-07-19 14:43:10 -04:00

mcp-namespace-eof-recovery.md

fix(mcp): block manual daemon killing as workflow recovery (Closes #630)

2026-07-21 17:54:19 -05:00

mcp-namespace-health.md

fix: address PR #587 REQUEST_CHANGES for MCP namespace health (#543)

2026-07-09 18:44:04 -04:00

mcp-restart-path-inventory.md

feat(mcp-health): inventory and guard MCP restart/reload/kill paths (#657)

2026-07-24 00:57:33 -04:00

mcp-tool-inventory.md

feat(mcp): publish an unpublished local commit on a registered issue worktree (Closes #812)

2026-07-22 16:18:00 -05:00

release-version-sop.md

docs: re-land release version SOP with v1.1.0 audit lessons (#111)

2026-07-03 03:24:26 -04:00

release-workflows.md

docs: fix trailing whitespace and add approved naming for #52

2026-07-01 04:17:30 -04:00

reviewer-handoff-consistency.md

feat: reject contradictory reviewer handoff ledgers (Closes #501)

2026-07-08 03:33:31 -04:00

safety-model.md

docs: forbid improvised commit fallbacks when MCP commit exists (#260)

2026-07-06 14:44:41 -04:00

stable-runtime-promotion-runbook.md

feat: enforce stable-control vs dev runtime modes for Gitea MCP (Closes #615)

2026-07-20 10:48:47 -04:00

state-handoff-ledger.md

feat: add canonical state handoff ledger (#494)

2026-07-08 03:14:32 -04:00

tool-boundaries.md

docs: update safety and boundary docs for Jenkins/GlitchTip (#79) (#89)

2026-07-02 14:21:49 -05:00

two-comment-workflow.md

feat: require Controller Handoff plus Thread State Ledger (Closes #507)

2026-07-08 03:47:06 -04:00

webui-authz-audit.md

feat(webui): console authorization, RBAC, redaction, and audit model (Closes #633)

2026-07-22 14:37:35 -05:00

webui-deployment.md

feat(webui): console authorization, RBAC, redaction, and audit model (Closes #633)

2026-07-22 14:37:35 -05:00

webui-local-dev.md

Merge branch 'master' into feat/issue-637-timeline-model

2026-07-23 17:47:29 -05:00

webui-project-registry-api.md

feat(webui): versioned project registry API (Closes #635)

2026-07-22 16:12:07 -04:00

workflow-skill-mount.md

feat: mount canonical gitea-workflow skill for Codex and MCP inventory (Closes #551)

2026-07-08 22:43:46 -04:00