feat(audit): add rolling timestamped phase0 refresh cadence

This commit is contained in:
William Valentin
2026-02-27 10:00:45 -08:00
parent 55f1a3dd7b
commit 149adb1c85
21 changed files with 1821 additions and 6 deletions
+3 -2
View File
@@ -1648,11 +1648,12 @@ This command writes drift reports to:
- `docs/plans/artifacts/phase0_baseline_live_backend_drift_<UTC-date>.md`
- `docs/plans/artifacts/phase0_baseline_live_backend_drift_<UTC-date>.json`
Cadence scheduling (example: every 6 hours via host cron) with drift check:
Cadence scheduling (example: every 6 hours via host cron) with rolling timestamp tags and drift check:
```bash
0 */6 * * * cd /path/to/flynn && pnpm audit:phase0-baseline:live:refresh:drift >> ~/.local/share/flynn/phase0_baseline_refresh.log 2>&1
0 */6 * * * cd /path/to/flynn && pnpm audit:phase0-baseline:live:refresh:drift:rolling >> ~/.local/share/flynn/phase0_baseline_refresh.log 2>&1
```
`audit:phase0-baseline:live*` scripts now default to the current UTC date tag when `--tag` is omitted.
Use `audit:phase0-baseline:live:refresh:drift:rolling` when you want each cadence run to keep a distinct tag (`YYYY-MM-DD-HHMMSS`) so drift checks compare against a recent prior snapshot immediately.
Gateway-origin windows can be captured separately (for example when validating cancel paths):
```bash