Add distributed persistence posture receipts

Author: nshkrdotcom

.blitz/test_state_v1/indexes/task_states.ndjson

@@ -6887,6 +6887,7 @@
 {"latest_passed_result_id":"sha256:59a7b8aaa66a4e9ff3c815015af869a7b61f37fb50a98402132bf2fd4a5ce89d","latest_result_id":"sha256:59a7b8aaa66a4e9ff3c815015af869a7b61f37fb50a98402132bf2fd4a5ce89d","project_path":"support/ai_run_lineage_scanner","schema":"blitz-task-state-index-v1","task":"compile","task_state_hash":"sha256:fdc56d59d336473888f6fb494493b55d02641bf79b8eba3ed3a7bc0f683d3725","updated_at":"2026-05-18T10:12:34Z"}
 {"latest_passed_result_id":"sha256:b444b0c124c3d2d8730f4238653ce762f60d26a90cfc4ceefb8587159ef9db2f","latest_result_id":"sha256:b444b0c124c3d2d8730f4238653ce762f60d26a90cfc4ceefb8587159ef9db2f","project_path":"examples/skill_roundtrip","schema":"blitz-task-state-index-v1","task":"format","task_state_hash":"sha256:fdcb3130e43bcad95e17ca5ba0d0119b3413e6193e0afddd0a47be2cd018e4a9","updated_at":"2026-05-25T08:24:14Z"}
 {"latest_passed_result_id":"sha256:83cbc48a23016c7cc56b498140054f05eb9e8e93b77a2133091cd5e4063e2c8c","latest_result_id":"sha256:83cbc48a23016c7cc56b498140054f05eb9e8e93b77a2133091cd5e4063e2c8c","project_path":"examples/trinity_parity_harness","schema":"blitz-task-state-index-v1","task":"credo","task_state_hash":"sha256:fdd2872ae6fb44233d3ceaf43398530b54d529e717f55e46dcbfafb92cdb60ca","updated_at":"2026-05-25T07:38:50Z"}
+{"latest_passed_result_id":"sha256:8bedc64368074ac998fafa5c72ef7d925636ca3d854ddeca50148535485c9e28","latest_result_id":"sha256:8bedc64368074ac998fafa5c72ef7d925636ca3d854ddeca50148535485c9e28","project_path":"examples/gn_ten_distributed_stack","schema":"blitz-task-state-index-v1","task":"compile","task_state_hash":"sha256:fdd298de0438daf9468c9f30bdabb7ac14dc6b57252a97db46378e8680ce8692","updated_at":"2026-05-25T22:24:35Z"}
 {"latest_passed_result_id":"sha256:229339b62d301dc1db45004395d508c386454a3f6c6f78f1dc11b1948fc9ea34","latest_result_id":"sha256:229339b62d301dc1db45004395d508c386454a3f6c6f78f1dc11b1948fc9ea34","project_path":"examples/replay_roundtrip","schema":"blitz-task-state-index-v1","task":"credo","task_state_hash":"sha256:fdd2eb7a0941b0dbc357a90d15476df73694784e840bed8ff28ba05211f5cd5a","updated_at":"2026-05-11T04:24:06Z"}
 {"latest_passed_result_id":"sha256:01801a81fa83239214a090cf0dfae91927921ace5934b4c565fb4a5bf4d4f145","latest_result_id":"sha256:01801a81fa83239214a090cf0dfae91927921ace5934b4c565fb4a5bf4d4f145","project_path":"examples/session_lineage_drill","schema":"blitz-task-state-index-v1","task":"compile","task_state_hash":"sha256:fdd7830ce29c6ab20bd5bc6c775a446b0d432e9d10d754047ef2b3e5c87b90a9","updated_at":"2026-05-06T10:26:56Z"}
 {"latest_passed_result_id":"sha256:4c3659e682ecc1e60ad155cbfc19709540eb0d3cc8dde5061390c8bfe70891a0","latest_result_id":"sha256:4c3659e682ecc1e60ad155cbfc19709540eb0d3cc8dde5061390c8bfe70891a0","project_path":"support/citadel_spine_harness","schema":"blitz-task-state-index-v1","task":"format","task_state_hash":"sha256:fde3e599a53515458c9bc807836f0528d26cadf4e6236a4df1cb69aa4559c5ad","updated_at":"2026-05-06T15:16:41Z"}

examples/gn_ten_distributed_stack/README.md

@@ -31,6 +31,15 @@ Phase 11 records local fault and recovery posture:
 - keep WAN, production discovery, release boot, and live-provider retry
   semantics as explicit non-claims.
 
+Phase 12 adds persistence and external-substrate posture:
+
+- include the existing deterministic persistence matrix proof in distributed
+  receipts;
+- require `:mickey_mouse` and `:memory_debug` profile facts before a receipt is
+  `pass`;
+- record Postgres and Temporal as opt-in external profiles only;
+- do not start Postgres, Temporal, or Toxiproxy from this proof app.
+
 ## Commands
 
 ```bash

examples/gn_ten_distributed_stack/lib/stack_lab/examples/gn_ten_distributed_stack.ex

@@ -16,6 +16,8 @@ defmodule StackLab.Examples.GnTenDistributedStack.Receipt do
     :aitrace_exports,
     :replay_bundle,
     :evidence_status,
+    :persistence_profiles,
+    :persistence_status,
     :node_lab_run,
     :distributed_envelope_scan,
     :node_placement,
@@ -38,6 +40,8 @@ defmodule StackLab.Examples.GnTenDistributedStack.Receipt do
           aitrace_exports: [map()],
           replay_bundle: map(),
           evidence_status: String.t(),
+          persistence_profiles: map(),
+          persistence_status: String.t(),
           node_lab_run: map(),
           distributed_envelope_scan: map(),
           node_placement: map(),
@@ -71,6 +75,8 @@ defmodule StackLab.Examples.GnTenDistributedStack.RouterModelReceipt do
     :aitrace_exports,
     :replay_bundle,
     :evidence_status,
+    :persistence_profiles,
+    :persistence_status,
     :node_lab_run,
     :distributed_envelope_scan,
     :node_placement,
@@ -101,6 +107,8 @@ defmodule StackLab.Examples.GnTenDistributedStack.RouterModelReceipt do
           aitrace_exports: [map()],
           replay_bundle: map(),
           evidence_status: String.t(),
+          persistence_profiles: map(),
+          persistence_status: String.t(),
           node_lab_run: map(),
           distributed_envelope_scan: map(),
           node_placement: map(),
@@ -120,6 +128,8 @@ defmodule StackLab.Examples.GnTenDistributedStack.FaultRecoveryReceipt do
     :baseline_receipt_ref,
     :fault_receipts,
     :owner_recovery_evidence,
+    :persistence_profiles,
+    :persistence_status,
     :trace_refs,
     :node_lab_run,
     :does_not_prove
@@ -135,6 +145,8 @@ defmodule StackLab.Examples.GnTenDistributedStack.FaultRecoveryReceipt do
           baseline_receipt_ref: String.t(),
           fault_receipts: [map()],
           owner_recovery_evidence: [map()],
+          persistence_profiles: map(),
+          persistence_status: String.t(),
           trace_refs: [String.t()],
           node_lab_run: map(),
           does_not_prove: [String.t()]
@@ -161,6 +173,7 @@ defmodule StackLab.Examples.GnTenDistributedStack do
   @envelope_schema_version "stack_lab.distributed_envelope.v1"
   @context_roundtrip Module.concat([StackLab, Examples, ContextABIRoundtrip])
   @router_roundtrip Module.concat([StackLab, Examples, NSHKRRouterFabricRoundtrip])
+  @persistence_roundtrip Module.concat([StackLab, Examples, PersistenceModeRoundtrip])
   @aitrace_evidence Module.concat([AITrace, RemoteFacade, Evidence])
   @aitrace_fixture_transport Module.concat([AITrace, NSHKR, ExportTransport, Fixture])
   @replay_bundle Module.concat([AITrace, Trace, ReplayBundle])
@@ -195,12 +208,14 @@ defmodule StackLab.Examples.GnTenDistributedStack do
       node_trace_refs = node_trace_refs(baseline, node_lab_run, :context)
       aitrace_exports = export_trace_evidence(node_trace_refs, :context, evidence_opts)
       replay_bundle = replay_bundle(baseline, :context)
+      persistence_profiles = persistence_profiles()
 
       {:ok,
        %Receipt{
          receipt_ref: receipt_ref(baseline),
          schema_version: @context_schema_version,
-         status: status(baseline, node_lab_run, envelope_scan, aitrace_exports),
+         status:
+           status(baseline, node_lab_run, envelope_scan, aitrace_exports, persistence_profiles),
          profile: @context_profile,
          topology_ref: node_lab_run["topology_ref"],
          monolith_baseline_receipt_ref: baseline.receipt_ref,
@@ -212,6 +227,8 @@ defmodule StackLab.Examples.GnTenDistributedStack do
          aitrace_exports: aitrace_exports,
          replay_bundle: replay_bundle,
          evidence_status: evidence_status(aitrace_exports),
+         persistence_profiles: persistence_profiles,
+         persistence_status: persistence_status(persistence_profiles),
          node_lab_run: node_lab_run,
          distributed_envelope_scan: envelope_scan,
          node_placement: node_placement(node_lab_run),
@@ -253,12 +270,20 @@ defmodule StackLab.Examples.GnTenDistributedStack do
       node_trace_refs = node_trace_refs(baseline, node_lab_run, :router_model)
       aitrace_exports = export_trace_evidence(node_trace_refs, :router_model, evidence_opts)
       replay_bundle = replay_bundle(baseline, :router_model)
+      persistence_profiles = persistence_profiles()
 
       {:ok,
        %RouterModelReceipt{
          receipt_ref: router_model_receipt_ref(baseline),
          schema_version: @router_model_schema_version,
-         status: router_model_status(baseline, node_lab_run, envelope_scan, aitrace_exports),
+         status:
+           router_model_status(
+             baseline,
+             node_lab_run,
+             envelope_scan,
+             aitrace_exports,
+             persistence_profiles
+           ),
          profile: @router_model_profile,
          topology_ref: node_lab_run["topology_ref"],
          monolith_baseline_receipt_ref: baseline.receipt_ref,
@@ -278,6 +303,8 @@ defmodule StackLab.Examples.GnTenDistributedStack do
          aitrace_exports: aitrace_exports,
          replay_bundle: replay_bundle,
          evidence_status: evidence_status(aitrace_exports),
+         persistence_profiles: persistence_profiles,
+         persistence_status: persistence_status(persistence_profiles),
          node_lab_run: node_lab_run,
          distributed_envelope_scan: envelope_scan,
          node_placement: node_placement(node_lab_run),
@@ -308,6 +335,8 @@ defmodule StackLab.Examples.GnTenDistributedStack do
          baseline_receipt_ref: baseline.receipt_ref,
          fault_receipts: fault_receipts,
          owner_recovery_evidence: owner_recovery_evidence(),
+         persistence_profiles: baseline.persistence_profiles,
+         persistence_status: baseline.persistence_status,
          trace_refs: baseline.trace_refs,
          node_lab_run: baseline.node_lab_run,
          does_not_prove: [
@@ -398,19 +427,27 @@ defmodule StackLab.Examples.GnTenDistributedStack do
     }
   end
 
-  defp status(baseline, node_lab_run, envelope_scan, aitrace_exports) do
+  defp status(baseline, node_lab_run, envelope_scan, aitrace_exports, persistence_profiles) do
     if baseline.status == :pass and node_lab_run["status"] == "pass" and
-         envelope_scan["status"] == "pass" and evidence_status(aitrace_exports) == "pass" do
+         envelope_scan["status"] == "pass" and evidence_status(aitrace_exports) == "pass" and
+         persistence_status(persistence_profiles) == "pass" do
       :pass
     else
       :open_defect
     end
   end
 
-  defp router_model_status(baseline, node_lab_run, envelope_scan, aitrace_exports) do
+  defp router_model_status(
+         baseline,
+         node_lab_run,
+         envelope_scan,
+         aitrace_exports,
+         persistence_profiles
+       ) do
     if baseline.status == :pass and node_lab_run["status"] == "pass" and
          envelope_scan["status"] == "pass" and route_and_model_refs_present?(baseline) and
-         model_accounting_present?(baseline) and evidence_status(aitrace_exports) == "pass" do
+         model_accounting_present?(baseline) and evidence_status(aitrace_exports) == "pass" and
+         persistence_status(persistence_profiles) == "pass" do
       :pass
     else
       :open_defect
@@ -518,6 +555,104 @@ defmodule StackLab.Examples.GnTenDistributedStack do
     if Enum.all?(exports, &(Map.get(&1, "status") == "pass")), do: "pass", else: "open_defect"
   end
 
+  defp persistence_profiles do
+    case call(@persistence_roundtrip, :run, []) do
+      {:ok, receipt} ->
+        profile_receipts = Enum.map(receipt.profile_receipts, &profile_receipt_fact/1)
+        deterministic_profile_ids = ["mickey_mouse", "memory_debug"]
+
+        deterministic_profiles =
+          Enum.filter(profile_receipts, &(&1["profile_id"] in deterministic_profile_ids))
+
+        %{
+          "status" => Atom.to_string(receipt.status),
+          "source_receipt_ref" => receipt.receipt_ref,
+          "deterministic_profiles" => deterministic_profiles,
+          "opt_in_external_profiles" => opt_in_external_profiles(profile_receipts),
+          "matrix_scan" => json_safe(receipt.matrix_scan),
+          "substrate_started_by_stack_lab?" => false,
+          "temporal_started_by_stack_lab?" => false,
+          "postgres_started_by_stack_lab?" => false,
+          "raw_debug_payloads_persisted?" => false
+        }
+
+      {:error, reason} ->
+        %{
+          "status" => "open_defect",
+          "reason" => inspect(reason),
+          "deterministic_profiles" => [],
+          "opt_in_external_profiles" => [],
+          "substrate_started_by_stack_lab?" => false,
+          "temporal_started_by_stack_lab?" => false,
+          "postgres_started_by_stack_lab?" => false,
+          "raw_debug_payloads_persisted?" => false
+        }
+    end
+  end
+
+  defp persistence_status(%{
+         "status" => "pass",
+         "deterministic_profiles" => deterministic_profiles
+       }) do
+    profile_ids =
+      deterministic_profiles
+      |> Enum.map(&Map.fetch!(&1, "profile_id"))
+      |> MapSet.new()
+
+    if MapSet.subset?(MapSet.new(["mickey_mouse", "memory_debug"]), profile_ids) do
+      "pass"
+    else
+      "open_defect"
+    end
+  end
+
+  defp persistence_status(_profiles), do: "open_defect"
+
+  defp profile_receipt_fact(profile_receipt) do
+    %{
+      "profile_id" => profile_receipt.profile_id |> Atom.to_string(),
+      "selected_tier" => profile_receipt.selected_tier |> Atom.to_string(),
+      "store_set_id" => profile_receipt.store_set_id |> Atom.to_string(),
+      "capture_level" => profile_receipt.capture_level |> Atom.to_string(),
+      "restart_claim" => profile_receipt.restart_claim |> Atom.to_string(),
+      "durable_opt_in?" => profile_receipt.durable_opt_in?,
+      "durable_tag" => profile_receipt.durable_tag,
+      "proof_command" => profile_receipt.proof_command,
+      "storage_behavior_ref" => profile_receipt.storage_behavior_ref,
+      "authority_semantics_ref" => profile_receipt.authority_semantics_ref
+    }
+  end
+
+  defp opt_in_external_profiles(profile_receipts) do
+    postgres_profiles =
+      profile_receipts
+      |> Enum.filter(&(&1["profile_id"] in ["integration_postgres", "full_debug_tracked"]))
+      |> Enum.map(fn profile ->
+        Map.merge(profile, %{
+          "proof_mode" => "opt_in_preflight_only",
+          "compose_ref" => "tools/compose/multi-node.yml",
+          "toxiproxy_ref" => "tools/toxiproxy/toxiproxy.json",
+          "substrate_started_by_stack_lab?" => false
+        })
+      end)
+
+    postgres_profiles ++
+      [
+        %{
+          "profile_id" => "ops_durable_temporal",
+          "selected_tier" => "ops_durable",
+          "store_set_id" => "temporal_workflow_runtime",
+          "capture_level" => "metadata",
+          "restart_claim" => "durable_restart",
+          "durable_opt_in?" => true,
+          "durable_tag" => "persistence-durable-opt-in",
+          "proof_mode" => "blocked_until_repo_owned_just",
+          "just_command" => "cd /home/home/p/g/n/mezzanine && just dev-status",
+          "substrate_started_by_stack_lab?" => false
+        }
+      ]
+  end
+
   defp replay_bundle(baseline, scenario) do
     attrs =
       %{

examples/gn_ten_distributed_stack/mix.exs

@@ -30,6 +30,8 @@ defmodule StackLab.GnTenDistributedStack.MixProject do
       {:stack_lab_context_abi_roundtrip, path: "../context_abi_roundtrip", runtime: false},
       {:stack_lab_nshkr_router_fabric_roundtrip,
        path: "../nshkr_router_fabric_roundtrip", runtime: false},
+      {:stack_lab_persistence_mode_roundtrip,
+       path: "../persistence_mode_roundtrip", runtime: false},
       {:app_kit_mezzanine_bridge,
        path: "../../../app_kit/bridges/mezzanine_bridge", runtime: false},
       {:mezzanine_execution_engine,

examples/gn_ten_distributed_stack/test/stack_lab/examples/gn_ten_distributed_stack_test.exs

@@ -14,6 +14,11 @@ defmodule StackLab.Examples.GnTenDistributedStackTest do
     assert File.exists?(receipt.node_lab_run["log_artifact"]["path"])
     assert receipt.distributed_envelope_scan["status"] == "pass"
     assert receipt.evidence_status == "pass"
+    assert receipt.persistence_status == "pass"
+    assert deterministic_profile?(receipt, "mickey_mouse", "none")
+    assert deterministic_profile?(receipt, "memory_debug", "none")
+    assert external_profile?(receipt, "integration_postgres", "durable")
+    assert external_profile?(receipt, "ops_durable_temporal", "durable_restart")
     assert length(receipt.node_trace_refs) == 5
     assert length(receipt.aitrace_exports) == 5
     assert Enum.all?(receipt.aitrace_exports, &(&1["status"] == "pass"))
@@ -40,6 +45,12 @@ defmodule StackLab.Examples.GnTenDistributedStackTest do
     assert File.exists?(receipt.node_lab_run["log_artifact"]["path"])
     assert receipt.distributed_envelope_scan["status"] == "pass"
     assert receipt.evidence_status == "pass"
+    assert receipt.persistence_status == "pass"
+    assert receipt.persistence_profiles["matrix_scan"]["status"] == "pass"
+    refute receipt.persistence_profiles["substrate_started_by_stack_lab?"]
+    refute receipt.persistence_profiles["temporal_started_by_stack_lab?"]
+    refute receipt.persistence_profiles["postgres_started_by_stack_lab?"]
+    refute receipt.persistence_profiles["raw_debug_payloads_persisted?"]
     assert length(receipt.node_trace_refs) == 6
     assert length(receipt.aitrace_exports) == 6
     assert Enum.all?(receipt.aitrace_exports, &(&1["status"] == "pass"))
@@ -74,6 +85,9 @@ defmodule StackLab.Examples.GnTenDistributedStackTest do
 
     assert receipt.status == :pass
     assert receipt.profile == "partition_recovery"
+    assert receipt.persistence_status == "pass"
+    assert deterministic_profile?(receipt, "mickey_mouse", "none")
+    assert external_profile?(receipt, "ops_durable_temporal", "durable_restart")
     assert length(receipt.fault_receipts) == 7
     assert Enum.all?(receipt.fault_receipts, &(&1["status"] == "pass"))
     assert Enum.any?(receipt.fault_receipts, &(&1["fault_kind"] == "node_crash"))
@@ -86,5 +100,21 @@ defmodule StackLab.Examples.GnTenDistributedStackTest do
     refute json =~ "cookie_value"
     refute json =~ "raw_prompt"
     refute json =~ "provider_payload\":"
+    refute json =~ "DATABASE_URL"
+  end
+
+  defp deterministic_profile?(receipt, profile_id, restart_claim) do
+    Enum.any?(receipt.persistence_profiles["deterministic_profiles"], fn profile ->
+      profile["profile_id"] == profile_id and profile["restart_claim"] == restart_claim and
+        profile["durable_opt_in?"] == false
+    end)
+  end
+
+  defp external_profile?(receipt, profile_id, restart_claim) do
+    Enum.any?(receipt.persistence_profiles["opt_in_external_profiles"], fn profile ->
+      profile["profile_id"] == profile_id and profile["restart_claim"] == restart_claim and
+        profile["durable_opt_in?"] == true and
+        profile["substrate_started_by_stack_lab?"] == false
+    end)
   end
 end