antje
9396df7021
CI/CD / image (push) Failing after 33m28s
CI/CD / gate (push) Successful in 13s
CI/CD / containment (push) Successful in 1m38s
CI/CD / rollout (push) Skipped
CI/CD / reach (push) Skipped
CI/CD / fanout (push) Skipped
CI/CD / receipt (push) Skipped
Hanzo CI/CD / cicd (push) Successful in 12s
cloud.App(name, cfg, deps, tools) now builds every program — the host and all 125 plugin programs — and installs the canonical chain through identity in one place. Identify states the order invariant once: the boundary that mints the validated org runs before the enrichment that parks it, and neither exists without the other. Middleware order at the host is proven byte-identical before and after (18 entries), so a refused request is still audited. Every subsystem self-install of the enrichment is deleted — 74 sites across 67 packages. A subsystem asserting identity for itself repeats a claim it cannot check; two of those copies sat on nodes owning no routes, which zip refuses to compose, and that is the outage that took /v1/o11y and /v1/integrations down. The childless spelling is gone everywhere: a gate passed TO Group is installed at the root bounded by its prefix, and the two-step form that slipped past that (a bare Group then Use on it) is collapsed at its last holdouts — referrals' three gates and the audit fixtures. Tests stop rebuilding the composer by hand: each package that mounts on a bare app owns one compose helper, so anonymous cases still refuse and principal-carrying cases reach the handler exactly as production does. Also fixed, found by the constructor's own test: the markdown negotiation replaced the Vary header CORS had written, so every CORS response on every program advertised Vary: Accept — a shared cache could hand one origin's body to a different origin. The later writer is additive now. Census: zero non-test enrichment installs under apps/, zero childless chains. Build and vet clean over the whole tree in the shipping mode.