Add campaign operational supervisor - #3476

Open

morganmcg1 wants to merge 127 commits into

mainfrom

operational-supervisor

Commits on Aug 6, 2026

Add campaign operational supervisor
mmcguire
committed
05fc053

Commits on Aug 8, 2026

Add standalone Docker launch backend

morganmcg1
authored and
mmcguire
committed
57fd324
Add safe AWS GPU launcher

morganmcg1
authored and
mmcguire
committed
6ba2dc2
Harden Docker and AWS launch workflows

codex
authored and
mmcguire
committed
7aecf6b
Compress AWS dataset uploads

codex
authored and
mmcguire
committed
6b7e075
Adapt backend launch tests to routing preflight

codex
authored and
mmcguire
committed
cf77886
Harden AWS image pulls and teardown

codex
authored and
mmcguire
committed
114ecc0
Unify launch defaults and size AWS storage dynamically

codex
authored and
mmcguire
committed
6c086ef
Document Docker and AWS operation

codex
authored and
mmcguire
committed
263b7f0
Complete cross-backend model integration

codex
authored and
mmcguire
committed
6823aab
Add native AWS Mac research fleet
mmcguire
committed
d82024f
Align native browser role environment
mmcguire
committed
5d8d826
Make GPT-5.6 the default model family
mmcguire
committed
737d009
Handle long literal launch instructions
mmcguire
committed
2faec57
Synchronize fresh Mac host clocks
mmcguire
committed
2968f0a
Support neutral paired model campaigns
mmcguire
committed
972f764
Import the Metal toolchain on AWS Macs
mmcguire
committed
642bfd5
Execute AWS Mac setup from a file
mmcguire
committed
f866f6e
Detach command-only AWS Mac SSH input
mmcguire
committed
b376e5c
Wrap Playwright Chromium on AWS Macs
mmcguire
committed
8e35eeb
Prepare tmux for native Mac roles
mmcguire
committed
8dea824
Preserve long-running AWS Mac campaigns
mmcguire
committed
f07ba88
Isolate native role tmux servers
mmcguire
committed
6787ff7
Shorten native tmux socket paths
mmcguire
committed
9f33157
Add W&B Inference model support
mmcguire
committed
50eb8c0
Make local compaction limit configurable

codex
authored and
mmcguire
committed
f25dd1c
Add token-aware GLM compaction

codex
authored and
mmcguire
committed
c31b6cc
Handle structured tokenizer smoke output

codex
authored and
mmcguire
committed
a3f891b
Remove legacy ultra reasoning effort

codex
authored and
mmcguire
committed
f351188
Generalize supervised jobs and retire think tool
mmcguire
committed
ba09f80
Migrate retired persisted tool snapshots
mmcguire
committed
455fbe4
Resolve rebase model metadata regressions
mmcguire
committed
9732370

Commits on Aug 9, 2026

Commits on Aug 10, 2026

Merge remote-tracking branch 'origin/main' into codex/pr3472-liveness-merge
mmcguire
committed
8feef8b
Merge remote-tracking branch 'origin/pr-3472' into operational-supervisor
mmcguire
committed
68de148
Make supervisor upgrades rollback-safe
mmcguire
committed
9d2c4a2
Isolate supervisor-only upgrades from role setup
mmcguire
committed
1bb1923
Route controller restarts through the process owner
mmcguire
committed
e98198e
isolate supervisor terminal authority
mmcguire
committed
67d5d2f
isolate supervisor terminal authority
mmcguire
committed
128af9c
Serialize concurrent restart store initialization
mmcguire
committed
d96671e
Add a real Kubernetes production canary
mmcguire
committed
f1f113f
Make canary cleanup drain its static volume
mmcguire
committed
90c54ba
Document supervisor isolation and refresh canary
mmcguire
committed
7cc8ceb
Prove supervisor state survives rollback
mmcguire
committed
115fd1b
Clean partially created canary clusters
mmcguire
committed
71f288a
Bound failed research review cadence
mmcguire
committed
cbec33b
Include machine utilization in supervisor wakes
mmcguire
committed
754b387
Harden concurrent SQLite store initialization
mmcguire
committed
08e9924
Harden supervisor Kubernetes production path
mmcguire
committed
ed4c774
Fix supervisor upgrade storage fixture
mmcguire
committed
fdae103
Version supervisor management wire protocol
mmcguire
committed
c665e03
Isolate trusted role control runtime
mmcguire
committed
37adfdd
Fix health probe command search path
mmcguire
committed
3842286
Recover interrupted supervisor operations
mmcguire
committed
2241fa1
harden supervisor process and repair boundaries
mmcguire
committed
5716b04
Merge production supervisor hardening
mmcguire
committed
a644058
Bound invalid repair output in linear time
mmcguire
committed
6cc8069
Isolate role repair executor sockets
mmcguire
committed
75b004f
Clarify supervisor rollback and kill switch
mmcguire
committed
e7cf1e3
Recover poisoned repair socket paths
mmcguire
committed
808ec4c
Bound durable repair receipt payloads
mmcguire
committed
6102f19
Protect repair executor heartbeat endpoint
mmcguire
committed
e9d8879
Document supervisor production boundaries
mmcguire
committed
942bef6
Quiesce roles before unrestricted repair
mmcguire
committed
5a7044e
Make volatile cleanup authoritative
mmcguire
committed
1ae55b0
Preserve legacy persisted agent events
mmcguire
committed
1cb8216
Bound supervisor state across campaign changes
mmcguire
committed
13bdaa3
Make repair recovery outcomes authoritative
mmcguire
committed
779202a
Make supervisor upgrades transactionally reversible
mmcguire
committed
922558f
Preserve rollback recovery evidence on unexpected errors
mmcguire
committed
1f01024
Add production supervisor canary and role image smoke
mmcguire
committed
35332f0
Recheck delegations before controller restart
mmcguire
committed
814a512
Preserve previous canary container logs
mmcguire
committed
b359869
Authenticate role repair quiescence
mmcguire
committed
cf19093
Exercise supervisor entrypoint and repeated wakes
mmcguire
committed
8a91767
Validate repair pause TTL on the role host
mmcguire
committed
a7415e1
Harden supervisor release rollback transactions
mmcguire
committed
0573ed3
Document authenticated repair and recovery boundaries
mmcguire
committed
ebaee9c
Align the repair executor wire version
mmcguire
committed
4c0782f
Trust exact managed role worktrees
mmcguire
committed
e5666d1
Run canary against the current isolated runtime
mmcguire
committed
8386a77
Keep the canary runtime immutable
mmcguire
committed
bb6a87c
Mask Hugging Face role credentials
mmcguire
committed
945af00
Align canary role control paths
mmcguire
committed
caf2c56
Keep metadata isolation across launch rollback
mmcguire
committed
5279714
Canary first-launch metadata rollback safety
mmcguire
committed
f32cfe5
fix(native): bind teardown roles to campaign
mmcguire
committed
3f0c00a
Harden AWS Mac lifecycle state
mmcguire
committed
e3a3d7e
Authenticate AWS SSH hosts and lifecycle state
mmcguire
committed
16e8458
Bind AWS lifecycle state to campaign tag
mmcguire
committed
20ff721
Finish AWS Mac cleanup after host loss
mmcguire
committed
305ca40
Harden native teardown inventory
mmcguire
committed
f72fccf
Isolate AWS Mac campaign SSH access
mmcguire
committed
9385151
Retry native bootout after plist removal
mmcguire
committed
b910c2a
Isolate privileged supervisor evidence
mmcguire
committed
27c5c62
Wait for AWS Mac termination before cleanup
mmcguire
committed
d989f2b
Preserve base egress policy on AWS Mac
mmcguire
committed
3616946
Retry AWS Mac egress verification
mmcguire
committed
c094b61
Sanitize supervisor operation results
mmcguire
committed
a0b04cc
Isolate scheduled research assessment
mmcguire
committed
d779cee
Document supervisor trust boundary
mmcguire
committed
da20064
Make Kubernetes canary portable on macOS
mmcguire
committed
3eab74f
Fix canary lease expiry timestamp
mmcguire
committed
002a554
Normalize rollback apply metadata
mmcguire
committed
ef36d94
Preserve rollback manifests through raw API
mmcguire
committed
0487039
Make runtime socket tests portable
mmcguire
committed
59cb149
Harden production release checks
mmcguire
committed
0fc48d0
Use portable anonymous repair results
mmcguire
committed
23b40e7