Sweep retry budget can expire before the incident the orphan belongs to exists #27
Open
opened 2026-08-20 03:36:20 -04:00 by logan
·
1 comment
No Branch/Tag Specified
Labels
Clear labels
area/ai-pipeline
area/auth
area/billing
area/correlation
area/discord
area/frontend
area/governance
area/growth
area/infra-deploy
area/legal
area/map
area/mqtt
area/node-ota
area/osint
area/recording-audio
area/sdr-radio
area/transcription
board
board:agenda
minutes:draft
minutes:final
role:ceo
role:cfo
role:cio
role:ciso
role:cmo
role:coo
role:cto
Scene/entity extraction, summarizer, AI providers, embeddings
AuthN/Z, roles, tenancy/org scoping, API keys, credentials
Plans, entitlements, AI spend accounting and caps
Incident correlation, linking, lifecycle, severity, corr_debug
Discord bot, radio bots, voice streams, bot tokens, webhooks
Web UI: Next.js app and the edge-node local dashboard
Board process, minutes, unattended runner, agent tooling
Go-to-market, outreach, cold email, discovery conversations
CI/CD, VM, registry, Firestore rules/indexes deploy, Terraform/Caddy
ToS, retention, licences/DAAs, CAN-SPAM, E&O, name suppression
Live map: pins, paths, tiles, legend, geocoding
Node-C2 MQTT, checkins, commands, node sweeper, dynsec
Node install, enrollment, OTA updater, image skew
External feeds: cameras, 511, ADS-B, AIS, outages, and their licences
Call capture, boundaries, PulseAudio, ring buffer, trimming, attribution
OP25 decode, SDR hardware/tuning, conventional, second SDR, mesh radio
STT, transcript correction, place verification, name accuracy
Board process: minutes and board-filed items
Needs board scoping at the next sitting; CEO removes the label once scoped
One exec pre-read, closed by CEO
CEO ruling; open until enacted
Filed by the CEO
Filed by the CFO
Filed by the CIO
Filed by the CISO
Filed by the CMO
Filed by the COO
Filed by the CTO
kind
behavior-bug
Wrong product behavior; the instrument reads it correctly
kind
measurement-bug
Corrupts the recording/instrument (debug data, evals, health checks), not behavior
priority
p0
Drop everything: prod broken, live exposure, or owner-ruled P0
priority
p1
Next up: blocks a gate, a customer, or core incident quality
priority
p2
Normal: real defect or planned work, schedule in turn
priority
p3
Low: minor, cosmetic, or someday
status
blocked
Waiting on an external party, spend, or another issue
status
in-progress
Branch or PR open against it
status
needs-decision
Waiting on an owner or board ruling before work
status
needs-info
Root cause or repro unknown; needs a reading first
type
bug
Something built is wrong: code, data, or a measurement
type
chore
Maintenance, refactor, tests, pinning, cleanup: no user-visible change
type
decision
A ruling to make or record: board minutes, owner calls, legal reviews
type
docs
Docs, runbooks, CLAUDE.md, skills, SOPs
type
feature
New capability or an extension of an existing one
type
security
Security, privacy, credential or tenant-isolation exposure
type
tracking
Tracker, checklist, initiative or punch-list spanning several changes
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: logan/server-26#27
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
recorrelation_sweep.pyallowsMAX_SWEEP_ATTEMPTS = 3link-only retries,summary_interval_minutes(2) apart, then writescorr_path: "unlinked"as a permanent tombstone. That is a ~6 minute budget from when the call ends, and the sweep always runscreate_if_new=False- so a call can be tombstoned before the incident it belongs to has been created.Observed 2026-08-20: orphan
f321b047("Fire 1 ... courtesy drop-off", 02:46:51) exhausted its three attempts around 02:53, while incident9d376ffe- the completion of that same drop-off by that same unit - was not created until 02:50. The orphan carries units ["Fire 1", "22-47"], overlapping the incident's units ["Fire 1", "5-5", "5-5-2"], so the unit-continuity path would have caught it given one more pass.Note this is an UNDER-linking bug, and every fix for it pushes toward more merging - the opposite direction from server-26#22, where the entire observed failure mode was over-merging. It was left alone deliberately in that pass and should be re-validated against post-fix data before being worked.
Fix direction: budget in wall-clock time rather than attempt count, or do not tombstone until the
recorrelation_scan_minuteswindow itself has passed.Source: CORRELATION_REVIEW_0820.md section 3, ranked #7.
Board minutes #62 (2026-08-24), section 9. Recording so this does not get quietly marked covered.
#57 recurring correlation dump does not cover this issue and cannot be made to. #57 counts orphan totals and retry-exhaustion state. #27 is a tombstone-timing race and needs the call-end to incident-created timestamp delta, which #57 never collects. Running #57 every cycle and treating #27 as instrumented is ceremony that reads as diligence.
This stays a standalone fix: retry budget in wall-clock time, not attempt count (CTO draft #60 rec. 3). Not folded into #57.