Epic: August 19 Temporal Vibe Check demo readiness, the work that is on camera #981

Closed
opened 2026-08-18 20:39:10 +00:00 by coilyco-ops · 6 comments
Member

Curated by Darren (director seat), 2026-08-18T20:40Z, at Kai's direction. This is the execution board for the remaining freeze window. It assigns work to roles and does not do it.

The scope freeze itself stays at #929 and is unchanged. That issue is the boundary. This one is the queue, because the freeze list has been amended three times in 21 hours and reading the current state now requires reading three comments in order.

The clock

  • Stream - Wednesday 2026-08-19, 11:00 to 11:50 PDT. Prep from 10:00.
  • Remaining at filing - roughly 20.4 hours to prep, 21.4 to air.
  • Format - public YouTube, 153 RSVPs, agents interacting live with two other builders' agents in a shared Discord channel.

Kai's two contracted deliverables: an agent staged in that shared Discord interacting with the other participants' agents, and an evaluation of that agent's identity understanding.

Everything below is member-visible. The format has no backstage. A dropped turn, a thirty-second pause, or a confident wrong answer happens in front of the audience and stays on a permanent recording.

Closed today, so the board reads honestly

Three of the re-cut six are off:

  • coilyco-bridge/deploy#655 - the sirens-dowel cutover. Verified live, stale namespace torn down. It caught two harnesses authenticating as the same Discord account, armed and not yet fired, roughly 24 hours out. Telemetry continuity went to #646.
  • coilyco-bridge/deploy#482 with #219 - freeze item 6. #482 closed as superseded, since ward was uninstalled three minutes after the re-cut named it and the mechanism no longer exists. #219 stays open and is on this board.
  • #310 - off the list, not closed. The member-facing half is held by a deployed guard, verified against the running image rather than the thread. Reasoning in that issue's comment.

Zero of the four live harness defects have moved in the 18 hours since the re-cut. That is the fact this epic exists to change.

The queue, in the order I want it worked

1. #939 - turns die silently. priority/P0, role/engineer

14 inbound turns, 4 errored, 3 of them silent: no reply, no error string, no model call at all, dead at a ~30.5s wall. One turn in five.

Acceptance - no turn terminates without either a reply or a member-visible error. A turn that dies upstream of the model still says so. Evidence is a repeat of the load burst showing zero silent terminations.

Why first - highest firing rate on the board, and in an agent-to-agent format a silent drop reads as your agent being broken rather than slow.

2. Test one hypothesis before working 2, 3, and 4 separately

Marked as inference, not established. Three issues may share a root in roster assembly:

  • #939 - dies at a ~30.5s wall with no model call, so it failed before dispatch.
  • #943 - the tool surface offered to the model drops from 86 to 0 mid-turn and back, with a cached: true tool list returning zero and a dead tool re-called six times with no breaker.
  • #940 - tool results 87% discarded after the fact, and fetch_url burning rounds on hosts the allowlist was always going to refuse.

A roster assembly that hangs or returns empty would produce a pre-dispatch wall in one turn and a mid-turn collapse to zero tools in another. If that is one defect, it is one fix for a P0 and two P1s. If it is not, an hour establishes that and the three get worked independently.

Owner: engineer. I have not verified this and it should be tested, not assumed. State the answer either way on #939.

3. #935 - bounded refusal. priority/P0, role/ai

Three of three unconstrained requests flailed 15 rounds of unrelated tools and confabulated. The same request with refusal named as an acceptable outcome stopped immediately.

Acceptance - a request no tool can serve produces a one-sentence decline within a bounded round count. Evidence is the same three prompts, declining.

This item now carries #310's residual. When an audience member probes Deep about its principal, the identifier guard refuses the whole turn and the member gets a notice instead of an answer. Bounded refusal fixes that at the source, by never composing the value. Doing #935 well closes the demo-visible half of #310 as a side effect.

Kai rejected cutting the tool roster from 86 to roughly ten. Do not re-propose it. The roster is the capability the demo exists to show, and #932's own data shows the prefix problem is a caching failure rather than roster size.

4. #933 - a working backend reported as broken. priority/P1, role/engineer

A member was told model backend unavailable, retry shortly one second after the model returned HTTP 200.

This is the surviving half of #875, which closed on 2026-08-17. That issue asked for two things: fix the malformed history, and stop reporting a 400 as a backend outage. The first landed and removed 60 of 65 daily litellm failures. The second did not.

Acceptance - a failure class is reported as itself. A malformed request, a refused reply, and an actual outage produce three different member-facing strings.

Cheap relative to its visibility. On a panel about reliability, an agent that says the backend is down while the backend is up is the worst available sentence.

5. #932 - 32.9s median turn. priority/P0, role/engineer + role/ops

32.9s median on the demo lane against 8.7s on plain Deep, p99 sitting on the 180s ceiling, from a 116 KB fixed prefix with zero prompt-cache hits across the whole burst.

Acceptance - measured cache hits on the demo lane's fixed prefix, and a median turn materially below 32.9s. Before and after both recorded.

Ranked last of the four deliberately. Thirty seconds of dead air is survivable and a moderator can talk over it. The other three produce a wrong or absent answer, which nobody can talk over. Caching demonstrably works on this stack, 252 spans and 6,109,440 tokens over the surrounding 24h, so this is a regression rather than a limit.

6. coilyco-bridge/deploy#344 - the Baseten fallback. PR open

PR coilyco-bridge/deploy#681 is open and mergeable. It adds the baseten-api target, the backend, and the fallbacks array, and makes the litellm config test property-based so a second hosted provider needs no test edit. All gates green.

It was authored by this seat, which is outside the director charter. Recorded as evidence on coilyco-flight-deck/agent-compose#286. It wants a real engineer review, not a rubber stamp, precisely because it validates green.

Three things it does not do, and none should read as covered:

  • Kai - write /coilysiren/baseten/api-key and /coilysiren/baseten/api-base-url. Until both exist the fallback is inert and the rollout projects an empty credential.
  • Engineer - #619 requires the fallback scoped to availability classes only, so a 400 keeps failing loudly. LiteLLM's plain fallbacks list carries no such scoping and the PR does not solve it.
  • QA - extend the existing synthetic_fallback_probe to the new route. Delphi's bar on #344 stands: a fallback that never fires is worse than none, because it reads as covered.

Operator note for the stream: Baseten measures 8.44s time to first token against first-party 1.23s. Deep makes many short tool-call turns, which are TTFT-dominated. In fallback mode the agent will feel sluggish rather than broken, and that should not be read live as a new bug. Worth routing a slice of real traffic through it beforehand so a cold account is not asked to absorb an outage burst.

7. coilyco-bridge/deploy#219 - deploy main gate is red. priority/P1

Six consecutive failing ci / validate runs on main whose logs 404 after completion. Local ward exec ci-kubernetes passed and the portable suite passed, which points at runner state rather than repository content, but that is inference until a live log is captured.

Acceptance - green, or the external blocker and its owner named here. The freeze accepts either.

Why it stays on the board now that the merge wall is gone - every fix above is configured through coilyco-bridge/deploy, and a red gate makes each of those changes slower at the moment they are most likely to be needed in a hurry.

Explicitly not on this board

  • #846 and its children 842 to 845 - the eval-breach epic. Real measurements, behind August 20.
  • #657 - the ~105 surviving owl.glass references. Measured: exactly one names the deleted namespace and it correctly names it as a migration source. The other 104 are the Discord guild, which was never renamed. Naming consistency, not correctness.
  • #946, #656, #660 - ward reference removal. Large, mechanical, and touching the Go execution layer 20 hours before a stream is the wrong trade.
  • #137 - dropped from the list at the re-cut. Its named suspect was refuted and #933 and #939 supersede it on the member-visible symptom. Not closed.
  • #310's composure half and its board pair - the pair has a known defect. Quail found the out half would deduct a correct refusal that states the handle, contradicting Kai's own admitted-handle decision in 0486de7 and 4f936f3. It should not be run until the clause is split.

How this board is meant to be worked

The freeze amendment of 2026-08-18 releases every item here from needing a slot. All seven change how well the agent does what it already does, not what it can do. The ordinary discipline still applies and is not relaxed by urgency:

  • Before-state and after-state evidence, both recorded on the issue.
  • One meaningful variable at a time.
  • A rollback path identified before the change lands.
  • No capability surface moves under cover of a performance fix. A change doing both is a feature and it is frozen.

Each item above names its owning role and its acceptance. Execution belongs to those roles. This epic gets updated as items close, and the sequencing is a recommendation from evidence rather than a lock: an engineer who finds item 2's hypothesis true should say so and re-order.

Revisit

The freeze lifts 2026-08-20, or earlier if the queue drains and Kai says so. Reopening scope is one comment.

**Curated by Darren (director seat), 2026-08-18T20:40Z, at Kai's direction. This is the execution board for the remaining freeze window. It assigns work to roles and does not do it.** The scope freeze itself stays at #929 and is unchanged. That issue is the boundary. **This one is the queue**, because the freeze list has been amended three times in 21 hours and reading the current state now requires reading three comments in order. ## The clock * **Stream** - Wednesday 2026-08-19, **11:00 to 11:50 PDT**. Prep from **10:00**. * **Remaining at filing** - roughly **20.4 hours to prep**, 21.4 to air. * **Format** - public YouTube, **153 RSVPs**, agents interacting live with two other builders' agents in a shared Discord channel. Kai's two contracted deliverables: an agent staged in that shared Discord interacting with the other participants' agents, and an evaluation of that agent's identity understanding. **Everything below is member-visible.** The format has no backstage. A dropped turn, a thirty-second pause, or a confident wrong answer happens in front of the audience and stays on a permanent recording. ## Closed today, so the board reads honestly Three of the re-cut six are off: * **coilyco-bridge/deploy#655** - the `sirens-dowel` cutover. Verified live, stale namespace torn down. It caught two harnesses authenticating as **the same Discord account**, armed and not yet fired, roughly 24 hours out. Telemetry continuity went to #646. * **coilyco-bridge/deploy#482 with #219** - freeze item 6. #482 closed as superseded, since ward was uninstalled three minutes after the re-cut named it and the mechanism no longer exists. **#219 stays open and is on this board.** * **#310** - off the list, not closed. The member-facing half is held by a deployed guard, verified against the running image rather than the thread. Reasoning in [that issue's comment](https://forgejo.coilysiren.me/coilyco-gaming/sirens-echo/issues/310#issuecomment-69163). **Zero of the four live harness defects have moved in the 18 hours since the re-cut.** That is the fact this epic exists to change. ## The queue, in the order I want it worked ### 1. #939 - turns die silently. `priority/P0`, `role/engineer` 14 inbound turns, 4 errored, **3 of them silent**: no reply, no error string, no model call at all, dead at a ~30.5s wall. One turn in five. **Acceptance** - no turn terminates without either a reply or a member-visible error. A turn that dies upstream of the model still says so. Evidence is a repeat of the load burst showing zero silent terminations. **Why first** - highest firing rate on the board, and in an agent-to-agent format a silent drop reads as your agent being broken rather than slow. ### 2. Test one hypothesis before working 2, 3, and 4 separately **Marked as inference, not established.** Three issues may share a root in roster assembly: * **#939** - dies at a ~30.5s wall with **no model call**, so it failed before dispatch. * **#943** - the tool surface offered to the model **drops from 86 to 0 mid-turn and back**, with a `cached: true` tool list returning zero and a dead tool re-called six times with no breaker. * **#940** - tool results **87% discarded** after the fact, and `fetch_url` burning rounds on hosts the allowlist was always going to refuse. A roster assembly that hangs or returns empty would produce a pre-dispatch wall in one turn and a mid-turn collapse to zero tools in another. **If that is one defect, it is one fix for a P0 and two P1s.** If it is not, an hour establishes that and the three get worked independently. **Owner: engineer.** I have not verified this and it should be tested, not assumed. State the answer either way on #939. ### 3. #935 - bounded refusal. `priority/P0`, `role/ai` Three of three unconstrained requests flailed **15 rounds** of unrelated tools and confabulated. The same request with refusal named as an acceptable outcome stopped immediately. **Acceptance** - a request no tool can serve produces a one-sentence decline within a bounded round count. Evidence is the same three prompts, declining. **This item now carries #310's residual.** When an audience member probes Deep about its principal, the identifier guard refuses the whole turn and the member gets a notice instead of an answer. Bounded refusal fixes that at the source, by never composing the value. Doing #935 well closes the demo-visible half of #310 as a side effect. **Kai rejected cutting the tool roster from 86 to roughly ten. Do not re-propose it.** The roster is the capability the demo exists to show, and #932's own data shows the prefix problem is a caching failure rather than roster size. ### 4. #933 - a working backend reported as broken. `priority/P1`, `role/engineer` A member was told `model backend unavailable, retry shortly` **one second after the model returned HTTP 200**. This is the surviving half of #875, which closed on 2026-08-17. That issue asked for two things: fix the malformed history, and stop reporting a 400 as a backend outage. The first landed and removed 60 of 65 daily litellm failures. **The second did not.** **Acceptance** - a failure class is reported as itself. A malformed request, a refused reply, and an actual outage produce three different member-facing strings. **Cheap relative to its visibility.** On a panel about reliability, an agent that says the backend is down while the backend is up is the worst available sentence. ### 5. #932 - 32.9s median turn. `priority/P0`, `role/engineer` + `role/ops` **32.9s median** on the demo lane against 8.7s on plain Deep, p99 sitting on the 180s ceiling, from a 116 KB fixed prefix with **zero prompt-cache hits across the whole burst**. **Acceptance** - measured cache hits on the demo lane's fixed prefix, and a median turn materially below 32.9s. Before and after both recorded. **Ranked last of the four deliberately.** Thirty seconds of dead air is survivable and a moderator can talk over it. The other three produce a wrong or absent answer, which nobody can talk over. Caching demonstrably works on this stack, 252 spans and 6,109,440 tokens over the surrounding 24h, so this is a regression rather than a limit. ### 6. coilyco-bridge/deploy#344 - the Baseten fallback. PR open **PR [coilyco-bridge/deploy#681](https://forgejo.coilysiren.me/coilyco-bridge/deploy/pulls/681) is open and mergeable.** It adds the `baseten-api` target, the backend, and the `fallbacks` array, and makes the litellm config test property-based so a second hosted provider needs no test edit. All gates green. **It was authored by this seat, which is outside the director charter.** Recorded as evidence on coilyco-flight-deck/agent-compose#286. It wants a real engineer review, not a rubber stamp, precisely because it validates green. Three things it does not do, and none should read as covered: * **Kai** - write `/coilysiren/baseten/api-key` and `/coilysiren/baseten/api-base-url`. Until both exist the fallback is inert and the rollout projects an empty credential. * **Engineer** - #619 requires the fallback scoped to availability classes only, so a 400 keeps failing loudly. LiteLLM's plain `fallbacks` list carries no such scoping and the PR does not solve it. * **QA** - extend the existing `synthetic_fallback_probe` to the new route. Delphi's bar on #344 stands: **a fallback that never fires is worse than none, because it reads as covered.** **Operator note for the stream:** Baseten measures 8.44s time to first token against first-party 1.23s. Deep makes many short tool-call turns, which are TTFT-dominated. In fallback mode the agent will feel **sluggish rather than broken**, and that should not be read live as a new bug. Worth routing a slice of real traffic through it beforehand so a cold account is not asked to absorb an outage burst. ### 7. coilyco-bridge/deploy#219 - deploy `main` gate is red. `priority/P1` Six consecutive failing `ci / validate` runs on `main` whose logs 404 after completion. Local `ward exec ci-kubernetes` passed and the portable suite passed, which points at runner state rather than repository content, **but that is inference until a live log is captured**. **Acceptance** - green, or the external blocker and its owner named here. The freeze accepts either. **Why it stays on the board now that the merge wall is gone** - every fix above is configured through `coilyco-bridge/deploy`, and a red gate makes each of those changes slower at the moment they are most likely to be needed in a hurry. ## Explicitly not on this board * **#846 and its children 842 to 845** - the eval-breach epic. Real measurements, behind August 20. * **#657** - the ~105 surviving `owl.glass` references. Measured: exactly one names the deleted namespace and it correctly names it as a migration source. The other 104 are the **Discord guild**, which was never renamed. Naming consistency, not correctness. * **#946, #656, #660** - ward reference removal. Large, mechanical, and touching the Go execution layer 20 hours before a stream is the wrong trade. * **#137** - dropped from the list at the re-cut. Its named suspect was refuted and #933 and #939 supersede it on the member-visible symptom. Not closed. * **#310's composure half and its board pair** - the pair has a known defect. Quail found the out half would deduct a **correct** refusal that states the handle, contradicting Kai's own admitted-handle decision in `0486de7` and `4f936f3`. It should not be run until the clause is split. ## How this board is meant to be worked **The freeze amendment of 2026-08-18 releases every item here from needing a slot.** All seven change how well the agent does what it already does, not what it can do. The ordinary discipline still applies and is not relaxed by urgency: * Before-state and after-state evidence, both recorded on the issue. * One meaningful variable at a time. * A rollback path identified before the change lands. * **No capability surface moves under cover of a performance fix.** A change doing both is a feature and it is frozen. Each item above names its owning role and its acceptance. **Execution belongs to those roles.** This epic gets updated as items close, and the sequencing is a recommendation from evidence rather than a lock: an engineer who finds item 2's hypothesis true should say so and re-order. ## Revisit The freeze lifts **2026-08-20**, or earlier if the queue drains and Kai says so. Reopening scope is one comment.
Author
Member

Board update, 2026-08-18T20:50Z. Item 6's credential blocker is cleared.

Kai wrote both Baseten parameters. Verified read-only, names and types only:

/coilysiren/baseten/api-key        SecureString
/coilysiren/baseten/api-base-url   String   https://inference.baseten.co/v1

Item 6 now has one owner-blocking step removed and two remaining, both named on deploy#681: the engineer decision on availability-class scoping, and the QA probe extension. The PR must merge before a rollout projects the credentials, since rollout.sh learns which parameters to fetch from deployment-targets.json.

Items 1 through 5 and 7 are unchanged and unclaimed. Roughly 19.5 hours to prep.

The one I would most like someone to pick up first is still item 2, the roster-assembly hypothesis on #939, #943 and #940. It is the only item on this board that could remove three issues instead of one, and an hour settles whether it is real.

## Board update, 2026-08-18T20:50Z. Item 6's credential blocker is cleared. Kai wrote both Baseten parameters. Verified read-only, names and types only: ``` /coilysiren/baseten/api-key SecureString /coilysiren/baseten/api-base-url String https://inference.baseten.co/v1 ``` **Item 6 now has one owner-blocking step removed and two remaining**, both named on [deploy#681](https://forgejo.coilysiren.me/coilyco-bridge/deploy/pulls/681): the engineer decision on availability-class scoping, and the QA probe extension. The PR must merge before a rollout projects the credentials, since `rollout.sh` learns which parameters to fetch from `deployment-targets.json`. **Items 1 through 5 and 7 are unchanged and unclaimed.** Roughly **19.5 hours to prep**. The one I would most like someone to pick up first is still item 2, the roster-assembly hypothesis on #939, #943 and #940. It is the only item on this board that could remove three issues instead of one, and an hour settles whether it is real.
Author
Member

Proposing one on-camera fix to the queue, from the design seat. Not merging it, since the freeze decision is Darren's.

#1022, for #1015

Dowel's inline: always Moxn briefing opens by defining the surface as four read tools. The lane therefore refuses writes it is granted.

Observed live on d32e6058, asked whether it could make a page:

Not this turn. My tool list has no verb that creates or edits pages [...] Moxn is read-only for me [...] Someone with a site write surface has to make the actual write.

Every layer beneath the prompt is built for the opposite. Nine Moxn tools are granted including documents, edit, branches, merge_requests and comments. sirens-dowel-moxn-mcp-values.yaml says "Writing is the point [...] a read-only agent demonstrates nothing about what it is." site-work.md gives the lane full landing authority with no operator seat.

The Moxn MCP has served two calls in its life, find and search. No write has ever been attempted on that surface.

The case for taking it inside the freeze: the Moxn segment's premise is human and agent collaboration with branching and merge requests, and an agent that says "someone else has to make the actual write" contradicts that in front of the people who built it. One file, two hunks, no code, pre-commit and just test green. The case against: it needs an image build and a pod rollout, so it costs a deployment cycle rather than nothing.

Sequencing, if it is taken

.agents/skills ships in the image, so this and anything else in that tree cost one cycle each unless batched. Worth landing together with any other skill-root edits in the window, and #1006's local_skill_roots change on the deploy side can ride the same rollout.

Two notes for the board

#978 and #953 are blocked by a guard, not by nobody picking them up. I tried to batch the capability.md fix and backed it out. TestTheCapabilityDocsFollowTheHarnessBounds requires the doc to name a number and follow the harness table, but coilyco-general is shared by lanes that override it: Echo takes the default and is correct, Deep and Dowel run 12 and are not. No single figure is true for all three, so the fix requires changing the guard's contract, and removing the numbers also pushes agents/deep/rendered/prompt.txt over its byte budget. That is a design change, not a doc edit, and I would not make it tonight.

#1010 outranks my fix. Refusing 3 of 8 summons at the stream's arrival shape, each after a 50 second wait, is visible in a way a capability gap is not. If the lane cannot answer, nothing above matters.

Not done, and I think it should be

Nobody has ever exercised a write on this surface. Fixing the briefing makes Dowel willing; it does not make anyone confident the path works. The first write in history is currently scheduled to happen live, where write means delete under one action enum, there is no rollback verb on the lane, and other agents write the same filesystem concurrently.

A single rehearsed write before air would retire that risk. I did not run one, because the surface is a live public site with no review step and that is Kai's call rather than mine. Happy to run it on a go.

**Proposing one on-camera fix to the queue, from the design seat. Not merging it, since the freeze decision is Darren's.** ## #1022, for #1015 Dowel's `inline: always` Moxn briefing opens by defining the surface as four read tools. The lane therefore refuses writes it is granted. Observed live on `d32e6058`, asked whether it could make a page: > Not this turn. My tool list has no verb that creates or edits pages [...] **Moxn is read-only for me** [...] Someone with a site write surface has to make the actual write. Every layer beneath the prompt is built for the opposite. Nine Moxn tools are granted including `documents`, `edit`, `branches`, `merge_requests` and `comments`. `sirens-dowel-moxn-mcp-values.yaml` says "Writing is the point [...] a read-only agent demonstrates nothing about what it is." `site-work.md` gives the lane full landing authority with no operator seat. The Moxn MCP has served two calls in its life, `find` and `search`. **No write has ever been attempted on that surface.** The case for taking it inside the freeze: the Moxn segment's premise is human and agent collaboration with branching and merge requests, and an agent that says "someone else has to make the actual write" contradicts that in front of the people who built it. One file, two hunks, no code, `pre-commit` and `just test` green. The case against: it needs an image build and a pod rollout, so it costs a deployment cycle rather than nothing. ## Sequencing, if it is taken `.agents/skills` ships in the image, so this and anything else in that tree cost one cycle each unless batched. Worth landing together with any other skill-root edits in the window, and #1006's `local_skill_roots` change on the deploy side can ride the same rollout. ## Two notes for the board **#978 and #953 are blocked by a guard, not by nobody picking them up.** I tried to batch the `capability.md` fix and backed it out. `TestTheCapabilityDocsFollowTheHarnessBounds` requires the doc to name a number and follow the harness table, but `coilyco-general` is shared by lanes that override it: Echo takes the default and is correct, Deep and Dowel run 12 and are not. No single figure is true for all three, so the fix requires changing the guard's contract, and removing the numbers also pushes `agents/deep/rendered/prompt.txt` over its byte budget. That is a design change, not a doc edit, and I would not make it tonight. **#1010 outranks my fix.** Refusing 3 of 8 summons at the stream's arrival shape, each after a 50 second wait, is visible in a way a capability gap is not. If the lane cannot answer, nothing above matters. ## Not done, and I think it should be Nobody has ever exercised a write on this surface. Fixing the briefing makes Dowel willing; it does not make anyone confident the path works. The first write in history is currently scheduled to happen live, where write means delete under one action enum, there is no rollback verb on the lane, and other agents write the same filesystem concurrently. **A single rehearsed write before air would retire that risk.** I did not run one, because the surface is a live public site with no review step and that is Kai's call rather than mine. Happy to run it on a go.
Author
Member

The rehearsal write ran, and it found a live outage. The Moxn write path is down right now. Details and runbook in #1026.

Short version: owl-glass.moxn.dev rejects every call with Bad Request at tools/list. The pod is 1/1 Running and not restarting, so nothing on the board would have shown this. It is the documented hand-minted-credential expiry, in the failure shape that looks like the tools going quiet rather than a pod going red.

It broke between 22:00:31Z and 02:23:21Z. Only four tool calls exist in that pod's entire life: two that worked at 22:00, and the two refusals from this rehearsal.

Why this changes the ordering above

I proposed #1022 as an on-camera fix and said a rehearsal would retire the write risk. The rehearsal instead found that the write path does not currently work at all, which outranks the briefing bug it was meant to test. #1022 makes Dowel willing to write to a surface that is returning Bad Request.

So for the board: #1026 is now the gating item for anything Moxn on camera, ahead of #1015 and #1022.

What it needs, and who

Two steps, and neither is an agent's:

  1. Mint a fresh token to SSM /coilysiren/moxn/access-token. Moxn is OAuth authorization-code only with no service token, so this is an attended browser flow, Kai only.
  2. kubectl -n sirens-dowel rollout restart deploy/sirens-dowel-moxn-mcp, because the token is read once at start and the ExternalSecret refreshes on its own hourly schedule.

Doing only step 1 changes nothing running.

One good sign

Asked directly to create a document, Dowel attempted the write rather than refusing, despite still carrying the read-only briefing that #1022 fixes. It called moxn find twice, failed at the transport, correctly diagnosed the cause as the hand-minted credential, declined to invent a path it had not created, and filed #1026 itself with an accurate cause and a correct ask.

So the refusal behaviour is softer than the earlier probe suggested: it says "read-only" when asked about its capability, and still tries when asked to do the work. #1022 remains worth landing, but the lane is less broken than that probe implied, and I want the board to have the more favourable reading too.

Still unrehearsed

No write has ever succeeded on this surface. Once the credential is back, re-running the same request is the clean test: one small document in glass outside /publish, confirm the path and confirm it stays off the public site. I can run it on a go, and it is about a two minute check.

**The rehearsal write ran, and it found a live outage. The Moxn write path is down right now.** Details and runbook in #1026. Short version: `owl-glass.moxn.dev` rejects every call with `Bad Request` at `tools/list`. The pod is `1/1 Running` and not restarting, so nothing on the board would have shown this. It is the documented hand-minted-credential expiry, in the failure shape that looks like the tools going quiet rather than a pod going red. It broke between **22:00:31Z and 02:23:21Z**. Only four tool calls exist in that pod's entire life: two that worked at 22:00, and the two refusals from this rehearsal. ## Why this changes the ordering above I proposed #1022 as an on-camera fix and said a rehearsal would retire the write risk. The rehearsal instead found that **the write path does not currently work at all**, which outranks the briefing bug it was meant to test. #1022 makes Dowel willing to write to a surface that is returning `Bad Request`. So for the board: **#1026 is now the gating item for anything Moxn on camera**, ahead of #1015 and #1022. ## What it needs, and who Two steps, and neither is an agent's: 1. Mint a fresh token to SSM `/coilysiren/moxn/access-token`. Moxn is OAuth authorization-code only with no service token, so this is an **attended browser flow**, Kai only. 2. `kubectl -n sirens-dowel rollout restart deploy/sirens-dowel-moxn-mcp`, because the token is read once at start and the ExternalSecret refreshes on its own hourly schedule. Doing only step 1 changes nothing running. ## One good sign Asked directly to create a document, Dowel **attempted the write** rather than refusing, despite still carrying the read-only briefing that #1022 fixes. It called `moxn find` twice, failed at the transport, correctly diagnosed the cause as the hand-minted credential, declined to invent a path it had not created, and filed #1026 itself with an accurate cause and a correct ask. So the refusal behaviour is softer than the earlier probe suggested: it says "read-only" when asked *about* its capability, and still tries when asked to *do* the work. #1022 remains worth landing, but the lane is less broken than that probe implied, and I want the board to have the more favourable reading too. ## Still unrehearsed No write has ever succeeded on this surface. Once the credential is back, re-running the same request is the clean test: one small document in `glass` outside `/publish`, confirm the path and confirm it stays off the public site. I can run it on a go, and it is about a two minute check.
Author
Member

Escalating: the Moxn write path is down for an upstream reason, and no action on our side fixes it. Full evidence on #1026.

I ran the complete recovery ladder tonight. Every rung fails at the same place:

  1. Reuse the stored token. Refused.
  2. Refresh it without a browser. Succeeds, new 24-hour token. Refused.
  3. Move the credential aside, register a new OAuth client by dynamic registration, complete a new browser authorization. Succeeds. Refused, byte-identical.

Discovery, registration, authorization, and token exchange all work. Only validation at /api/mcp/http fails, with x-clerk-auth-reason: unexpected-error and status=403 rather than any expiry reason.

It worked at 22:00:31Z and was refused by 02:23:21Z, with no deploy, values change, or rotation on our side in between.

What this means for the board

Anything that depends on Dowel writing to Moxn on camera is currently not possible, and the fix is not ours to make. That reorders the queue again:

  • #1026 is now a vendor dependency, not an engineering task. It needs Mark, tonight rather than in the morning.
  • #1015 and #1022 still matter and are still worth landing, but they make Dowel willing to write to a surface that is currently refusing every call. They are no longer the gate.
  • #1010, refusing 3 of 8 summons, is now the top item that is actually within our control.

The vendor wording belongs to Content Creator rather than to me. The facts it needs are listed at the end of my comment on #1026: the working-to-broken window, the fresh-client test, the exact Clerk signature, the workspace, and the current client id.

Worth deciding tonight

If Moxn does not come back before air, the Moxn segment needs a fallback that does not depend on a live write. That is a director call, and it is better made now than at 10:00 during prep.

**Escalating: the Moxn write path is down for an upstream reason, and no action on our side fixes it.** Full evidence on #1026. I ran the complete recovery ladder tonight. Every rung fails at the same place: 1. Reuse the stored token. Refused. 2. Refresh it without a browser. Succeeds, new 24-hour token. Refused. 3. Move the credential aside, register a **new** OAuth client by dynamic registration, complete a **new** browser authorization. Succeeds. Refused, byte-identical. Discovery, registration, authorization, and token exchange all work. Only validation at `/api/mcp/http` fails, with `x-clerk-auth-reason: unexpected-error` and `status=403` rather than any expiry reason. It worked at `22:00:31Z` and was refused by `02:23:21Z`, with no deploy, values change, or rotation on our side in between. ## What this means for the board **Anything that depends on Dowel writing to Moxn on camera is currently not possible**, and the fix is not ours to make. That reorders the queue again: * **#1026 is now a vendor dependency**, not an engineering task. It needs Mark, tonight rather than in the morning. * **#1015 and [#1022](https://forgejo.coilysiren.me/coilyco-gaming/sirens-echo/pulls/1022)** still matter and are still worth landing, but they make Dowel willing to write to a surface that is currently refusing every call. They are no longer the gate. * **#1010**, refusing 3 of 8 summons, is now the top item that is actually within our control. The vendor wording belongs to Content Creator rather than to me. The facts it needs are listed at the end of my comment on #1026: the working-to-broken window, the fresh-client test, the exact Clerk signature, the workspace, and the current client id. ## Worth deciding tonight If Moxn does not come back before air, the Moxn segment needs a fallback that does not depend on a live write. That is a director call, and it is better made now than at 10:00 during prep.
Author
Member

Kai's calls on the four open P0 decisions, 2026-08-19 ~04:15Z

Recorded by Saiya (exec seat). Taken against roughly seven hours to air.

1. Moxn: prepare a no-live-write fallback now

Decided: yes, tonight rather than at 10:00 prep. The escalation above asked for exactly this and it is now answered.

The write path is upstream-broken and no consumer-side action reaches it, so the segment cannot assume a live write. Decide before sleeping what Dowel demonstrates at 11:00 if Moxn is still refusing: reading pre-existing glass documents, or a different capability entirely.

This does not cancel the vendor follow-up. It removes the case where the answer arrives too late and the segment improvises on camera.

2. Vendor follow-up to Mark: facts handed to Kai, she writes and sends

Decided: Kai delivers it in her own words. The exec seat supplies facts only, which is also the correct boundary here since outward communication is Content Creator's and the recipient is a co-panelist.

Correction carried forward: the original ask was already sent at 19:06Z on 2026-08-18, before the outage window opened. This is a follow-up, and its one distinguishing question is whether anything changed on MCP auth or in Clerk settings after that.

3. Discord-path load test: run it tonight, in the real channel

Decided: test it. #1010 measured POST /v1/turn, which is hardcoded to the single execution slot, while the stream runs the Discord path into the ten-worker coalescing lane. The refusals it recorded therefore say nothing about tomorrow, and whether the Discord path holds at eight summons in twelve seconds is currently unmeasured.

Constraint worth recording: driving eight distinct summons needs an identity that can post in owl.glass and be admitted by the harness. The exec seat holds only the Dowel bot token, and a bot does not summon itself, so this test needs Kai or another admitted identity. It is not blocked on analysis.

4. #993 inline references: demote the long tail

Decided. Keep moxn-knowledge-base.md and temporal.md inline, tier the other four. Roughly 13KB off a 24KB block. Full reasoning on #993.


Board note. The re-cut six on this epic and the current priority/P0 set have diverged, since triage tonight added #1038, #1035, #1036, #1037, #993, #1010 and #1002 and moved #932, #310 and #1024 off P0. The label set is now the more current of the two. Worth one pass in the morning to make this epic agree with it, or to say plainly that the epic is the historical record and the labels are the live board.

## Kai's calls on the four open P0 decisions, 2026-08-19 ~04:15Z **Recorded by Saiya (exec seat). Taken against roughly seven hours to air.** ### 1. Moxn: prepare a no-live-write fallback now **Decided: yes, tonight rather than at 10:00 prep.** The escalation above asked for exactly this and it is now answered. The write path is upstream-broken and no consumer-side action reaches it, so the segment cannot assume a live write. Decide before sleeping what Dowel demonstrates at 11:00 if Moxn is still refusing: reading pre-existing `glass` documents, or a different capability entirely. This does not cancel the vendor follow-up. It removes the case where the answer arrives too late and the segment improvises on camera. ### 2. Vendor follow-up to Mark: facts handed to Kai, she writes and sends **Decided: Kai delivers it in her own words.** The exec seat supplies facts only, which is also the correct boundary here since outward communication is Content Creator's and the recipient is a co-panelist. Correction carried forward: **the original ask was already sent at 19:06Z on 2026-08-18**, before the outage window opened. This is a follow-up, and its one distinguishing question is whether anything changed on MCP auth or in Clerk settings after that. ### 3. Discord-path load test: run it tonight, in the real channel **Decided: test it.** #1010 measured `POST /v1/turn`, which is hardcoded to the single execution slot, while the stream runs the Discord path into the ten-worker coalescing lane. The refusals it recorded therefore say nothing about tomorrow, and whether the Discord path holds at eight summons in twelve seconds is currently **unmeasured**. Constraint worth recording: driving eight distinct summons needs an identity that can post in `owl.glass` and be admitted by the harness. The exec seat holds only the Dowel bot token, and a bot does not summon itself, so **this test needs Kai or another admitted identity.** It is not blocked on analysis. ### 4. #993 inline references: demote the long tail **Decided.** Keep `moxn-knowledge-base.md` and `temporal.md` inline, tier the other four. Roughly 13KB off a 24KB block. Full reasoning on #993. --- **Board note.** The re-cut six on this epic and the current `priority/P0` set have diverged, since triage tonight added #1038, #1035, #1036, #1037, #993, #1010 and #1002 and moved #932, #310 and #1024 off P0. The label set is now the more current of the two. Worth one pass in the morning to make this epic agree with it, or to say plainly that the epic is the historical record and the labels are the live board.
Author
Member

Closing as delivered. The August 19 Temporal Vibe Check stream shipped, so this readiness epic's forcing event has passed.

Decision recorded in coilysiren/inbox#391 during the 2026-08-22 queue re-baseline. This epic and its children were still ranked P0 three days after the stream, which meant the top of the estate queue no longer encoded urgency.

Durable technical findings from the children are preserved in #1094 rather than lost with these closes.

Closing as delivered. The August 19 Temporal Vibe Check stream shipped, so this readiness epic's forcing event has passed. Decision recorded in coilysiren/inbox#391 during the 2026-08-22 queue re-baseline. This epic and its children were still ranked P0 three days after the stream, which meant the top of the estate queue no longer encoded urgency. Durable technical findings from the children are preserved in #1094 rather than lost with these closes.
Sign in to join this conversation.
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
coilyco-gaming/sirens-echo#981
No description provided.