S53 · General Maintenance & Environment Integrity

Declared state: partial 2026-10-16 - broken installs refused at deploy, drift reported daily, retention enforced per record; the real restore drill (53.R2) is open.

This is the repository plan and evidence, not a live health reading. A task marked done may still depend on credentials, devices, deployment or a newer acceptance test.

Dependencies

S22, S31

Tasks and gates

53.F1 · Every package the lockfile claims actually imports; a half-installed environment fails loudly instead of failing later inside a turn.

Tier F · done · Verification: hermetic-test

Gate: `test_env_integrity.py` - a truncated install (a RECORD file missing on disk) is detected by name, raised by the health check, and refused by the deploy before the restart.

  • hermetic-green · 2026-10-16 · bench/test_env_integrity.py

53.F2 · `uv sync --frozen` runs in the daily loop; drift is REPORTED, never silently applied under a running process.

Tier F · done · Verification: hermetic-test

Gate: `test_env_integrity.py` [drift] (test_env_drift) - installed versions are compared with uv.lock in the daily maintenance job; drift is reported with the fix, never applied.

  • hermetic-green · 2026-10-16 · bench/test_env_integrity.py

53.R1 · Retention is ENFORCED by the sweeper, not merely declared in the data inventory.

Tier R · done · Verification: hermetic-test

Gate: `test_data_inventory.py` test_retention_enforced - every rolling store has an enforcer (dir sweep, record rule or stated exemption); a store over retention is named by overdue() and swept.

  • hermetic-green · 2026-10-16 · bench/test_data_inventory.py

53.R2 · The restore drill proves a REAL restore into an empty environment, not a manifest checksum.

Tier R · open · Verification: planned-test

Gate: extend `test_backup_restore.py` with a new `test_real_restore` case — the drill restores into a clean state dir

    HUD screen contracts

    All subsystems · Source: docs/systems-plan.json.