Automated Update Reliability Review

Resolve correctness, deployment, observability, and efficiency findings from the 2026-07-13 end-to-end review of local flake updates, the Forgejo Attic workflow, and fleet consumer automation.

Current operational risk

Detached activation currently fails on Vega and Lyra because the transient helper has no usable PATH, while the parent service reports success. Consumer builds using path: flakes also omit configurationRevision, defeating no-op detection and causing repeated builds.

  1. #52 — repair detached activation and recover Vega/Lyra (critical)
  2. #54 — restore Git flake provenance and revision detection (high)
  3. #51 — correct input inventory and host validation coverage (high)
  4. #53 — expose partial update rejection outcomes
  5. #55 — harden Git synchronization/publication
  6. #56 — add regression tests and linting
  7. #57 — reduce redundant evaluation/build work

The issue bodies contain evidence, scope, and completion criteria.

No due date
100% Completed
fix: configure manual auto-update command
All checks were successful
Build and Push Attic Cache / test (pull_request) Successful in 58s
Build and Push Attic Cache / build (pull_request) Has been skipped
#63 by nimmo was merged 2026-07-17 14:46:10 +01:00
refactor: package NixOS auto-update
All checks were successful
Build and Push Attic Cache / test (pull_request) Successful in 12s
Build and Push Attic Cache / build (pull_request) Has been skipped
#62 by nimmo was merged 2026-07-17 13:59:57 +01:00