{
  "checked_at": "2026-10-30T20:48:00.517235+00:00",
  "asr": {
    "mr": 8,
    "source": "8041b370e36cd8e5a9878f072cb264f790973d1d",
    "pipeline": 5639,
    "build_job": 27284,
    "state": "All 8 main images scanned/published; H100 worker and live bridge deployed",
    "trivy_passed": true,
    "build_duration_seconds": 1792.475031,
    "scanned_worker_image_id": "sha256:10178b6446558490dce62a61be860dfcdd099cd85df302b4b573bd965f74ac06",
    "branch_deploy_job": {
      "job": 27283,
      "status": "success",
      "action": "skipped outside the default branch; no runtime deployment"
    },
    "candidate_manifest_digest": "sha256:f4e3a6b52772cc3a0481852a99885b0f20757bcae8acb9ebaaf473f0da5761d2",
    "candidate_version": "3.1.341",
    "latest_build_recipe_sha": "17f8ae32cc83e891cc6ba39c9b41885d95c0e1c7"
  },
  "chat_agent": {
    "mr": 26,
    "state": "Backend five services and Front deployed; browser end-to-end acceptance waiting for Slim Auth login",
    "source": "6236a3c0c5c67ca18c0f5a55c4f1c5579bd50ffc",
    "pipeline": 5613,
    "build_job": 27165,
    "checks": "5/5 PASS"
  },
  "fixed_dependencies": {
    "msgpack": "1.2.3",
    "setuptools": "80.10.2",
    "urllib3": "2.8.0",
    "hydra-core": "1.3.8",
    "lightning": "2.6.6",
    "fsspec": "2026.6.0",
    "transformers": "5.10.4",
    "soundfile": "0.14.0",
    "filelock": "4.2.4",
    "certifi": "2026.10.19",
    "uv": "0.13.4 (build-only; removed from runtime)",
    "aiohttp": "3.14.4"
  },
  "old_trivy_blocker": {
    "job": 26920,
    "image": "pyannote_diarization",
    "high": 5,
    "critical": 0,
    "cves": [
      "CVE-2026-114613",
      "GHSA-6v7p-g79w-8964",
      "CVE-2025-47273",
      "CVE-2026-97687",
      "CVE-2026-97689"
    ]
  },
  "local_checks": {
    "asr": 11,
    "server": 28,
    "frontend": 60,
    "typing": "passed",
    "extension": "2.2.1 built",
    "extension_identity_permissions_csp": "unchanged",
    "aiohttp_correction": "15 targeted tests and actual worker HTTP health/cleanup passed on aiohttp 3.14.4"
  },
  "gpu_acceptance": "Large/RNNT/Turbo/Russian GPU probe passed; four-model main runtime ready and admission enabled",
  "runtime_changed": true,
  "gpu_baseline": {
    "free_bytes": 12385452032,
    "total_bytes": 23219666944,
    "torch": "2.8.0+cu126",
    "transformers": "4.57.6"
  },
  "security_fixes": [
    "msgpack 1.2.3",
    "urllib3 2.8.0",
    "setuptools 80.10.2",
    "remove pip and its vendored packages after dependency checks"
  ],
  "gpu_gate": "PASS: 33s candidate peak reserved 3634364416 bytes; >2 GiB headroom; production four-model runtime free 9789177856 bytes",
  "extension_ci": {
    "mr": 27,
    "sha": "d8f939912cfd9f6505dba8d7e283d9b5c0d8c40d",
    "pipeline": 5621,
    "cause": "legacy build extension mode missing in scope selector",
    "local_checks": "shell syntax, impact matrix, 7 targeted tests passed",
    "checks": "5/5 actual PASS on pipeline 5621",
    "main_sha": "d8f939912cfd9f6505dba8d7e283d9b5c0d8c40d",
    "package_pipeline": 5626,
    "package_job": 27279,
    "package_state": "build passed again; artifact upload failed again: runner cannot resolve gitlab via 172.17.0.1. Infrastructure unchanged.",
    "package_retries": 1
  },
  "security_attempts": [
    {
      "job": 26920,
      "finding": "pyannote dependency HIGH vulnerabilities"
    },
    {
      "job": 27140,
      "finding": "pip vendored dependencies; setuptools"
    },
    {
      "job": 27149,
      "finding": "Sherpa setuptools"
    },
    {
      "job": 27151,
      "finding": "Sortformer hydra/lightning/fsspec/wandb-core"
    },
    {
      "job": 27153,
      "finding": "NeMo/OneLogger compatibility with patched Lightning"
    },
    {
      "job": 27156,
      "finding": "Hydra 1.3.6 new advisories; import smoke passed"
    },
    {
      "job": 27211,
      "finding": "build and 46 tests passed; six built images missing before scan"
    },
    {
      "job": 27213,
      "finding": "six images Trivy PASS; worker scan exceeded default 5-minute timeout"
    },
    {
      "job": 27222,
      "finding": "canceled after proving Large source imports missing soundfile; no runtime changed"
    },
    {
      "job": 27275,
      "finding": "LinTO certifi CRITICAL, filelock HIGH, uv CRITICAL; fixed in ad6dff3"
    },
    {
      "job": 27277,
      "finding": "job_execution_timeout at 3623s during CTranslate2 wheel download; no scan or publication. CUDA/Torch and LinTO layers completed; one exact job retry."
    },
    {
      "job": 27280,
      "finding": "Build + 46 tests passed. Before scan, Image tags do not match build metadata; overlapping orphan build after 27277 timeout suspected. No active jobs at retry; same source, second exact retry 27281."
    },
    {
      "job": 27281,
      "finding": "Seven images passed Trivy; worker aiohttp 3.14.3 reported three HIGH findings fixed in 3.14.4: CVE-2026-111064, CVE-2026-111066, GHSA-2g87-pp6c-29x5."
    }
  ],
  "pypi_pin_yank_check": {
    "checked": 21,
    "yanked": 0
  },
  "scan_timeout": "15m; same HIGH/CRITICAL, ignore-unfixed and exit-code policy",
  "worker_runtime": "Python 3.11; Torch 2.8.0/cu126; Transformers 5.10.4; image 3.1.344/source 8041b37",
  "base_publication_plan": "After branch candidate GPU acceptance, publish full runtimes on main using existing layer cache; pin those exact main digests and validate code-only builds. LinTO release compatibility checks require the full runtime identity to remain available for dependency upgrades.",
  "asr_source_sha": "8041b370e36cd8e5a9878f072cb264f790973d1d",
  "branch_security_publication": {
    "pipeline": 5636,
    "job": 27282,
    "status": "success",
    "images_passed": 8
  },
  "main_pipeline": 5639,
  "main_build_job": 27284,
  "gpu_candidate": "gpu-candidate.json",
  "backend_refresh_job": 27192,
  "main_publication": {
    "pipeline": 5639,
    "build_job": 27284,
    "preflight_job": 27285,
    "status": "success",
    "source": "8041b370e36cd8e5a9878f072cb264f790973d1d",
    "images_passed": 8
  },
  "backend_refresh": {
    "job": 27192,
    "status": "success",
    "source": "6236a3c0c5c67ca18c0f5a55c4f1c5579bd50ffc"
  },
  "bridge_digest": "builder-registry.builder.giscloud.ru/gis/webrtc-komaroff/voice-chat/webrtc_live_bridge/main@sha256:d0da979d7edbb60ee8e4dce5b017ac2b59046eed2771839ac5141b4e29cc9a29",
  "reuse_validation": {
    "pipeline": 5641,
    "build_job": 27286,
    "preflight_job": 27287,
    "build_seconds": 11.51185,
    "application_rebuilds": 0
  },
  "code_only_validation": {
    "pipeline": 5648,
    "job": 27294,
    "source": "17f8ae32cc83e891cc6ba39c9b41885d95c0e1c7",
    "state": "success",
    "publish": false,
    "notes": "Two build-only corrections after full runtime pin: restore vendor LinTO source before patch; allow existing worker test marker directory",
    "build_seconds": 442.185718,
    "preflight_job": 27295,
    "preflight_seconds": 21.995743,
    "tests_passed": 46,
    "images_scanned": 5
  },
  "rollout": {
    "worker": {
      "service": "webrtc-asr_streaming",
      "version": "3.1.344",
      "source": "8041b370e36cd8e5a9878f072cb264f790973d1d",
      "digest": "sha256:5629b619aef9b0e5813afa254a69cc22b508e51f095a4964683311145c17677d",
      "healthy": true,
      "ready": true,
      "accepts_requests": true,
      "neighbor_specs_unchanged": 52,
      "worker_settings_unchanged_except_image": true,
      "docker_update_seconds": 32.474703205
    },
    "bridge": {
      "pipeline": 5642,
      "job": 27289,
      "status": "success",
      "source": "8041b370e36cd8e5a9878f072cb264f790973d1d",
      "digest": "builder-registry.builder.giscloud.ru/gis/webrtc-komaroff/voice-chat/webrtc_live_bridge/main@sha256:d0da979d7edbb60ee8e4dce5b017ac2b59046eed2771839ac5141b4e29cc9a29"
    },
    "backend": {
      "job": 27192,
      "status": "success",
      "source": "6236a3c0c5c67ca18c0f5a55c4f1c5579bd50ffc"
    },
    "resume": {
      "job": 27194,
      "status": "success"
    },
    "front": {
      "job": 27208,
      "status": "success",
      "source": "6236a3c0c5c67ca18c0f5a55c4f1c5579bd50ffc"
    }
  },
  "extension_install": {
    "version": "2.2.1",
    "path": "локальный источник",
    "identity_permissions_csp_unchanged": true,
    "activation_verified": false,
    "backup": "локальный источник"
  },
  "browser_acceptance": {
    "state": "pending_user_login",
    "page": "https://chat-agent.gis-master.ru/asr-compare.html",
    "reason": "Slim Auth expired after deployment; question sent; no token extracted"
  },
  "source_diff": {
    "base": "ca436b4d",
    "head": "17f8ae32cc83e891cc6ba39c9b41885d95c0e1c7",
    "files": 19,
    "added": 203,
    "removed": 67,
    "root_ci_unchanged": true
  },
  "browser_acceptance_20261031": {
    "status": "passed",
    "source": "b11b3dd18a5fb5c57d8cdc059a1aa8eeae4e715f",
    "mrs": [
      28,
      29
    ],
    "checks": {
      "python_job": 27296,
      "integration_job": 27300,
      "frontend_retry_job": 27349,
      "scoped_skips": [
        27347,
        27348,
        27350,
        27351
      ]
    },
    "build_job": 27354,
    "preflight_job": 27370,
    "ingress_deploy_job": 27397,
    "frontend_deploy_job": 27396,
    "models": [
      "gigaam_large_ctc",
      "streaming_worker",
      "streaming_worker_russian",
      "gigaam_v3",
      "linto_streaming"
    ],
    "monitor_request": "id-e56654676940ca",
    "extension_activation_verified": false,
    "evidence": [
      "browser-model-results.json",
      "browser-final-front.json",
      "monitor-large-result.json",
      "compare-opus-prepared-images.json"
    ]
  }
}