# Build log

# Phase 0 — 2026-11-01

• DNS akos.spboucher.ai → 51.161.112.61 (BHS64) confirmed; no Caddy route yet; tunnel provider is WireGuard + Caddy via tunnelctl (not Cloudflare).
• Node chosen: M4M64c (Postgres 17.11 + pgvector, sandbox-exec verified). Ports 8520 (app) / 8521 (egress proxy).
• Decisions: Python 3.13 + FastAPI monolith, Postgres jobs table (no Redis dependency), macOS keychain as vault, hand-rolled MCP Streamable HTTP (JSON responses) to avoid SDK churn, Vite/React UI served by FastAPI, FTS instead of embeddings (no external model calls).

# Phases 1–8 — 2026-11-01 (same day)

• Built: schema 0001_init.sql (26 tables), auth/audit/artifacts/jobs, registry (lifecycle, FTS, graph), gateway (SSRF, policy, executor, sandbox, egress proxy), compiler (OpenAPI, probe, codegen py/ts/mcp, scan, AKP, verify), provenance (datasets, lineage, quality, export), composition (join validation/run, recipes), drift, MCP endpoint, CLI, SDK, React UI (web/), tests (28 offline + 4 node + 13 external + 4 e2e), scripts (backup/restore/bench/acceptance), Claude Code installer + SessionStart hook.
• Failures fixed during the build (all reproduced, then covered by tests): $1::uuid OR slug casts broke slug lookups; generated client emitted JSON null (fixed with Python literals); contract tests needed fixtures inheritance on recompile; probe executions must run in the system discovery project; artifact dedup kept metadata_only retention for later licensed captures (now upgrades); drift treated 401 as drift (now auth_required); backup.sh sourced .env over the caller's env; audit chain forked under concurrent writers (advisory lock + verifier distinguishing content vs linkage).
• Deployment: mld stage → mld deploy akos --node M4M64c (route akos.spboucher.ai → M4M64c:8520 on BHS64, Let's Encrypt issued 19:02 UTC) → mld adopt akos (node repo da58f80, origin spbgit akos.git). Laptop → M4M64c direct SSH/Tailscale was intermittent; jump alias akosnode (ProxyJump M1M32) added to ~/.ssh/config.
• Claude Code: integrations/claude-code/install.sh --with-hooks registered akos (user scope, HTTP, bearer) and merged one SessionStart hook; existing 9 MCP servers and PreToolUse hook untouched (diff verified). Fresh project session reused the AKP without rediscovery.