Session log: Reliability Governor Knowledge role fix and production rerun

[Svaag]

Summary

Logged the 2026-07-01 session that fixed and deployed the Reliability Governor Knowledge role mismatch, then reran the production Governor against the live NOC handoff issues.

Root Cause

Production Reliability Governor used the configured role engineering_loop_reliability_governor when requesting Knowledge context. The live Knowledge MCP accepted that role syntactically, but policy-denied it and returned zero included_refs. The same task with the supported engineering_loop role returned valid current context, including curated/postmortems/noc-bgp-snapshot-root-filesystem-2026-06-30.

Changes Shipped

• [codex] Normalize Governor Knowledge role #30 normalized the Governor-specific Knowledge role at the transport boundary so MCP/CLI calls send engineering_loop while Engineering Loop can keep its local Governor intent.
• [codex] Promote engineering-loop Governor role fix network-operations#338 promoted engineering-loop to f80727a25369ea7e021db417c92143c2937525b0.
• app-promotion-deploy run 28493437050 deployed the promotion to loop successfully.

Validation

• Engineering Loop PR [codex] Normalize Governor Knowledge role #30: ruff, mypy, pytest, and evals passed.
• Network Operations PR #338: lint, render, semgrep, static-iac, ansible-idempotency, batfish, containerlab-frr, iac-gate, and pr-agent passed.
• Live loop verification after deploy:
  • /opt/engineering-loop at f80727a25369ea7e021db417c92143c2937525b0
  • Knowledge MCP active at bb2ed6e7385f698849ebede2e29b24b16ac39fc0
  • Governor-role Knowledge probe returned policy: allow, included_ref_count: 40, pack_role: engineering_loop, snapshot local-20260701024805.

Governor Rerun Result

After removing stale terminal loop:knowledge-gap labels from the open issues and running hyrule-reliability-governor.service once:

• [noc][lhp] case_0e77bc6b207d: resolve low root filesystem condition network-operations#300: allow_approved, record 4ea2907170796a953786, label loop:approved, Knowledge current / A0.
• [noc][lhp] case_1552fd143bdf: resolve low root filesystem condition network-operations#299: allow_approved, record db67aceeb4905442ec27, label loop:approved, Knowledge current / A0.
• Prevent noc BGP router snapshots from filling root filesystem network-operations#321 remains closed and was not scanned by the production open-issue Governor pass.

Next Step

Let or trigger Engineering Loop to act on the two approved issues, then verify the resulting implementation PRs and NOC case outcomes.

[hyrule-engineering-loop]

Reliability Governor Decision

• role: staff_sre_autonomous_operations
• decision: needs_context
• next_loop: human
• handoff_contract: human_review
• source: knowledge
• intent: legal / tier 4
• capability: none
• knowledge: current / A0
• reasons: missing rollback plan

{
  "affected_assets": [
    "AS215932/engineering-loop"
  ],
  "affected_customers": [],
  "affected_services": [],
  "allowed_paths": [],
  "authority_text_hash": "bc0974097ea1bb869f63fdbfb1d1e8823e9e134f20f4e54490b949b58bac9a62",
  "blast_radius": "legal/commercial",
  "controlled_loops": [
    "engineering",
    "noc",
    "knowledge"
  ],
  "created_at": "2026-07-01T04:46:16.348372+00:00",
  "denial_reasons": [
    "missing rollback plan"
  ],
  "expected_paths": [
    "legal/"
  ],
  "forbidden_paths": [],
  "governor_name": "Reliability Governor",
  "governor_role": "staff_sre_autonomous_operations",
  "handoff_contract": "human_review",
  "intent_type": "legal",
  "issue_id": "AS215932/engineering-loop#31",
  "issue_number": 31,
  "issue_text_hash": "c78a7ed91623801df672584f381ffe968c6a30af2e799e2f31cd886adaea1e6b",
  "knowledge_authority_level": "A0",
  "knowledge_context_pack_id": "ctx_5c3235e288e45adc104ac6167eba87ea",
  "knowledge_export_version": "local-20260701024805",
  "knowledge_status": "current",
  "labels_to_add": [
    "loop:needs-context"
  ],
  "labels_to_remove": [
    "loop:intake",
    "loop:candidate",
    "loop:approved",
    "loop:knowledge-gap",
    "loop:needs-human"
  ],
  "lhp": null,
  "matched_capability": null,
  "next_loop": "human",
  "policy_rules": [
    "deny work without a rollback plan"
  ],
  "record_id": "6615608edc1bbdd30c14",
  "repo": "AS215932/engineering-loop",
  "required_checks": [],
  "risk_tier": 4,
  "rollback_plan": "",
  "routing_decision": "needs_context",
  "schema_version": "reliability-governor.cdr.v1",
  "source": "knowledge",
  "storage_path": "/var/lib/engineering-loop/reliability-governor/as215932-engineering-loop-31-6615608edc1bbdd30c14.json",
  "verification_method": "Use the issue-specified verification: tests/checks/evidence named in the request."
}