Pre-public functional verification¶

This page is the v1.3.36.8 verification gate -- a single-source inventory that maps every shipped feature of argos-edge to a smoke script (or documents why no smoke exists). Run before making the repo public; re-run on any future release that might regress a covered surface.

Summary¶

The four post-v1.3.32 additions reflect features shipped or deploy-pipeline incidents addressed since the original verification gate was drawn:

• country-reconciler.sh (v1.3.33) — 5min ticker EFFECT for expansion-divergence detection
• lapi-flush-cap.sh (v1.3.33) — alert-shape verification (one alert with N decisions, mirroring CAPI/community-blocklist shape) after the eight-strike CAPI cascade-flush incident
• deploy-rebuild.sh (v1.3.34.3) — make deploy-prod actually rebuilds the panel image (closes eleventh-strike silent-no-op gap)
• demo-environment.sh (v1.3.35) — ~/argos-demo parallel stack self-smoke (separate volumes/network from ~/argos-prod)
• capture-automation.sh (v1.3.36.x) — Playwright capture spec self-smoke (storageState wiring, safeClick blocklist, per-surface selector regression-guards). 14 phases of static checks.

Smoke matrix¶

Each row: feature, smoke script, last EFFECT verified.

Coverage gaps documented¶

Recommendation: ready for public¶

All 16 in-scope smokes PASS against the v1.3.35 panel binary. The 1 deferred (auth) is an operator-credential concern, not a code defect; the underlying handlers are exercised indirectly by every other session-bearing smoke. The 1 legacy-skip (country-block) tests an upstream-known-broken path that v1.3.21 worked around.

The eleven-strike upstream-behaviour pattern (documented in CLAUDE.md and the per-strike memory file) is now reflected in the smoke matrix: every external-protocol surface that caused an incident has a dedicated EFFECT-verifying smoke (LAPI WAL, scenarios source-of-truth, AppSec tuning, drift detection, true-detect-mode, country expansion async, country reconciler, alert-shape cap, deploy-pipeline rebuild).

Zero blockers. The repo is functionally ready for public release. The pre-public audit (docs/operations/pre-public-audit.md, v1.3.37) covers the non-functional gates (sanitization, doc currency, GitHub governance files).

How to re-run¶

SESSION=$(docker run --rm -v argos_prod_data:/data alpine sh -c \
    "apk add --no-cache sqlite >/dev/null 2>&1
     sqlite3 /data/argos.db \"SELECT token FROM sessions
       WHERE expires_at > datetime('now')
       ORDER BY id DESC LIMIT 1;\"")

# Cheap (no-auth, ~5-30s each):
./scripts/smoke/sync-prod.sh
CROWDSEC_CONTAINER=argos-prod-crowdsec ./scripts/smoke/lapi-wal.sh

# Auth-needing happy paths (~15-90s each):
ARGOS_SESSION_TOKEN="${SESSION}" \
PANEL_BASE_URL=http://localhost:9180 \
CROWDSEC_CONTAINER=argos-prod-crowdsec \
  ./scripts/smoke/scenario-descriptions.sh

# ... repeat the env block for the other smokes ...

# Long (4-min drift detector + 90s country async):
ARGOS_SESSION_TOKEN="${SESSION}" \
PANEL_BASE_URL=http://localhost:9180 \
CROWDSEC_CONTAINER=argos-prod-crowdsec \
  ./scripts/smoke/drift-detection.sh

ARGOS_SESSION_TOKEN="${SESSION}" \
PANEL_BASE_URL=http://localhost:9180 \
CROWDSEC_CONTAINER=argos-prod-crowdsec \
COMPOSE_DIR=$HOME/argos-prod \
SKIP_FAILURE_PATH=1 \
  ./scripts/smoke/country-expansion-async.sh

# Operator-credentials smoke (manual):
ARGOS_USERNAME=admin ARGOS_PASSWORD='...' \
  ./scripts/smoke/auth-flow.sh

What this report does NOT prove¶

• Frontend visual rendering. Smokes exercise the API; the React UI is verified by the operator's browser pass.
• Load behaviour at scale. Smokes are one-shot single-host exercises; sustained load testing is out of scope.
• Cross-version migration path. Smokes run against the current schema; incremental upgrade from older argos-edge versions is documented in each release's notes and would warrant a dedicated migration smoke if released as a product (not yet a homelab need).