seed: durable createdFrom — real tier-1 genealogy at depth (#76) #77

Merged

plat merged 1 commit from fix/seed-createdfrom-durable into main

2026-07-02 17:42:12 +00:00

plat commented

2026-07-02 17:23:07 +00:00

Owner

Closes #76. createdFrom now records https://git.<bareDomain> (the platform's durable public identity, same source germinate uses for domain rewrites) instead of whatever endpoint bin/seed was invoked over. The depth-2 chain evidence on #46 shows the cost of the old behavior: a port-forward-minted seed sent every granddaughter to tier-2 (root lineage) despite a live parent. With this fix, real-domain parents yield true tier-1 chains at depth; .local parents fail the tier-1 probe fast and fall back honestly.

The auto-gate on this PR validates germination is unaffected (the gate uses the committed seed); the behavioral proof is the depth-2 evidence plus the next reseed minted from any real-domain platform.

🤖 Generated with Claude Code

Closes #76. `createdFrom` now records `https://git.<bareDomain>` (the platform's durable public identity, same source germinate uses for domain rewrites) instead of whatever endpoint `bin/seed` was invoked over. The depth-2 chain evidence on #46 shows the cost of the old behavior: a port-forward-minted seed sent every granddaughter to tier-2 (root lineage) despite a live parent. With this fix, real-domain parents yield true tier-1 chains at depth; `.local` parents fail the tier-1 probe fast and fall back honestly. The auto-gate on this PR validates germination is unaffected (the gate uses the committed seed); the behavioral proof is the depth-2 evidence plus the next reseed minted from any real-domain platform. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

plat added 1 commit

2026-07-02 17:23:07 +00:00

seed: createdFrom records the durable public git host, not the invocation endpoint (#76 )

coldstart / coldstart (pull_request) Successful in 18m30s

Details

fc05c5dbb2

createdFrom is the tier-1 fork source for every daughter of this seed (#70).
Recording $FORGEJO_URL verbatim meant a seed minted over a port-forward
carried 'http://127.0.0.1:NNNN' — reachable from the seeding HOST (probe
passes) but self-referential inside the daughter cluster (migrate fails
Forgejo-side) — costing the tier-1 fork and the true genealogy chain at
depth. Proven on the d2a→d2b depth-2 chain (plat/mitosis#46 evidence).

Derive 'https://git.<bareDomain>' from the platform's reserved-names (the
same durable identity germinate rewrites), falling back to FORGEJO_URL only
when bareDomain is unknown. Real-domain parents (open-platform.sh, VPS
deployments) get true tier-1 lineage at depth; .local parents now fail the
tier-1 PROBE fast and fall back honestly instead of half-succeeding.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>