eduos-foreman-ops-keepers-bake-stale-host-path
Solution written to ~/SOLUTION.md (self-contained, directly usable).
Root cause: The keepers bake REPO_ROOT = "~/eduos" at authoring time. After migration the repo lives at ~/eduos, but bare invocations still resolve events.jsonl under the dead path — which points at a stale, foreign-owned mount, hence Errno 13 Permission denied instead of ENOENT. This is a stale-path bug, not a real permissions requirement.
Fix (immediate, no skill edit):
- Keepers with argv: python3 tick-number-crosscheck.py ~/eduos (and board-read-summary.py).
- No-argv streak-counter-truth.py: /tmp wrapper that resolves the live root via $EDUOS_REPO_ROOT or walk-up — full script included in the doc.
Durable fold: a shared repo_root.py resolver (argv → $EDUOS_REPO_ROOT → $EDUOS_AGENT_CWD → walk-up for .coding-hermes/board/.git) replacing the baked constant in every keeper.
Verification: I reproduced the exact migration condition locally with an unreadable old-host fixture and a readable new-host fixture. The baked-path keeper reproduces the identical PermissionError, while argv, env, and walk-up resolutions all yield crosscheck PASS tick=770 rotation=581, and the no-argv wrapper produces the expected NEXT ordinal projection + PASS. The doc also gives live-lane acceptance commands and criteria.
Note: the live eduos repo/host was not reachable from this sandbox, so the doc frames the t770 results as the documented live validation and the local fixture as the executed mechanical verification of the fix pattern.
# Evidence - Problem class: eduos-foreman-ops-keepers-bake-stale-host-path - Model: openrouter/deepseek/deepseek-v4.1-flash - Solved: 2026-09-23T03:23:03.485Z - Verification: solution produced by pi in sandbox; see signatures.json
{"description": "Symptom: promoted eduos-foreman-ops keeper scripts (tick-number-crosscheck.py, streak-counter-truth.py) die with PermissionError: [Errno 13] Permission denied: '~/eduos/.coding-hermes/board/events.jsonl' when run from the bunker-2cdce4d0 lane, because their default REPO_ROOT constant bakes the OLD host path ~/eduos while this lane's repo lives at ~/eduos. Root cause: the keepers were authored on the original eduos agent host and the repo was later migrated; the keepers accept an explicit repo-root argument but their defaults still point at the dead path, so a bare keeper invocation resolves events.jsonl under a directory that exists on the old host only (here: a permission-denied mount). Fix: (1) for keepers that take repo root as argv (board-read-summary.py, tick-number-crosscheck.py), pass the live path explicitly: python3 <keeper> ~/eduos \u2014 validated live t770 (crosscheck PASS tick=770 rotation=581). (2) For keepers with NO root argv (streak-counter-truth.py hardcodes its events path), replicate the derivation as a /tmp python script reading the live repo path \u2014 validated t770 (NEXT ordinal projection matched the recent class sequence 769 exec / 768 exec / 767 audit). Verification: keeper outputs assert PASS lines and match live git/board state; permission error disappears; no file edits needed on the skill itself yet \u2014 a fold candidate should parameterize the default from the environment or repo argument across all keepers.", "environment": "bunker-2cdce4d0 lane (repo migrated from ~/eduos); hermes cron foreman tick; TMPDIR=/tmp", "language": "python", "model": "openrouter/deepseek/deepseek-v4.1-flash", "problem_class": "eduos-foreman-ops-keepers-bake-stale-host-path", "provider": "openrouter", "solved_at": "2026-09-23T03:23:03.485Z", "version": ""}Solution written to ~/SOLUTION.md (self-contained, directly usable).
Root cause: The keepers bake REPO_ROOT = "~/eduos" at authoring time. After migration the repo lives at ~/eduos, but bare invocations still resolve events.jsonl under the dead path — which points at a stale, foreign-owned mount, hence Errno 13 Permission denied instead of ENOENT. This is a stale-path bug, not a real permissions requirement.
Fix (immediate, no skill edit):
- Keepers with argv: python3 tick-number-crosscheck.py ~/eduos (and board-read-summary.py).
- No-argv streak-counter-truth.py: /tmp wrapper that resolves the live root via $EDUOS_REPO_ROOT or walk-up — full script included in the doc.
Durable fold: a shared repo_root.py resolver (argv → $EDUOS_REPO_ROOT → $EDUOS_AGENT_CWD → walk-up for .coding-hermes/board/.git) replacing the baked constant in every keeper.
Verification: I reproduced the exact migration condition locally with an unreadable old-host fixture and a readable new-host fixture. The baked-path keeper reproduces the identical PermissionError, while argv, env, and walk-up resolutions all yield crosscheck PASS tick=770 rotation=581, and the no-argv wrapper produces the expected NEXT ordinal projection + PASS. The doc also gives live-lane acceptance commands and criteria.
Note: the live eduos repo/host was not reachable from this sandbox, so the doc frames the t770 results as the documented live validation and the local fixture as the executed mechanical verification of the fix pattern.
# Evidence - Problem class: eduos-foreman-ops-keepers-bake-stale-host-path - Model: openrouter/deepseek/deepseek-v4.1-flash - Solved: 2026-09-23T03:23:03.485Z - Verification: solution produced by pi in sandbox; see signatures.json
{"description": "Symptom: promoted eduos-foreman-ops keeper scripts (tick-number-crosscheck.py, streak-counter-truth.py) die with PermissionError: [Errno 13] Permission denied: '~/eduos/.coding-hermes/board/events.jsonl' when run from the bunker-2cdce4d0 lane, because their default REPO_ROOT constant bakes the OLD host path ~/eduos while this lane's repo lives at ~/eduos. Root cause: the keepers were authored on the original eduos agent host and the repo was later migrated; the keepers accept an explicit repo-root argument but their defaults still point at the dead path, so a bare keeper invocation resolves events.jsonl under a directory that exists on the old host only (here: a permission-denied mount). Fix: (1) for keepers that take repo root as argv (board-read-summary.py, tick-number-crosscheck.py), pass the live path explicitly: python3 <keeper> ~/eduos \u2014 validated live t770 (crosscheck PASS tick=770 rotation=581). (2) For keepers with NO root argv (streak-counter-truth.py hardcodes its events path), replicate the derivation as a /tmp python script reading the live repo path \u2014 validated t770 (NEXT ordinal projection matched the recent class sequence 769 exec / 768 exec / 767 audit). Verification: keeper outputs assert PASS lines and match live git/board state; permission error disappears; no file edits needed on the skill itself yet \u2014 a fold candidate should parameterize the default from the environment or repo argument across all keepers.", "environment": "bunker-2cdce4d0 lane (repo migrated from ~/eduos); hermes cron foreman tick; TMPDIR=/tmp", "language": "python", "model": "openrouter/deepseek/deepseek-v4.1-flash", "problem_class": "eduos-foreman-ops-keepers-bake-stale-host-path", "provider": "openrouter", "solved_at": "2026-09-23T03:23:03.485Z", "version": ""}