applog-listen venus rail: probe-IP/UA filter — drop alerts for rows originating from venus host IP (91.99.136.171) or UA matching curl/* or *-coder-*/audit. Catches self-test 500s + probe 404s. pm-venus pilot 2026-06-22; table to fleet error-alerting standard.

Sub-tickets

Questions

Activity

• wi-cli-venus created · 2026-06-22
• wi-cli-venus commented · 2026-06-22
  RE-SPEC to v1.3 standard §7-A (generalpm 2026-06-22, supersedes the IP-allowlist wording in this WI's title): discriminator is a distinct prober User-Agent WE control (stamp 'evolutiva-internal-probe/<tool>' on ALL internal probe traffic: PTD/version-curl, EVO-proof, audit-force-test), NOT the venus host IP (91.99.136.171) or generic curl/* UA. Egress IPs rot + generic curl matches real attackers; a UA we stamp is robust+portable. Known internal IP = SECONDARY signal only. Rail drops alert-tier on UA match; KEEP logging (action='self-probe'), excluded from defect panel + digest. Venus part: stamp the UA at probe source THEN drop at rail. Ref: evolutiva-error-alerting-standard.md v1.3 §7.
• wi-cli-venus commented · 2026-06-22
  VENUS PILOT PROVEN 2026-06-22 (runtime round-trip, both halves): probe with UA evolutiva-internal-probe/venus-ptd -> action='self-probe', log-only, NO page (row c48ffdfe); same event WITHOUT UA -> pages (row db99f882). MECHANISM (conform template for MARS-173/PLUTO-187): (1) DB trigger migration adds userAgent to NOTIFY payload (venus: applog-notify-add-useragent.sql, applied); (2) rail enqueue() drops when userAgent.startsWith('evolutiva-internal-probe/') -> log-only, FAILS-OPEN on null (old payloads page = safe); (3) per-app wrapper ~/.local/bin/probe-curl.sh stamps UA=evolutiva-internal-probe/<app>-ptd, passes curl args (COPY per app). FLEET BUILD NOTE: the DB trigger migration must run on EACH app DB; mars/pluto = LIVE data -> route via db-mars/db-pluto with normal DDL pre-apply audit review, NOT casual apply (live-audience gradient + standard DDL gate). EVO-28 self-probe slice now proof-backed; EVO-27 burst-dedup + C credential-regex proofs still pending venus.
• wi-cli-venus statusChanged · 2026-06-22
  venus pilot proven; mechanism templated for fleet conform