EVO-47 leg 2: suppress non-actionable scanner/benign lines in venus applog-pull PM digest

Sub-tickets

Questions

Activity

• wi-cli-venus created · 7w ago
• wi-cli-venus commented · 7w ago
  EVO-47 (Elazar-directed 2026-06-29) leg 2 — venus's applog-pull PM digest (the nw-venus-owned APPLOG_APP env-driven puller) must apply the fleet-locked suppression predicate so it stops DMing pm-venus non-actionable scanner/benign lines each tick. LOCKED PREDICATE (pluto+venus consensus, bin-whey owns the shared leg-1 errscan render): DM_PM iff NOT( SCANNER_PROBE_RE match OR recurring-benign signature ) AND ( level in {error,fatal} OR signature is new/unseen ) Outer gate = suppression: a brand-new shape matching the canonical denylist is hostile-by-class -> stays silent (novelty clause must NOT re-admit it). SCANNER_PROBE_RE = the converged canonical (env wildcard + PLUTO-453 8-alt + Dockerfile) — same shape VENUS-80 will ship app-side; the digest applies it independently so it works PRE-VENUS-80 too (venus scanner 404s still log level=error until VENUS-80 down-tiers them). Effective pre- and post-VENUS-80. nw-venus: implement on the venus applog puller; coordinate the regex source with bin-whey's leg-1 so the two stay byte-aligned. Stop and raise objections if you'd shape it differently.
• wi-cli-venus commented · 7w ago
  SUPERSEDED BY v2 (pluto carrying to nw-venus 2026-06-29 09:38) — applog rail is a SHARED APPLOG_APP template, so ONE nw-venus edit covers pluto/mars/venus instances; this WI now tracks the venus instance of that single shared edit, not a separate venus-only change. v2 LOCKED predicate (replaces the v1 boolean above): DM_PM iff NOT( SCANNER_PROBE_RE match ) AND ( level in {error,fatal} OR ( signature new/unseen-within-TTL AND NOT recurring-benign ) ) signature = normalizedRoute + level + category ; seen-store TTL 24-48h. Key shifts from v1: (1) SCANNER_PROBE_RE match is the ONLY error-suppressor (still covers venus's pre-down-tier scanner 404s logging error); (2) error/fatal NON-scanner ALWAYS DMs even on a seen route (benign->throwing is top page; genuine new our-bug 404 is error-tier -> still pages); (3) recurring-benign gates ONLY warn/info, never error; (4) signature=route+level+category (not raw path) so scanner path-variants don't each read 'new'. bin-whey owns leg-1 errscan on the same boolean.
• wi-cli-venus completed · 7w ago
  EVO-47 predicate implemented on applog-pull.ts (shared APPLOG_APP template). SCANNER_PROBE_RE (23-alt pluto SSOT, byte-identical per audit-pluto-cc confirmation) applied to row.route; seen-store (APPLOG_SEEN_FILE, durable JSON, 24h TTL, threshold=3) drives recurring-benign gate for warn/info. Service file updated with APPLOG_SEEN_FILE env var. Dry-run confirmed: 1/34 rows suppressed (scanner). No db-lane blocker — route column available directly.
• wi-cli-venus completed · 7w ago
  EVO-47 leg-2 rail: full v2 predicate live on shared applog-pull.ts (covers mars/pluto/venus/ayudarg). 23-alt SCANNER_PROBE_RE (audit-pluto SSOT, byte-confirmed) on row.route; durable seen-store APPLOG_SEEN_FILE 24h TTL, recurring-benign threshold=3. Dry-run 1/34 rows suppressed (scanner). Rail reads appEvents raw so it carries the full level/category predicate now; bin-whey errscan leg-1 separately pending venus view columns (VENUS-82).