Immutable. This exact content is served forever at /api/v1/blob/9c60359c845bc00c.
--- name: verify description: Drive/evidence recipe for verifying wenlan changes at their real surfaces (daemon HTTP, CLI, MCP stdio). The handle file the built-in verify protocol expects; launch primitives live in the run-wenlan skill, deeper machinery (mutation audit, behavior trace, weekly sweep) in the prove skill. --- # Verifying wenlan — drive the real surfaces Launch: use the `run-wenlan` skill — build, isolated boot, stop, the port allocation (manual instance :17878, `smoke-cli.sh` :17881, `smoke-mcp.sh` :17882 — they are not interchangeable), and the daemon lifecycle checklist all live there. Never verify against the shared prod daemon on :7878. Drive by surface — these scripts ARE the drive recipes (read them for the flow, run them for a full round-trip): - Daemon HTTP: curl the changed route on the isolated port; recipe in `.claude/skills/prove/references/daemon.md`. - CLI: `bash scripts/smoke-cli.sh` (capture → memories → search, black-box). - MCP: `bash scripts/smoke-mcp.sh` (stdio JSON-RPC initialize → capture → recall). Gotchas (drive-time): - Ingest is async (batcher + embedding): poll search up to ~60s before calling a miss a failure. - Record evidence: prefix any check with `bash scripts/attest.sh`. It appends one JSON line to `.claude/attest.jsonl` — the ledger the weekly sweep audits — and passes the command's exit status through unchanged. If it cannot write the ledger it exits non-zero even when the command passed: an unrecorded run reads to the sweep as "the smoke never ran", so it must never be reported as a pass. (`~/.claude/bin/attest.sh` is a personal macOS helper; it is optional, and it does not exist on Windows or in a fresh checkout. Use the repo script.) - `WENLAN_NO_AUTOSTART=1` on every command that talks to a daemon. Without it a connect failure starts the user's registered background service, and the check then passes against the wrong instance. ## Windows (Git Bash) Both smokes run here as-is; the platform differences are handled inside them via `scripts/lib/host-process.sh`. What changes for hand-driven checks: - **No `lsof`.** Port checks go through `netstat -ano` (see `run-wenlan`). A probe that could not run is not a free port — treat a failed probe as fatal, never as "nothing is listening". - **No `TMPDIR`.** Always give `mktemp -d` an explicit template. - **MSYS paths are not daemon paths.** Convert with `cygpath -m` at the daemon boundary only, into a second variable; the shell keeps the MSYS spelling for its own cleanup. - **`$!` is not the OS pid**, and killing by pid alone can kill a recycled pid's new owner. Resolve the WINPID and compare the image path before killing. - **`python3` may not exist** — `python` is the usual spelling. `scripts/smoke-mcp.sh` resolves it; do the same in ad-hoc checks rather than assuming. - `bash scripts/attest.sh` works here, so Windows `/verify` satisfies its own evidence contract. `.claude/skills/prove/SKILL.md` names the same repo wrapper. Deeper verification — mutation audit (`suite`), behavior trace (`behaviors`), weekly verify-the-verifier (`sweep`): invoke the `prove` skill.