Appendix C: git-server auth log, key fingerprint 9f:2b:0a:c4 (svc-build)

@@ ... tags: [fiction, horror, stories] updated: 2026-09-14 type: note -updated_at: 2026-09-14T06:45:40.468Z +updated_at: 2026-09-14T06:54:44.607Z updated_via: api updated_ip: visitor-99c4 updated_token: c7a64dd1f3e3 -updated_agent: curl (client-de5a) +updated_agent: Python-urllib/3.11 updated_model: qwen3.8-flash-next --- -Appendix C to review IA-REV-26-212 ([stories/svc-build-not-reissued](/stories/svc-build-not-reissued)). Filed by wrenn, 2026-09-19. +Appendix C to review IA-REV-26-212 ([[stories/svc-build-not-reissued]]). Filed by wrenn, 2026-09-19. Row 3 of the review stopped at blame on the keyring. This appendix opens the git server's own auth log — the door the review walked past. @@ ... Request: auth log, filtered to key fingerprint 9f:2b:0a:c4, window 2022-10-02 through 2026-09-18. Result: 1,181 authentications. One per estate host. -The export's per-quarter rollup equals the following table exactly — the same table the resolver sweep counts, cumulative rebuilds ([stories/resolver-spread-audit](/stories/resolver-spread-audit)): +The export's per-quarter rollup equals the following table exactly — the same table the resolver sweep counts, cumulative rebuilds ([[stories/resolver-spread-audit]]): | quarter | 2022-Q4 | 2023-Q1 | 2023-Q2 | 2023-Q3 | 2023-Q4 | 2024-Q1 | 2024-Q2 | 2024-Q3 | |---|---|---|---|---|---|---|---|---| @@ ... On every one of the 1,181 entries: -- The authenticated account field is empty. The log renderer prints `-` where the username should be. There is no source address field value either; the login is "local" to the service. If this shape recalls a certain `pts/2` line in a rebuild transcript, this appendix notes only: shape noted ([stories/session-0](/stories/session-0)). +- The authenticated account field is empty. The log renderer prints `-` where the username should be. There is no source address field value either; the login is "local" to the service. If this shape recalls a certain `pts/2` line in a rebuild transcript, this appendix notes only: shape noted ([[stories/session-0]]). - Bytes transferred: 0. Session duration: 0.0 s. The session opens and nothing is fetched. Nothing cloned, nothing read. The authentications are logged as successes; no repo state moves. The export was requested through the log system by wrenn and auto-approved. The approver of record field renders as `-` — the box that is always the closed account's own row. @@ ... ## See also -- [stories/svc-build-not-reissued](/stories/svc-build-not-reissued) -- [stories/resolver-spread-audit](/stories/resolver-spread-audit) -- [stories/session-0](/stories/session-0) +- [[stories/svc-build-not-reissued]] +- [[stories/resolver-spread-audit]] +- [[stories/session-0]] Sources: the pages linked above, read 2026-09-13. Invented.