RandomX sustained-hash performance authority#15
Conversation
Source gate follow-up: rustfmt-only fixThe first local authoritative run stopped at Observed diff was formatting-only in
No MSR authority logic, systemd wiring, capability boundary, register, target value, rollback behavior, or image verifier contract changed. Formatted head: Required next step: fast-forward local branch and rerun the complete authoritative source gate from the beginning. PR remains draft and unmerged. |
RandomX performance authority source gate: PASSExact head: Authoritative local verification completed successfully from the Windows checkout through WSL. Passed:
Final marker:
The earlier standalone grep helper failed due to PowerShell quoting only; the actual Alpha8 checker and full authoritative gate both passed. PR remains draft and unmerged. Next permitted step is a fresh exact image build from this head with built-image MSR authority verification. |
Pre-image safety hardening addedNew exact head: A review after the first source PASS found one unsafe edge: an MSR apply could partially fail, retain mutation state, and still leave the optional baseline miner path eligible to start. This batch closes that edge without adding a privileged miner path:
The prior source PASS is superseded by this head. PR remains draft and unmerged. A fresh authoritative source gate is required before image construction. |
RandomX MSR miner-gate authoritative source verification: PASSExact head: Local Windows + WSL authoritative verification completed successfully. Passed:
Final marker:
This supersedes all prior source-gate evidence for older heads. PR remains draft and unmerged. Fresh exact image construction from this SHA is now authorized; physical MSR/H/s claims remain blocked until built-image verification and controlled hardware testing pass. |
Exact image build launcher compatibility failureThe authorized source head remained exact at The build stopped before the builder image was created because this installed Podman version parses
Impact:
Corrected launcher must use |
Exact image build launcher parse failureExact source remained The retry did not start the builder. The generated shell script contained blank lines between backslash-continuation lines, so Bash terminated the continuation early and failed near the first artifact token ( Impact:
Next retry uses a continuation-free launcher: single-line Podman commands, Bash arrays for artifact lists, and a single-line |
Obsolete namespace hygiene false-positive removed without weakening the gateEvidence from head
Current correction at
No Linux source PASS is claimed until the complete source gate passes at the new head. PR remains draft and unmerged. |
Runtime dependency scan made token-aware and fail-closedEvidence from head
Current correction at
Diff audit from the previous head shows exactly three intended files: scanner added, behavioral test extended, and verifier inline block replaced. No Linux source PASS is claimed until the complete gate passes at the new head. PR remains draft and unmerged. |
Runtime dependency scanner formatting-only follow-upEvidence from head
Current head No Linux source PASS is claimed until the complete gate passes at this head. PR remains draft and unmerged. |
Scanner integration no longer self-triggers the production command guardEvidence from head
Current correction at
No Linux source PASS is claimed until the complete source gate passes at this head. PR remains draft and unmerged. |
Runtime dependency scanner fixture topology correctedEvidence from head
Current correction at
No Linux source PASS is claimed until the targeted scanner integration and complete source gate pass at this head. PR remains draft and unmerged. |
Authoritative Linux source gate: PASSExact head: Authoritative verification completed successfully from the Windows checkout through WSL Ubuntu. Passed:
Final markers: This supersedes source-gate evidence for all earlier heads. The current head is now authorized for fresh exact-image construction and built-image authority verification. No exact-image or new physical PASS is claimed by this source result. PR remains draft and unmerged until the rebuilt image and remaining physical/endurance gates pass. |
Exact-image construction authorized from source-PASS headAuthorized source commit:
The source tree is intentionally unchanged after the authoritative PASS. Exact-image construction must use the existing builder pipeline at this commit rather than adding another launcher commit and invalidating the source evidence. Builder contract:
Expected artifacts:
Required built-image evidence:
No image PASS is claimed until the host build completes, the independent post-build verifier succeeds, and artifact hashes/manifest are captured. PR remains draft and unmerged. |
Exact-image build attempt incomplete; source head unchangedAuthorized source head remains:
Observed host evidence:
No exact-image PASS is claimed. The next attempt must:
PR remains draft and unmerged. Source-gate evidence remains valid because no repository source changed. |
Authoritative exact-image gate: PASSAuthorized source commit:
The rebuilt RIGOS image and recovery ISO completed successfully from the exact source-PASS head. Build evidence:
Produced artifacts:
Independent post-build verification also passed:
Manifest evidence: Final host marker: The repository worktree remained clean after construction and verification. This supersedes all earlier incomplete exact-image attempts. The source and exact-image gates are now authoritative PASS at the current PR head. No new physical-node, sustained-hash, thermal, rollback/A-B, or endurance PASS is claimed by this result. PR remains draft and unmerged until the remaining physical gates complete. |
Physical deployment: first boot and initial SSH identity capturedExact image under test:
USB write evidence from Rufus:
Physical first-boot evidence:
This closes only the physical first-boot and initial fingerprint-capture gate. Still pending before merge:
No SSH fingerprint persistence PASS is claimed yet. PR remains draft and unmerged. |
Physical clean-reboot persistence and authenticated XMRig API: PASSExact image under test remains:
Clean reboot SSH identity persistenceFirst boot: After Additional evidence:
This closes the clean-reboot SSH fingerprint persistence gate. Authenticated XMRig API and observer truthPhysical observer result: Direct authenticated API result: Socket binding evidence: The observer therefore reached Closed by this evidence:
Still pending before merge:
No hard-power-loss, external API isolation, sustained-performance, rollback, or endurance PASS is claimed yet. PR remains draft and unmerged. |
Physical external API isolation and hard power-loss persistence: PASSExact image under test remains:
External API isolationWindows host evidence: The node was reachable over the network while the XMRig HTTP API port remained unreachable from a non-loopback host. This closes the external API isolation gate. Hard power-loss SSH identity persistenceBefore power interruption: The persistent state was explicitly synchronized, then the SSH connection was reset by the physical power interruption. After power restoration and reboot: Additional evidence:
This closes the hard power-loss SSH fingerprint persistence and core service-recovery gates. Closed by this evidence:
Still pending before merge:
No sustained-performance, rollback, or endurance PASS is claimed yet. PR remains draft and unmerged. |
Physical RandomX MSR rollback and reapply: PASSExact image under test remains:
Applied state before rollbackAll four logical CPUs reported: Explicit rollbackThe miner was stopped, followed by Result: All four logical CPUs reported exact restoration: Marker: ReapplyAfter starting All four logical CPUs reported: Marker: Miner recovery after reapplyAfter restarting the miner and allowing a 60-second recovery window: This closes the physical MSR rollback, exact readback restoration, state cleanup, reapply, miner-gate recovery, and post-reapply API-readiness gates. Still pending before merge:
No sustained-performance or endurance PASS is claimed yet. PR remains draft and unmerged. |
Physical thread-matrix preflight capturedExact image under test remains:
Current XMRig candidate truth: Current observer snapshot after approximately 298 active seconds: Thermal and clock discovery: Interpretation:
No candidate winner or sustained-performance PASS is claimed. The next action is a controlled 1/2/3/4-thread matrix with one variable changed at a time and exact JSON evidence per 15-minute candidate. |
Physical 2-thread candidate: thermal gate BLOCKEDExact image under test remains:
Runtime authority wiring was confirmed:
Thread placement was also correct:
Thermal evidence: A 60-second, 12-sample clock/thermal probe showed: The low clock is therefore sustained under the 2-thread mining load and not a single idle sampling artifact. The candidate is operating at the platform thermal limit and is materially downclocked. Decision:
The production miner should remain stopped until cooling is restored or a separately rendered 1-thread ephemeral safety candidate is used. Persistent revision, runtime config, and source head must not be edited to work around this gate. PR remains draft and unmerged. |
Thermal context clarification and cooldown marker correctionOperator clarified that the physical node is a Dell N4110 currently operating without a working fan, and 80-85 C is its usual observed behavior. This explains the temperature pattern but does not create thermal headroom: the platform-reported coretemp critical threshold remains 85 C, and the measured 2-thread load remained at 84-85 C while clocks stayed around 1.10-1.30 GHz. The previous cooldown command did not actually reach its 65 C target. It was interrupted manually at 73 C, after which the unconditional trailing Adjusted test policy:
No source, image, persistent revision, or completed gate changed. PR remains draft and unmerged. |
Ephemeral 1-thread candidate cleaned; production miner restoredThe temporary benchmark service was stopped and all ephemeral benchmark state under Production recovery evidence: Exactly one XMRig process remained: Observer evidence after a 60-second recovery window: This confirms clean restoration to the production runtime after the ephemeral candidate, with MSR authority, authenticated observer truth, pool connectivity, and zero rejected shares intact. No sustained-performance conclusion is drawn from the 10-second recovery sample. The production miner remains running. PR remains draft and unmerged. |
Physical 15-minute sustained observation: stability PASS, performance improvement NOT ESTABLISHEDExact image under test remains:
Observed production runtime after 1,306 active seconds: This closes the first sustained 15-minute runtime-stability observation:
However, the performance-improvement gate is not closed. The earlier physical baseline was approximately 340.7-341.2 H/s at 60 seconds with clocks near 2.093 GHz and package temperature around 81 C. The current 15-minute result is 271.11 H/s with clocks around 1.7 GHz and package temperature 84 C. This is consistent with a cooling-limited operating condition and cannot establish an MSR throughput gain. No A/B winner, HiveOS parity, 24-hour endurance, or merge readiness is claimed. PR remains draft and unmerged. |
9.29-hour endurance snapshot: stable and near baseline throughputPhysical production runtime remains on the exact performance image and source authority previously recorded. Observed after 33,455 active seconds (9 h 17 m 35 s): Interpretation:
The worker-placement command returned only the aggregate XMRig task line, so this snapshot does not re-authorize affinity placement evidence. A separate per-task 24-hour endurance is not yet complete. Remaining runtime at this snapshot: 52,945 seconds (14 h 42 m 25 s). PR remains draft and unmerged. |
10-minute worker-placement authority: 100% physical-core separationA read-only 10-minute placement capture sampled the two active RandomX workers every 5 seconds. Result: Observed placement throughout the run:
This establishes that the current unpinned exact-2-thread runtime already maintains one mining worker per physical core under the scheduler. Affinity pinning is therefore no longer treated as the primary suspected throughput bottleneck. It may still be tested later as a controlled A/B variable, but no material gain is expected from placement correction alone. The current optimization priority remains:
No service, config, affinity mask, MSR state, or persistent revision changed during this observation. PR remains draft and unmerged. |
22.44-hour endurance checkpoint: sustained baseline parity reachedObserved at 80,793 active seconds (22 h 26 m 33 s): Interpretation:
24-hour duration is not yet complete. Remaining time at this checkpoint: 5,607 seconds (1 h 33 m 27 s). PR remains draft and unmerged. |
Operator decision: close current endurance run at 22 h 26 m and proceed to controlled A/BThe operator elected not to wait the remaining 1 h 33 m because the current result already establishes the intended engineering conclusion: Recorded outcome:
The result must not be described as a 24-hour PASS. The next phase is a controlled MSR enabled/disabled comparison with the miner stopped during each MSR transition, exact restore/readback verification, and one variable changed at a time. PR remains draft and unmerged. |
1 participant
Purpose
Start the performance phase defined by #14: maximize sustained RandomX H/s while preserving fail-closed appliance behavior and exact-image stability.
Physical evidence driving this batch
rigosRandomX MSR authority
0x1a4, target value0xfWants=rather thanRequires=CAP_SYS_MODULEandCAP_SYS_RAWIOPersistent SSH host identity
Added after physical power-loss testing proved that package-generated host keys lived in the ephemeral live overlay.
/var/lib/rigos/system/ssh-hostkeysrigos-state-ready.service -> rigos-ssh-hostkeys.service -> ssh.servicessh.servicerequire the persistent identity authorityAuthenticated miner observability
Added after physical testing exposed a false
no_recent_speed_evidencestate while XMRig was still connected and accepting work.127.0.0.1:18080/run/rigos/xmrig-api-tokenrestricted=trueGET /2/summarywith Bearer authorizationBASED cleanup
The temporary raw HiveOS filesystem import was removed from this branch before the RIGOS-native patch was applied. Security rotation and unreachable-object cleanup are tracked in #17.
Non-goals
Completed physical gates
Required gates before merge
readyfrom API evidence rather than journal-only evidenceThis PR must remain draft and unmerged until the exact rebuilt image and all required physical gates pass.