2ea0420de7
Two independent adversarial reviews (codex CLI + a 6-dimension verification workflow) of the delivery-hardening branch surfaced ~40 findings; this closes the confirmed correctness/security/deploy blockers plus a codex re-review pass. edge: - geometry: track_displacement per-second threshold recalibrated (0.02->0.25, env-tunable via MOTION_THR, validated finite/positive); confidence-filter keypoints with a bbox-center fallback so hallucinated points don't fake motion - fall: low-confidence frames no longer cancel an active FALLING/FALLEN incident (freeze + reset recovery timer so recovery needs a fresh confident streak); baseline height only seeded from trusted frames - queue: PostClient.send() returns a tri-state SendResult; only definite 4xx count toward the poison drop cap, so a network outage (incl. 408/425/429/5xx) never deletes queued safety events; legacy rows persist their minted uuid - config: reject placeholder / http / short DEVICE_SECRET at startup - zones: warn+skip legacy pixel-space polygons that would silently match nothing cloud: - zone endpoints wired into P3-2b site-scope (cross-site read/write/delete closed) + role gate on list; catch narrowed so DB faults surface as 500 - snapshot purge keeps the DB row when unlink() fails (no untrackable PIPA orphan) - ingest dedup path re-stores missing snapshots (+ short-write guard); UNIQUE (event_id, content_hash) makes recovery idempotent under retry/race - event list cursor carries full-precision occurred_at (no float rounding at the page boundary); string keyset end-to-end - SiteScope '' fails closed (only NULL is global); dashboard fetches full page cap - runnable migration (site/event_uuid + backfill ordering + indexes); rate-limit reap fails open deploy: - offline bundle hashes EVERY file (fatal on missing/failed/injected; models in SBOM; arch in tarball name; REQUIRE_SIGNATURE option) - installer verifies before any mutation, Hailo arch preflight before install, atomic src swap, backend reconcile preserves a working operator choice - systemd DeviceAllow=char-dma_heap (the /dev/dma_heap/ dir form was inert) Verified: edge pytest 165 passed / 2 skipped; cloud phpunit 109 passed / 4 skipped; deploy scripts bash -n clean. Reviewed by codex twice (findings + fixes) with the second-pass findings folded in.
40 lines
1.4 KiB
Python
40 lines
1.4 KiB
Python
from dataclasses import dataclass
|
|
|
|
from edge.tracking import Track
|
|
from edge.geometry import track_displacement
|
|
|
|
|
|
@dataclass
|
|
class ImmobilityConfig:
|
|
motion_thr: float = 0.25 # per-second normalized joint speed (units/s); MOTION_THR env
|
|
immobile_s: float = 120.0
|
|
zone_immobile_s: float = 30.0
|
|
|
|
|
|
class ImmobilityWatchdog:
|
|
def __init__(self, cfg: ImmobilityConfig):
|
|
self.cfg = cfg
|
|
self._still_since: dict[int, float] = {}
|
|
self._fired: set[int] = set()
|
|
|
|
def forget(self, track_id: int) -> None:
|
|
self._still_since.pop(track_id, None)
|
|
self._fired.discard(track_id)
|
|
|
|
def update(self, track: Track, now: float, in_danger_zone: bool = False) -> tuple[bool, dict]:
|
|
tid = track.track_id
|
|
window = self.cfg.zone_immobile_s if in_danger_zone else self.cfg.immobile_s
|
|
if track_displacement(track) >= self.cfg.motion_thr:
|
|
self._still_since.pop(tid, None)
|
|
self._fired.discard(tid)
|
|
return False, {}
|
|
if tid not in self._still_since:
|
|
if len(track.frames) >= 2:
|
|
self._still_since[tid] = track.frames[-2].t
|
|
else:
|
|
self._still_since[tid] = now
|
|
start = self._still_since[tid]
|
|
if now - start >= window and tid not in self._fired:
|
|
self._fired.add(tid)
|
|
return True, {"immobility_s": round(now - start, 1)}
|
|
return False, {}
|