manna: written by the system's own hand each morning; Friday's double stands on Shabbat

Shemot 16: dvar yom b'yomo, and on the sixth day double, and none on the
seventh. Every night at 00:00Z the day's provision went stale and the
readiness probe failed until someone woke — 13.5 hours on 2026-10-15.
CronJob `manna` (deploy/k8s/manna-cronjob.yaml) runs at 00:01Z Sunday to
Friday in our own korban-processor image, mounts the manna PVC as the
app's uid, and writes today.json from the ConfigMap's MANNA_* amounts —
doubled on Friday, valid to Sunday 00:30Z. The pipeline now accepts
Friday's `double` on Saturday (validate_date/3) and nothing else across a
day boundary; three tests. The kohen sets the amounts, may still write by
hand, and reads a failed job as the Day-4 alarm (KOHEN "The manna, each
morning"; Tamid §1.1). Doorpost re-pinned. Elixir green.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

vav_pipeline/lib/vav_pipeline/doorpost.ex

@@ -180,7 +180,7 @@ defmodule VavPipeline.Doorpost do
   # changes; the update is a deliberate operator commit. A bare
   # hash-update commit (without a corresponding spec change in the
   # same commit) is itself a drift signal.
-  @expected_hash "10735ab4e4280bf35d19d6ed79804c31d5ef199a70a289f455e138085e9cba5d"
+  @expected_hash "65bf08fc3c22307eb10ea6833ddeb475b1f6d87f145901e8d1b426c544c523be"
 
   @doc "Return the list of files that constitute the category-grade specification."
   @spec files() :: [String.t()]

vav_pipeline/lib/vav_pipeline/manna.ex

@@ -253,7 +253,7 @@ defmodule VavPipeline.Manna do
   end
 
   defp validate_manna(data, now) do
-    with {:ok, date} <- validate_date(data["date"], now),
+    with {:ok, date} <- validate_date(data["date"], now, parse_type(data["type"])),
          {:ok, provision} <- validate_provision(data["provision"]),
          {:ok, expires_at} <- parse_expires_at(data["expires_at"]),
          :ok <- check_expiry(expires_at, now) do
@@ -269,15 +269,25 @@ defmodule VavPipeline.Manna do
     end
   end
 
-  defp validate_date(nil, _now), do: {:error, "MANNA_INVALID: missing date"}
+  defp validate_date(nil, _now, _type), do: {:error, "MANNA_INVALID: missing date"}
 
-  defp validate_date(date_str, now) do
-    today = DateTime.to_date(now) |> Date.to_iso8601()
+  # A provision is for its day — except the double portion: gathered on
+  # Friday, it is the Shabbat's too (Shemot 16:22–26), so Friday's
+  # `double` stands on Saturday. Nothing else carries over the boundary.
+  defp validate_date(date_str, now, type) do
+    today = DateTime.to_date(now)
+    today_str = Date.to_iso8601(today)
+    yesterday = Date.add(today, -1)
 
-    if date_str == today do
-      {:ok, date_str}
-    else
-      {:error, "MANNA_STALE: provision is for #{date_str}, today is #{today}"}
+    cond do
+      date_str == today_str ->
+        {:ok, date_str}
+
+      type == :double and Date.day_of_week(today) == 6 and date_str == Date.to_iso8601(yesterday) ->
+        {:ok, date_str}
+
+      true ->
+        {:error, "MANNA_STALE: provision is for #{date_str}, today is #{today_str}"}
     end
   end
 

vav_pipeline/test/manna_shabbat_test.exs

@@ -0,0 +1,36 @@
+defmodule VavPipeline.MannaShabbatTest do
+  @moduledoc "Shemot 16:22–26: Friday's double portion is the Shabbat's too; nothing else crosses the day boundary."
+  use ExUnit.Case, async: false
+  alias VavPipeline.Manna
+
+  @friday ~D[2026-10-16]
+  @saturday ~D[2026-10-17]
+  @sunday ~D[2026-10-18]
+
+  defp write(date, type, expires) do
+    path = Manna.provision_file()
+    File.mkdir_p!(Path.dirname(path))
+    File.write!(path, Jason.encode!(%{"date" => Date.to_iso8601(date), "provision" => %{"compute_units" => 2000, "memory_mb" => 1, "api_calls_external" => 1, "storage_delta_mb" => 1, "sanhedrin_panels_max" => 1}, "type" => type, "expires_at" => expires, "written_by" => "test", "written_at" => "2026-10-16T00:01:00Z"}))
+    on_exit(fn -> File.rm(path) end)
+  end
+
+  defp at(date, h), do: DateTime.new!(date, Time.new!(h, 0, 0), "Etc/UTC")
+
+  test "Friday's double stands on Saturday" do
+    write(@friday, "double", "2026-10-18T00:30:00Z")
+    assert {:ok, %{type: :double}} = Manna.check_at(at(@friday, 12))
+    assert {:ok, %{type: :double}} = Manna.check_at(at(@saturday, 12))
+  end
+
+  test "a regular provision does not cross the boundary; a double does not reach Sunday" do
+    write(@friday, "regular", "2026-10-18T00:30:00Z")
+    assert {:error, "MANNA_STALE" <> _} = Manna.check_at(at(@saturday, 12))
+    write(@friday, "double", "2026-10-19T00:30:00Z")
+    assert {:error, "MANNA_STALE" <> _} = Manna.check_at(at(@sunday, 12))
+  end
+
+  test "a double written on a Thursday does not carry to Friday — only Shabbat receives it" do
+    write(~D[2026-10-15], "double", "2026-10-17T00:30:00Z")
+    assert {:error, "MANNA_STALE" <> _} = Manna.check_at(at(@friday, 12))
+  end
+end