From f529c71eb063dd8b263524663f0ca7cee15c5ee6 Mon Sep 17 00:00:00 2001 From: tegwick Date: Thu, 22 Oct 2026 01:01:49 +0200 Subject: [PATCH] Wave-2 right-sizing applied 2026-10-22 (CUST-WP-0071) Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 276069@bnt-lap001 Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c --- workplans/FLEX-WP-0038-wave2-resource-right-sizing.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/workplans/FLEX-WP-0038-wave2-resource-right-sizing.md b/workplans/FLEX-WP-0038-wave2-resource-right-sizing.md index b636642..e8db9f6 100644 --- a/workplans/FLEX-WP-0038-wave2-resource-right-sizing.md +++ b/workplans/FLEX-WP-0038-wave2-resource-right-sizing.md @@ -24,9 +24,9 @@ The founder placed this task in access-engine, beside `charts/flex-auth`, on ```task id: FLEX-WP-0038-T01 status: wait +blocking_reason: "8 of 9 flex-auth releases wait for owner review of --caller-audience and the sitting image change; ops-warden applied." priority: low needs_human: true -blocking_reason: "Wave-2 cluster write needs founder approval (2026-10-21 interview)." state_hub_task_id: "0ed6cd93-972e-56de-b6c8-0528249c90ae" ``` @@ -52,3 +52,7 @@ Status stays `wait` / `needs_human`. Local commit only: not pushed, not applied. - Change: access-engine `36465de`: chart default request 25m/32Mi -> 5m/20Mi. Overrides: application-readback 24Mi, informed-decision-lifecycle 24Mi, informed-decision-sitting 40Mi (up, because p95 is 35Mi), informed-decision-t03 16Mi. CPU is 5m for every release. Total 45m/204Mi, compared with 176Mi proposed; the difference comes from per-pod rounding. - Diff: NOT resource-only. In 8 of 9 releases, the chart at HEAD adds `--caller-audience` to the container args (`flex-auth` or `access-engine`, depending on the release). informed-decision-sitting also changes image. Only `flex-auth-ops-warden` diffs resource-only. This drift goes to the founder before any helm upgrade. - Apply (per release, after founder OK): `helm upgrade --install flex-auth- charts/flex-auth --namespace flex-auth -f values/.yaml --wait --timeout 2m`. + +## Applied — 2026-10-22 (FLEX-WP-0038-T01) + +Partial: only `flex-auth-ops-warden` was applied (Helm revision 4, resources only). The other 8 releases wait, because chart HEAD adds `--caller-audience` and sitting would change image. Those need access-engine owner review before any resource-only rollout. Evidence: the-custodian docs/evidence/2026-10-22-wave2-apply.md.