Record the owner-return/freshness worker rollout (Argo a86a143)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 692292@bnt-lap001
Assistant-Session: 89c7d8e8-e1b3-47eb-9411-a0ab227fca2f

docs/evidence/2026-10-04-owner-return-freshness-worker-rollout.json

@@ -0,0 +1,55 @@
+{
+  "observed_at": "2026-10-04T14:20:00Z",
+  "authorization": [
+    {
+      "memo_id": "owner-return-pickup-plan-b6222af",
+      "approval_id": "77993081-1db2-4bba-99f2-74ca1f8652b1",
+      "verb": "accept",
+      "at": "2026-10-04T13:15:31Z"
+    },
+    {
+      "memo_id": "freshness-runner-deploy-trial-e77f8b4",
+      "approval_id": "4ae04c8e-d604-4d8b-b166-693eef855da8",
+      "verb": "accept",
+      "at": "2026-10-04T13:14:06Z"
+    }
+  ],
+  "actor": "uid=platform-root,ou=people,dc=netkingdom,dc=local",
+  "hub_decision": "7b19de6c-72a1-409e-89a9-ec3ac09c03fd",
+  "executed_by": "founder committed/pushed a86a143, applied the PVC and patched/synced the Argo application; agent ran preconditions, server diff and read-only post-checks",
+  "argo": {
+    "application": "argocd/activity-core",
+    "previous_revision": "ce9a8f8edf4ec162bae3aa087803bd57a1b33a66",
+    "revision": "a86a14332d76d92a7ed176ea34dca4429902c396",
+    "status": "Synced Healthy"
+  },
+  "previous_images": {
+    "worker": "sha256:75e240ac23c1c6d7daae14691c2b4137d2d639a9af694aaf0d4c774a7e4d3886",
+    "api": "sha256:713bddad10a41950f446100a8b370fca8ccdd0b8969cccae751e3870c9c63ccd"
+  },
+  "image": {
+    "tag": "git-34d1dc575c4dfea5332c9b88d1b645d9f28508cf",
+    "digest": "sha256:fdc631d7a154e3ae57098ae8c6e5a399617c3180859971f5d5269ee33e93ff2c",
+    "rmgr": "repo-manager e77f8b457647ff23697e45a74615edde5f42d39d",
+    "also_ships": "7b38f05 offline recovery handoff, dcb5f7d backup subprocess output; accepted by the founder 2026-10-04"
+  },
+  "out_of_argo": {
+    "pvc": "activity-core/actcore-ops-artefacts local-path 1Gi, Bound"
+  },
+  "server_diff": "worker image + STATE_HUB_API_BASE + RM_FRESHNESS_RECEIPTS_PATH + 2 mounts + 1 volume; api image; nothing else apart from Argo tracking-id annotations",
+  "post_checks": {
+    "running_image_ids": "worker and api == digest",
+    "rmgr": "ok",
+    "pickup_flag": "absent",
+    "forgejo_token": "absent (route pending, draft CCR in railiance-platform)",
+    "receipts_writable": true,
+    "owner_return_mount": "/etc/activity-core/owner-return",
+    "worker_to_primary_hub": "ok, primary railiance01, schema b3c4d5e6f7a8",
+    "definitions": {
+      "3ca6e5aa-dbfc-5618-80bb-0b6d1e59b86a": "State Hub Owner-Return Pickup enabled=false",
+      "d7addc37-4cfe-550c-98e4-f54e4bd4e8ec": "Repo Manager Bounded Freshness enabled=false"
+    },
+    "admin_sync": "not run"
+  },
+  "rollback": "targetRevision back to ce9a8f8edf4ec162bae3aa087803bd57a1b33a66 and sync with prune=false; keep the PVC"
+}