Implement bounded release runtime and durable native health sampler
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 8s
Build and Publish Container Image / build-and-push (push) Successful in 1m39s

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
This commit is contained in:
tegwick 2026-10-11 23:26:03 +02:00
parent cc2bb9d0f7
commit 52dcc08f23
13 changed files with 937 additions and 10 deletions

View file

@ -84,7 +84,9 @@ on the WP-0042 points; see that plan.
```task
id: ACTIVITY-WP-0041-T03
status: todo
status: wait
blocked_on: message-from:railiance-platform
blocking_reason: "RPF-IN-0011: return dedicated release principal/custody owner task and native acceptance; D2 scope already accepted"
decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e
priority: high
state_hub_task_id: "8e2b4ed9-d455-5367-85d9-8e4222ce75f3"
@ -107,6 +109,20 @@ and produce visible evidence rather than asking the founder to approve each run.
Prove one normal release and one failed health-check rollback through Git/ArgoCD.
2026-10-03: human gate routed to hub decision 89f1058f-33bc-47a8-8a49-0b44d426c67e (D2: ArgoCD owns production: go-ahead sequence for railiance-apps-root, issue-core, policy-nexus and activity-core automation) by CUST-WP-0075; resolving that decision raises C-40 here.
2026-10-11 owner implementation: concrete read-only definition/sink/Temporal
invariant API, bounded native metadata probe, durable 60-second health sampler and
private dedicated Temporal runtime entrypoint implemented; 113 scoped tests pass.
Actual username plus fixed allow/deny checks reject borrowed admin credentials and
config/custody drift stops dispatch. Native metadata confirms the dedicated release
account is absent; only default and ESO identities exist. No activation or borrowed
credential was attempted. Independent Platform preparation intake RPF-IN-0011
requests native Git/Kubernetes custody, issuer and rollback acceptance within the
existing D2 image-only scope. Await its exact owner task binding, then upgrade
blocked_on to depends_on; do not depend on the RPF48 beneficiary. Cross-owner case
ACT41-release-custody-2026-10-11 retained with source validation receipt. No new
founder approval or unqualified needs_human gate is introduced. See
docs/release-runtime-owner-handoff.md and docs/evidence/2026-10-11-release-runtime/.
## Acceptance