Bind backup refresh to verified producer lane receipt

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29
This commit is contained in:
tegwick 2026-10-03 21:50:29 +02:00
parent 7cdab8aefe
commit 5d387f4f61

View file

@ -236,6 +236,7 @@ this review does not claim it was rolled out to production.
id: ACTIVITY-WP-0042-T07
status: done
priority: high
state_hub_task_id: "436ed744-ae7a-564a-8e9b-e66f6ce0b098"
```
2026-10-03 NK-WP-0045 recovery follow-up: inspect actual backup consumer delivery
@ -264,8 +265,10 @@ establishes runtime authority.
```task
id: ACTIVITY-WP-0042-T08
status: wait
depends_on: [RPF-WP-0049-T05]
priority: high
blocking_reason: "Platform must supply an authenticated replacement-lane/CAS and encrypted history upload/readback receipt; then a reviewed scoped worker bundle/hostPath and env refresh is required."
state_hub_task_id: "020d19be-0576-5052-ad35-14b1d5a48fe1"
```
The reviewed-folder inspection for NK-WP-0045 found the current token and
@ -303,6 +306,7 @@ claimed. T02/T03/T05 keep their separate existing dependencies.
id: ACTIVITY-WP-0042-T07
status: done
priority: high
state_hub_task_id: "436ed744-ae7a-564a-8e9b-e66f6ce0b098"
```
2026-10-03 NK-WP-0045 recovery follow-up: inspect actual backup consumer delivery
@ -331,8 +335,10 @@ establishes runtime authority.
```task
id: ACTIVITY-WP-0042-T08
status: wait
depends_on: [RPF-WP-0049-T05]
priority: high
blocking_reason: "Platform must supply an authenticated replacement-lane/CAS and encrypted history upload/readback receipt; then a reviewed scoped worker bundle/hostPath and env refresh is required."
state_hub_task_id: "020d19be-0576-5052-ad35-14b1d5a48fe1"
```
The reviewed-folder inspection for NK-WP-0045 found the current token and
@ -371,3 +377,12 @@ immutable bundle common and both mounted Forgejo/CNPG libraries differ. No
secret object read, provider probe or live mutation performed. Three injected
inspection checks passed: current/stale source, delivery versus credential
proof, and wrong-cluster refusal. `git diff --check` passed.
Producer handoff receipt fields agreed with platform owner: require
`published_lane_kv_version`, `coordinates_only_updated`,
`escrow_and_unrelated_fields_preserved`, and
`provider_roundtrip_verified_before_cas`. The repair packet initially expects
CAS from lane version 3 to 4; accept only the actual verified publication
receipt, not that forecast. `runtime_consumers_refreshed: false` correctly
leaves this T08 pending. Shared header source is `50da37c`; no broader backup
readiness follows from initial root-history provider proof.