From 5d387f4f61134ecad7311f90b56196bcbf46eb92 Mon Sep 17 00:00:00 2001 From: tegwick Date: Sat, 3 Oct 2026 21:50:29 +0200 Subject: [PATCH] Bind backup refresh to verified producer lane receipt Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29 --- ...platform-backup-restore-evidence-scheduling.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/workplans/ACTIVITY-WP-0042-platform-backup-restore-evidence-scheduling.md b/workplans/ACTIVITY-WP-0042-platform-backup-restore-evidence-scheduling.md index bb5ece3..6c164af 100644 --- a/workplans/ACTIVITY-WP-0042-platform-backup-restore-evidence-scheduling.md +++ b/workplans/ACTIVITY-WP-0042-platform-backup-restore-evidence-scheduling.md @@ -236,6 +236,7 @@ this review does not claim it was rolled out to production. id: ACTIVITY-WP-0042-T07 status: done priority: high +state_hub_task_id: "436ed744-ae7a-564a-8e9b-e66f6ce0b098" ``` 2026-10-03 NK-WP-0045 recovery follow-up: inspect actual backup consumer delivery @@ -264,8 +265,10 @@ establishes runtime authority. ```task id: ACTIVITY-WP-0042-T08 status: wait +depends_on: [RPF-WP-0049-T05] priority: high blocking_reason: "Platform must supply an authenticated replacement-lane/CAS and encrypted history upload/readback receipt; then a reviewed scoped worker bundle/hostPath and env refresh is required." +state_hub_task_id: "020d19be-0576-5052-ad35-14b1d5a48fe1" ``` The reviewed-folder inspection for NK-WP-0045 found the current token and @@ -303,6 +306,7 @@ claimed. T02/T03/T05 keep their separate existing dependencies. id: ACTIVITY-WP-0042-T07 status: done priority: high +state_hub_task_id: "436ed744-ae7a-564a-8e9b-e66f6ce0b098" ``` 2026-10-03 NK-WP-0045 recovery follow-up: inspect actual backup consumer delivery @@ -331,8 +335,10 @@ establishes runtime authority. ```task id: ACTIVITY-WP-0042-T08 status: wait +depends_on: [RPF-WP-0049-T05] priority: high blocking_reason: "Platform must supply an authenticated replacement-lane/CAS and encrypted history upload/readback receipt; then a reviewed scoped worker bundle/hostPath and env refresh is required." +state_hub_task_id: "020d19be-0576-5052-ad35-14b1d5a48fe1" ``` The reviewed-folder inspection for NK-WP-0045 found the current token and @@ -371,3 +377,12 @@ immutable bundle common and both mounted Forgejo/CNPG libraries differ. No secret object read, provider probe or live mutation performed. Three injected inspection checks passed: current/stale source, delivery versus credential proof, and wrong-cluster refusal. `git diff --check` passed. + +Producer handoff receipt fields agreed with platform owner: require +`published_lane_kv_version`, `coordinates_only_updated`, +`escrow_and_unrelated_fields_preserved`, and +`provider_roundtrip_verified_before_cas`. The repair packet initially expects +CAS from lane version 3 to 4; accept only the actual verified publication +receipt, not that forecast. `runtime_consumers_refreshed: false` correctly +leaves this T08 pending. Shared header source is `50da37c`; no broader backup +readiness follows from initial root-history provider proof.