Publish backup-daily workload declaration for atm-backup-daily (ACTIVITY-WP-0042-T03)
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 2s

The founder confirmed on 2026-10-08, relayed by ops-warden, that the
daily-cnpg-option-a-backup worker is the atm-backup-daily unit. Declare
workload identity backup-daily with membership z2-protected
(confidential/high, M1, below floor: an honest gap). ops-warden consumes
it under WARDEN-WP-0040-T02.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 344895@bnt-lap001
Assistant-Session: 0e75091f-d556-49a1-a38a-0595555f2870
This commit is contained in:
tegwick 2026-10-09 00:01:51 +02:00
parent 0fdca96872
commit c1533fe30b
2 changed files with 138 additions and 4 deletions

View file

@ -100,10 +100,9 @@ acceptance and live proof remain incomplete; T02 is not done.
```task
id: ACTIVITY-WP-0042-T03
status: wait
needs_human: true
decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e
blocking_reason: "Founder must confirm whether activity-core's backup worker is the atm-backup-daily unit before declaring to ops-warden."
status: done
needs_human: false
blocking_reason: null
priority: low
state_hub_task_id: "e1c313dc-9a94-5b7c-b406-604b700bf3eb"
```
@ -117,6 +116,18 @@ otherwise the declaring owner is whoever holds the actor's issuance
2026-10-03: human gate routed to hub decision 89f1058f-33bc-47a8-8a49-0b44d426c67e (D2: ArgoCD owns production: go-ahead sequence for railiance-apps-root, issue-core, policy-nexus and activity-core automation) by CUST-WP-0075; resolving that decision raises C-40 here.
2026-10-09: done. The founder confirmed on 2026-10-08, in an ops-warden session
(hub msg 49292aca), that the `daily-cnpg-option-a-backup` worker is the
`atm-backup-daily` unit. Classification: ordinary, not z2-continuity. The
confirmation covers T03 only and does not resolve D2 (89f1058f). The decision
link is removed here because D2 still gates other tasks. Published
`declarations/backup-daily/tenancy.yaml` (workload `backup-daily`; bindings
ssh-cert `atm-backup-daily` and SA `activity-core:default`). The founder chose
membership `z2-protected` with context confidential/high/M1, so admission is
expected to resolve below-floor (effective `unknown`) until M2 evidence exists.
This is a recorded gap, not a claim of admission. Validated with the
net-kingdom tenancy-posture validator. ops-warden compiles it under
WARDEN-WP-0040-T02.
## Prepare the concrete scheduling and runner proposal