coulomb/activity-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record healthy GitOps digest release and remaining automation gates
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e241-8285-7a63-8c0c-51c9cb824dc3
This commit is contained in:
tegwick 2026-09-27 15:49:14 +02:00
parent 12e08878d1
commit c3e449b312
3 changed files with 210 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

29
workplans/ACTIVITY-WP-0041-gitops-adoption.md
View file

@ -22,7 +22,7 @@ e5dd02cb-b5b2-45c8-a600-748ea2ffd31b and does not change estate policy.
```task
id: ACTIVITY-WP-0041-T01
status: progress
status: done
priority: high
state_hub_task_id: "fadce2e0-67c8-5dab-98cc-3a08d466a39f"
```
@ -67,7 +67,7 @@ one-time governance decision.
```task
id: ACTIVITY-WP-0041-T03
status: wait
status: progress
priority: high
state_hub_task_id: "8e2b4ed9-d455-5367-85d9-8e4222ce75f3"
```
@ -109,3 +109,28 @@ inputs. Local container tests passed. Registry publication/readback must still b
observed. The image-only promotion validator has negative fixtures for widened
authority, stale/missing evidence, non-digest references and incomplete soak.
It is not a credential issuer or proof of an admitted unattended executor.
## Verified delivery — 2026-09-27
T01 complete: commit 12e08878d19e61ce41c534cc10ca56acd0c3efc1 passed CI
smoke and image publication (runs 307/308). Nine-resource projection and pinned
frontend definitions are checked before publication. All three live components
now pull immutable registry digests of their exact prior binaries. Registry
readback, node pulls, all three rollouts and a Temporal scheduled report passed.
Baseline registry tags are protected in the additive live-image retention union.
T02 adoption complete, observation outstanding: metadata-only initial sync at
12:07:35Z; digest release through root/child ArgoCD succeeded at 13:37:56Z.
Healthy transition at 13:38:21Z starts the conservative 24-hour window; earliest
eligibility is 2026-09-28 15:38:21 Europe/Berlin, conditional on healthy evidence.
Automated sync and pruning remain off. RPF-WP-0048 owns observation/admission;
its T03 owns general digest-aware registry retention, with current tags protected.
T03 has a tested image-only admission validator and one successful Git/ArgoCD
release. Authenticated receipt verification, narrowly bound unattended identity,
and failed-health automatic rollback remain required. Producer JSON flags do not
provide authority. No executor credential has been invented or broad operator
authority delegated. Existing GLAS/HFACT pattern-editing readiness is unchanged.
Evidence: docs/evidence/2026-09-27-gitops-adoption.json. Activation authorization
is State Hub decision 78a4b859-dd00-4623-b95b-121b0e1c915d.