coulomb/activity-core
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: coulomb:7cdab8aefe5df06f9f624bceb21fe66944bfb9b1
Branches Tags
coulomb:main
...
compare: coulomb:7e81314171eb31d299432dc4e9c47d7a2709fb6d
Branches Tags
coulomb:main

2 commits
7cdab8aefe ... 7e81314171

Author SHA1 Message Date
tegwick
7e81314171 Remove duplicate backup delivery tasks and retain owner UUIDs
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29
 2026-10-03 21:53:26 +02:00
tegwick
5d387f4f61 Bind backup refresh to verified producer lane receipt 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1029d-2c93-7500-a0e0-e3e089668b29
 2026-10-03 21:50:29 +02:00
2 changed files with 16 additions and 67 deletions
Download patch file Download diff file Expand all files Collapse all files

4
WORK-RECORDS.md
View file

@ -247,6 +247,10 @@
| task | ACTIVITY-WP-0042-T04 | done | — | workplans/ACTIVITY-WP-0042-platform-backup-restore-evidence-scheduling.md |
| task | ACTIVITY-WP-0042-T05 | wait | — | workplans/ACTIVITY-WP-0042-platform-backup-restore-evidence-scheduling.md |
| task | ACTIVITY-WP-0042-T06 | done | — | workplans/ACTIVITY-WP-0042-platform-backup-restore-evidence-scheduling.md |
| task | ACTIVITY-WP-0042-T07 | done | — | workplans/ACTIVITY-WP-0042-platform-backup-restore-evidence-scheduling.md |
| task | ACTIVITY-WP-0042-T07 | done | — | workplans/ACTIVITY-WP-0042-platform-backup-restore-evidence-scheduling.md |
| task | ACTIVITY-WP-0042-T08 | wait | — | workplans/ACTIVITY-WP-0042-platform-backup-restore-evidence-scheduling.md |
| task | ACTIVITY-WP-0042-T08 | wait | — | workplans/ACTIVITY-WP-0042-platform-backup-restore-evidence-scheduling.md |
| task | ACTIVITY-WP-ADHOC-2026-06-01-T01 | done | — | workplans/ADHOC-2026-06-01.md |
| task | ACTIVITY-WP-ADHOC-2026-06-01-T02 | done | — | workplans/ADHOC-2026-06-01.md |
| task | ACTIVITY-WP-ADHOC-2026-06-01-T03 | done | — | workplans/ADHOC-2026-06-01.md |

79
workplans/ACTIVITY-WP-0042-platform-backup-restore-evidence-scheduling.md
View file

@ -236,6 +236,7 @@ this review does not claim it was rolled out to production.
id: ACTIVITY-WP-0042-T07
status: done
priority: high
state_hub_task_id: "436ed744-ae7a-564a-8e9b-e66f6ce0b098"
```
2026-10-03 NK-WP-0045 recovery follow-up: inspect actual backup consumer delivery
@ -264,75 +265,10 @@ establishes runtime authority.
```task
id: ACTIVITY-WP-0042-T08
status: wait
depends_on: [RPF-WP-0049-T05]
priority: high
blocking_reason: "Platform must supply an authenticated replacement-lane/CAS and encrypted history upload/readback receipt; then a reviewed scoped worker bundle/hostPath and env refresh is required."
```
The reviewed-folder inspection for NK-WP-0045 found the current token and
expected labelled share absent; upload and authenticated route probes return
401. Lane KV v3 being synced does not resolve this provider mismatch.
Owner handoff: railiance-platform must first publish its non-secret receipt
identifying the replacement lane KV version, exact two updated field names
(`NC_WEBDAV_TOKEN`, `NC_WEBDAV_URL`), preserved AGE recipient, owner-reviewed
share binding, and encrypted retained-history upload/readback proof. No token
or URL goes into this repo or receipts. Root custody recovery can finish
independently of this larger recurring backup consumer acceptance.
Prepare the bounded worker change only after that owner receipt: refresh ESO
and verify status/resource metadata; replace the Forgejo immutable bundle
using the platform-owned reviewed bundle builder; synchronize the CNPG hostPath
source separately through repo-manager; reconcile the new bundle reference in
`k8s/gitops/runtime.yaml` before ArgoCD synchronization. Preserve unrelated
live mounts/environment. Do not use the old direct deployment patch helper
against this adopted ArgoCD application. Perform one reviewed worker rollout
to refresh envFrom only after source and ESO prerequisites; compare new pod
start to ESO refresh and run this inspector again. Secret object bodies are
never diagnostic output.
Require safe non-secret post-rollout source digests and readiness plus an
owner-approved existing bounded backup run/provider receipt before claiming
activity delivery acceptance. No automatic scheduled backup invocation, new
operation admission, restore capability or customer recovery readiness is
claimed. T02/T03/T05 keep their separate existing dependencies.
## Inspect downstream shared backup-lane delivery
```task
id: ACTIVITY-WP-0042-T07
status: done
priority: high
```
2026-10-03 NK-WP-0045 recovery follow-up: inspect actual backup consumer delivery
without reading Secret objects. `scripts/inspect_backup_delivery.py` checks the
railiance01 node, ESO readiness/refresh metadata, fixed source/library digests
and mounted Forgejo/CNPG library digests. Captures and discards raw command
failures; receipts contain only safe metadata, digests and booleans.
Forgejo uses immutable ConfigMap `backup-verified-0220ca56520c`; CNPG uses the
railiance01 `/home/tegwick/railiance-platform` hostPath. They are separate source
delivery paths. ExternalSecret `actcore-backup-offsite` refreshes each hour into
`actcore-runtime-secret` with Merge/Retain; worker envFrom credentials remain
in existing processes after a Secret refresh. Ready/SecretSynced is delivery
health, not valid provider credentials or backup proof. Platform common source
`50da37cf50016b03a7e6a537e87772a72979aba1` now includes public DAV
`X-Requested-With: XMLHttpRequest`; vendored/mounted versions need verification.
Knowledge orientation: package 0.2.4 digest
`025aab4f38246219c924bc94954e70ea0e6e7f72bcaf8d4344cd599602d345c3`,
start withheld because informed-decision source changed; reviewed that README
and current custodian environment orientation directly. No orientation claim
establishes runtime authority.
## Refresh the existing backup consumer after the owner repairs the lane
```task
id: ACTIVITY-WP-0042-T08
status: wait
priority: high
blocking_reason: "Platform must supply an authenticated replacement-lane/CAS and encrypted history upload/readback receipt; then a reviewed scoped worker bundle/hostPath and env refresh is required."
state_hub_task_id: "020d19be-0576-5052-ad35-14b1d5a48fe1"
```
The reviewed-folder inspection for NK-WP-0045 found the current token and
@ -371,3 +307,12 @@ immutable bundle common and both mounted Forgejo/CNPG libraries differ. No
secret object read, provider probe or live mutation performed. Three injected
inspection checks passed: current/stale source, delivery versus credential
proof, and wrong-cluster refusal. `git diff --check` passed.
Producer handoff receipt fields agreed with platform owner: require
`published_lane_kv_version`, `coordinates_only_updated`,
`escrow_and_unrelated_fields_preserved`, and
`provider_roundtrip_verified_before_cas`. The repair packet initially expects
CAS from lane version 3 to 4; accept only the actual verified publication
receipt, not that forecast. `runtime_consumers_refreshed: false` correctly
leaves this T08 pending. Shared header source is `50da37c`; no broader backup
readiness follows from initial root-history provider proof.