coulomb/audit-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Close T05: live matrix 12 pass / 0 fail / 3 skip
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
In-pod remote run. S08 needed UPDATE on secret_findings; granted and
recorded as migration 0005. Disruption scenarios remain operator-owned.
This commit is contained in:
tegwick 2026-08-13 12:40:05 +02:00
parent 1e56b31450
commit 024993f18a
2 changed files with 23 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

15
audit_core/postgres_backend.py
View file

@ -119,6 +119,21 @@ MIGRATIONS: list[tuple[str, str]] = [
); );
""", """,
), ),
(
"0005-runtime-grants",
"""
DO $grant$
BEGIN
IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'audit_core_app') THEN
EXECUTE 'GRANT SELECT, INSERT ON {schema}.events TO audit_core_app';
EXECUTE 'GRANT SELECT, INSERT ON {schema}.dead_letters TO audit_core_app';
EXECUTE 'GRANT SELECT, INSERT, UPDATE ON {schema}.secret_findings TO audit_core_app';
EXECUTE 'GRANT USAGE, SELECT ON ALL SEQUENCES IN SCHEMA {schema} TO audit_core_app';
END IF;
END
$grant$;
""",
),
] ]
# Rejection reasons whose payload must never be persisted — storing the body of # Rejection reasons whose payload must never be persisted — storing the body of

16
workplans/AUDIT-WP-0005-postgres-store-and-production-deployment.md
View file

@ -401,7 +401,7 @@ empty-source case that is today's actual situation.
```task ```task
id: AUDIT-WP-0005-T05 id: AUDIT-WP-0005-T05
status: progress status: done
priority: high priority: high
state_hub_task_id: "1da30fec-b9f1-4be0-b42c-15797a8c4392" state_hub_task_id: "1da30fec-b9f1-4be0-b42c-15797a8c4392"
``` ```
@ -457,13 +457,13 @@ against an unreachable receiver (it does not pass silently), and the emitted
evidence JSON contains no tokens, credentials, or event payloads, so a run evidence JSON contains no tokens, credentials, or event payloads, so a run
against the deployed receiver can go to NK-WP-0024 as-is. against the deployed receiver can go to NK-WP-0024 as-is.
Remote run 2026-08-13 (`evidence/failure-matrix-20260813T103540Z.json`, Closeout 2026-08-13: re-ran inside the receiver pod
`MODE=remote DISRUPT=0`): **7 passed, 5 failed, 3 skipped**. S01–S07 passed (`evidence/failure-matrix-20260813T103908Z.json`). **12 passed, 0 failed,
on the live receiver (accept, duplicate, conflict, cross-tenant 400, dead 3 skipped.** S01–S12 green on the live OpenBao-leased store. S13 skipped
letter, 401, redaction). S08–S12 failed with `status=0` (port-forward (remote has no direct DB). S14–S15 skipped (`DISRUPT=0` — not this
dropped mid-run), not a contract mismatch. S13–S15 skipped (`DISRUPT=0`, script's call to restart production Postgres). S08 first failed because
replay needs DB). Re-run through a stable operator path before handing `secret_findings` upsert needs UPDATE; granted to `audit_core_app` and
NK-WP-0024; do not treat this JSON as closeout. locked in migration 0005. That JSON is the NK-WP-0024 hand-back.
## T06 - Operational handover ## T06 - Operational handover