From 06d0029f1e2285f6c836c285559fad3687e48c40 Mon Sep 17 00:00:00 2001 From: tegwick Date: Tue, 3 Nov 2026 22:08:52 +0100 Subject: [PATCH] AUDIT-WP-0018-T03: record railiance01 release of sha256:5f3d01c8 and scope ConfigMap Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 482098@bnt-lap001 Assistant-Session: 9643c95a-a398-4f4a-b56a-6119be4e845e --- docs/bounded-executor-receipts.md | 6 ++++-- workplans/AUDIT-WP-0018-bounded-executor-receipt-custody.md | 6 +++++- 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/docs/bounded-executor-receipts.md b/docs/bounded-executor-receipts.md index 236babb..f5a390d 100644 --- a/docs/bounded-executor-receipts.md +++ b/docs/bounded-executor-receipts.md @@ -225,5 +225,7 @@ on the declared ceiling. The executor's emitter now accepts 202 (accepted) and 200 (duplicate) (`clients.AuditCore.emit`), which closes the defect recorded on 2026-10-31. -The new detection runs once the ConfigMap is applied with a receiver image -built from this commit or later. Image `sha256:304cfb83` predates it. +Released 2026-11-03: receiver `sha256:5f3d01c8…` (built from 2b8c909) and +the scope ConfigMap carrying `closing_classes` are live on railiance01. The +detection is inert until the `nk-bounded-executor` token is seeded and the +executor emits. diff --git a/workplans/AUDIT-WP-0018-bounded-executor-receipt-custody.md b/workplans/AUDIT-WP-0018-bounded-executor-receipt-custody.md index af4f651..d86d514 100644 --- a/workplans/AUDIT-WP-0018-bounded-executor-receipt-custody.md +++ b/workplans/AUDIT-WP-0018-bounded-executor-receipt-custody.md @@ -123,7 +123,11 @@ Code: `audit_core/stream_findings.py` (`evaluate_closing`) and `docs/stream-completeness.md`. - **Asked of NetKingdom:** put `window.not_after` in the started body. -- **Founder-run:** release an image from this commit and apply the ConfigMap. +- **Released 2026-11-03:** the founder applied `deploy/senders-scope.yaml` + and `deploy/audit-core.yaml` (image `sha256:5f3d01c8…` from 2b8c909, pinned + in 4fcf7c6) to railiance01. The server dry-run was clean and the rollout + completed. The finding stays inert until `nk-bounded-executor` has a seeded + token and emits. ## Founder decision 2026-10-31