From 3ea5a63d8c00c384be43c42a9bba3569889d8301 Mon Sep 17 00:00:00 2001 From: tegwick Date: Fri, 23 Oct 2026 15:49:51 +0200 Subject: [PATCH] Declare the live release units for this owner. The claims name the workloads covered by RELREG-WP-0004. Each pin is a digest the live object already shows. Assistant: grok Assistant-Session: 01a16880-25e0-7031-b553-a1e0321ff397 --- registry/release-units/audit-core.yaml | 57 ++++++++++++++++++++++++++ 1 file changed, 57 insertions(+) create mode 100644 registry/release-units/audit-core.yaml diff --git a/registry/release-units/audit-core.yaml b/registry/release-units/audit-core.yaml new file mode 100644 index 0000000..f242965 --- /dev/null +++ b/registry/release-units/audit-core.yaml @@ -0,0 +1,57 @@ +# No owner classification file. Recorded confidential/high for this wave. +kind: release-unit +unit_id: audit-core +owner: audit-core +contract_version: 1.0.0 +data_classification: confidential +criticality: high +composition: + purpose: Covers the live audit-core workloads as one release unit. + member_repos: + - repo: audit-core + role: rollout owner + deployables: + - audit-core + - audit-core-attest-chain +rollout_contract: + default_mode: owner-deploy +smoke_contract: + required: + - workload-ready +rollback_contract: + order: + - owner-rollback +workloads: +- kind: Deployment + namespace: audit-core + name: audit-core +- kind: CronJob + namespace: audit-core + name: audit-core-attest-chain +pins: + component: + name: ocm.railiance.dev/audit-core + version: live + resources: + - name: audit-core + type: ociImage + version: live + digest: + hashAlgorithm: SHA-256 + normalisationAlgorithm: ociArtifactDigest/v1 + value: sha256:b479801b0bc76df66a36a85376c45aaf399c6d82feade9ba81430b774c4a8271 + - name: audit-core-2 + type: ociImage + version: live + digest: + hashAlgorithm: SHA-256 + normalisationAlgorithm: ociArtifactDigest/v1 + value: sha256:ec15f63d49226bfe507af2bc38ffbd5e83f549ba2c6d1ae7a338e7e053f34615 + sources: + - name: audit-core + type: git + version: live + digest: + hashAlgorithm: SHA-1 + normalisationAlgorithm: gitCommit/v1 + value: 5237d3400c649e47865ccad856bb5dabe1b1c8e3