AUDIT-WP-0013-T07 done: T06 receiver released to railiance01
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 2s

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 482098@bnt-lap001
Assistant-Session: 9643c95a-a398-4f4a-b56a-6119be4e845e
This commit is contained in:
tegwick 2026-11-03 21:52:58 +01:00
parent b36552545d
commit 9fb167871b
2 changed files with 14 additions and 5 deletions

View file

@ -99,7 +99,7 @@
| task | AUDIT-WP-0013-T04 | done | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md |
| task | AUDIT-WP-0013-T05 | done | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md |
| task | AUDIT-WP-0013-T06 | done | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md |
| task | AUDIT-WP-0013-T07 | wait | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md |
| task | AUDIT-WP-0013-T07 | done | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md |
| task | AUDIT-WP-0014-T01 | done | — | workplans/AUDIT-WP-0014-execution-attribution-receipt.md |
| task | AUDIT-WP-0014-T02 | wait | — | workplans/AUDIT-WP-0014-execution-attribution-receipt.md |
| task | AUDIT-WP-0015-T01 | wait | — | workplans/AUDIT-WP-0015-independent-evidence-returns.md |

View file

@ -8,7 +8,7 @@ status: blocked
owner: codex
topic_slug: audit-evidence-dependencies
created: "2026-10-04"
updated: "2026-10-28"
updated: "2026-11-03"
state_hub_workstream_id: "9e400de2-6ba1-520e-9b25-94aa2470e528"
---
@ -190,10 +190,8 @@ tests/test_independent_reconciliation.py (7). Runbook and section-4 docs updated
```task
id: AUDIT-WP-0013-T07
status: wait
status: done
priority: high
blocking_reason: "Founder-run: build/publish an image from the T06 commit, pin its digest in deploy/audit-core.yaml, roll out, then NetKingdom reruns its readback."
blocked_on: founder
state_hub_task_id: "4e3f0a93-9f3c-5f5d-a049-c05a8a213150"
```
@ -203,3 +201,14 @@ returns 200 only for a full-scope reader (403 `full_tenant_scope_required`
otherwise, which would need a registry scope change instead). The deployed
b479801b receiver predates T06 and will keep returning `source_not_allowed`
until the new image runs.
**Released 2026-11-03.** Image
`forgejo.coulomb.social/coulomb/audit-core@sha256:304cfb83daa873e5790a2f262f6c4ccd56498b6e9e1a390368dcf0d407256300`,
built from 8185893 (T06 plus the AUDIT-WP-0018-T02 reject-only secret_policy
overlay), pinned in b365525. Pre-release: full suite on both backends 373
passed (one unrelated live-catalog environment failure); no image
vulnerability scan was run (no scanner on the workstation). Founder applied
`deploy/audit-core.yaml` to railiance01: server dry-run clean, rollout
completed, live Deployment image reads back the pinned digest. No migration
Job rerun (ledger stays at 0007). NetKingdom's NK-WP-0035-T04 readback rerun
is theirs and is requested by State Hub message; it does not hold this task.