From 9fb167871b884b18815e6f7bb106d980510aca5c Mon Sep 17 00:00:00 2001 From: tegwick Date: Tue, 3 Nov 2026 21:52:58 +0100 Subject: [PATCH] AUDIT-WP-0013-T07 done: T06 receiver released to railiance01 Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 482098@bnt-lap001 Assistant-Session: 9643c95a-a398-4f4a-b56a-6119be4e845e --- WORK-RECORDS.md | 2 +- ...AUDIT-WP-0013-cross-repo-sender-admission.md | 17 +++++++++++++---- 2 files changed, 14 insertions(+), 5 deletions(-) diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index 2a8b2b8..89be23f 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -99,7 +99,7 @@ | task | AUDIT-WP-0013-T04 | done | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md | | task | AUDIT-WP-0013-T05 | done | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md | | task | AUDIT-WP-0013-T06 | done | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md | -| task | AUDIT-WP-0013-T07 | wait | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md | +| task | AUDIT-WP-0013-T07 | done | — | workplans/AUDIT-WP-0013-cross-repo-sender-admission.md | | task | AUDIT-WP-0014-T01 | done | — | workplans/AUDIT-WP-0014-execution-attribution-receipt.md | | task | AUDIT-WP-0014-T02 | wait | — | workplans/AUDIT-WP-0014-execution-attribution-receipt.md | | task | AUDIT-WP-0015-T01 | wait | — | workplans/AUDIT-WP-0015-independent-evidence-returns.md | diff --git a/workplans/AUDIT-WP-0013-cross-repo-sender-admission.md b/workplans/AUDIT-WP-0013-cross-repo-sender-admission.md index 627c657..78cc5bb 100644 --- a/workplans/AUDIT-WP-0013-cross-repo-sender-admission.md +++ b/workplans/AUDIT-WP-0013-cross-repo-sender-admission.md @@ -8,7 +8,7 @@ status: blocked owner: codex topic_slug: audit-evidence-dependencies created: "2026-10-04" -updated: "2026-10-28" +updated: "2026-11-03" state_hub_workstream_id: "9e400de2-6ba1-520e-9b25-94aa2470e528" --- @@ -190,10 +190,8 @@ tests/test_independent_reconciliation.py (7). Runbook and section-4 docs updated ```task id: AUDIT-WP-0013-T07 -status: wait +status: done priority: high -blocking_reason: "Founder-run: build/publish an image from the T06 commit, pin its digest in deploy/audit-core.yaml, roll out, then NetKingdom reruns its readback." -blocked_on: founder state_hub_task_id: "4e3f0a93-9f3c-5f5d-a049-c05a8a213150" ``` @@ -203,3 +201,14 @@ returns 200 only for a full-scope reader (403 `full_tenant_scope_required` otherwise, which would need a registry scope change instead). The deployed b479801b receiver predates T06 and will keep returning `source_not_allowed` until the new image runs. + +**Released 2026-11-03.** Image +`forgejo.coulomb.social/coulomb/audit-core@sha256:304cfb83daa873e5790a2f262f6c4ccd56498b6e9e1a390368dcf0d407256300`, +built from 8185893 (T06 plus the AUDIT-WP-0018-T02 reject-only secret_policy +overlay), pinned in b365525. Pre-release: full suite on both backends 373 +passed (one unrelated live-catalog environment failure); no image +vulnerability scan was run (no scanner on the workstation). Founder applied +`deploy/audit-core.yaml` to railiance01: server dry-run clean, rollout +completed, live Deployment image reads back the pinned digest. No migration +Job rerun (ledger stays at 0007). NetKingdom's NK-WP-0035-T04 readback rerun +is theirs and is requested by State Hub message; it does not hold this task.