coulomb/audit-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Implement AUDIT-WP-0006 honest operational custody.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Postgres now reports custody_class=operational with a cited 30-day
recoverable window. Join ITC-CAP operations.audit at D4, publish the
interface card, and overlay user-engine tenants [*] from Git so an
ExternalSecret refresh cannot shrink it.
This commit is contained in:
tegwick 2026-08-16 00:24:33 +02:00
parent 0a3d05ff1c
commit ded432a63f
25 changed files with 832 additions and 94 deletions
Download patch file Download diff file Expand all files Collapse all files

7
docs/evidence/restore-walk-20260813T121200Z.json
View file

@ -27,10 +27,11 @@
"platform_logical_seconds": 3.468,
"retention": {
"audit_core_retention_days": null,
"audit_core_meaning": "does not expire or delete events",
"audit_core_meaning": "does not expire or delete events; lifecycle statement, not a recovery guarantee",
"platform_planned_window_days": 30,
"production_barman": "fail-closed; no off-host copy yet",
"recovery_bound": "platform backup retention, not audit-core deletion"
"production_barman": "superseded 2026-08-14 by RESOURCE-WP-0002-T05: live Scaleway Barman, 30-day window, audit_core.events 30=30, full 65s / PITR 65s",
"recovery_bound": "platform data.backup window (resource:platform:audit-storage), not audit-core deletion",
"provision_honesty": "requirement D5, provision D4; cited, not re-scored here"
},
"verified": true
}