Implement AUDIT-WP-0006 honest operational custody.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s

Postgres now reports custody_class=operational with a cited 30-day
recoverable window. Join ITC-CAP operations.audit at D4, publish the
interface card, and overlay user-engine tenants [*] from Git so an
ExternalSecret refresh cannot shrink it.
This commit is contained in:
tegwick 2026-08-16 00:24:33 +02:00
parent 0a3d05ff1c
commit ded432a63f
25 changed files with 832 additions and 94 deletions

View file

@ -184,7 +184,7 @@ def start_stack() -> subprocess.Popen:
"AUDIT_CORE_SENDERS": senders,
"AUDIT_CORE_HOST": "127.0.0.1",
"AUDIT_CORE_HTTP_PORT": str(APP_PORT),
"AUDIT_CORE_REQUIRE_CUSTODY_CLASS": "archive",
"AUDIT_CORE_REQUIRE_CUSTODY_CLASS": "operational",
"AUDIT_CORE_DB_STATEMENT_TIMEOUT_MS": "5000",
"AUDIT_CORE_LOG_LEVEL": "WARNING",
}
@ -391,7 +391,7 @@ def start_app_process() -> subprocess.Popen:
"AUDIT_CORE_SENDERS": senders,
"AUDIT_CORE_HOST": "127.0.0.1",
"AUDIT_CORE_HTTP_PORT": str(APP_PORT),
"AUDIT_CORE_REQUIRE_CUSTODY_CLASS": "archive",
"AUDIT_CORE_REQUIRE_CUSTODY_CLASS": "operational",
"AUDIT_CORE_DB_STATEMENT_TIMEOUT_MS": "5000",
"AUDIT_CORE_LOG_LEVEL": "WARNING",
}