audit-core

Author	SHA1	Message	Date
tegwick	cf8c740b1b	Switch receiver rollout to Recreate and pin bounded-readyz image All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details RollingUpdate maxSurge cannot schedule a second 50m pod on a node packed to 99% CPU requests. Recreate replaces in place; the Service already has no ready endpoints. Image sha256:ec15f63d… is commit `bc3d80f`. Local release check passed against disposable Postgres. No schema migration. Live Ready still depends on a fresh runtime lease from ESO/OpenBao. Assistant: grok Assistant-Session: 01a0a182-bab7-7f11-b32b-d06f3af52082	2026-09-14 23:01:23 +02:00
tegwick	fa6665f819	deploy(AUDIT-WP-0008): pin sender-expiry image All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a025c2-407a-7a32-b40a-f37a52f03f62	2026-08-22 12:01:08 +02:00
tegwick	61214bc24a	Close AUDIT-WP-0007 after live chain attestation. All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Migration 0006 applied on railiance01. Verify-against the dated chain-head evidence is intact for 30 events.	2026-08-16 01:23:54 +02:00
tegwick	5d46723d4e	Cut over AUDIT-WP-0006 image and add AUDIT-WP-0007. All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 0s Details Live receiver now reports custody_class=operational with a cited 30-day recoverable window (sha256:05fe1c06). Next workplan is integrity verification so tamper_evidence can become honest.	2026-08-16 00:57:59 +02:00
tegwick	ded432a63f	Implement AUDIT-WP-0006 honest operational custody. All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Postgres now reports custody_class=operational with a cited 30-day recoverable window. Join ITC-CAP operations.audit at D4, publish the interface card, and overlay user-engine tenants [*] from Git so an ExternalSecret refresh cannot shrink it.	2026-08-16 00:24:33 +02:00
tegwick	3119ee33d6	Pin audit-core image digest 41493cd5 for railiance01 All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details Published from commit `3a7d63e` to forgejo.coulomb.social/coulomb/audit-core. Deployment still waits on T02 ESO secrets.	2026-08-13 00:59:51 +02:00
tegwick	3a7d63e18f	Prepare railiance01 delivery: dynamic leases, migrate Job, operator runbook All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 1s Details VaultDynamicSecret pulls database/creds/* so a rotating lease is not frozen into KV. Runtime sets AUDIT_CORE_AUTO_MIGRATE=0; schema is a Job with the migration lease. Image base is digest-pinned. Namespace and NetworkPolicies are on the cluster; Deployment waits for the attended OpenBao ESO token.	2026-08-13 00:58:49 +02:00

7 commits