docs: close private shadow rehearsal

workplans/CORE-WP-0011-railiance01-production-relocation.md

@@ -8,7 +8,7 @@ status: active
 owner: codex
 topic_slug: infotech
 created: "2026-08-20"
-updated: "2026-08-20"
+updated: "2026-08-21"
 parent_project: prj-state-hub-retirement
 parent_workplan: SHR-WP-0002
 related:
@@ -137,7 +137,7 @@ that this workstation is not the production workplan-UUID registrar.
 
 ```task
 id: CORE-WP-0011-T03
-status: wait
+status: done
 priority: high
 ```
 
@@ -162,6 +162,24 @@ requirements, private smokes, live lease-rotation proof and rehearsal rollback
 are recorded in `docs/deployment/railiance01-shadow-runbook.md` so work can
 resume immediately after platform admission.
 
+Completed 2026-08-21. `RPF-WP-0021` admitted Core Hub as the fourth and final
+`platform-pg` consumer, established separate static API-token and dynamic
+runtime/migration database lanes, and restored a consistent 39-row source
+archive. The source `public` tables were explicitly reconciled into the
+accepted target `core_hub` schema; all eight tables, Alembic revision
+`20260627_0002`, ownership and runtime grants matched before shadow smoke
+activity. The migration Job completed, Helm revision 2 deployed package chart
+`0.3.1` at `rapp-core-hub` commit `7cfa8bb`, and no Ingress exists.
+
+The hardened private verifier and authenticated smoke
+`20260820224419-43dc05` passed all ten checks. A fresh runtime lease then
+changed the projected Secret and application child PID while the pod UID and
+container restart count remained stable; readiness returned without exposing
+a credential. The shadow now contains the expected smoke-created rows, while
+the public endpoint and source writer remain on CoulombCore. Repo-local
+evidence is in
+`docs/evidence/core-hub-railiance01-private-shadow-2026-08-21.md`.
+
 ## Cut over production traffic
 
 ```task
@@ -197,7 +215,7 @@ this repo unless the separate absorption workplan has also completed.
 
 - [x] Decommission deadline and live source/target inventory are recorded
 - [x] Governed rapp package renders and passes policy checks
-- [ ] Shadow restore/reconciliation and consumer smokes pass on railiance01
+- [x] Shadow restore/reconciliation and consumer smokes pass on railiance01
 - [ ] Production traffic and tunnel move with explicit approval and rollback
 - [ ] Stabilization passes and CoulombCore no longer hosts Core Hub dependencies
 - [ ] `CORE-WP-0010` remains independently sequenced behind `HUB-WP-0004`