coulomb-social/workplans/CSOC-WP-0012-durable-recovery-service-readiness.md
tegwick 40eefb38c0 Close WP-0008 and WP-0010 after residual handoff
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a119cf-56d0-7fa3-840b-eb8732e1db0b
2026-10-08 15:13:25 +02:00

2.4 KiB

id type title domain repo status owner topic_slug created updated origin origin_ref state_hub_workstream_id
CSOC-WP-0012 workplan Durable app recovery and service readiness communication coulomb-social ready codex coulomb-social 2026-10-08 2026-10-08 residual CSOC-WP-0008 0cd1f513-f26e-5707-b646-8b4bbe6369fc

Residual acceptance from CSOC-WP-0008, split at the user's request. Existing implementation/release/acceptance evidence remains in the originating workplan; these tasks own the remaining concrete outputs. Source checks never grant runtime or productive acceptance.

T01 — Admit independent offsite custody and retention

id: CSOC-WP-0012-T01
status: wait
priority: high
state_hub_task_id: "dc470337-585f-517d-b2a5-92e89a7dbec8"

Use existing RPF-WP-0053-T02/T03/T06 credential-pair/prefix/escrow admission. Own the coulomb-social consumer acceptance, not another credential provisioning lane. Record capacity, retained independent retrieval receipts, RPO/RTO and expiry of temporary production-pair copies; no secrets in records.

T02 — Activate and prove the first encrypted paired recovery point

id: CSOC-WP-0012-T02
status: todo
priority: high
state_hub_task_id: "25ae6330-d26f-54ee-a599-2eca3a2e274d"

After admission, run scripts/paired-backup.py consumer, retrieve the exact immutable version independently, decrypt privately and rehearse application recovery with content/hash/membership/denied-read checks. Reconcile post-capture writes before any production restore. Do not call local temporary copies offsite coverage.

T03 — Establish scheduled backup, monitoring and service evidence

id: CSOC-WP-0012-T03
status: todo
priority: high
state_hub_task_id: "ded6fc1d-0819-57c5-9213-e64db76bc6ed"

Enable reviewed backup/freshness units only after the exact first-run return. Verify failed-run/pending retry, stale alert, recovery runbook, observed restore time, cost attribution, SLO and business-app service-contract evidence. Reconcile the existing CSOC-IN-0004 stage-1 live-smoke and deployment receipts with docs/identity/smoke.md before closing that intake. Current revision16 and persistent CONTENT_ROOT are already deployed. Keep apex/Bubble retirement in WP-0014.

Completion

Finish when every task above has its stated evidence and acceptance, or hand off any newly discovered residual to a live work record first. Cross-owner dependencies remain their existing canonical records.