Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a119cf-56d0-7fa3-840b-eb8732e1db0b
2.4 KiB
| id | type | title | domain | repo | status | owner | topic_slug | created | updated | origin | origin_ref | state_hub_workstream_id |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| CSOC-WP-0012 | workplan | Durable app recovery and service readiness | communication | coulomb-social | ready | codex | coulomb-social | 2026-10-08 | 2026-10-08 | residual | CSOC-WP-0008 | 0cd1f513-f26e-5707-b646-8b4bbe6369fc |
Residual acceptance from CSOC-WP-0008, split at the user's request. Existing implementation/release/acceptance evidence remains in the originating workplan; these tasks own the remaining concrete outputs. Source checks never grant runtime or productive acceptance.
T01 — Admit independent offsite custody and retention
id: CSOC-WP-0012-T01
status: wait
priority: high
state_hub_task_id: "dc470337-585f-517d-b2a5-92e89a7dbec8"
Use existing RPF-WP-0053-T02/T03/T06 credential-pair/prefix/escrow admission. Own the coulomb-social consumer acceptance, not another credential provisioning lane. Record capacity, retained independent retrieval receipts, RPO/RTO and expiry of temporary production-pair copies; no secrets in records.
T02 — Activate and prove the first encrypted paired recovery point
id: CSOC-WP-0012-T02
status: todo
priority: high
state_hub_task_id: "25ae6330-d26f-54ee-a599-2eca3a2e274d"
After admission, run scripts/paired-backup.py consumer, retrieve the exact immutable version independently, decrypt privately and rehearse application recovery with content/hash/membership/denied-read checks. Reconcile post-capture writes before any production restore. Do not call local temporary copies offsite coverage.
T03 — Establish scheduled backup, monitoring and service evidence
id: CSOC-WP-0012-T03
status: todo
priority: high
state_hub_task_id: "ded6fc1d-0819-57c5-9213-e64db76bc6ed"
Enable reviewed backup/freshness units only after the exact first-run return. Verify failed-run/pending retry, stale alert, recovery runbook, observed restore time, cost attribution, SLO and business-app service-contract evidence. Reconcile the existing CSOC-IN-0004 stage-1 live-smoke and deployment receipts with docs/identity/smoke.md before closing that intake. Current revision16 and persistent CONTENT_ROOT are already deployed. Keep apex/Bubble retirement in WP-0014.
Completion
Finish when every task above has its stated evidence and acceptance, or hand off any newly discovered residual to a live work record first. Cross-owner dependencies remain their existing canonical records.