coulomb-social/docs/release/content-acceptance-review-2026-10-31.md

Combined content release for WP-0013

Deployed and independently verified at Helm revision20, completed 2026-10-31T20:22:30Z. The command below is historical: do not rerun it. All93business rows/86files are unchanged;40owner views/40outsider denials pass. See content-acceptance-independent-postflight-2026-10-31.json.

The candidate adds the requested attachment action menu, including author uploads and removal, authenticated downloads, and independent attachments on copies and moves. It also restores ordered-list starting numbers and fixes interrupted copy/move asset recovery. Removal detaches the current association; earlier revisions retain the file. Existing body links and visuals remain editable in the page editor. The upload limit is16 MiB per file and100 associations per page.

Source: 1139a6d30eee4f75317b46bd45120a15d818455f on csoc-wp0013-content-release. Immutable image: sha256:7906f461bc8d2d5204fd4fde67a251850f725b914452a66172919d6853672ed5. The working repository passes670tests; the isolated release branch passes568; the actual image passes110focused checks without application-source overlays. Every packaged source file matches that commit. Runtime dependencies/Python and database migrations are unchanged. Historical release packets remain unchanged.

Both the candidate and previous image render40owner pages and deny40outsiders on the retained independently restored07:13point. The packaged client export verifies 85files while all13SQL tables/86source files remain unchanged. The temporary recovery database was returned to its previously stopped state. This retained point has92business rows; current production has93. Session/login-only drift was previously reviewed and its fingerprints are unchanged. Execution creates and reads back a fresh paired backup before Helm; independent recovery of that new point is now verified: all13tables/115rows and86files restore exactly; the deployed and previous packages pass40owner/40outsider checks, and client export verifies85files without altering source data. See content-acceptance-fresh- {recovery,client-export}-2026-10-31.json.

The route and inactive installation prerequisites are independently verified. Full recurring backup/service acceptance remains WP-0012. This proposal does not activate timers, purge retained data, restore production data or send email.

Exact attended action

Plan: /home/worsch/railiance-apps/release/coulomb-content-acceptance-1139a6d.json. Proposal: sha256:e96752ecfa7adef2fd1d9da48902c8e63de124ccfd272fe20ba79b758b3ca4a3. Baseline: revision19/image522bcd7f,93business rows/86files. The controller checks complete data/spec fingerprints, creates the paired recovery point, performs the atomic image-only Helm upgrade, verifies live views/data and refreshes the snapshot image pin. Rollback restores the prior image/pin while preserving writes. An older image retains the new attachment metadata/files but lacks the new menu.

Full native preflight reports live_release_preflight_verified at this exact digest (receipt: content-acceptance-preflight-2026-10-31.json). Resolved approval decision: d9b70cc5-e035-40ae-8d0d-020190581202. Executed command:

python3 /home/worsch/railiance-apps/tools/coulomb-image-release.py \
  --plan /home/worsch/railiance-apps/release/coulomb-content-acceptance-1139a6d.json \
  --execute \
  --expect-digest sha256:e96752ecfa7adef2fd1d9da48902c8e63de124ccfd272fe20ba79b758b3ca4a3

At its prompt:

DEPLOY sha256:e96752ecfa7adef2fd1d9da48902c8e63de124ccfd272fe20ba79b758b3ca4a3

Founder-terminal execution is required by the source-bound launcher and the standing supervised execution contract in the-custodian/docs/agent-autonomy-decision.md: “The supervisor approves that proposal or performs it through the privileged execution path.” Bernd separately approved and executed this proposal; the execution gate is satisfied.

The action pauses writes during backup capture and the Recreate rollout. It adds one encrypted primary backup object and temporary scratch within the admitted capacity limits; provider cost is unpriced and no autopilot budget is claimed. Check the durable receipt before any retry. Required final status: image_candidate_deployed_verified. Receipt path: /var/lib/coulomb-social-backup/releases/e96752ecfa7adef2fd1d9da48902c8e63de124ccfd272fe20ba79b758b3ca4a3/receipt.json.

Productive review after verified deployment

Use the prepared UC-003–006 steps in productive-content-acceptance-session.md. On a disposable page, open Attachments, add a file, download it as an authorized reader, duplicate/move the page, and remove the copied association. Verify that the original remains independent and revoked/outsider access is denied. Record attachment, authoring, copy/move, sharing and portability verdicts separately.

The three custom-topic rendering cases are accepted for now under decision 69ec9380. The two downloadable attachments are recovered. Bernd explicitly omitted the four reviewed scrap cases as obsolete legacy data under resolved decision6db14274. Other source-body/graph exceptions remain with source reconciliation. No productive acceptance or WP-0013 completion is inferred from these tests.