From 42e8b2040b8ba7b874d0967750e7eed422614a9b Mon Sep 17 00:00:00 2001 From: tegwick Date: Fri, 9 Oct 2026 19:54:31 +0200 Subject: [PATCH] Install backup capacity guard and bind scoped continuation Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a11fd9-caf6-7a63-b578-9daaaa134ff2 --- deploy/backup/runtime-update-2026-10-09.json | 22 +++++++++++++++++++ docs/ledger-backup-review-2026-10-08.md | 11 ++++++++++ .../EMAIL-WP-0007-ledger-backup-recovery.md | 11 ++++++++++ ...IL-WP-0008-scoped-transactional-callers.md | 10 +++++++++ 4 files changed, 54 insertions(+) create mode 100644 deploy/backup/runtime-update-2026-10-09.json diff --git a/deploy/backup/runtime-update-2026-10-09.json b/deploy/backup/runtime-update-2026-10-09.json new file mode 100644 index 0000000..e425527 --- /dev/null +++ b/deploy/backup/runtime-update-2026-10-09.json @@ -0,0 +1,22 @@ +{ + "schema": "email-connect.ledger-runtime-update.v1", + "date": "2026-10-09", + "status": "installed_verified", + "files": { + "backup-ledger.py": "e74c41948ca01dae09578e2abfba14b96fb1f158af0ec91a0fb1aa9ecaf01680", + "rehearse-ledger.py": "d3da88972e44dac3800afb48d21e525dc1476ca58de3e7702f7751aea33eda53" + }, + "receiver_image": "forgejo.coulomb.social/coulomb/email-connect@sha256:eb3e7b68d21209e9eb71b928a5b0bc987e8e3164f21dca4ff712f946d0c103f2", + "receiver_pin_changed": false, + "timers_enabled": false, + "capacity": { + "status": "headroom_verified", + "local_bytes": 148994, + "minimum_free_bytes": 8589934592, + "local_budget_bytes": 8589934592 + }, + "private_credentials_read": false, + "backup_executed": false, + "caller_custody_decision_id": "8edbff8c-f62d-4357-8465-8eb37300f311", + "caller_custody_receipt_present": false +} diff --git a/docs/ledger-backup-review-2026-10-08.md b/docs/ledger-backup-review-2026-10-08.md index 10fafe6..08a8a49 100644 --- a/docs/ledger-backup-review-2026-10-08.md +++ b/docs/ledger-backup-review-2026-10-08.md @@ -236,3 +236,14 @@ chat, argv, evidence, Git or the operations inbox. Full email regression: 193 passed, zero skips; focused syntax checks pass. Timers remain disabled. T03/T04 stay progress until durable independent custody, retention/schedule admission and actual recurring operation are evidenced. + +## Runtime guard installed — 2026-10-09 + +User instructed continuation. Installed the reviewed capacity guard and offline +image-binding rehearsal helper on railiance01 after comparing existing hashes +with the first-run runtime manifest. Readback hashes match the closure contract. +Actual pre-capture capacity check passes: retained local files 148,994 bytes, +8 GiB minimum free space and 8 GiB local budget. No credential read or backup run. +Receiver image/pins remain eb3e7b68 and both timers remain disabled. Receipt: +deploy/backup/runtime-update-2026-10-09.json. Earlier preparation evidence retains +its historical statement that node helpers had not yet changed. diff --git a/workplans/EMAIL-WP-0007-ledger-backup-recovery.md b/workplans/EMAIL-WP-0007-ledger-backup-recovery.md index e44c052..538c899 100644 --- a/workplans/EMAIL-WP-0007-ledger-backup-recovery.md +++ b/workplans/EMAIL-WP-0007-ledger-backup-recovery.md @@ -225,3 +225,14 @@ chat, argv, evidence, Git or the operations inbox. Full email regression: 193 passed, zero skips; focused syntax checks pass. Timers remain disabled. T03/T04 stay progress until durable independent custody, retention/schedule admission and actual recurring operation are evidenced. + +## Runtime guard installed — 2026-10-09 + +User instructed continuation. Installed the reviewed capacity guard and offline +image-binding rehearsal helper on railiance01 after comparing existing hashes +with the first-run runtime manifest. Readback hashes match the closure contract. +Actual pre-capture capacity check passes: retained local files 148,994 bytes, +8 GiB minimum free space and 8 GiB local budget. No credential read or backup run. +Receiver image/pins remain eb3e7b68 and both timers remain disabled. Receipt: +deploy/backup/runtime-update-2026-10-09.json. Earlier preparation evidence retains +its historical statement that node helpers had not yet changed. diff --git a/workplans/EMAIL-WP-0008-scoped-transactional-callers.md b/workplans/EMAIL-WP-0008-scoped-transactional-callers.md index 6d014b3..edede1f 100644 --- a/workplans/EMAIL-WP-0008-scoped-transactional-callers.md +++ b/workplans/EMAIL-WP-0008-scoped-transactional-callers.md @@ -170,3 +170,13 @@ evidence: deploy/closure/evidence-2026-10-09.json. Reviewed plan SHA256: 8e529e2 Attended caller custody, native reader proofs and coordinated scoped activation remain open. T03 stays progress; live receiver and caller mode are unchanged. Execution handoff: docs/caller-policy-draft-2026-10-08.md. + +## Scoped continuation authorized — 2026-10-09 + +User instructed continuation after the activation handoff. Decision +8edbff8c-f62d-4357-8465-8eb37300f311 binds the existing reviewed plan SHA256 +8e529e2ffdb6ee3d53a768d65b2d025b95e788734c48a29f2f8b975825dbaed7. +OpenBao edge is initialized/unsealed. The private receipt directory exists and +the exact silent attended command was supplied to the user. No completed login, +credential issue or native reader proof is claimed; awaiting the actual receipt. +Current receiver/user-engine deployments remain Ready at their baseline images.