Record the email-connect prefix on the backup bucket policy.
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
CI Smoke / container-smoke (push) Successful in 2s

Assistant: grok
Assistant-Session: 01a11cdb-f9fe-7011-947c-936e72007e54
This commit is contained in:
tegwick 2026-10-08 23:42:25 +02:00
parent 4357603a00
commit a56bfd70de

View file

@ -128,7 +128,8 @@ monitoring stay waiting. CSOC-WP-0015-T03 is the product acceptance follow-up.
Founder admitted `backup-pair-writer` on 2026-10-08. The OpenBao policy is
installed and matches its source file. Version 2 is current on both backup-primary paths and the placeholders are
gone. The live bucket policy still allows only the existing resource-control
application under `platform-pg/*`. No primary.env, receiver pause, upload or
timer. T03/T04 stay wait. Review:
gone. The bucket policy now also names the email-connect publisher, limited to
`platform-pg/application-archives/email-connect/`, without object delete.
A prefix proof aborted its own upload and denied the other prefixes. No
primary.env, receiver pause, upload or timer. T03/T04 stay wait. Review:
railiance-platform/docs/credential-lane-designs/application-backup-pair-custody-2026-10-08.md.