Record verified P05 rollout and service recovery acceptance

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c

deploy/k8s/railiance/configmap.yaml

@@ -16,7 +16,7 @@ data:
   # Public portal base used in invitation and verification links.
   # Matches the live user-engine Ingress host on railiance01 (nip.io until a
   # coulomb.social alias is cut over). Update when the public hostname changes.
-  EMAIL_CONNECT_PORTAL_URL: "https://users.92-205-62-239.nip.io"
+  EMAIL_CONNECT_PORTAL_URL: "https://users.coulomb.social"
   # Envelope From — interim identity matches the live forgejo IONOS SMTP lane
   # (forgejo@coulomb.social) used to seed CCR-2026-0010. Switch to a dedicated
   # noreply@ mailbox when that credential is minted separately.

deploy/k8s/railiance/deployment.yaml

@@ -13,9 +13,9 @@ metadata:
     app.kubernetes.io/part-of: email-connect
   annotations:
     email-connect.railiance.io/rollback-note: >-
-      SQLite schema is additive (CREATE TABLE IF NOT EXISTS + optional
-      canceled_at column). Rolling back to the previous digest keeps the
-      same store path; duplicate event_id rows remain authoritative.
+      SQLite schema is additive. Preserve deliveries and send_attempts.
+      Stop delivery and reconcile any in_flight reservations before reverting
+      to a pre-P05 image, which cannot enforce uncertain-outcome reservations.
 spec:
   replicas: 1
   revisionHistoryLimit: 5
@@ -42,9 +42,8 @@ spec:
       terminationGracePeriodSeconds: 15
       containers:
         - name: email-connect
-          # Pin at release. T04 failure-matrix image (provider classification +
-          # suppression + redacted diagnostics), 2026-08-12.
-          image: forgejo.coulomb.social/coulomb/email-connect@sha256:a9de1994eea88502ec30ba7c2fc029ec901d873140d51e11d2c50e363a0578b1
+          # P05 durable send reservations and non-sending SMTP diagnostics, 2026-09-13.
+          image: forgejo.coulomb.social/coulomb/email-connect@sha256:e095d7e51c68a29ff6b82d735c734d5d27e0041b937dc958ecee5bcb5ddf5e8b
           imagePullPolicy: IfNotPresent
           ports:
             - name: http