From 7a9ff81ce560d77459bcfa5f5ec3c7093bc6e874 Mon Sep 17 00:00:00 2001 From: tegwick Date: Sun, 27 Sep 2026 16:40:50 +0200 Subject: [PATCH] Record tested release broker core and remaining activation boundary Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e241-8285-7a63-8c0c-51c9cb824dc3 --- docs/ActivityCoreLoop.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/docs/ActivityCoreLoop.md b/docs/ActivityCoreLoop.md index 536999b..6c03c6f 100644 --- a/docs/ActivityCoreLoop.md +++ b/docs/ActivityCoreLoop.md @@ -104,3 +104,12 @@ authenticated review/CI/health receipts and failed-health automatic rollback pro ArgoCD Core has no reusable API-server token lane; an Application patch grant alone would allow more than syncing. ACTIVITY-WP-0041-T03 and RPF-WP-0048-T02 retain that work. Consumer enrollment and pattern-editing executor readiness remain open. + +The release-broker core is now implemented in activity-core: signed role-bound +receipts, exact image-only admission, durable serialization, restart recovery, +and isolated rollback tests. See +[the implementation boundary](../../activity-core/docs/release-broker.md). +It is not connected to production credentials or scheduling. Authenticated +Git/ArgoCD transport, admitted identity, real receipt issuers/continuous observer +and transport-level rollback proof remain required. This source-only change does +not reset the production observation window.