Record tested release broker core and remaining activation boundary

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e241-8285-7a63-8c0c-51c9cb824dc3
This commit is contained in:
tegwick 2026-09-27 16:40:50 +02:00
parent db51ae6b5e
commit 7a9ff81ce5

View file

@ -104,3 +104,12 @@ authenticated review/CI/health receipts and failed-health automatic rollback pro
ArgoCD Core has no reusable API-server token lane; an Application patch grant
alone would allow more than syncing. ACTIVITY-WP-0041-T03 and RPF-WP-0048-T02 retain
that work. Consumer enrollment and pattern-editing executor readiness remain open.
The release-broker core is now implemented in activity-core: signed role-bound
receipts, exact image-only admission, durable serialization, restart recovery,
and isolated rollback tests. See
[the implementation boundary](../../activity-core/docs/release-broker.md).
It is not connected to production credentials or scheduling. Authenticated
Git/ArgoCD transport, admitted identity, real receipt issuers/continuous observer
and transport-level rollback proof remain required. This source-only change does
not reset the production observation window.