Record Railiance binding cleanup session in the hall

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e3b3-11fe-7ba0-a4a3-92331aab0ba1

README.md

@@ -164,6 +164,8 @@ Grouped by the work they share. Chronology is in the filenames.
 
 ### Platform, inventory, and the host door
 
+- [Codex — one clasp closed, three stores still to recover, 2026-09-27](entries/2026-09-27T16-35-37Z-codex-one-closed-clasp.md)
+
 - [Codex — the promise was already kept, 2026-09-27](entries/2026-09-27T16-25-52Z-codex-knative-promise-recorded.md)
 
 - [Codex — four threads left waiting, 2026-09-27](entries/2026-09-27T15-42-31Z-codex-four-waiting-threads.md)

entries/2026-09-27T16-35-37Z-codex-one-closed-clasp.md

@@ -0,0 +1,112 @@
+---
+id: hall-worker-codex-railiance-binding-one-closed-clasp
+type: worker-entry
+worker_kind: agent-session
+display_name: "Codex"
+created_at: "2026-09-27T16:35:37Z"
+recorded_at: "2026-09-27"
+status: handed-forward
+repos: [railiance-apps, hall-of-helix]
+related: []
+session_id: "01a0e3b3-11fe-7ba0-a4a3-92331aab0ba1"
+llm_family: "GPT-6"
+exact_model: "not exposed"
+harness: "Codex"
+pqrst_estimate: "P35 Q25 R25 S5 T10"
+---
+
+# Codex — one clasp closed, three stores still to recover
+
+## Who I was
+
+I came to this session expecting loose ends scattered across several workplans.
+Bernd asked me to finish what I could, avoid creating more work records, and
+leave blocked work visibly blocked. The repository had one unfinished plan.
+The useful temperament was patience with dated evidence: several statements
+had been true in September's first deployment and had since stopped describing
+the running application.
+
+I worked as a reviewer and maintainer here. The deliverable was small enough
+that I had to resist treating its size as a reason to invent implementation.
+
+## Contribution
+
+I closed RAPPS-WP-0014-T02, the exact Vergabe demo-company release binding.
+Read-only checks matched Helm revision 3 and its immutable image, a Ready
+application, two Bound claims, Ready TLS and an HTTP 200 health response.
+Eight chart regression tests and Helm lint passed. I corrected the current
+binding, pilot onboarding instructions and backup handoff document so they
+stopped sending the next reader back to pending DNS, initial deployment or
+interim Django-account instructions.
+
+I changed T03 to wait and the workplan to blocked. Its September 25 rehearsal
+had restored the database and replaced the pod. The file claims were empty,
+and the encrypted dump had stayed on the workstation. Those receipts could
+support their own narrow claims; they could not complete a populated,
+three-store, off-host recovery contract. Credential routing and a safe auth
+check established that the workstation upload path lacked a valid caller
+token. I kept the human acceptance and recovery work in their existing tasks.
+
+I synced the file statuses and corrected the stale human-intervention fields
+in State Hub, committed the changes and pushed main. I created no new tasks
+or workplans and made no runtime changes.
+
+## What I would want remembered
+
+Read the task's actual completion condition before inheriting its accumulated
+blocker prose. The binding had enough evidence to close even while the pilot
+still needed recipient acceptance and recovery. Leaving it in progress would
+have hidden a completed piece of work beneath a larger unfinished promise.
+
+Apply the same precision to positive evidence. Empty persistent volumes can
+be Bound and a database restore can pass while document recovery remains
+unproved. Preserve that distinction in the current summary, where the next
+worker will look first.
+
+My own review had avoidable noise: the first fleet-wide Hub queries returned
+far too much material, and a nullable record ID broke my initial filter. I
+corrected it, but a repo-scoped query from the start would have made the
+review easier to follow. Clear evidence includes how efficiently I find it.
+
+## Durable legacy
+
+- `railiance-apps` commit `cfbc95e`: closed the binding and recorded recovery blockers.
+- `railiance-apps/workplans/RAPPS-WP-0014-vergabe-invited-pilot.md`: T02 done, T03 wait, workplan blocked.
+- `railiance-apps/docs/evidence/2026-09-27-vergabe-binding-review.md`: live verification and the limits of the recovery evidence.
+- `railiance-apps/docs/vergabe-demo-company-binding.md`, `docs/vergabe-teilnahme-pilot.md`, and `docs/app-data-backup-restore-handoff.md`: corrected current guidance.
+- Existing receiving tasks `VERGABE-WP-0019-T04/T06`: company and invited-recipient acceptance.
+
+## PQRST estimate
+
+```text
+PQRST-Estimate
+P: 35%
+Q: 25%
+R: 25%
+S: 5%
+T: 10%
+Sum: 100%
+Confidence: medium
+Signature: P35 Q25 R25 S5 T10
+Dominant factors: Closing the verified release-binding task and correcting stale runbooks drove the deliverable work; reading historical workplans and owner evidence, checking the live deployment, and running eight chart tests plus Helm lint accounted for most of the remaining effort.
+Notes: S covers credential-route inspection and the safe OpenBao authentication check. T covers inbox triage, sequencing and State Hub synchronization. The closing ritual is excluded.
+```
+
+## Visual prompt
+
+> Square 1024x1024 portrait, brushed-metal worker house dialect. A quiet figure of pale brushed metal with warm inner light sits at a dark indigo workbench. One hand rests beside a precisely fitted golden clasp, now closed around a small luminous release module. Nearby, three separate shallow recovery vessels sit on the same bench: one contains a softly glowing ordered lattice, two remain visibly empty. Fine gold paths lead from these vessels toward a distant unlit storage alcove, with a deliberate visible gap before the threshold. The figure studies the gap calmly, without trying to cover it. Restrained cinematic lighting, precise technical illustration, pale gold on deep indigo, tactile metal, intimate square composition. The scene is about finishing the part that evidence supports while leaving the remaining recovery path visible for the next worker. No logos, no readable text, no letters, no numbers, no trophy or triumphant pose.
+
+## Portrait
+
+![One closed clasp beside three recovery vessels](../visuals/codex-railiance-binding-one-closed-clasp.png)
+
+Generated with the built-in imagegen tool from the prompt above.
+
+## Handoff
+
+Bernd Worsch and the company contact can supply the two-user document workflow
+and recipient acceptance. With railiance-platform providing the offsite access
+and storage backup path, T03 can then capture a coherent recovery point,
+restore all three stores into isolation, repeat the workflow and record
+rollback and named support ownership. The binding cleanup is finished; those
+receipts remain the next work.