coulomb/informed-decision
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

INFD-WP-0010-T02: pin service image ca75f0be (main-c228583) for the v14 release

Browse source 
Owner CI run 6 built forgejo.coulomb.social/coulomb/informed-decision
@sha256:ca75f0be03af0bd96a66b08d2949bdc2d16365a93ffabcd6593074b565e8f01b
from c228583. Verified read-only:
- zlib 1.3.2-r1 (floor check passes)
- installed modules equal the source at c228583
- 13/13 container checks
- Trivy 0 HIGH/CRITICAL; 2 UNKNOWN musl findings, the same as the live image

Pinned in admission.candidate.json and re-rendered service.candidate.json.
The runtime ConfigMap is unchanged (informed-decision-runtime-b488b96a0953).
This commit is the release's RELEASE_SHA. Nothing applied.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
This commit is contained in:
tegwick 2026-11-01 11:48:25 +01:00
parent c228583b60
commit 005709a372
7 changed files with 125 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

8
deploy/lifecycle/README.md
View file

@ -216,7 +216,9 @@ retaining the current schema-5 database. Evidence: docs/evidence/2026-10-05-life
INFD-WP-0010-T02, together with access-engine compact-sitting v14. The candidate files carry the v14 review pin
(`sha256:8911458f…fc300fde`), the `nk-bind-executor` present_existing registry row (daily limit 10) and an 8081
ingress peer for exactly `sso` + `app.kubernetes.io/name=bounded-executor`. The state-hub row is unchanged and
outcome_read stays off. **The image pin is still the live `f5588f49…`, because no owner-CI full-service image
exists yet. Do not sync this candidate until it is replaced:** the live image rejects the new registry row,
which would fail all intake. Founder runbook, verification and rollback:
outcome_read stays off. The service image is pinned to owner-CI `main-c228583`,
`sha256:ca75f0be03af0bd96a66b08d2949bdc2d16365a93ffabcd6593074b565e8f01b`. Verified: zlib 1.3.2-r1, installed source
equal to c228583, 13/13 container checks, 0 HIGH/CRITICAL. The runtime ConfigMap is `informed-decision-runtime-b488b96a0953`.
Never pair these registries with the old image: it rejects the new row, so all intake would fail. Founder runbook,
verification and rollback:
[RELEASE-INFD-WP-0010-T02.md](RELEASE-INFD-WP-0010-T02.md).