coulomb/informed-decision
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record the decision-overview rollout and pin its image in admission inputs

Browse source 
Operator rolled out sha256:971e88e3 after a pre-rollout inspect (7 confirmed,
no unresolved submissions) and an in-volume backup. README backup path now
matches the deployment, which mounts no /backup volume.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 359683@bnt-lap001
Assistant-Session: eebdc939-7a9b-4e50-9d39-c8437e8a14ec
This commit is contained in:
tegwick 2026-09-21 22:32:19 +02:00
parent ac0a4e2fb0
commit 77792fa4f5
4 changed files with 26 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

5
deploy/README.md
View file

@ -164,11 +164,12 @@ The installed `informed-decision-admin` supports local custody operations only:
```sh
informed-decision-admin inspect --db /data/private/review.sqlite
informed-decision-admin backup --db /data/private/review.sqlite --output /backup/private/review.sqlite
informed-decision-admin backup --db /data/private/review.sqlite --output /data/private/review-YYYYMMDD.sqlite
```
The backup parent must already be owned/private 0700; the destination must not
exist. Backup uses SQLite's consistent backup API while the service may be live.
exist. The deployment mounts no `/backup` volume; `/data/private` qualifies but
shares the PVC, so copy the file off-cluster (`kubectl cp`) for an independent copy. Backup uses SQLite's consistent backup API while the service may be live.
Do not copy a running SQLite file while ignoring WAL. Inspection prints counts
and schema version, not memo content or credentials. These are privileged
operator custody commands, not browser endpoints. An independent backup copy,

2
deploy/sitting-admission.json
View file

@ -1,5 +1,5 @@
{
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:ef6fdd61209863654be3adba070661645a2714e86cb4b7f4e847540291b55f07",
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:971e88e3c7b68b370f4d7ef14824cc0e19c854b5aeb372e7ec7edbcf2c847b31",
"policy": {
"origin": "http://flex-auth-informed-decision-sitting.flex-auth.svc.cluster.local:8080",
"package": "informed-decision.compact-sitting",

2
deploy/t03-admission.json
View file

@ -1,5 +1,5 @@
{
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:ef6fdd61209863654be3adba070661645a2714e86cb4b7f4e847540291b55f07",
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:971e88e3c7b68b370f4d7ef14824cc0e19c854b5aeb372e7ec7edbcf2c847b31",
"policy": {
"origin": "http://flex-auth-informed-decision-t03.flex-auth.svc.cluster.local:8080",
"package": "informed-decision.t03-review",

23
docs/evidence/2026-09-21-decision-overview-image.json
View file

@ -6,6 +6,25 @@
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:971e88e3c7b68b370f4d7ef14824cc0e19c854b5aeb372e7ec7edbcf2c847b31",
"previous_live_image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:ef6fdd61209863654be3adba070661645a2714e86cb4b7f4e847540291b55f07",
"published": true,
"rolled_out": false,
"remaining": "Operator pre-rollout inspect/backup and rollout; agent production access was not granted."
"rolled_out": true,
"remaining": "Human sign-in view of the overview not yet observed by the agent.",
"rollout": {
"by": "operator",
"strategy": "Recreate via kubectl set image",
"pre_rollout_inspect": {
"schema_version": 2,
"outbox": {
"delivered": 50
},
"submissions": {
"confirmed": 7
}
},
"pre_rollout_backup": "/data/private/review-20260921-pre-overview.sqlite (same PVC; consistent_snapshot true)",
"post_rollout": {
"ready_replicas": 1,
"healthz": "ok",
"readyz": "ready"
}
}
}