INFD-WP-0010-T02: record the founder-run present-existing release (2026-11-01)

The founder ran the release:
- access-engine compact-sitting v14 (Helm revision 14) first, then Argo
  005709a: image ca75f0be, runtime ConfigMap b488b96a0953
- backup ed4469e7, held off-cluster
- health and readiness 200; private routes 404 on the public origin
- store counts unchanged, and an existing memo loaded under v14
- executor-identity probe 503 approval_unreadable; sso/default probe 403
  submitter_unknown

T02 stays open until the executor's present-existing memo is accepted at aal2 and
consumed (NK-WP-0056 pilot).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
This commit is contained in:
tegwick 2026-11-01 14:40:35 +01:00
parent 005709a372
commit 83fd105465
4 changed files with 98 additions and 1 deletions

View file

@ -222,3 +222,29 @@ equal to c228583, 13/13 container checks, 0 HIGH/CRITICAL. The runtime ConfigMap
Never pair these registries with the old image: it rejects the new row, so all intake would fail. Founder runbook,
verification and rollback:
[RELEASE-INFD-WP-0010-T02.md](RELEASE-INFD-WP-0010-T02.md).
## Present-existing release — 2026-11-01
Founder-run per [RELEASE-INFD-WP-0010-T02.md](RELEASE-INFD-WP-0010-T02.md), with the net-kingdom coordinator
guiding.
**Before the rollout.** Preflight counts: schema 5, lifecycle 20 records / 70 events / 0 pending, 472 delivered
outbox rows, 48 confirmed submissions. The server dry-run passed. The diff showed exactly the image, the new
runtime ConfigMap (v14 pin), the registry row, the 8081 peer, and removal of the Argo tracking annotations. The
consistent backup was copied off-cluster to `.private-backups/20261101T132600Z-pre-v14`, sha256
`ed4469e7f40ae15f19f467d14e22155dfecd25525f31cfd58d6b821687752ab3`.
**Rollout.** Access-engine compact-sitting v14 went first (Helm revision 14). Then Argo moved to source `005709a`:
image `ca75f0be03af0bd96a66b08d2949bdc2d16365a93ffabcd6593074b565e8f01b`, runtime ConfigMap
`informed-decision-runtime-b488b96a0953`. Sync succeeded and the application is Healthy.
**Checks after the rollout.**
- `/healthz` and `/readyz` return 200; the private routes return 404 on the public origin.
- The counts are unchanged.
- The founder opened an existing memo, so the v14 pins match.
- Probe as `sso/nk-bind-executor` with a random approval id: `503 approval_unreadable`.
- Probe as `sso/default`: `403 submitter_unknown`.
**Not yet proven.** The executor's own present-existing memo, the founder's aal2 accept of it, and its
consumption all come in the NK-WP-0056 pilot. Rollback reference: Argo `312ab97` with Helm revision 13.
Evidence: `docs/evidence/2026-11-01-present-existing-release/`.

View file

@ -1,6 +1,8 @@
# Release runbook: present_existing for nk-bind-executor + compact-sitting v14 (INFD-WP-0010-T02)
Prepared 2026-11-01 by the informed-decision owner agent. **Nothing in this file has been applied.**
Prepared 2026-11-01 by the informed-decision owner agent. **Applied by the founder on 2026-11-01** (RELEASE_SHA
`005709a`, Helm revision 14). Results are in `docs/evidence/2026-11-01-present-existing-release/release.json` and in
the deploy/lifecycle/README.md section "Present-existing release — 2026-11-01".
Founder approval (2026-11-01, relayed by the net-kingdom coordinator): release present_existing together with
access-engine compact-sitting v14. Every command below is founder-run, with
`export KUBECONFIG=$HOME/.kube/config-railiance01`.