tegwick
c96b0c6d88
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
128 lines
9.3 KiB
JSON
128 lines
9.3 KiB
JSON
{
|
|
"proposal_id": "INFD-WP-0009-T04/purpose-overlay-v1",
|
|
"trial_id": "infd-purpose-20261011-r1",
|
|
"state": "prepared-unapproved",
|
|
"target": "realm:kubernetes/railiance01/informed-decision",
|
|
"authority": "ADMINISTER; activation APPROVED only upon exact founder disposition",
|
|
"candidate_image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a",
|
|
"published_source_revision": "3e4bcb26f8eeaa8c64345c565477b5ac8ccbb168",
|
|
"prior_image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:7f5c6cb29c9f70a026bfe30e72934274ddc69261676cf6d476f81dd32812d173",
|
|
"prior_argo_revision": "7db8485ffecdebfabd77a9daec085553c74bf0bf",
|
|
"native_object": {
|
|
"apiVersion": "apps/v1",
|
|
"kind": "Deployment",
|
|
"namespace": "informed-decision",
|
|
"name": "informed-decision",
|
|
"uid": "a588e10a-90d2-4883-975e-6dd8b8feca92"
|
|
},
|
|
"argo_application_uid": "499868f2-eabc-4df4-ae31-b89ce58d750d",
|
|
"source_gate": "All four exact committed owner Kustomize input blobs in execution-plan.json and clean current owner HEAD must match; source preparation is not native approval",
|
|
"sync_scope": [
|
|
"apps:Deployment:informed-decision"
|
|
],
|
|
"prune": false,
|
|
"automated_sync": false,
|
|
"runtime_configmap": "informed-decision-runtime-6c221878d051",
|
|
"schema": 5,
|
|
"requested_operations": [
|
|
"Read-only immutable validation of existing frozen19537920byte native drill snapshot, SHA8756..., privatecustody/no-writer/zeroWAL/staleSHM retained",
|
|
"Distinct drill-copy-rescue-r1 binarycopy into absent0600protected local destination, new hash-linked rescue journal preserving old UNCERTAIN copy",
|
|
"Existing isolated offline pre-open/admin/post-open compatibility drill and disposable-volume cleanup using rescued result",
|
|
"Distinct consistent cutover snapshot plus protectedcopy, followed only after allgates by Deployment-only image release/verify; same-schema rollback/recovery proof if needed"
|
|
],
|
|
"execute_by": "2026-10-12T23:59:59Z",
|
|
"temporary_vulnerability_review_due": "2026-10-18",
|
|
"known_scan_findings": "0HIGH/CRITICAL,1fixable inheritedMEDIUM zlib, actual currentbase+candidate findings identical",
|
|
"vulnerability_record": "INFD-RISK-20261011-ZLIB-85091 / INFD-WP-0009-T05",
|
|
"cost_estimate_EUR": 0,
|
|
"cost_limits": "No additional recurring infrastructure or second drill backup. Existing native snapshot19537920bytes retained; protected localcopy/offlineclone plus distinct cutover snapshots consume boundedexistingstorage. Attendedengineering/recovery time unpriced; no autopilot grant.",
|
|
"risk_estimates": [
|
|
"Brief Recreate service interruption; no concurrent new writer/surge",
|
|
"Private evidence snapshot custody and disposal errors; no snapshots/tokens in public evidence",
|
|
"Candidate purpose refusal may expose callers relying on advisory results as binding",
|
|
"Inherited known fixable MEDIUM remains until separately approved owner remediation",
|
|
"Existing Argo OutOfSync baseline is retained; no whole-app sync or unrelated repairs permitted",
|
|
"All phases, including recovery/verification, must begin before Oct12 deadline; if recovery window is exhausted stop and obtain a fresh founder decision. No automatic expiry controller."
|
|
],
|
|
"rollback": "Manual Argo source pin back to7db8485 and scoped Deployment-only sync to7f5c image; retain current schema5 database and all post-cutover evidence, never restore older snapshot over live writes",
|
|
"native_executed": "Original drill-backup executed; original drill-copy failed. No version2 action executed.",
|
|
"human_approval": "Version1 accepted originalsource; version2 requires fresh exact acceptance.",
|
|
"refinement_of_manifest": "7c6738b39ea8e54e61c8ed625e94ad0b2755e672e1576efcdf84a1d665ac3300",
|
|
"mandatory_pre_open_gate": "stdlibSQLite mode=ro/query_only: schema5+integrity+count baseline before ANY Store/admin on native source or restoredcopy; refuseoldschemas without migration",
|
|
"optimized_interpreters": "local+remote explicitlyrefused beforeassert gates",
|
|
"native_dependency_gate": "sealed actualCM UID/immutable/canonicaldatahash+PVC UID/fullspec/Bound/volumeName, no rawCMdata orSecret reads",
|
|
"live_counts": "Frozen snapshot/clone exactcounter equality; postcutover/rollback livecounterchanges may reflect legitimate concurrentcommits/state transitions, latestDB alwaysretained",
|
|
"source_basis": {
|
|
"original_approved_source": "bc6494cd1b290783ef3aef0763bf28d1deabf4b0",
|
|
"final_recovery_source": "exact final root-applied owner HEAD with approved four render blobs must be bound by new founder receipt"
|
|
},
|
|
"approved_owner_render_blob_sha256": {
|
|
"deploy/lifecycle/admission.candidate.json": "92382a56b349c3b895e5806e975082527bb99d1a001140e69d857e5b0391fa55",
|
|
"deploy/lifecycle/service.candidate.json": "38b78b9cbee5ade7750a58d5156ca4c5773352e947acb304ee714b59e749ceb4",
|
|
"deploy/lifecycle/kustomization.yaml": "1bbce81bc6758434354157f8601534320c5d0290587908fd15a6d25e3fa57f47",
|
|
"deploy/lifecycle/registries.candidate.json": "9bad6db5fbc2178d31b04120016a41830c3552fbb9e2517b718f9bbe87cf649e"
|
|
},
|
|
"execution_bundle_sha256": "49c9cb70f36f6ceb7b0d22400b2ec9232a5e1a8a00d17e92b92fe367c98effb5",
|
|
"execution_plan_sha256": "9ce5728a561e6d38f8497201baa2b840d11444a0af8ad6234dfc37428113f258",
|
|
"execution_phases": [
|
|
"drill-copy-rescue-r1",
|
|
"offline-verify",
|
|
"cleanup-offline",
|
|
"cutover-backup",
|
|
"cutover-copy",
|
|
"release",
|
|
"verify",
|
|
"rollback",
|
|
"rollback-verify"
|
|
],
|
|
"deadline_semantics": "All phases including verification/recovery must begin before execute_by. No extension or automatic emergency grant; beyond deadline stop and obtain a fresh founder decision. Complete the bounded drill and rollout early enough to allow recovery within the window.",
|
|
"offline_initializer": "One isolated local UID0:0/CAP_CHOWN-only initializer of the newly created nonce-bound disposable volume, exact candidate image, networknone/readonlyroot/no-newprivileges/CPU1/128Mi; no host/livePVC/token/config mount. Subsequent pre-open/admin/post-open checks UID10001:10001.",
|
|
"rollback_dispatch": "Sealed Deployment/CM/PVC and same-schema source/image pair plus admission CAS; no Ready candidate or Pod/database exec prerequisite. rollback-verify separately proves recovered old image/Ready1/scoped operation and readonly current schema5/integrity/counts.",
|
|
"purpose_proof_limit": "Ten installed synthetic-transport checks on actual placement; native_provider=false. Not actual provider/PDP authority proof, which remains a distinct T04 completion gate.",
|
|
"refinement_of_amended_manifest": "b1e3e66bc4023dc80c6ea59564c3557c7653fb3c307f46a049997b76198a9033",
|
|
"memo_version": 2,
|
|
"recovery": {
|
|
"original_anchor": {
|
|
"original_journal_sha256": "d187b02d98d6e97429fe20b4fbe1d309a6c6c4b55232b4ae13ac39873039f1c1",
|
|
"phase_metadata": {
|
|
"drill-backup": {
|
|
"state": "COMPLETE",
|
|
"attempt_id": "d63182a7-e1a5-4e8e-a5f1-2bf3333cf153",
|
|
"started_at": "2026-10-11T02:38:45.310653+00:00"
|
|
},
|
|
"drill-copy": {
|
|
"state": "UNCERTAIN",
|
|
"attempt_id": "329ef190-1692-4246-b953-e6a59664abcc",
|
|
"started_at": "2026-10-11T02:39:50.198740+00:00"
|
|
}
|
|
},
|
|
"frozen_backup_receipt_sha256": "025dddf1e93936f31e98b9fbfa84aa2bdaaa33573f9d3b0e32d947fd286b170e",
|
|
"snapshot_sha256": "8756cf825df9e7b5b74bb4a0106a5027f5cff2c59ff45d7b48eed8522a7d33f3",
|
|
"snapshot_bytes": 19537920,
|
|
"off_cluster_file_exists": false,
|
|
"old_uncertain_retry_authorized": false
|
|
},
|
|
"original_identity": {
|
|
"proposal": "INFD-WP-0009-T04/purpose-overlay-v1",
|
|
"source_revision": "bc6494cd1b290783ef3aef0763bf28d1deabf4b0",
|
|
"memo_sha256": "506d3956beb7c62ab2bbdfda783c05905d183452a1f67a1817f3fb8c2e522937",
|
|
"plan_sha256": "f5e5fa906ff19d3a45d10dcdb2810373ae21f9cf44c0472ff2bd47d3bc3328d6"
|
|
},
|
|
"new_journal": "rescue-execution-journal-r1.json",
|
|
"new_phase": "drill-copy-rescue-r1",
|
|
"old_uncertain_phase_overwrite_or_retry": false,
|
|
"new_snapshot_backup": false,
|
|
"snapshot_or_sidecar_mutation": false,
|
|
"mapping": "offline-verify consumes COMPLETE drill-copy-rescue-r1 result; all later phases ordered only in new hash-linked recovery journal"
|
|
},
|
|
"original_native_outcome": {
|
|
"drill-backup": "COMPLETE",
|
|
"drill-copy": "UNCERTAIN before localfile creation",
|
|
"native_image": "unchanged7f5; no rollout",
|
|
"original_journal_and_sidecars": "retained unchanged"
|
|
},
|
|
"rescue_limits": "No liveDBwrites during rescue inspection/copy, no sidecar deletion/checkpoint, no retry/overwrite original UNCERTAIN phase. Later existing admin offlineinspect/cutoverbackup and image actions need new exactversion2 acceptance andorderedguards.",
|
|
"submission_route": "POST /lifecycle/memos/infd-20261011-purpose-overlay-r1/revisions CAS expected_version1; source must remain unbound; publish/review sourceversion2, resulting human review ownversion1",
|
|
"original_execution_helper_manifest_sha256": "f2fad6c251fbb4420e07c1329802f521b513bbf66e51f64c5d673ef04f16284c",
|
|
"original_execution_helper_manifest_context": "Retained historical f2fad6 helper review before the failed approved backup/copy trial; current rescue execution bytes are bound by execution_bundle_sha256 and execution_plan_sha256. This historical manifest does not describe current version2 rescue files."
|
|
}
|