tegwick
c96b0c6d88
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
141 lines
6.9 KiB
JSON
141 lines
6.9 KiB
JSON
{
|
|
"id": "infd-20261011-purpose-overlay-r1",
|
|
"version": 2,
|
|
"question": "Approve the exact existing-snapshot rescue of failed drill-copy using corrected frozen-snapshot reads, then conditionally finish the protected compatibility gates and Deployment-only purpose-image release, retaining the disclosed fixable MEDIUM finding?",
|
|
"requested_act": "approve",
|
|
"binding_level": "organizational",
|
|
"brief": "Original approved backup COMPLETE; copy UNCERTAIN beforelocalfile because staleSHM index. Main19537920bytes/hash8756 unchanged,WAL0. Version2 explicitclose +immutable frozen-only rescue, no sidecar delete/newdrillbackup/oldretry; distinctphase/newhashlinkedjournal. Remainingoffline/cutover/image763c gates ordered;0HIGH/CRITICAL,1fixableMEDIUM/T05Oct18. ALLphasesdeadlineOct12,freshfounderdecisionbeyond; installedpurpose synthetic/native_providerfalse. No version2actions.",
|
|
"binding": {
|
|
"principal": {
|
|
"id": "pending-human-session",
|
|
"kind": "person",
|
|
"display_name": "Founder review"
|
|
},
|
|
"target": {
|
|
"kind": "environment",
|
|
"id": "realm:kubernetes/railiance01/informed-decision",
|
|
"label": "Informed Decision image-only purpose hardening on railiance01",
|
|
"environment": "production"
|
|
},
|
|
"terms": "Exact attached same INFD-WP-0009-T04/purpose-overlay-v1 trialinfd-purpose-20261011-r1 version2 ONLY: named drill-copy-rescue-r1 with newjournal preserving originalUNCERTAINcopy and exactoriginalbackup/mainhash19537920/WAL0/privateidentity; no SHMdelete or newdrillbackup. Absentlocalfile/volume/currentoldimage+source+UIDseals; corrected immutable frozen-only reads, live/offline remainWALaware. COMPLETErescueresult conditionallyallows exactisolatedofflineUID0CAP_CHOWNinitializer thenUID10001pre/admin/postproof+cleanup; distinctcutoverbackup/copy and fourGitpins/manualDeployment-only763c/prune=false. All phases incl recovery/verify beginbeforeOct12 23:59:59Z,newdecisionbeyond; rollbackprior7f5retainlatestDB,separateReadyoldimage/schema recoveryproof. Fresh rootauthenticated founderACCEPTversion2 eachphase; no signed/autonomousgrant. Explicit inheritedfixableMEDIUM/T05Oct18; installedchecks syntheticnative_providerfalse, actualPDPauthorityT04gate distinct. No credential/policy/wholeAppsync change."
|
|
},
|
|
"step_kind": "approve",
|
|
"packet": [
|
|
{
|
|
"item_id": "decision-packet-md",
|
|
"label": "decision-packet.md",
|
|
"hash": "sha256:c79d505d9fd1c4897ea0709e22f3263bf92f50660336084aae0c83c65d6b9024"
|
|
},
|
|
{
|
|
"item_id": "proposal-json",
|
|
"label": "proposal.json",
|
|
"hash": "sha256:e4d8fa77ce97f9cc190e9cae8f86478dba5e89cc7a13bf993e3b8d47a3160b36"
|
|
},
|
|
{
|
|
"item_id": "candidate-admission-json",
|
|
"label": "candidate-admission.json",
|
|
"hash": "sha256:92382a56b349c3b895e5806e975082527bb99d1a001140e69d857e5b0391fa55"
|
|
},
|
|
{
|
|
"item_id": "rollback-admission-json",
|
|
"label": "rollback-admission.json",
|
|
"hash": "sha256:22f830736ee56f6ed9b62f47d243e4e24a1b68263b261e78e2f1cfcb85adbd50"
|
|
},
|
|
{
|
|
"item_id": "candidate-deployment-json",
|
|
"label": "candidate-deployment.json",
|
|
"hash": "sha256:722a8e2dc52bec217bf960e23b2fddfc7ac27d343ac8743790e3183db81a6a0e"
|
|
},
|
|
{
|
|
"item_id": "rollback-deployment-json",
|
|
"label": "rollback-deployment.json",
|
|
"hash": "sha256:39b3f43bb84ef4921cc3a1fbcdc444610741ed8809149d8f8f17ed805f262121"
|
|
},
|
|
{
|
|
"item_id": "published-verification-json",
|
|
"label": "published-verification.json",
|
|
"hash": "sha256:e59ab44b1aaf28140509593aae4ab9b97ab62cc8b589e3f1552bac78618896dd"
|
|
},
|
|
{
|
|
"item_id": "registry-proof-json",
|
|
"label": "registry-proof.json",
|
|
"hash": "sha256:5aa2c1f780c47f62fa9b59da9543d82c07afa02b1d946e6144b8a042ef86f213"
|
|
},
|
|
{
|
|
"item_id": "security-summary-json",
|
|
"label": "security-summary.json",
|
|
"hash": "sha256:0ee56400dc703f7c9968c2a0a3ea0390d8362f8d0bbf8002a2bd7fa58f19cb44"
|
|
},
|
|
{
|
|
"item_id": "execution-bundle-json",
|
|
"label": "execution-bundle.json",
|
|
"hash": "sha256:49c9cb70f36f6ceb7b0d22400b2ec9232a5e1a8a00d17e92b92fe367c98effb5"
|
|
},
|
|
{
|
|
"item_id": "sqlite-readonly-py",
|
|
"label": "sqlite_readonly.py",
|
|
"hash": "sha256:9093c64f7f0e39b249da9fefdf5aaf4e4258bc31e7a27fd888479ce329a20509"
|
|
},
|
|
{
|
|
"item_id": "sealed-native-dependencies-json",
|
|
"label": "sealed-native-dependencies.json",
|
|
"hash": "sha256:042327a036ed254cf95dbeb0c056ac25b03a6a844b95a332c992df2943691369"
|
|
},
|
|
{
|
|
"item_id": "native-backup-restore-protocol-md",
|
|
"label": "native-backup-restore-protocol.md",
|
|
"hash": "sha256:54aa31c7709c5178d1aa0dda5ef22340fc2c1ede7635c8273c53e7954885f8e5"
|
|
},
|
|
{
|
|
"item_id": "inherited-vulnerability-follow-through-json",
|
|
"label": "inherited-vulnerability-follow-through.json",
|
|
"hash": "sha256:e8da413bf985ef2cb66c71a093ba7fc0636ab884f428e40a18b40ccff8e3b101"
|
|
},
|
|
{
|
|
"item_id": "native-preflight-json",
|
|
"label": "native-preflight.json",
|
|
"hash": "sha256:eb5f41aefb97666bb0c1279617e95a7c05017a609415624daee724c48b90d262"
|
|
},
|
|
{
|
|
"item_id": "sealed-live-deployment-json",
|
|
"label": "sealed-live-deployment.json",
|
|
"hash": "sha256:d18d27063d06f535ae884ea01f96747fe301685518ab94b1cba072a1e1519362"
|
|
},
|
|
{
|
|
"item_id": "change-guard-py",
|
|
"label": "change_guard.py",
|
|
"hash": "sha256:f348e449c49f4d9e49af9e82e01764e7197837fd3df9d756f5891d9b8d9b38be"
|
|
},
|
|
{
|
|
"item_id": "preflight-py",
|
|
"label": "preflight.py",
|
|
"hash": "sha256:6b4c65f708238c9a9d17fd065876c7a00e1f1745926f990a1dd5e667298340cd"
|
|
},
|
|
{
|
|
"item_id": "preflight-inputs-json",
|
|
"label": "preflight-inputs.json",
|
|
"hash": "sha256:03bb4b42fe1aa51b846e957a9e23926fae72f02a2cb5e297368047fb25c17e9b"
|
|
},
|
|
{
|
|
"item_id": "fresh-preflight-validation-json",
|
|
"label": "fresh-preflight-validation.json",
|
|
"hash": "sha256:2ec324aa8e3f97753b3ed87bca80820feb5e542dc0a4799aa848ec77ea92feb7"
|
|
}
|
|
],
|
|
"highlights": [
|
|
{
|
|
"id": "native-custody-rollout-and-known-medium",
|
|
"item_id": "decision-packet-md",
|
|
"note": "Protected real-data snapshot/restore and a brief Recreate restart require this separate native approval. Actual scan has one fixable inherited MEDIUM, not zero CVEs; exact owner follow-through due2026-10-18 is manual, with no automatic controller. Rollback preserves latestschema5DB and allnew/uncertain evidence. Synthetic transport tests are not native PDP authority proof. Admin can migrate oldschemas: readonlyschema5/integrity/count check must precede every native/offline Store/admin open. ActualCM/PVC UID/custody drift and optimizedPython stop the operation.",
|
|
"required_ack": true,
|
|
"severity": "warning",
|
|
"locator": {
|
|
"kind": "section",
|
|
"heading": "Requested decision"
|
|
}
|
|
}
|
|
],
|
|
"sealed": false,
|
|
"approval_id": null,
|
|
"approval_binding_digest": null
|
|
}
|