tegwick
e0359bcb6c
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
55 lines
3.8 KiB
JSON
55 lines
3.8 KiB
JSON
{
|
|
"proposal_id": "INFD-WP-0009-T04/purpose-overlay-v1",
|
|
"trial_id": "infd-purpose-20261011-r1",
|
|
"state": "prepared-unapproved",
|
|
"target": "realm:kubernetes/railiance01/informed-decision",
|
|
"authority": "ADMINISTER; activation APPROVED only upon exact founder disposition",
|
|
"candidate_image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a",
|
|
"published_source_revision": "3e4bcb26f8eeaa8c64345c565477b5ac8ccbb168",
|
|
"prior_image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:7f5c6cb29c9f70a026bfe30e72934274ddc69261676cf6d476f81dd32812d173",
|
|
"prior_argo_revision": "7db8485ffecdebfabd77a9daec085553c74bf0bf",
|
|
"native_object": {
|
|
"apiVersion": "apps/v1",
|
|
"kind": "Deployment",
|
|
"namespace": "informed-decision",
|
|
"name": "informed-decision",
|
|
"uid": "a588e10a-90d2-4883-975e-6dd8b8feca92"
|
|
},
|
|
"argo_application_uid": "499868f2-eabc-4df4-ae31-b89ce58d750d",
|
|
"source_gate": "Exact committed owner source must contain the two approved candidate file hashes in preflight-inputs.json; source preparation is not native approval",
|
|
"sync_scope": [
|
|
"apps:Deployment:informed-decision"
|
|
],
|
|
"prune": false,
|
|
"automated_sync": false,
|
|
"runtime_configmap": "informed-decision-runtime-6c221878d051",
|
|
"schema": 5,
|
|
"requested_operations": [
|
|
"Protected SQLite-consistent native backup and independently protected off-cluster custody",
|
|
"Offline restore/integrity/count comparison on a private disposable volume with exact candidate, no runtime tokens/config/network",
|
|
"Refresh a consistent pre-cutover snapshot, retain private copies and count-only/hash receipts",
|
|
"Pin existing manual Argo Application to exact approved owner source and manually sync only existing Deployment image",
|
|
"Verify health/readiness/image/module/installed fail-closed purpose checks and retained schema/count evidence; recover to prior same-schema image if needed"
|
|
],
|
|
"execute_by": "2026-10-12T23:59:59Z",
|
|
"temporary_vulnerability_review_due": "2026-10-18",
|
|
"known_scan_findings": "0HIGH/CRITICAL,1fixable inheritedMEDIUM zlib, actual currentbase+candidate findings identical",
|
|
"vulnerability_record": "INFD-RISK-20261011-ZLIB-85091 / INFD-WP-0009-T05",
|
|
"cost_estimate_EUR": 0,
|
|
"cost_limits": "No new recurring infrastructure; private backup storage and attended engineering/recovery time unpriced, not an autopilot cost grant",
|
|
"risk_estimates": [
|
|
"Brief Recreate service interruption; no concurrent new writer/surge",
|
|
"Private evidence snapshot custody and disposal errors; no snapshots/tokens in public evidence",
|
|
"Candidate purpose refusal may expose callers relying on advisory results as binding",
|
|
"Inherited known fixable MEDIUM remains until separately approved owner remediation",
|
|
"Existing Argo OutOfSync baseline is retained; no whole-app sync or unrelated repairs permitted"
|
|
],
|
|
"rollback": "Manual Argo source pin back to7db8485 and scoped Deployment-only sync to7f5c image; retain current schema5 database and all post-cutover evidence, never restore older snapshot over live writes",
|
|
"native_executed": false,
|
|
"human_approval": false,
|
|
"refinement_of_manifest": "7c6738b39ea8e54e61c8ed625e94ad0b2755e672e1576efcdf84a1d665ac3300",
|
|
"mandatory_pre_open_gate": "stdlibSQLite mode=ro/query_only: schema5+integrity+count baseline before ANY Store/admin on native source or restoredcopy; refuseoldschemas without migration",
|
|
"optimized_interpreters": "local+remote explicitlyrefused beforeassert gates",
|
|
"native_dependency_gate": "sealed actualCM UID/immutable/canonicaldatahash+PVC UID/fullspec/Bound/volumeName, no rawCMdata orSecret reads",
|
|
"live_counts": "Frozen snapshot/clone exactcounter equality; postcutover/rollback livecounterchanges may reflect legitimate concurrentcommits/state transitions, latestDB alwaysretained"
|
|
}
|