tegwick
c96b0c6d88
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
3.2 KiB
Informed Decision version2 existing-snapshot rescue and image release
Approve the exact source-refined recovery of the failed drill-copy and conditional remaining backup/drill/Deployment-only image rollout. This is memo version2 in the same proposal/trial, requiring NEW founder acceptance; original version1 acceptance is retained and cannot authorize changed helperbytes.
Original source bc6494cd completed the protected native drill-backup, then copy failed before any localfile. Metadata-only verification proves unchanged main19537920bytes/SHA8756..., WAL0/privateSHM32768. The original reader could leave SHM indexing because its connection context manager did not close. The correction explicitlycloses all readers and uses immutable reads ONLY for a proven frozen closed-main snapshot, not live or writableclone. SHM stays unchanged; nonzeroWAL/hash/identity drift stops rescue.
Distinct drill-copy-rescue-r1/newlinkedjournal preserves original UNCERTAINcopy and exact journalhash/attempts. No oldretry/overwrite, no newdrillbackup. Require originalCOMPLETEbackup/UNCERTAINcopy only, absentlocalfiles/restorevolume, originalnativePodUID/currentoldimage+sourcepin and allCM/PVC/Deployment seals. Copy snapshotbytes only into a newprivate0600file. Remainingorderedphases explicitly consume COMPLETErescueresult; one isolated UID0/CAP_CHOWN-only NEWvolume initializer then UID10001 pre-open/admin/post-admin checks proves real-data compatibility before cutover. No host/nativePVC/runtimeconfig/token mounts; no service startup. Any attempted failure/ambiguity is durable and cannotretry.
Image763c from actualCI3e4bcb26 remains unchanged8base layers pluspolicy.py; legacyserialization differences disclosed. ActualinstalledUID10001/10purposevariants pass; native_provider=false/synthetictransport is not actualPDPauthority proof, which remains separateT04gate. Actualfull44packagescan0HIGH/CRITICAL, ONEfixableinheritedMEDIUMzlibCVE-2026-85091(1.3.2-r0→r1), identicalbasefinding. Explicittemporarypermission for this finding is requested again, with ownerT05/riskrecorddueOct18; no zero-CVE/RiskNexusgradeclaim. Rawscan/SBOM/base scan stay unchangedhashbound via publishedreceipt; exacthelperandoriginalcount-onlyreceipts directlybundle-bound within20docs.
After rescue+offlinegates, distinctcutoverbackup/copy and manualArgoDeployment-only image763c/prune=false remain conditional. FourcommittedKustomizeblobs/currentfinalsourceHEAD/helpers/casehashes match; automated{} or overrides refuse. Config6c/schema5/PVC/identity/policies/replica1Recreate stayfixed. Rollbackdoesnotneed Readycandidate or itsDBexec; oldimageReady/scopedoperation/schema5currentDB is a separateproof. Preserve latestliveDB/allnewcommits and alluncertainoutcomes; neverrestoreolderbackup overlaterrecords.
Allphases including rescue/recovery/verify mustbegin beforeOct12 23:59:59Z; expiryrequiresnewdecision and maydelayrecovery. No automaticexpirycontroller. Freshroot-authenticated nativefounderacceptance version2 beforeeachphase; receipts are supervisedbookkeeping, notsignedgrant/autonomy. EUR0 recurringinfra, existingprivatecopy/storage/attendedtime unpriced; no secondnative drillbackup. Exactoriginalapprovedpacket/failure/technicalrefinements preserved sameproposal/trial. No version2nativeoperation yet.