tegwick
c96b0c6d88
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
87 lines
6.5 KiB
JSON
87 lines
6.5 KiB
JSON
{
|
|
"proposal_id": "INFD-WP-0009-T04/purpose-overlay-v1",
|
|
"trial_id": "infd-purpose-20261011-r1",
|
|
"state": "prepared-unapproved",
|
|
"target": "realm:kubernetes/railiance01/informed-decision",
|
|
"authority": "ADMINISTER; activation APPROVED only upon exact founder disposition",
|
|
"candidate_image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a",
|
|
"published_source_revision": "3e4bcb26f8eeaa8c64345c565477b5ac8ccbb168",
|
|
"prior_image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:7f5c6cb29c9f70a026bfe30e72934274ddc69261676cf6d476f81dd32812d173",
|
|
"prior_argo_revision": "7db8485ffecdebfabd77a9daec085553c74bf0bf",
|
|
"native_object": {
|
|
"apiVersion": "apps/v1",
|
|
"kind": "Deployment",
|
|
"namespace": "informed-decision",
|
|
"name": "informed-decision",
|
|
"uid": "a588e10a-90d2-4883-975e-6dd8b8feca92"
|
|
},
|
|
"argo_application_uid": "499868f2-eabc-4df4-ae31-b89ce58d750d",
|
|
"source_gate": "All four exact committed owner Kustomize input blobs in execution-plan.json and clean current owner HEAD must match; source preparation is not native approval",
|
|
"sync_scope": [
|
|
"apps:Deployment:informed-decision"
|
|
],
|
|
"prune": false,
|
|
"automated_sync": false,
|
|
"runtime_configmap": "informed-decision-runtime-6c221878d051",
|
|
"schema": 5,
|
|
"requested_operations": [
|
|
"Protected SQLite-consistent native backup and independently protected off-cluster custody",
|
|
"Offline restore/integrity/count comparison on a private disposable volume with exact candidate, no runtime tokens/config/network",
|
|
"Refresh a consistent pre-cutover snapshot, retain private copies and count-only/hash receipts",
|
|
"Pin existing manual Argo Application to exact approved owner source and manually sync only existing Deployment image",
|
|
"Verify health/readiness/image/module/installed fail-closed purpose checks and retained schema/count evidence; recover to prior same-schema image if needed"
|
|
],
|
|
"execute_by": "2026-10-12T23:59:59Z",
|
|
"temporary_vulnerability_review_due": "2026-10-18",
|
|
"known_scan_findings": "0HIGH/CRITICAL,1fixable inheritedMEDIUM zlib, actual currentbase+candidate findings identical",
|
|
"vulnerability_record": "INFD-RISK-20261011-ZLIB-85091 / INFD-WP-0009-T05",
|
|
"cost_estimate_EUR": 0,
|
|
"cost_limits": "No new recurring infrastructure; private backup storage and attended engineering/recovery time unpriced, not an autopilot cost grant",
|
|
"risk_estimates": [
|
|
"Brief Recreate service interruption; no concurrent new writer/surge",
|
|
"Private evidence snapshot custody and disposal errors; no snapshots/tokens in public evidence",
|
|
"Candidate purpose refusal may expose callers relying on advisory results as binding",
|
|
"Inherited known fixable MEDIUM remains until separately approved owner remediation",
|
|
"Existing Argo OutOfSync baseline is retained; no whole-app sync or unrelated repairs permitted",
|
|
"All phases, including recovery/verification, must begin before Oct12 deadline; if recovery window is exhausted stop and obtain a fresh founder decision. No automatic expiry controller."
|
|
],
|
|
"rollback": "Manual Argo source pin back to7db8485 and scoped Deployment-only sync to7f5c image; retain current schema5 database and all post-cutover evidence, never restore older snapshot over live writes",
|
|
"native_executed": false,
|
|
"human_approval": false,
|
|
"refinement_of_manifest": "7c6738b39ea8e54e61c8ed625e94ad0b2755e672e1576efcdf84a1d665ac3300",
|
|
"mandatory_pre_open_gate": "stdlibSQLite mode=ro/query_only: schema5+integrity+count baseline before ANY Store/admin on native source or restoredcopy; refuseoldschemas without migration",
|
|
"optimized_interpreters": "local+remote explicitlyrefused beforeassert gates",
|
|
"native_dependency_gate": "sealed actualCM UID/immutable/canonicaldatahash+PVC UID/fullspec/Bound/volumeName, no rawCMdata orSecret reads",
|
|
"live_counts": "Frozen snapshot/clone exactcounter equality; postcutover/rollback livecounterchanges may reflect legitimate concurrentcommits/state transitions, latestDB alwaysretained",
|
|
"source_basis": {
|
|
"reviewed_protocol_commit": "e0359bcb6cdfad9ab3e868054121fe0cebec2d68",
|
|
"owner_followthrough_commit": "9268c9ac0bbee508fe35c0b90dcefef4c24da2f5",
|
|
"final_execution_source": "exact subsequent root-applied source commit must be bound by founder receipt and verified against four approved Git blobs"
|
|
},
|
|
"approved_owner_render_blob_sha256": {
|
|
"deploy/lifecycle/admission.candidate.json": "92382a56b349c3b895e5806e975082527bb99d1a001140e69d857e5b0391fa55",
|
|
"deploy/lifecycle/service.candidate.json": "38b78b9cbee5ade7750a58d5156ca4c5773352e947acb304ee714b59e749ceb4",
|
|
"deploy/lifecycle/kustomization.yaml": "1bbce81bc6758434354157f8601534320c5d0290587908fd15a6d25e3fa57f47",
|
|
"deploy/lifecycle/registries.candidate.json": "9bad6db5fbc2178d31b04120016a41830c3552fbb9e2517b718f9bbe87cf649e"
|
|
},
|
|
"execution_bundle_sha256": "27d6d6d3133c963da1dde92d498d636617387c16e850a17c598148abc35c775d",
|
|
"execution_helper_manifest_sha256": "f2fad6c251fbb4420e07c1329802f521b513bbf66e51f64c5d673ef04f16284c",
|
|
"execution_plan_sha256": "f5e5fa906ff19d3a45d10dcdb2810373ae21f9cf44c0472ff2bd47d3bc3328d6",
|
|
"execution_phases": [
|
|
"drill-backup",
|
|
"drill-copy",
|
|
"offline-verify",
|
|
"cleanup-offline",
|
|
"cutover-backup",
|
|
"cutover-copy",
|
|
"release",
|
|
"verify",
|
|
"rollback",
|
|
"rollback-verify"
|
|
],
|
|
"deadline_semantics": "All phases including verification/recovery must begin before execute_by. No extension or automatic emergency grant; beyond deadline stop and obtain a fresh founder decision. Complete the bounded drill and rollout early enough to allow recovery within the window.",
|
|
"offline_initializer": "One isolated local UID0:0/CAP_CHOWN-only initializer of the newly created nonce-bound disposable volume, exact candidate image, networknone/readonlyroot/no-newprivileges/CPU1/128Mi; no host/livePVC/token/config mount. Subsequent pre-open/admin/post-open checks UID10001:10001.",
|
|
"rollback_dispatch": "Sealed Deployment/CM/PVC and same-schema source/image pair plus admission CAS; no Ready candidate or Pod/database exec prerequisite. rollback-verify separately proves recovered old image/Ready1/scoped operation and readonly current schema5/integrity/counts.",
|
|
"purpose_proof_limit": "Ten installed synthetic-transport checks on actual placement; native_provider=false. Not actual provider/PDP authority proof, which remains a distinct T04 completion gate.",
|
|
"refinement_of_amended_manifest": "b1e3e66bc4023dc80c6ea59564c3557c7653fb3c307f46a049997b76198a9033"
|
|
}
|