kaizen-agentic/engagements/pilots/eng-coulomb-railiance01-ho-001/vault/handoff/risks.md

# Outstanding risks — eng-coulomb-railiance01-ho-001

Populated during operate; finalise at ramp-down (RD-03).

| Risk | Severity | Mitigation / owner | Status |
|------|----------|--------------------|--------|
| RAM undersized (3.8G, no swap) for k3s+platform density | Critical | Human capacity decision (RAM and/or swap); reduce concurrent load | open |
| k3s API ServiceUnavailable under pressure | Critical | Stabilize memory; re-check API; avoid heavy kubectl while degraded | open |
| Load average ≫ 2 cores | High | Same as capacity; schedule non-urgent work off-host | open |
| journald ~4.1G | Medium | Approved journal vacuum | open |
| Pending security package updates | Medium | Approved OS security pass | open |
| UFW allows 6443/8472 from Anywhere | Medium | Policy review + possible firewall_change | open |
| Reverse-forward port 18765 collisions | Low–Medium | Bridge/tunnel cleanup | open |
-												feat: Phase 1 FDA host-operator Role and railiance01 pilot (WP-0009 T02–T07)

Lock DEC-FDA-001 working defaults; add roles/host-operator package with
OS/security and load protocols; scaffold eng-coulomb-railiance01-ho-001
with bound agent, vault, ramp checklists, and Kai quote/ledger.

											
										
										
											2026-07-16 10:47:52 +02:00
+								# Outstanding risks — eng-coulomb-railiance01-ho-001
-												ops: complete host-operator ramp-up on railiance01 (WP-0009 T10)

Live observe session verified SSH access, captured baseline and Critical
health/load findings (memory pressure, k3s API unavailable). RU checklist
closed; engagement phase operating; schedule enabled; no privileged changes.

											
										
										
											2026-07-16 12:43:00 +02:00
+								Populated during operate; finalise at ramp-down (RD-03).
-												feat: Phase 1 FDA host-operator Role and railiance01 pilot (WP-0009 T02–T07)

Lock DEC-FDA-001 working defaults; add roles/host-operator package with
OS/security and load protocols; scaffold eng-coulomb-railiance01-ho-001
with bound agent, vault, ramp checklists, and Kai quote/ledger.

											
										
										
											2026-07-16 10:47:52 +02:00
 								| Risk | Severity | Mitigation / owner | Status |
 								|------|----------|--------------------|--------|
-												ops: complete host-operator ramp-up on railiance01 (WP-0009 T10)

Live observe session verified SSH access, captured baseline and Critical
health/load findings (memory pressure, k3s API unavailable). RU checklist
closed; engagement phase operating; schedule enabled; no privileged changes.

											
										
										
											2026-07-16 12:43:00 +02:00
+								| RAM undersized (3.8G, no swap) for k3s+platform density | Critical | Human capacity decision (RAM and/or swap); reduce concurrent load | open |
 								| k3s API ServiceUnavailable under pressure | Critical | Stabilize memory; re-check API; avoid heavy kubectl while degraded | open |
 								| Load average ≫ 2 cores | High | Same as capacity; schedule non-urgent work off-host | open |
 								| journald ~4.1G | Medium | Approved journal vacuum | open |
 								| Pending security package updates | Medium | Approved OS security pass | open |
 								| UFW allows 6443/8472 from Anywhere | Medium | Policy review + possible firewall_change | open |
 								| Reverse-forward port 18765 collisions | Low–Medium | Bridge/tunnel cleanup | open |