Lock DEC-FDA-001 working defaults; add roles/host-operator package with OS/security and load protocols; scaffold eng-coulomb-railiance01-ho-001 with bound agent, vault, ramp checklists, and Kai quote/ledger.
1.8 KiB
1.8 KiB
| agent | engagement_id | project | last_updated | session_count | confidentiality |
|---|---|---|---|---|---|
| host-operator | eng-coulomb-railiance01-ho-001 | coulomb-railiance01 | 2026-07-16 | 0 | client_owned |
Host Operator Memory — railiance01 pilot
Engagement Charter
- Duty: Keep railiance01 operational and secure; OS currency; load and workload review
- Cadence: daily health/load (business days); weekly OS/security pass
- Change windows: prefer low-traffic periods; reboot only with human approval
- Escalation: coulomb / railiance human operator (Bernd / on-call as designated)
- Out of scope: app features; other hosts; secret vending
Project Context
Coulomb ecosystem production host railiance01 runs k3s and platform workloads
(including Forgejo/apps per railiance-hosts docs). This engagement is the first
forward-deployed host-operator pilot (KAIZEN-WP-0009).
Host Profiles
| hostname | role | typical load | services | last review |
|---|---|---|---|---|
| railiance01 | k3s production | TBD ramp-up | k3s, forgejo/apps (inventory) | never |
OS & Patch State
Pending first OS security pass (RU-05 / weekly protocol).
Security Posture
Pending first security snapshot (RU-05).
Load & Workload Envelope
Pending first load review (RU-06).
Accumulated Findings
None yet.
What Worked
None yet.
Watch Points
- Single-node production: privileged mistakes have full blast radius
- DinD / Actions runner privilege model on railiance01 (see railiance-hosts ADRs)
- Disk growth from images, logs, and backups
Recurring Findings
None yet.
Cleared Issues
None yet.
Open Threads
- Complete RU-01 access verification
- Capture baseline
vault/baselines/railiance01.md - First health + load review report