ops-warden/wiki/playbooks
tegwick 661176e37a
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Retire CoulombCore references; correct the 16443 diagnosis
CoulombCore is being retired, so the docs stop using it as the reference host:
state-hub-coulombcore examples become state-hub-railiance01, and the reuse-surface
playbook no longer attributes bao.coulomb.social to it — that resolves to
92.205.62.239, which is railiance01. The openrouter lane keeps its factual note
about ESO on the CoulombCore cluster, with a retirement flag for its owner.

Also corrects this session's own error. The WP-0031 evidence blamed the
Unauthorized on a local-port collision between k3s-api-coulombcore and
k3s-api-haskelseed. That was wrong: the haskelseed tunnel is a reverse forward,
where local_port is a destination rather than a listener, so they never competed.
16443 was simply CoulombCore's k3s — a different cluster whose client CA does not
know that cert. The wrong reason had already gone to flex-auth, so it is
corrected in the file rather than quietly dropped.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-19 19:31:41 +02:00
..
activity-core-issue-sink.md Add activity-core-issue-sink routing playbook and catalog entry 2026-06-18 22:34:59 +02:00
agent-harness-secrets.md WARDEN-WP-0029: implement plan front door, org posture, desk, freshness 2026-07-18 16:59:37 +02:00
agent-read-boundary.md WARDEN-WP-0028: tenant secrets on mount tenants/ (first lane draft) 2026-07-17 00:09:28 +02:00
audit-core-senders.md Add draft routing entry audit-core-senders 2026-08-13 10:27:13 +02:00
binky-company-email-imap.md WARDEN-WP-0028: promote binky-company-email-imap active 2026-07-17 00:33:20 +02:00
binky-qonto-api.md catalog: promote binky-qonto-api to active (CCR-2026-0008) 2026-07-21 21:42:10 +02:00
catalog-lane-promotion.md Ship WARDEN-WP-0030: delegation register for every catalog lane 2026-08-15 20:54:58 +02:00
coulomb-social-runtime-env.md Note apps-pg live and coulomb-social DB connectivity in playbook 2026-08-09 02:18:17 +02:00
database-dynamic-credentials.md Route dynamic database credentials to rapp-postgres 2026-08-10 19:37:05 +02:00
email-connect-transactional.md Route email-connect transactional SMTP and ingest token. 2026-08-12 13:32:11 +02:00
exposed-taint.md WARDEN-WP-0026 finish Strand A (T04/T05/T07) 2026-07-16 23:26:26 +02:00
forgejo-admin-api-token.md WARDEN-WP-0029: implement plan front door, org posture, desk, freshness 2026-07-18 16:59:37 +02:00
issue-core-ingestion-api-key.md Promote issue-core-ingestion-api-key and openrouter-llm-connect lanes to active 2026-07-02 20:48:39 +02:00
object-storage-sts.md Complete WARDEN-WP-0012 routing scenario playbooks 2026-06-25 10:27:23 +02:00
openrouter-llm-connect.md Retire CoulombCore references; correct the 16443 diagnosis 2026-08-19 19:31:41 +02:00
operator-openbao-token-hygiene.md Add ops-warden-warden-sign-token routing lane for RAILIANCE-WP-0005 T08 2026-07-01 23:16:38 +02:00
ops-bridge-tunnel-cert.md Retire CoulombCore references; correct the 16443 diagnosis 2026-08-19 19:31:41 +02:00
ops-warden-warden-sign-token.md Add ops-warden-warden-sign-token routing lane for RAILIANCE-WP-0005 T08 2026-07-01 23:16:38 +02:00
railiance-backup-offsite-lane.md WARDEN-WP-0026 finish Strand A (T04/T05/T07) 2026-07-16 23:26:26 +02:00
rein-openweights-openrouter-approle.md Promote rein-openweights-openrouter-approle: draft -> active 2026-07-27 01:51:57 +02:00
reuse-surface-hub-write-token.md Retire CoulombCore references; correct the 16443 diagnosis 2026-08-19 19:31:41 +02:00
scaleway-bootstrap.md catalog: draft scaleway-bootstrap lane 2026-08-14 17:36:17 +02:00
scheduled-worker.md feat(WARDEN-WP-0021): T3-T5 — visibility, approve loop, runbook (scheduled worker complete) 2026-06-30 15:24:10 +02:00
tenant-secret-onboarding.md WARDEN-WP-0028: tenant secrets on mount tenants/ (first lane draft) 2026-07-17 00:09:28 +02:00
whynot-design-npm-publish.md feat(WARDEN-WP-0019): route secret-exec lanes to secrets-engine (route-primary, proxy fallback) 2026-06-29 17:41:49 +02:00