diff --git a/workplans/PNEX-WP-0004-fleet-standards-publication-and-ci-source-auth.md b/workplans/PNEX-WP-0004-fleet-standards-publication-and-ci-source-auth.md index b19675d..bc34fd1 100644 --- a/workplans/PNEX-WP-0004-fleet-standards-publication-and-ci-source-auth.md +++ b/workplans/PNEX-WP-0004-fleet-standards-publication-and-ci-source-auth.md @@ -193,8 +193,15 @@ Nexus commit `1e6720b9eeba819b42133afcdfb9693608cddb42`, fetched the complete private-source inventory through the dedicated `read:repository` credential, passed release verification, and published candidate OCI digest `sha256:a3a2b7b8b9432535771b588b9c78c554924ec1adc6d5a9bbc1c35b28fea6b724`. -The scheduled candidate path is therefore operational; production promotion -remains a separate paired-digest decision. +The scheduled candidate path is therefore operational. + +Production promotion completed 2026-09-01 through paired binding commits +`rapp-policy-nexus@4b8cafb0660d91b2749b0273b68ed6c738ea689d` and +`railiance-apps@36a9937be126c17d1c2b10945e25938f707a2075`. Package, +registry, render, and Kubernetes server-side admission gates passed; Helm +revision 7 deployed atomically with revision 6 retained as the rollback +baseline. The live four-identity and public-surface smoke passed, with evidence +at `rapp-policy-nexus/evidence/live/2026-09-01-railiance01-governed-source-release.json`. ## Residuals