railiance-apps/workplans/archived/260702-RAILIANCE-WP-0010-inbox-suggestion-guardrails.md

---
id: RAILIANCE-WP-0010
type: workplan
title: "Inbox suggestion guardrails"
domain: financials
repo: railiance-apps
status: finished
owner: codex
topic_slug: railiance
created: "2026-06-15"
updated: "2026-06-15"
state_hub_workstream_id: "a4f301bb-3f49-450a-8dbd-5cf6a16b8e0f"
---

> **Terminology note:** Historical text in this archived workplan may use the legacy term "workstream". The fleet term is **workplan** (`canon/standards/workplan-terminology-fleet_v0.1.md`).

# Inbox suggestion guardrails

## Apply reuse-surface production guardrails

```task
id: RAILIANCE-WP-0010-T01
status: done
priority: high
state_hub_task_id: "658bde0e-708f-42d9-9b8f-b096bb0b07d6"
```

Added Railiance01 kubeconfig guardrails to the reuse-surface Makefile targets,
documented the production kubeconfig restore path, added `make reuse-smoke`,
and corrected stale `RAILIANCE-WP-0007` host/TLS notes to `92.205.62.239`.

## Document inter-hub rollout verification

```task
id: RAILIANCE-WP-0010-T02
status: done
priority: high
state_hub_task_id: "857a4d75-cc09-4bd1-970d-5db866354ef3"
```

Added Makefile support for `INTER_HUB_IMAGE_TAG=<sha>` deploy overrides, aligned
server dry-run handling, and documented the release inspection, migration
boundary, immutable legacy selector guardrail, and v2 API smoke gate in
`docs/inter-hub-on-railiance01.md`. The production deploy target now requires an
explicit image tag to avoid silently deploying a stale checked-in value.

## Adopt State Hub task status canon

```task
id: RAILIANCE-WP-0010-T03
status: done
priority: medium
state_hub_task_id: "0192f41a-d267-4cb7-ac2d-d03de0341c18"
```

Updated `AGENTS.md` task status examples from the legacy aliases to the
canonical `wait`, `todo`, `progress`, `done`, and `cancel` values.