diff --git a/bindings/policy-nexus-production.json b/bindings/policy-nexus-production.json index c40815a..ce81297 100644 --- a/bindings/policy-nexus-production.json +++ b/bindings/policy-nexus-production.json @@ -18,6 +18,6 @@ "publication_source_revision": "9fabcce1cb4c83165bcaba8be58d76788b4d87a1", "source_lock_digest": "c150c6c0745441b4b69884ecc6cf55e97db26080fcf4c2224775b1f755580529", "approval_ref": "conversation:call_5157a09329d34746a3fdf857d5a47b8d:item0", - "verified_helm_revision": null, - "native_verification_ref": null + "verified_helm_revision": 10, + "native_verification_ref": "docs/evidence/2026-10-19-build-mode-publication/receipt.json" } diff --git a/docs/evidence/2026-10-19-build-mode-publication/receipt.json b/docs/evidence/2026-10-19-build-mode-publication/receipt.json new file mode 100644 index 0000000..054b82f --- /dev/null +++ b/docs/evidence/2026-10-19-build-mode-publication/receipt.json @@ -0,0 +1,83 @@ +{ + "proposal_id": "POLICY-PUB-20261019-BUILD-MODE-GUARDRAIL-R1", + "approved_revision": 1, + "approved_packet_hashlist_sha256": "309ef01650b65bc6b28e86daad9b2835a242631cf60e0896e849461bb917504f", + "approval_ref": "conversation:call_5157a09329d34746a3fdf857d5a47b8d:item0", + "result": "verified", + "helm_revision": 10, + "rollback_required": false, + "rollback_revision": 9, + "candidate_source_revision": "9fabcce1cb4c83165bcaba8be58d76788b4d87a1", + "candidate_origin": "local owner-format build; native CI run89 retained failed, no new CI success claimed", + "change_gate": { + "decision": "the-custodian/docs/kubernetes-change-gate-decision.md", + "target_tier": "production", + "readiness_state": "production-approved", + "path": "direct-administer-transition", + "auth_mode": "ADMINISTER @ realm:kubernetes/railiance01", + "activation": "APPROVED", + "evidence_boundary": "target-audited", + "transition_ends": "2026-12-21" + }, + "native": { + "capture_utc": "2026-10-19T13:35:06.098696+00:00", + "cluster_mutated": false, + "expected_node_ip": "92.205.62.239", + "expected_node_ip_present": true, + "helm_revision": 10, + "helm_status": "deployed", + "image_matches_candidate": true, + "machine_id_sha256": "fe7367a60951922122af7ba18ed2cde65c7e0a232bbedfb045cb575de2094c2f", + "ready_replicas": 1, + "release_pin_matches": { + "publication-manifest-digest": true, + "source-inventory-digest": true, + "source-set-digest": true + }, + "replicas": 1, + "secret_values_observed": false, + "ssh_alias": "railiance01" + }, + "public": { + "verified": true, + "capture_utc": "2026-10-19T13:36:20.944233+00:00", + "hashes": { + "publication_manifest_digest": "8c74b4e414f7760429600b7ba0b3627fcfe438417bfe6695f55acfa6905d352e", + "source_inventory_digest": "e84453b6b411a7d66d2b5efbf083cd0033441d6b12983326442933da87bf61fd", + "source_lock_digest": "c150c6c0745441b4b69884ecc6cf55e97db26080fcf4c2224775b1f755580529" + }, + "source_set_digest": "b00535063c56ede08f0a292b301a47add18bf70f81904bf3f434c8faa5ebe682", + "document_count": 74, + "previous73_source_digests_unchanged": true, + "added_document": "canon-build-mode-change-authorization", + "all_canonical_and_revision_pages_byte_equal_candidate": true, + "page_and_artifact_count": 150, + "guardrail_expiry_banner": "Expires on: production-close-down", + "guardrail_json_byte_equal_verified_candidate": true, + "guardrail_json_sha256": "a86462a57bb1df5804d3088881af22569082d43ff68bcab2b67cbe56b6fc46cd", + "tls_verified": true, + "refinements": [ + "Initial verifier incorrectly expected hosting transition date2026-12-21 in canon expiry.", + "Second verifier expected source expires_on label rather than rendered Expires on.", + "Correct final assertion matches approved rendered banner; both failed checks retained, artifact and deployment unchanged." + ] + }, + "deployment": { + "started_utc": "2026-10-19T13:34:20.566225+00:00", + "command": [ + "make", + "policy-nexus-deploy", + "POLICY_NEXUS_TARGET=railiance01" + ], + "atomic": true, + "attempt": 1, + "approval_ref": "conversation:call_5157a09329d34746a3fdf857d5a47b8d:item0", + "completed_utc": "2026-10-19T13:34:26.648713+00:00", + "returncode": 0, + "raw_output_suppressed": true + }, + "owner_source_commits": { + "rapp-policy-nexus": "6ead90ffa4ae5742c37c292485762e83113382c3", + "railiance-apps": "3be92daf74a7572319bfe94dd882a70430528343" + } +}