Record verified approved Policy Nexus deployment

Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a15374-f59f-7a31-86d2-d23b5d2ed181
2026-10-19 17:55:35 +02:00 · 2026-10-19 17:55:35 +02:00 · 3851865c87
commit 3851865c87
parent 170e9b702c
2 changed files with 85 additions and 2 deletions
--- a/bindings/policy-nexus-production.json
+++ b/bindings/policy-nexus-production.json
@ -18,6 +18,6 @@
  "publication_source_revision": "9fabcce1cb4c83165bcaba8be58d76788b4d87a1",
  "source_lock_digest": "c150c6c0745441b4b69884ecc6cf55e97db26080fcf4c2224775b1f755580529",
  "approval_ref": "conversation:call_5157a09329d34746a3fdf857d5a47b8d:item0",
-  "verified_helm_revision": null,
-  "native_verification_ref": null
+  "verified_helm_revision": 10,
+  "native_verification_ref": "docs/evidence/2026-10-19-build-mode-publication/receipt.json"
 }
--- a/docs/evidence/2026-10-19-build-mode-publication/receipt.json
+++ b/docs/evidence/2026-10-19-build-mode-publication/receipt.json
@ -0,0 +1,83 @@
+{
+  "proposal_id": "POLICY-PUB-20261019-BUILD-MODE-GUARDRAIL-R1",
+  "approved_revision": 1,
+  "approved_packet_hashlist_sha256": "309ef01650b65bc6b28e86daad9b2835a242631cf60e0896e849461bb917504f",
+  "approval_ref": "conversation:call_5157a09329d34746a3fdf857d5a47b8d:item0",
+  "result": "verified",
+  "helm_revision": 10,
+  "rollback_required": false,
+  "rollback_revision": 9,
+  "candidate_source_revision": "9fabcce1cb4c83165bcaba8be58d76788b4d87a1",
+  "candidate_origin": "local owner-format build; native CI run89 retained failed, no new CI success claimed",
+  "change_gate": {
+    "decision": "the-custodian/docs/kubernetes-change-gate-decision.md",
+    "target_tier": "production",
+    "readiness_state": "production-approved",
+    "path": "direct-administer-transition",
+    "auth_mode": "ADMINISTER @ realm:kubernetes/railiance01",
+    "activation": "APPROVED",
+    "evidence_boundary": "target-audited",
+    "transition_ends": "2026-12-21"
+  },
+  "native": {
+    "capture_utc": "2026-10-19T13:35:06.098696+00:00",
+    "cluster_mutated": false,
+    "expected_node_ip": "92.205.62.239",
+    "expected_node_ip_present": true,
+    "helm_revision": 10,
+    "helm_status": "deployed",
+    "image_matches_candidate": true,
+    "machine_id_sha256": "fe7367a60951922122af7ba18ed2cde65c7e0a232bbedfb045cb575de2094c2f",
+    "ready_replicas": 1,
+    "release_pin_matches": {
+      "publication-manifest-digest": true,
+      "source-inventory-digest": true,
+      "source-set-digest": true
+    },
+    "replicas": 1,
+    "secret_values_observed": false,
+    "ssh_alias": "railiance01"
+  },
+  "public": {
+    "verified": true,
+    "capture_utc": "2026-10-19T13:36:20.944233+00:00",
+    "hashes": {
+      "publication_manifest_digest": "8c74b4e414f7760429600b7ba0b3627fcfe438417bfe6695f55acfa6905d352e",
+      "source_inventory_digest": "e84453b6b411a7d66d2b5efbf083cd0033441d6b12983326442933da87bf61fd",
+      "source_lock_digest": "c150c6c0745441b4b69884ecc6cf55e97db26080fcf4c2224775b1f755580529"
+    },
+    "source_set_digest": "b00535063c56ede08f0a292b301a47add18bf70f81904bf3f434c8faa5ebe682",
+    "document_count": 74,
+    "previous73_source_digests_unchanged": true,
+    "added_document": "canon-build-mode-change-authorization",
+    "all_canonical_and_revision_pages_byte_equal_candidate": true,
+    "page_and_artifact_count": 150,
+    "guardrail_expiry_banner": "Expires on: production-close-down",
+    "guardrail_json_byte_equal_verified_candidate": true,
+    "guardrail_json_sha256": "a86462a57bb1df5804d3088881af22569082d43ff68bcab2b67cbe56b6fc46cd",
+    "tls_verified": true,
+    "refinements": [
+      "Initial verifier incorrectly expected hosting transition date2026-12-21 in canon expiry.",
+      "Second verifier expected source expires_on label rather than rendered Expires on.",
+      "Correct final assertion matches approved rendered banner; both failed checks retained, artifact and deployment unchanged."
+    ]
+  },
+  "deployment": {
+    "started_utc": "2026-10-19T13:34:20.566225+00:00",
+    "command": [
+      "make",
+      "policy-nexus-deploy",
+      "POLICY_NEXUS_TARGET=railiance01"
+    ],
+    "atomic": true,
+    "attempt": 1,
+    "approval_ref": "conversation:call_5157a09329d34746a3fdf857d5a47b8d:item0",
+    "completed_utc": "2026-10-19T13:34:26.648713+00:00",
+    "returncode": 0,
+    "raw_output_suppressed": true
+  },
+  "owner_source_commits": {
+    "rapp-policy-nexus": "6ead90ffa4ae5742c37c292485762e83113382c3",
+    "railiance-apps": "3be92daf74a7572319bfe94dd882a70430528343"
+  }
+}