diff --git a/workplans/RAPPS-WP-0003-policy-nexus-production-binding.md b/workplans/RAPPS-WP-0003-policy-nexus-production-binding.md index db6325f..782d15a 100644 --- a/workplans/RAPPS-WP-0003-policy-nexus-production-binding.md +++ b/workplans/RAPPS-WP-0003-policy-nexus-production-binding.md @@ -8,7 +8,7 @@ status: finished owner: the-custodian topic_slug: railiance created: "2026-08-18" -updated: "2026-08-18" +updated: "2026-09-01" related: - POLICY-NEXUS-WP-0001 - RAPP-POLICY-NEXUS-WP-0001 @@ -97,3 +97,11 @@ release 1, verified its original image and publication identities, then restored release 2 and repeated the four-identity smoke successfully. Evidence is held by `rapp-policy-nexus` at `evidence/live/2026-08-18-railiance01-release2-rollback.json`. + +Follow-up 2026-09-01: the S5 binding approved Policy Nexus Actions run 32 as +the four-identity production release. Package, registry, render, and server-side +admission gates passed before the guarded target upgraded the release atomically +to Helm revision 7. The post-deploy smoke matched the approved OCI, publication +manifest, source inventory, and source-set digests and passed HTTPS, TLS, +canonical/immutable page, and legacy redirect checks. The rApp evidence is +`evidence/live/2026-09-01-railiance01-governed-source-release.json`.