coulomb/railiance-apps
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Keep future Coulomb release evidence directories private
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a18e2d-f513-7742-b8e7-12af0b744ff3
This commit is contained in:
tegwick 2026-10-31 12:44:59 +01:00
parent d795120f98
commit 904dcb3ce3
4 changed files with 99 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

23
workplans/RAPPS-WP-0015-coulomb-personal-content-release.md
View file

@ -399,3 +399,26 @@ packaged client export verifies85files without source mutation. Full make check
441passes, zero skips. Release decision75b94bb6 is resolved only for that exact
execution; RAPPS-WP-0015-T05 is complete. Productive flow and service/offboarding
acceptance remain open. Return: docs/release/identity-export-release-return-2026-10-31.md.
## T06 — Preserve private custody when freezing future release evidence
```task
id: RAPPS-WP-0015-T06
status: done
priority: high
needs_human: false
```
Source correction for CSOC-WP-0012-T13 after backup installation preflight exposed
0755 intermediate capsule directories from completed releases. The current image
controller creates each component with mode0700 through no-follow directory
file descriptors, checks private ownership/mode and refuses unsafe existing state.
It does not chmod historical directories or replay the completed release. Files
remain0600. The old storage capsule remains frozen; it is not a current release path.
Validation: 24 focused release safety cases pass, including a nested chart under
umask022 and refusal of broad, symlinked, ancestor-symlinked and non-directory
parents without mutation. Ruff and git diff --check pass. Product receipt:
coulomb-social/docs/release/backup-producer-custody-validation-2026-10-31.json.
The historical eight-entry repair and recurring service acceptance remain product
T04/T09. No cluster operation occurred; future release proposals bind the new source.