Configure the invited Vergabe prototype at 60m CPU

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc

docs/evidence/2026-09-11-vergabe-pilot-60m.json

@@ -0,0 +1,60 @@
+{
+  "captured_at": "2026-09-11T16:32:35.266833+00:00",
+  "mode": "source_validation_only",
+  "user_decision": "explicit acceptance of 60m requested CPU for one tenant with very few users",
+  "sizing_workplan": "CUST-WP-0071",
+  "sizing_workplan_uuid": "2249bddb-7524-5add-bd5c-c4163a6ca0f3",
+  "image": "forgejo.coulomb.social/coulomb/vergabe-teilnahme@sha256:963240ef4180a01e5b8af7fbeb88be27e56203a45da8ecd633326b4c6d262005",
+  "resources": {
+    "limits": {
+      "cpu": "1000m",
+      "memory": "1Gi"
+    },
+    "requests": {
+      "cpu": "60m",
+      "memory": "256Mi"
+    }
+  },
+  "replicas": 1,
+  "strategy": {
+    "type": "Recreate"
+  },
+  "distinct_retained_claims": [
+    "vergabe-teilnahme-media",
+    "vergabe-teilnahme-app-state"
+  ],
+  "helm_lint_exit": 0,
+  "helm_render_exit": 0,
+  "cluster_snapshot": {
+    "allocatable_cpu_m": 4000,
+    "requested_cpu_m": 3905,
+    "pilot_request_m": 60,
+    "remaining_after_pilot_m": 35,
+    "source": "fresh kubectl describe nodes in this session; API read-only; no deployment performed"
+  },
+  "binding_status": "tenant/host/empty-versus-existing data choice pending; example hostname remains unassigned",
+  "checks": [
+    "effective request 60m",
+    "CPU limit 1000m",
+    "memory request 256Mi and limit 1Gi",
+    "one Recreate replica",
+    "exact published image digest",
+    "two distinct retained PVCs"
+  ],
+  "live_deployment_performed": false,
+  "database_metadata": {
+    "source": "read-only Kubernetes CNPG CRs; no SQL or secret data reads",
+    "cluster": "databases/apps-pg",
+    "ready_instances": 1,
+    "database_cr": "vergabe-db",
+    "database_name": "vergabe_db",
+    "owner_role": "vergabe",
+    "applied": true,
+    "managed_consumers": 2,
+    "per_consumer_connection_limit": 20,
+    "last_successful_backup": "2026-09-11T02:15:11Z",
+    "daily_schedule": "0 15 2 * * *",
+    "data_reuse_selected": false
+  },
+  "decision_id": "d221e067-078a-4867-be26-46d07ba82d26"
+}

docs/vergabe-teilnahme-pilot.md

@@ -108,9 +108,32 @@ acceptance remain open. See `docs/evidence/2026-09-11-invited-pilot-release.json
 for source, CI and artifact receipts; this candidate has not been deployed.
 
 
-The shared `databases/apps-pg` cluster is currently healthy (1/1). The node has
-4000m allocatable CPU and 3905m in requests, leaving 95m against this pilot's
-100m request. This is a reservation constraint, not a utilization measurement.
-RAPPS-WP-0014-T02 retains capacity admission before deployment; use existing
-owner observations or add capacity, and retain operating room for factory
-services. Do not silently reduce the pilot request to make the chart fit.
+## Accepted prototype allocation — 2026-09-11
+
+The user explicitly accepts a 60m CPU request for this invited prototype with
+one tenant and very few users. Set `resources.requests.cpu: 60m` in the company
+binding, as shown in the pilot example. The chart's inherited 100m was an initial
+May 19 default, not a measured requirement. CPU limit remains 1000m, memory
+request 256Mi and memory limit 1Gi; one replica and Recreate remain in effect.
+
+Fresh metadata shows `databases/apps-pg` healthy (1/1), 4000m allocatable CPU and
+3905m requested. The 60m pilot application fits the current 95m reservation
+headroom with 35m remaining. This is a scheduling snapshot, not a throughput,
+latency or availability guarantee; database and host demand are separate.
+Refresh the actual rendered placement and transient migration demand before
+applying. The user accepts low allocation to exercise deployment and onboarding
+without first optimizing other infrastructure. Do not change unrelated services.
+
+CUST-WP-0071 (`the-custodian/workplans/CUST-WP-0071-measured-workload-sizing-and-weekly-review.md`)
+is registered for later measurement, sizing changes and a final weekly
+assessment setup. It is not a prerequisite to this prototype. Exact tenant/host/
+data binding, protected access and the pilot's existing recovery/onboarding
+checks continue in RAPPS-WP-0014 and VERGABE-WP-0019. See factory decision
+`decisions/0012-accept-60m-invited-prototype.md`.
+
+
+Read-only CNPG metadata also reports `vergabe-db` applied for `vergabe_db` owned
+by `vergabe`, two managed consumers with 20-connection limits, and the most recent
+apps-pg backup successful at 2026-09-11T02:15:11Z. This establishes the declared
+database/backup metadata; no customer data was read, selected for reuse or
+modified. The tenant/data choice remains open.