fix(workplans): migrate archived workplans off the retired RAILIANCE-WP prefix
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Completes the migration begun on 2026-08-25, which covered active workplans
only. The archived copies kept their historical identifiers, and three
repositories shared one number space — so their task identifiers collided,
blocking task-level projection reset for those workplans.

Numbering continues each repository's active sequence rather than restarting,
so no identifier is reused. Projection UUIDs are re-derived from the new
canonical ids.

Refs CUST-WP-0068, STATE-WP-0083-T06

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
This commit is contained in:
codex 2026-08-26 08:05:43 +02:00
parent 2023d9a9ba
commit d03edc946c
10 changed files with 122 additions and 122 deletions

View file

@ -1,5 +1,5 @@
---
id: RAILIANCE-WP-0005
id: RAPPS-WP-0004
type: workplan
title: "S5 app release readiness and scope alignment"
domain: financials
@ -10,7 +10,7 @@ topic_slug: railiance
planning_priority: medium
created: "2026-06-04"
updated: "2026-06-05"
state_hub_workstream_id: "685f1c18-33c0-400d-a2b1-e1dae0f27c3e"
state_hub_workstream_id: "a14cafb3-816f-5e74-b208-98ddbcb6404a"
---
> **Terminology note:** Historical text in this archived workplan may use the legacy term "workstream". The fleet term is **workplan** (`canon/standards/workplan-terminology-fleet_v0.1.md`).
@ -48,10 +48,10 @@ This workplan turns those scope gaps into the next improvement strand.
## T01 - Write `INTENT.md`
```task
id: RAILIANCE-WP-0005-T01
id: RAPPS-WP-0004-T01
status: done
priority: high
state_hub_task_id: "af15d202-c013-48b1-8522-671477e31381"
state_hub_task_id: "8dc8f68f-852a-5d80-b89e-90dc64d8ae8e"
```
Create `INTENT.md` for `railiance-apps`.
@ -73,10 +73,10 @@ of carrying all purpose language itself.
## T02 - Normalize app image promotion and package registry docs
```task
id: RAILIANCE-WP-0005-T02
id: RAPPS-WP-0004-T02
status: done
priority: high
state_hub_task_id: "f8f63edb-a7ef-4692-8b01-66402d296cbb"
state_hub_task_id: "790315ce-aa74-5590-8db4-84920eb1d9c2"
```
Update app promotion docs after the `issue-core` package handoff is complete.
@ -103,10 +103,10 @@ compatibility pointers were removed later by `RAILIANCE-WP-0006-T10`.
## T03 - Create a reusable S5 app onboarding checklist
```task
id: RAILIANCE-WP-0005-T03
id: RAPPS-WP-0004-T03
status: done
priority: medium
state_hub_task_id: "4eab93a9-ad1b-46ca-97ef-18a059f64ab5"
state_hub_task_id: "fe695e14-9c37-56e8-a828-2ec6512e0c31"
```
Turn the `vergabe-teilnahme` deployment lessons into a reusable checklist for
@ -137,10 +137,10 @@ probe Host headers, smoke tests, runbook baseline, and State Hub sync.
## T04 - Define app data backup and restore handoffs
```task
id: RAILIANCE-WP-0005-T04
id: RAPPS-WP-0004-T04
status: done
priority: high
state_hub_task_id: "299d9623-3a54-4e85-9a70-016e8356c3d9"
state_hub_task_id: "78db641c-88bd-5f43-8880-8210bbd1655a"
```
Clarify where S5 app data durability begins and ends.
@ -173,10 +173,10 @@ S5 owns app release evidence and post-restore app checks, while
## T05 - Make manifest dry-run workflow prerequisites explicit
```task
id: RAILIANCE-WP-0005-T05
id: RAPPS-WP-0004-T05
status: done
priority: medium
state_hub_task_id: "6cf0e662-d7e2-48b1-b1f2-c7636240dd81"
state_hub_task_id: "46ad1075-91cc-5ae0-a81f-f6ac9dd454e7"
```
Document and, where useful, encode the assumptions behind
@ -206,10 +206,10 @@ from release-blocking manifest failures and note that
## T06 - Hand off Gitea package registry storage and retention posture
```task
id: RAILIANCE-WP-0005-T06
id: RAPPS-WP-0004-T06
status: done
priority: medium
state_hub_task_id: "382ba252-0f54-45fa-8e33-e656f4472341"
state_hub_task_id: "e56fcfa3-f7da-520f-a5f3-43d9809607db"
```
Document the forge-owned operating posture for Gitea package storage while

View file

@ -1,5 +1,5 @@
---
id: RAILIANCE-WP-0006
id: RAPPS-WP-0005
type: workplan
title: "Extract railiance-forge and formalize forge-layer contracts"
domain: financials
@ -10,7 +10,7 @@ topic_slug: railiance
planning_priority: high
created: "2026-06-04"
updated: "2026-06-05"
state_hub_workstream_id: "1960b22b-82ae-4b67-9fff-397bd38bdd65"
state_hub_workstream_id: "8ae14367-1bb1-5432-9bb3-8ee16a84c2ab"
---
> **Terminology note:** Historical text in this archived workplan may use the legacy term "workstream". The fleet term is **workplan** (`canon/standards/workplan-terminology-fleet_v0.1.md`).
@ -73,10 +73,10 @@ for cross-layer drift.
## T01 - Define the `railiance-forge` repository contract
```task
id: RAILIANCE-WP-0006-T01
id: RAPPS-WP-0005-T01
status: done
priority: high
state_hub_task_id: "129c2920-8868-4118-8772-ff5d925588cd"
state_hub_task_id: "29f99043-e0a9-5a3d-85ea-46c0f99a61b8"
```
Write the initial repository contract for `railiance-forge`.
@ -99,10 +99,10 @@ belongs there.
## T02 - Create and register the `railiance-forge` repository
```task
id: RAILIANCE-WP-0006-T02
id: RAPPS-WP-0005-T02
status: done
priority: high
state_hub_task_id: "0e71e5a6-ce3c-4334-abf3-750aa8bef4df"
state_hub_task_id: "cbe4abd6-93d9-5ec8-b518-66b2e5d7af1a"
```
Create the sibling repository and connect it to the work coordination model.
@ -124,10 +124,10 @@ indexing and no reliance on `railiance-apps` as its planning home.
## T03 - Move current forge deployment surface out of `railiance-apps`
```task
id: RAILIANCE-WP-0006-T03
id: RAPPS-WP-0005-T03
status: done
priority: high
state_hub_task_id: "57162f50-d1a4-4fb3-b4fa-503939b22450"
state_hub_task_id: "ece93d5b-0b0c-55f4-b35e-e452b9dca6e0"
```
Move the existing Gitea/registry operational surface into `railiance-forge`.
@ -161,7 +161,7 @@ Helm/SOPS/manifests and Makefile deploy/status targets also moved to
`railiance-forge` after the review in
`/home/worsch/railiance-forge/docs/deploy-capable-gitea-move-review.md`.
`railiance-apps` temporarily kept compatibility wrappers until
`RAILIANCE-WP-0006-T10`. No live deploy, SOPS decryption, or Kubernetes apply
`RAPPS-WP-0005-T10`. No live deploy, SOPS decryption, or Kubernetes apply
was run.
---
@ -169,10 +169,10 @@ was run.
## T04 - Re-scope `railiance-apps` and `railiance-enablement`
```task
id: RAILIANCE-WP-0006-T04
id: RAPPS-WP-0005-T04
status: done
priority: high
state_hub_task_id: "64ac73e7-abe5-47df-abbc-51aed25a7ce4"
state_hub_task_id: "9bee77a4-fe6e-5d59-814f-d22fe31e4386"
```
Update the adjacent repos so the new abstraction is visible in their own
@ -210,10 +210,10 @@ evidence.
## T05 - Define artifact lifecycle, retention, and provenance policy
```task
id: RAILIANCE-WP-0006-T05
id: RAPPS-WP-0005-T05
status: done
priority: high
state_hub_task_id: "a99520c3-91dc-4af0-9f9b-0f0b53137be5"
state_hub_task_id: "9e1100c0-e3cf-5ea3-926a-3a9e082a5c4f"
```
Make artifact ownership explicit for images, packages, and source-hosted
@ -240,10 +240,10 @@ Completed on 2026-06-05 in
## T06 - Define CI runner, Actions, and GitOps ownership
```task
id: RAILIANCE-WP-0006-T06
id: RAPPS-WP-0005-T06
status: done
priority: high
state_hub_task_id: "37945939-e7c5-4717-83d9-294873810fb3"
state_hub_task_id: "ecaf6fdb-5404-5c90-9c01-75d0a2fdb861"
```
Set the boundary between forge runtime, S4 reusable automation, and S5 release
@ -275,10 +275,10 @@ now point at that contract from their scope/intent docs.
## T07 - Define backup, restore, and secret handoff contracts
```task
id: RAILIANCE-WP-0006-T07
id: RAPPS-WP-0005-T07
status: done
priority: high
state_hub_task_id: "da8bfbab-4bc3-48f0-9837-acf43fec9f0c"
state_hub_task_id: "fe155b63-3771-58ec-b9a2-4f6927eabd5e"
```
Document how forge data and credentials interact with platform services.
@ -309,10 +309,10 @@ without owning registry credentials or package backup procedures.
## T08 - Add forge observability and operating evidence requirements
```task
id: RAILIANCE-WP-0006-T08
id: RAPPS-WP-0005-T08
status: done
priority: medium
state_hub_task_id: "ce2ebe48-052a-4e3e-86aa-441274940078"
state_hub_task_id: "c3fe2d46-c69a-5670-a896-b02d8c2649d3"
```
Close the framework gap around observability for the forge layer.
@ -345,10 +345,10 @@ and a possible future observability repo.
## T09 - Add Railiance Fabric declarations for forge capabilities
```task
id: RAILIANCE-WP-0006-T09
id: RAPPS-WP-0005-T09
status: done
priority: medium
state_hub_task_id: "fd231acc-fe55-417f-a27b-797e1f520e1d"
state_hub_task_id: "5aa3caf3-1d90-56c5-8b85-352fa44835df"
```
Use `railiance-fabric` to make the new layer visible as a graph contract.
@ -387,10 +387,10 @@ cycle. Validation passed with `0 error(s), 0 warning(s)`.
## T10 - Decommission compatibility pointers after migration
```task
id: RAILIANCE-WP-0006-T10
id: RAPPS-WP-0005-T10
status: done
priority: medium
state_hub_task_id: "5bca2a11-453c-4cd0-b86a-7ed269564dfb"
state_hub_task_id: "ad5db18a-69f9-51b2-98fb-03cb89372091"
```
After the new repo is operational, clean up transitional references.

View file

@ -1,5 +1,5 @@
---
id: RAILIANCE-WP-0007
id: RAPPS-WP-0006
type: workplan
title: "Deploy reuse-surface federation service on railiance01"
domain: financials
@ -9,7 +9,7 @@ owner: codex
topic_slug: railiance
created: "2026-06-15"
updated: "2026-06-15"
state_hub_workstream_id: "7da18dd8-76b9-4a70-b9d7-de541afc65c0"
state_hub_workstream_id: "f703ac97-bcfd-5fe4-8e9e-aff518761cd9"
---
> **Terminology note:** Historical text in this archived workplan may use the legacy term "workstream". The fleet term is **workplan** (`canon/standards/workplan-terminology-fleet_v0.1.md`).
@ -63,10 +63,10 @@ Follow the `inter-hub` pattern:
## Scaffold Helm Chart For reuse-surface
```task
id: RAILIANCE-WP-0007-T01
id: RAPPS-WP-0006-T01
status: done
priority: high
state_hub_task_id: "d296f037-67a3-4b49-a773-6ebc2b252f3d"
state_hub_task_id: "a383fc06-b624-5c76-880c-ecb536028317"
```
Create `charts/reuse-surface/` with Deployment (`reuse-surface serve`), Service,
@ -75,10 +75,10 @@ PVC, Ingress, probes on `/health`.
## Add Values, Secret Template, And Makefile Targets
```task
id: RAILIANCE-WP-0007-T02
id: RAPPS-WP-0006-T02
status: done
priority: high
state_hub_task_id: "5050e2fb-b60c-4519-9168-81a6073fb4a2"
state_hub_task_id: "6dd7ec2b-7606-51ea-aef7-2110814f5a83"
```
Add `helm/reuse-surface-values.yaml`, document Secret `reuse-surface-env`, and
@ -87,10 +87,10 @@ Makefile `reuse-*` targets.
## Configure Ingress For reuse.coulomb.social
```task
id: RAILIANCE-WP-0007-T03
id: RAPPS-WP-0006-T03
status: done
priority: medium
state_hub_task_id: "80dc308a-02e8-453c-a20a-d6f634b7ce12"
state_hub_task_id: "14236066-434c-5616-b432-2314b1f3a85d"
```
Ingress enabled in chart values:
@ -104,10 +104,10 @@ DNS A record live: `reuse.coulomb.social → 92.205.62.239`.
## Deploy Release To railiance01
```task
id: RAILIANCE-WP-0007-T04
id: RAPPS-WP-0006-T04
status: done
priority: medium
state_hub_task_id: "14049fd1-3319-4a76-8b48-c4228a7939f7"
state_hub_task_id: "90423829-b8b3-5026-9abd-d7943825e00a"
```
Helm revision 3 (image `cb7a6e4`). Pod Running; `/health` and `/v1/federated`
@ -116,10 +116,10 @@ verified. TLS Ready after DNS A → `92.205.62.239`.
## Post-Deploy Verification And Runbook
```task
id: RAILIANCE-WP-0007-T05
id: RAPPS-WP-0006-T05
status: done
priority: low
state_hub_task_id: "30b08789-4eb7-4182-87d1-8e464fc968d1"
state_hub_task_id: "f1f2ba9d-677b-51e0-a706-3841d3688b08"
```
Runbook `docs/reuse-surface-on-railiance01.md` updated with deploy evidence,

View file

@ -1,5 +1,5 @@
---
id: RAILIANCE-WP-0008
id: RAPPS-WP-0007
type: workplan
title: "Add friendly landing pages for S5 service endpoints"
domain: financials
@ -9,7 +9,7 @@ owner: codex
topic_slug: railiance
created: "2026-06-15"
updated: "2026-06-15"
state_hub_workstream_id: "41b9deea-a935-4372-8916-b3981336f597"
state_hub_workstream_id: "c6c20379-dc1a-504f-b2a8-e2b11b41d75a"
---
> **Terminology note:** Historical text in this archived workplan may use the legacy term "workstream". The fleet term is **workplan** (`canon/standards/workplan-terminology-fleet_v0.1.md`).
@ -57,10 +57,10 @@ The implementation must preserve the existing CLI/API surface:
## Define Landing Page Contract
```task
id: RAILIANCE-WP-0008-T01
id: RAPPS-WP-0007-T01
status: done
priority: high
state_hub_task_id: "ca47efdb-ed0e-47bf-90f3-5a78c6861ebf"
state_hub_task_id: "78d7e19b-e960-5d4a-b4d4-1815e008d58a"
```
Document the endpoint contract in `docs/s5-app-onboarding-checklist.md` or a
@ -78,10 +78,10 @@ of rediscovering the behavior per service.
## Add Reusable Helm Support
```task
id: RAILIANCE-WP-0008-T02
id: RAPPS-WP-0007-T02
status: done
priority: high
state_hub_task_id: "44dfe49f-a3f4-4381-a4ca-eb9218099868"
state_hub_task_id: "54cbb267-0274-598b-9ecd-8c78e3dd5ac0"
```
Add a reusable Helm pattern for a static landing page, either as shared snippets
@ -101,10 +101,10 @@ variants without changing non-landing deployments.
## Implement API-Only Landing Page For reuse.coulomb.social
```task
id: RAILIANCE-WP-0008-T03
id: RAPPS-WP-0007-T03
status: done
priority: high
state_hub_task_id: "4e90315d-f0f0-49ca-b44f-533c23a44e96"
state_hub_task_id: "ab182b68-bffa-5411-b2a2-3ab06fd73994"
```
Enable the landing-page pattern in `charts/reuse-surface` and
@ -126,10 +126,10 @@ and `/v1/federated` still reach the API service.
## Add Login-Forward Variant For UI Applications
```task
id: RAILIANCE-WP-0008-T04
id: RAPPS-WP-0007-T04
status: done
priority: medium
state_hub_task_id: "80c843b2-68d0-4f8a-aba6-39db1a2a6f70"
state_hub_task_id: "72c64573-5954-55f7-b98f-0ce316d1d0fd"
```
Prepare the values contract and at least one documented example for services
@ -143,10 +143,10 @@ Done when a future UI-backed app can set only values such as `redirectTarget`,
## Verify, Deploy, And Update Runbook
```task
id: RAILIANCE-WP-0008-T05
id: RAPPS-WP-0007-T05
status: done
priority: medium
state_hub_task_id: "0fc250a8-8fea-4c88-bd81-ad7ecf6143a1"
state_hub_task_id: "3fd5195c-4717-529d-ba29-4ae1a0cecbe8"
```
Render, deploy, and smoke-test the reuse landing page on railiance01:

View file

@ -1,5 +1,5 @@
---
id: RAILIANCE-WP-0009
id: RAPPS-WP-0008
type: workplan
title: "Inter-hub chart handoff"
domain: financials
@ -9,7 +9,7 @@ owner: codex
topic_slug: railiance
created: "2026-06-14"
updated: "2026-06-14"
state_hub_workstream_id: "21c3fcdc-f014-4858-8028-0ac3038212b7"
state_hub_workstream_id: "1a645a19-17fc-5b13-9a88-f527f148189a"
---
> **Terminology note:** Historical text in this archived workplan may use the legacy term "workstream". The fleet term is **workplan** (`canon/standards/workplan-terminology-fleet_v0.1.md`).
@ -19,10 +19,10 @@ state_hub_workstream_id: "21c3fcdc-f014-4858-8028-0ac3038212b7"
## Add inter-hub chart handoff
```task
id: RAILIANCE-WP-0009-T01
id: RAPPS-WP-0008-T01
status: done
priority: medium
state_hub_task_id: "8d32b24c-652f-41b4-9aa9-062677b09039"
state_hub_task_id: "03fc1692-8592-56d8-9656-0ac326cd905a"
```
Added `charts/inter-hub` and `helm/inter-hub-values.yaml` so IHUB-WP-0018 has

View file

@ -1,5 +1,5 @@
---
id: RAILIANCE-WP-0010
id: RAPPS-WP-0009
type: workplan
title: "Inbox suggestion guardrails"
domain: financials
@ -9,7 +9,7 @@ owner: codex
topic_slug: railiance
created: "2026-06-15"
updated: "2026-06-15"
state_hub_workstream_id: "a4f301bb-3f49-450a-8dbd-5cf6a16b8e0f"
state_hub_workstream_id: "c214db58-c13a-5951-94b2-2f2e246a673e"
---
> **Terminology note:** Historical text in this archived workplan may use the legacy term "workstream". The fleet term is **workplan** (`canon/standards/workplan-terminology-fleet_v0.1.md`).
@ -19,10 +19,10 @@ state_hub_workstream_id: "a4f301bb-3f49-450a-8dbd-5cf6a16b8e0f"
## Apply reuse-surface production guardrails
```task
id: RAILIANCE-WP-0010-T01
id: RAPPS-WP-0009-T01
status: done
priority: high
state_hub_task_id: "658bde0e-708f-42d9-9b8f-b096bb0b07d6"
state_hub_task_id: "b9d86244-e26f-5208-9edd-64b86107be00"
```
Added Railiance01 kubeconfig guardrails to the reuse-surface Makefile targets,
@ -32,10 +32,10 @@ and corrected stale `RAILIANCE-WP-0007` host/TLS notes to `92.205.62.239`.
## Document inter-hub rollout verification
```task
id: RAILIANCE-WP-0010-T02
id: RAPPS-WP-0009-T02
status: done
priority: high
state_hub_task_id: "857a4d75-cc09-4bd1-970d-5db866354ef3"
state_hub_task_id: "f5f52699-ba36-5f93-b122-5ae600a16947"
```
Added Makefile support for `INTER_HUB_IMAGE_TAG=<sha>` deploy overrides, aligned
@ -47,10 +47,10 @@ explicit image tag to avoid silently deploying a stale checked-in value.
## Adopt State Hub task status canon
```task
id: RAILIANCE-WP-0010-T03
id: RAPPS-WP-0009-T03
status: done
priority: medium
state_hub_task_id: "0192f41a-d267-4cb7-ac2d-d03de0341c18"
state_hub_task_id: "d7bfb086-1655-5ed2-add9-ba49b6c81f36"
```
Updated `AGENTS.md` task status examples from the legacy aliases to the

View file

@ -1,5 +1,5 @@
---
id: RAILIANCE-WP-0011
id: RAPPS-WP-0010
type: workplan
title: "Inter-Hub production trigger hardening"
domain: financials
@ -9,7 +9,7 @@ owner: codex
topic_slug: railiance
created: "2026-06-15"
updated: "2026-06-15"
state_hub_workstream_id: "98cf42ae-9b64-4736-97e1-bae325ded1f9"
state_hub_workstream_id: "cf16e32c-c584-5147-b02f-9d4f81bdfb9f"
---
> **Terminology note:** Historical text in this archived workplan may use the legacy term "workstream". The fleet term is **workplan** (`canon/standards/workplan-terminology-fleet_v0.1.md`).
@ -26,10 +26,10 @@ has the same gates as an attended local operator deploy.
## Add OCI Image Preflight
```task
id: RAILIANCE-WP-0011-T01
id: RAPPS-WP-0010-T01
status: done
priority: high
state_hub_task_id: "10e27372-fb8b-40ac-b1f8-1c2c78fea0da"
state_hub_task_id: "445d134f-f3db-5f23-adcc-5a11f4f990e9"
```
Add a reusable image manifest preflight for
@ -39,10 +39,10 @@ fail before Helm when the requested tag is absent or inaccessible.
## Split Baseline Render From Production Dry-Run
```task
id: RAILIANCE-WP-0011-T02
id: RAPPS-WP-0010-T02
status: done
priority: high
state_hub_task_id: "c48320db-9ed7-4792-89a6-f55691919891"
state_hub_task_id: "cd05ad19-70c9-5e97-8627-515b7b43de07"
```
Keep a baseline render target for chart validation with checked-in values, but
@ -52,10 +52,10 @@ make production-facing Inter-Hub dry-runs require an explicit
## Update Inter-Hub Smoke Contract
```task
id: RAILIANCE-WP-0011-T03
id: RAPPS-WP-0010-T03
status: done
priority: high
state_hub_task_id: "b3260f7a-6dcb-4bb4-ae53-bf81c0081e86"
state_hub_task_id: "6f0a6f89-32e3-5489-8801-6e554d8e27d3"
```
Update `inter-hub-smoke` to match the current public-read/authenticated-write
@ -65,10 +65,10 @@ anonymous access, and OpenAPI is served from `/api/v2/openapi.json`.
## Add Manual Production Deploy Workflow
```task
id: RAILIANCE-WP-0011-T04
id: RAPPS-WP-0010-T04
status: done
priority: high
state_hub_task_id: "32ca0b17-fb7c-4cd5-a846-ff92933daf89"
state_hub_task_id: "ef8be640-c9c9-5984-a298-b8d3cfca5bef"
```
Add a `workflow_dispatch` Gitea Actions workflow that requires an immutable
@ -78,10 +78,10 @@ server-side dry-run, deploys, shows status, and runs smoke checks.
## Update Runbook And Closure Evidence
```task
id: RAILIANCE-WP-0011-T05
id: RAPPS-WP-0010-T05
status: done
priority: medium
state_hub_task_id: "0369b47a-09f0-4780-9c91-556049a0d505"
state_hub_task_id: "d38e52f8-195a-5df5-963b-e21a3a5c9e91"
```
Document the local and workflow production paths, failure classification for a

View file

@ -1,5 +1,5 @@
---
id: RAILIANCE-WP-0012
id: RAPPS-WP-0011
type: workplan
title: "Inbox suggestions — Core Hub S5 release and CNPG backup observability"
domain: financials
@ -9,7 +9,7 @@ owner: codex
topic_slug: railiance
created: "2026-07-10"
updated: "2026-07-10"
state_hub_workstream_id: "25cee4ac-d1e4-441a-bc33-cf8c90ee67a6"
state_hub_workstream_id: "5b9f0df2-0af1-57bd-91e1-eec1fd777553"
---
# Inbox suggestions — Core Hub S5 release and CNPG backup observability
@ -25,10 +25,10 @@ Sources:
## Core Hub Helm chart and production values
```task
id: RAILIANCE-WP-0012-T01
id: RAPPS-WP-0011-T01
status: done
priority: high
state_hub_task_id: "0795f034-eacc-41d5-af8f-e5909f72f79f"
state_hub_task_id: "af1caa40-40dc-51ff-aa74-dd45c65de5cf"
```
Promote the temporary `core-hub/k8s/railiance-production/` profile into
@ -38,10 +38,10 @@ Secrets remain operator-owned (`core-hub-prod-env`, `core-hub-staging-env`).
## Makefile release targets and smoke gate
```task
id: RAILIANCE-WP-0012-T02
id: RAPPS-WP-0011-T02
status: done
priority: high
state_hub_task_id: "f975d9d3-e9b4-45ff-8088-03b2a5a855c6"
state_hub_task_id: "52206806-c93a-5866-91d9-69ff22ed1e15"
```
Add `core-hub-dry-run`, `core-hub-server-dry-run`, `core-hub-deploy`,
@ -51,10 +51,10 @@ counterparts. Require explicit `CORE_HUB_IMAGE_TAG=<sha>` for production deploys
## Operator runbook for Core Hub on railiance01
```task
id: RAILIANCE-WP-0012-T03
id: RAPPS-WP-0011-T03
status: done
priority: medium
state_hub_task_id: "41cba5e9-2c19-4b90-9dbe-517a3413eac7"
state_hub_task_id: "19b9322f-466d-5f1d-ab68-cc0ca74ead53"
```
Document the S5 release path in `docs/core-hub-on-railiance01.md`, including
@ -64,10 +64,10 @@ service-repo smokes.
## CNPG backup posture observability
```task
id: RAILIANCE-WP-0012-T04
id: RAPPS-WP-0011-T04
status: done
priority: high
state_hub_task_id: "7c9794ca-478c-4da9-ae77-b3aa62924e98"
state_hub_task_id: "b26183dc-9aca-5a66-a349-eb82c0d8ebd4"
```
Add `make cnpg-backup-status` and `tools/cnpg-backup-status.sh` to report backup
@ -79,10 +79,10 @@ object-store credentials.
## Update app data backup handoff with delivery-lane evidence
```task
id: RAILIANCE-WP-0012-T05
id: RAPPS-WP-0011-T05
status: done
priority: medium
state_hub_task_id: "126f8f26-2536-40d6-8166-060f93ada85b"
state_hub_task_id: "cd515d43-f8e2-5de7-b179-e40cb82d71cc"
```
Refresh `docs/app-data-backup-restore-handoff.md` with the 2026-07-10 custodian

View file

@ -1,5 +1,5 @@
---
id: RAILIANCE-WP-0013
id: RAPPS-WP-0012
type: workplan
title: "CNPG backup wiring and restore drill"
domain: financials
@ -9,7 +9,7 @@ owner: codex
topic_slug: railiance
created: "2026-07-10"
updated: "2026-07-12"
state_hub_workstream_id: "764c2447-0713-45d5-a14d-810a13027b8b"
state_hub_workstream_id: "6f03f8e3-3239-58df-86e6-24cbdeaa04fe"
---
# CNPG backup wiring and restore drill
@ -30,10 +30,10 @@ the longer-term target in `manifests/cnpg-backup-readiness.yaml`.
## Confirm backup lane and credential path
```task
id: RAILIANCE-WP-0013-T01
id: RAPPS-WP-0012-T01
status: done
priority: high
state_hub_task_id: "f2051213-0a9f-418e-82ad-9bd7c79fd0dc"
state_hub_task_id: "ef80c42a-bb57-53c2-a49b-a006de562d9b"
```
Operator completed OIDC login (`railiance-backup-workload-kv-read`). Verified via
@ -43,10 +43,10 @@ Operator completed OIDC login (`railiance-backup-workload-kv-read`). Verified vi
## Wire apps-pg backup coverage
```task
id: RAILIANCE-WP-0013-T02
id: RAPPS-WP-0012-T02
status: done
priority: high
state_hub_task_id: "2d78019e-f040-422d-89d0-0d0e8c6af718"
state_hub_task_id: "2cdf1881-fa83-5e7c-a56a-8e258c8e9b25"
```
Phase 1 logical backup lane operational for `apps-pg` / `vergabe_db` via
@ -57,10 +57,10 @@ interim gate satisfied per `docs/app-data-backup-restore-handoff.md`.
## Wire remaining production DB clusters
```task
id: RAILIANCE-WP-0013-T03
id: RAPPS-WP-0012-T03
status: done
priority: medium
state_hub_task_id: "d3e41204-98a5-4ccb-ae91-526e7a606baa"
state_hub_task_id: "3a9decaa-851b-5e77-88cd-cd46b1ea11dc"
```
2026-07-11: `state-hub-db` (`state_hub`) and `net-kingdom-pg` (`interhub`) uploaded
@ -77,10 +77,10 @@ with retries, kubectl preflight retries). After operator `bao login`,
## Run isolated restore drill with evidence
```task
id: RAILIANCE-WP-0013-T04
id: RAPPS-WP-0012-T04
status: done
priority: high
state_hub_task_id: "15602bb9-d1f6-456e-9af3-bc7c27ebb36f"
state_hub_task_id: "ce64b731-d313-5c9b-9471-d8ca44d125e8"
```
Restore the latest `apps-pg` backup into an isolated namespace or test database.
@ -98,10 +98,10 @@ Phase 1 interim gate).
## Close vergabe production-trust backup gate
```task
id: RAILIANCE-WP-0013-T05
id: RAPPS-WP-0012-T05
status: done
priority: medium
state_hub_task_id: "666c0a9b-4f9b-4ea3-bf0b-14aa76b8ea93"
state_hub_task_id: "f116a888-4e24-5f6e-8170-263c676f25d3"
```
Update `docs/app-data-backup-restore-handoff.md` and `docs/vergabe-teilnahme.md`

View file

@ -1,5 +1,5 @@
---
id: RAILIANCE-WP-0014
id: RAPPS-WP-0013
type: workplan
title: "Core Hub Helm cutover and vergabe-teilnahme image refresh"
domain: financials
@ -9,7 +9,7 @@ owner: codex
topic_slug: railiance
created: "2026-07-10"
updated: "2026-07-11"
state_hub_workstream_id: "780c8d1d-ea75-479e-9733-10b518dde242"
state_hub_workstream_id: "3cded0ad-2e42-50a4-88a4-e432fe7b42ba"
---
# Core Hub Helm cutover and vergabe-teilnahme image refresh
@ -27,10 +27,10 @@ approval. Do not store secrets in workplans.
## Core Hub server dry-run on CoulombCore
```task
id: RAILIANCE-WP-0014-T01
id: RAPPS-WP-0013-T01
status: done
priority: high
state_hub_task_id: "b9dea9f3-f0c0-41c1-b9c4-ec4c44d43d55"
state_hub_task_id: "9c5be78e-4993-5f13-97eb-f98a87cf07fb"
```
CoulombCore production cluster confirmed. `core-hub-server-dry-run` passed after
@ -40,10 +40,10 @@ Live image `gitea.coulomb.social/coulomb/core-hub:a33191a` verified.
## Adopt Helm-managed Core Hub release
```task
id: RAILIANCE-WP-0014-T02
id: RAPPS-WP-0013-T02
status: done
priority: high
state_hub_task_id: "0e591104-0123-4e4a-84ff-5deb435e8441"
state_hub_task_id: "adfc9f66-4370-5e17-9190-89b3e6ef3616"
```
`CORE_HUB_IMAGE_TAG=a33191a make core-hub-deploy` installed Helm release
@ -53,10 +53,10 @@ Service-repo `k8s/railiance-production/` path is now superseded for operations.
## Verify Core Hub post-cutover smoke
```task
id: RAILIANCE-WP-0014-T03
id: RAPPS-WP-0013-T03
status: done
priority: high
state_hub_task_id: "eca3ce8b-68a8-44d0-90c7-2cdefa482200"
state_hub_task_id: "f2605fb0-7c50-5f34-abc3-fa3c9992d879"
```
Post-deploy `make core-hub-status` and `make core-hub-smoke` passed on
@ -65,10 +65,10 @@ Post-deploy `make core-hub-status` and `make core-hub-smoke` passed on
## Refresh vergabe-teilnahme production image
```task
id: RAILIANCE-WP-0014-T04
id: RAPPS-WP-0013-T04
status: done
priority: medium
state_hub_task_id: "d547f68d-52ec-4ff1-952b-ec70c834e0d3"
state_hub_task_id: "10955d78-fd8a-5b85-ae33-4511737233c5"
```
2026-07-11: Migrated deploy target to **Forgejo OCI** (`forgejo.coulomb.social`).
@ -92,14 +92,14 @@ for this workload.
## Post-deploy vergabe smoke and runbook evidence
```task
id: RAILIANCE-WP-0014-T05
id: RAPPS-WP-0013-T05
status: done
priority: medium
state_hub_task_id: "4eaaa345-4252-46c1-bd8a-49d654ec48f4"
state_hub_task_id: "fb182909-6f6a-5351-b2d3-a949dc541db3"
```
After deploy, run `make vergabe-status`, migrations if required, and HTTPS smoke
against `vergabe-teilnahme.whywhynot.de`. Update `docs/vergabe-teilnahme.md`
with the deployed tag, date, and smoke result (non-secret).
Blocked on: `RAILIANCE-WP-0014-T04`.
Blocked on: `RAPPS-WP-0013-T04`.