---
id: RAPPS-WP-0011
type: workplan
title: "Inbox suggestions — Core Hub S5 release and CNPG backup observability"
domain: financials
repo: railiance-apps
status: finished
owner: codex
topic_slug: railiance
created: "2026-07-10"
updated: "2026-07-10"
state_hub_workstream_id: "5b9f0df2-0af1-57bd-91e1-eec1fd777553"
---

# Inbox suggestions — Core Hub S5 release and CNPG backup observability

Sources:

- State Hub inbox `a1957cce` (HIGH): no CNPG backups on railiance01 production DB
  clusters; evidence `the-custodian/docs/evidence/vergabe-teilnahme-delivery-lane-20260710.json`.
- State Hub inbox `3ced85c7`: Core Hub release ownership follow-up from
  `CUST-WP-0052`; cite `the-custodian/docs/core-hub-helixforge-build-alignment.md`
  and `core-hub/docs/deployment/staging-profile.md`.

## Core Hub Helm chart and production values

```task
id: RAPPS-WP-0011-T01
status: done
priority: high
state_hub_task_id: "af1caa40-40dc-51ff-aa74-dd45c65de5cf"
```

Promote the temporary `core-hub/k8s/railiance-production/` profile into
`charts/core-hub/` with non-secret production and staging values under `helm/`.
Secrets remain operator-owned (`core-hub-prod-env`, `core-hub-staging-env`).

## Makefile release targets and smoke gate

```task
id: RAPPS-WP-0011-T02
status: done
priority: high
state_hub_task_id: "52206806-c93a-5866-91d9-69ff22ed1e15"
```

Add `core-hub-dry-run`, `core-hub-server-dry-run`, `core-hub-deploy`,
`core-hub-status`, `core-hub-migrate`, `core-hub-smoke`, and staging
counterparts. Require explicit `CORE_HUB_IMAGE_TAG=<sha>` for production deploys.

## Operator runbook for Core Hub on railiance01

```task
id: RAPPS-WP-0011-T03
status: done
priority: medium
state_hub_task_id: "19b9322f-466d-5f1d-ab68-cc0ca74ead53"
```

Document the S5 release path in `docs/core-hub-on-railiance01.md`, including
migration boundary, ingress cutover notes, rollback, and links to Core Hub
service-repo smokes.

## CNPG backup posture observability

```task
id: RAPPS-WP-0011-T04
status: done
priority: high
state_hub_task_id: "b26183dc-9aca-5a66-a349-eb82c0d8ebd4"
```

Add `make cnpg-backup-status` and `tools/cnpg-backup-status.sh` to report backup
spec and `ScheduledBackup` coverage for `apps-pg`, `forgejo-db`,
`net-kingdom-pg`, and `state-hub-db`. Include operator-ready manifest templates
for barman `ObjectStore` and `ScheduledBackup` wiring once platform supplies
object-store credentials.

## Update app data backup handoff with delivery-lane evidence

```task
id: RAPPS-WP-0011-T05
status: done
priority: medium
state_hub_task_id: "cd515d43-f8e2-5de7-b179-e40cb82d71cc"
```

Refresh `docs/app-data-backup-restore-handoff.md` with the 2026-07-10 custodian
conformance snapshot, the cluster inventory, and the platform coordination path
for backup implementation.