coulomb/railiance-apps
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
railiance-apps/workplans/RAPPS-WP-0017-reuse-private-reader-release.md
tegwick a1ef3fe77a
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Close verified reuse reader rollout and hosted discovery 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684
2026-10-15 05:49:19 +02:00

3.2 KiB
Raw Permalink Blame History

id type title domain repo status owner created updated flavor depends_on state_hub_workstream_id
RAPPS-WP-0017 workplan Release hardened reuse federation with seven-source metadata reader financials railiance-apps finished codex 2026-10-15 2026-10-15 implementation
RPF-WP-0058
REUSE-WP-0025
7c71b152-f9ef-5377-8c95-72a416205cb2

Integrated and completed under founder-approved CUST81 exact execution revision1 (SHA256 704a9c932202fc14456652ea4dfdb3acb8b1db0ab3bbf5fff50e92b2c517c380) and approved writer amendment revision2. Metadata consent is recorded separately. Apps owns only the S5 release; platform owns credential custody and maintenance.

Prepare bounded release contract

id: RAPPS-WP-0017-T01
status: done
priority: high
state_hub_task_id: "62c5384a-5344-5ce2-ab60-f73ca8dfd28f"

Prepare chart allowlist/digest support, exact14 URL override and separate phase-B ESO manifest, own preparation review and meaningful local validation. Evidence: docs/assessments/cust81-private-reader/apps-owner-review-r1.md.

Verify and promote hardened runtime before reader delivery

id: RAPPS-WP-0017-T02
status: done
priority: high
state_hub_task_id: "a23046fc-8912-55a6-8cb9-34ae0104bc42"

Wait for published fully hardened image digest/source/tests plus owner reviews and change authorization. Obtain metadata-only existing auth-source migration inventory, live headroom/PVC evidence, exact server dry-run/diff, baseline health and rollback receipt. Phase A deploy excludes reader ESO mapping.

Deliver reviewed reader and prove complete hosted discovery

id: RAPPS-WP-0017-T03
status: done
priority: high
state_hub_task_id: "6825e54c-2b67-52a7-aa46-d746b62b924b"

After verified phase A and approved/executed platform CCR, apply phase-B ESO mapping and restart hardened runtime through reviewed owner lane. Require sanitized ESO/key-presence proof and reuse native14 fetch/7 entry hashes before registration. Final CUST81 owner verifies70/70 hosted; rollback revokes/removes reader before any vulnerable image restoration.

2026-10-15 verified closeout: Phase A hardened image/runtime/14-URL guard proof and source declaration were verified and published at 91f828b. Approved phase B one-field ESO delivery source was published at 2b9f030; Ready/key presence, restart and exact approved runtime were verified. Actual native verification fetched all seven indexes and seven entries against consented hashes without cache fallback. Final scoped writer registration completed seven POST201 and full-field readback, with session revocation confirmed. Forced hosted composition 2026-10-15T03:31:48Z proves all70 reviewed IDs exactly once, correct source and no warnings (114 total capabilities from99 sources). Evidence published in The Custodian at e5aaa0db51edc4c9f935d03ab58808b86e340823: phase-b-runtime-verification-r1.json, private-native-fetch-verification-r1.json, phase-b-owner-execution-r1.json and hosted-private-registration-verification-r1.json under docs/assessments/netkingdom-2026-10-14/. Owner maintenance remains live in RPF-WP-0058-T05 (2027-01-13); OTP return-context triage is CUST-IN-0018. No additional release work or production change remains in this workplan.