railiance-apps/workplans/RAPPS-WP-0015-coulomb-personal-content-release.md

id	type	title	domain	repo	status	owner	topic_slug	created	updated	related	state_hub_workstream_id
RAPPS-WP-0015	workplan	Coulomb-social persistent personal workspace release	financials	railiance-apps	active	codex	railiance-apps	2026-10-06	2026-10-07	CSOC-WP-0008	79abacf8-361e-51ab-829d-40dec8e142d1

RAPPS-WP-0015 — Personal Coulomb workspace

Owning deployment change for CSOC-WP-0008. Prepare a reviewed upgrade from 7fcd0cf to the tested app with static assets and a 2Gi retained local-path CONTENT_ROOT PVC. Use one replica and Recreate to prevent concurrent old/new filesystem writers. Existing OIDC, PostgreSQL and secret references stay in use.

T01 — Prepare immutable source image

id: RAPPS-WP-0015-T01
status: done
priority: high
state_hub_task_id: "e17488d4-60b8-58b7-a5d8-fbcdc55e1f0c"

Source repo runs make check; collect static assets in the container image; exclude private local data from Docker context. Build/publish SHA-tagged image with revision label and registry digest. Verify the image serves the real clipboard asset through production settings without developer static hosting.

T02 — Validate persistent single-writer chart

id: RAPPS-WP-0015-T02
status: done
priority: high
state_hub_task_id: "4e38dd8e-761b-58c8-8005-8490a49767ab"

Content PVC/mount/CONTENT_ROOT wiring, fsGroup 10001, keep policy and Recreate. Reject multiple replicas, rolling writer strategy and root/mount mismatch. Helm lint/render, server dry-run and diff; confirm resource/disk headroom and that coulomb-social is not currently ArgoCD-managed. Publish the review branch.

T03 — Approved upgrade and recovery point

id: RAPPS-WP-0015-T03
status: done
priority: high
state_hub_task_id: "2ce05439-70dc-53cf-b704-5118687857cb"

Founder approves exact image digest, chart diff, 2Gi PVC and brief Recreate interruption: ADMINISTER @ realm:kubernetes/railiance01, activation=APPROVED. Capture a private pre-upgrade DB recovery point through the documented owner backup path. Apply from railiance01 with Helm --atomic, preserve existing tegwick identity and migration data. Do not run legacy env secret-building scripts or dump live Secret objects. No apex cutover.

T04 — Personal sign-in and content acceptance

id: RAPPS-WP-0015-T04
status: wait
priority: high
state_hub_task_id: "8bc4962a-d0d4-57cd-bf2b-295658b88765"

User signs in interactively as existing personal tegwick account. Confirm local Member matches verified issuer/subject, grant only that member the nominated workspace, and smoke page CRUD/duplicate/clipboard. Prove PVC write ownership, restart durability and paired DB/content restore before real productive transfer. CSOC-WP-0008 continues actual ReichelAg reconciliation and user review.

Prepared evidence — 2026-10-06

Source ac7bac1852c9, make check: 88 passed. Container production WhiteNoise serves /static/spaces/copy-content.js HTTP 200, 2909 bytes, ClipboardItem present. Published immutable registry digest: sha256:bf975939e22b9b0a5d9ac05584ae6265ba201169df6dc48e506ec684b30a9c58. Chart 0.2.0 pins that digest; lint and server dry-run pass; unsafe multiple replicas, RollingUpdate and CONTENT_ROOT mismatch are refused.

The user's actual login fails unknown client_id. Guarded read-only inspection confirms the public coulomb-social client is absent. CSOC-WP-0008-T11 prepares its restoration and shared KeyCape restart; no live change has been made. Existing completed apps-pg daily backup is not a paired application restore. T03/T04 remain waiting for exact live approval and personal acceptance.

Approved deployment receipt — 2026-10-06

Founder approved explicit proposal; decision 8bbce691-a787-4140-9cd4-df06e8635a27, ADMINISTER @ realm:kubernetes/railiance01, activation=APPROVED. Fresh apps-pg Backup csoc-preupgrade-20261006145351 completed 14:54:31Z before app upgrade. Chart changes pushed to main at3f5a909. Helm atomic upgrade from railiance01 succeeded: revision10, chart0.2.0, pinned digest above. App1/1 ready, 2Gi PVC Bound, UID/GID10001 write succeeds, zero pending migrations. Dedicated synthetic content marker survived a fresh pod restart and was removed afterward. Public health/landing/clipboard asset200; login302 correct issuer/client/PKCE.

Missing public OIDC client restored and KeyCape restart succeeded under same go; authorization hands off to Authelia. Interactive tegwick sign-in remains pending user confirmation. T03 done; T04 wait for interactive/product acceptance and paired recovery. No productive import or apex cutover. Application receipt: coulomb-social/docs/release/personal-account-deployed-2026-10-06.md.

User sign-in result — 2026-10-06

The user reaches auth.coulomb.social but tegwick is rejected as wrong username or password. Read-only directory query through the existing provisioner confirms tegwick is present. Live Authelia username attribute is uid; its lookup supports uid or mail. Contained recent-log inspection records a tegwick LDAP invalid- credentials failure, without backend connection error or regulation-ban evidence in that entry. This does not establish why the entered credential is rejected.

The app and client restoration are deployed, but personal sign-in is not accepted. CSOC-WP-0008-T11 remains wait for human credential confirmation/recovery and a successful fresh sign-in. The user was asked whether the same password works on another service. No password was requested/read/exported or reset. Authelia's current notifier is filesystem rather than SMTP: do not promise emailed recovery or expose reset tokens from notification files. Any credential reset must use the owning attended recovery/setup lane under a separate exact approved change.

Personal login 500 correction — 2026-10-06

User confirmed fresh password-reset email receipt, then reported HTTP500 after authentication. In-pod credential-safe read-only probes with empty claims show old USER_ENGINE_BASE_URL redirects302 to users.coulomb.social/api/v1/me; canonical endpoint responds400 to empty claims using the existing service credential. No identity was created. The application's httpx client does not follow redirects and raise_for_status rejects302 before establishing its local session.

Correct USER_ENGINE_BASE_URL in chart defaults and production overrides to https://users.coulomb.social. Preserve immutable image, Secret references, identity issuer/subject/tenant, PVC and access rules. This completes the already approved personal app deployment; founder go/interruption approval is recorded in decision8bbce691-a787-4140-9cd4-df06e8635a27. Use node-side Helm atomic upgrade, server dry-run and exact manifest diff; rollback revision10 if necessary. T04 remains waiting for successful interactive personal workspace acceptance.

Correction deployed as Helm revision11; parsed server dry-run manifest differs only in USER_ENGINE_BASE_URL. Atomic/wait upgrade succeeded, app1/1 and public health/landing200, login302. Root receipt docs/release/personal-login-500-2026-10-06.md in coulomb-social records evidence. Fresh user workspace acceptance remains open.

User confirmed “I reach my workspace” after revision11 correction. Personal sign-in accepted. T04 remains open for content creation/reload, copy/edit/native clipboard and explicit access-denial/product acceptance; login alone does not close that broader product task.

First content-transfer recovery preparation — 2026-10-06

Founder instructed current ReichelAg capture/first transfer (“yes go on”), then prioritized content over UX and a separate UI framework architecture phase. Bounded snapshot operation continued personal-app interruption approval: root scripts/snapshot-content-and-db.py server dry-run passed; app paused, app-scoped coulomb_social_db pg_dump and read-only retained PVC archive captured privately, helper pod removed and app1replica resumed. Operation53.73seconds; app health200. No persistent chart/deployment, data, grants or credential settings changed.

Private pair restored in isolated Docker PostgreSQL:13tables/102rows with empty content, logical rows/sequences match. A separate synthetic populated pair restored13tables/111rows/4files; protocol original/edited copy, assets/render, viewer validCSRF write denial and outsider read denial pass. Ephemeral restore containers/internal networks removed;96repo tests passed. Receipt in product repo docs/release/reichelag-transfer-2026-10-06.md.

Fresh private Bubble protocols require a renewed session; user-attended local browser opened. T04 remains wait for real content/product acceptance. Temporary snapshot custody is not scheduled durable backup acceptance (CSOC-WP-0008-T02).

Real first-cohort import executed

Founder completed attended Bubble web login. First ReichelAG cohort captured without old seed:36articles/36assets (37markdown files with space index), latest dated protocol2026-10-02; all29August IDs plus7new. Fresh20:21:30Z paired point captured privately. Node import helper server dry-run/source hashes/snapshot hashes passed; after pausing writers current DB/content compared equal to paired point. One new space, owner grant only for existing tegwick identity; no replacement. All73source files hash-match and37pages render; app resumed after52.97seconds. New pod verifies visible space/pages/assets/grant; health200. Same revision11 image, credentials and chart configuration retained.

Separate real-content paired rehearsal restored13tables/104rows/73files with all hashes/logical rows/sequences matching, all pages rendered, owner read and ungranted same-tenant read denial.96tests pass. T04 user/clipboard/product acceptance remains open; retained backup custody/rollback remains live CSOC-WP-0008-T02. Receipt: product docs/release/reichelag-imported-2026-10-06.md.

Clipboard fidelity corrective release — 2026-10-07

Founder review found the ReichelAg clipboard differs from Bubble. Root source d521ddc fixes full title, italic abstractor, raw Markdown and legacy footer; private authenticated comparison is exact, and make check passes97tests. Production values pin the new immutable registry digest. Continue the approved personal-app upgrade/interruption scope (decision8bbce691-a787-4140-9cd4-df06e8635a27); only the app image may differ in parsed manifests. Preserve PVC, environment, Secret references, identity and grants. Fresh paired DB/content recovery point captured before upgrade. T04 remains waiting for actual user clipboard/mail review; no protocol contents are changed by this image release.

Corrective release deployed as Helm revision12 with atomic/wait. Server dry-run parsed manifests differ only in the pinned app image. Live loader/template clipboard text equals the original; all74content file hashes unchanged from paired pre-upgrade snapshot; owner access valid. Public health/static200 and served clipboard script equals tested source. T04 remains user product review. Receipt: coulomb-social/docs/release/reichelag-clipboard-2026-10-07.md.

Protocol naming corrective release — 2026-10-07

Founder confirms edit and clipboard behavior, reports default filenames retained after duplicating with a new title and undiscoverable rename controls. Root CSOC-WP-0008-T12 implements server-derived filenames on title-only duplication, explicit override, visible Rename page controls and metadata preservation during rename/edit. Source b13ba9c5815e, full gate98tests passed, pinned immutable digest sha256:dbeaeda1a03622a91683f8db3c1f498e8bf43417cdb077ec740c56f0489baff6. Apply an image-only node Helm atomic/wait upgrade under existing founder app upgrade/interruption go, decision8bbce691-a787-4140-9cd4-df06e8635a27. Fresh paired database/content recovery point captured56.93seconds, app resumed; content and grants must remain unchanged. T04 continues user naming/workflow review.

Naming correction deployed as revision13; node Helm atomic/wait succeeded with app-image-only parsed manifest diff. Live Rename page/title/file controls and new copy-filename logic verified; original clipboard payload still matches. All75content files unchanged from fresh paired snapshot; owner access remains valid. Health/static200. Owning pin commit22c5695; sourceb13ba9c5815e. T04 remains founder naming/workflow review; edit and clipboard copy accepted. Receipt: coulomb-social/docs/release/reichelag-naming-2026-10-07.md.

Private Visual release — 2026-10-07

Founder explicitly approves exact image-only rollout, decision 3f959ed2-4163-4fa5-9f88-f80b2a3d1b89, ADMINISTER @ realm:kubernetes/railiance01, activation=APPROVED. Source017b917e2158, published digest sha256:0e235abc33a1c5613c0e2c9a0f767c871d0fbed6695973ae17cfdcb2dedaaafa. Root make check129passed; private raster covers/body-image routing and bounded Visual copies tested, including actual Chromium writer/viewer/outsider behavior. Packaged UID10001/network-disabled smoke passes. Live-manifest comparison and server dry-run verified image only; current37JPEG signatures all match.

Prepare fresh quiesced paired DB/content backup and verify isolated recovery before node Helm atomic/wait upgrade. Preserve issuer, mailbox, credentials, PVC, metadata/content and grants. Root receipt: coulomb-social/docs/release/private-visuals-2026-10-07.md. T04 and product T05/T09 remain open for actual user Visual/workflow acceptance. No Bubble retirement.