tegwick
fb7d56d3dc
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a137ca-5c77-7a71-b9ae-23ad9b0b5684
1.8 KiB
| id | type | title | domain | repo | status | owner | created | updated | flavor | depends_on | ||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| RAPPS-WP-0017 | workplan | Release hardened reuse federation with seven-source metadata reader | financials | railiance-apps | proposed | codex | 2026-10-15 | 2026-10-15 | implementation |
|
Provisional id in isolated preparation checkout; root integration must confirm availability. No hub registration, fix-consistency or push until integration. Source owners approved metadata disclosure under CUST81 R1; that is not approval for live credential issuance or workload rollout. Apps owns only S5 release.
Prepare bounded release contract
id: RAPPS-WP-0017-T01
status: done
priority: high
Prepare chart allowlist/digest support, exact14 URL override and separate phase-B ESO manifest, own preparation review and meaningful local validation. Evidence: docs/assessments/cust81-private-reader/apps-owner-review-r1.md.
Verify and promote hardened runtime before reader delivery
id: RAPPS-WP-0017-T02
status: wait
priority: high
Wait for published fully hardened image digest/source/tests plus owner reviews and change authorization. Obtain metadata-only existing auth-source migration inventory, live headroom/PVC evidence, exact server dry-run/diff, baseline health and rollback receipt. Phase A deploy excludes reader ESO mapping.
Deliver reviewed reader and prove complete hosted discovery
id: RAPPS-WP-0017-T03
status: wait
priority: high
After verified phase A and approved/executed platform CCR, apply phase-B ESO mapping and restart hardened runtime through reviewed owner lane. Require sanitized ESO/key-presence proof and reuse native14 fetch/7 entry hashes before registration. Final CUST81 owner verifies70/70 hosted; rollback revokes/removes reader before any vulnerable image restoration.