From 1a6784d5ac63785f5ba490c8f53ba8df3b58d37c Mon Sep 17 00:00:00 2001
From: tegwick <bernd.worsch@gmail.com>
Date: Mon, 14 Sep 2026 12:03:28 +0200
Subject: [PATCH] Inventory railiance01 time sync and pick S1 IaC owner.

RCLK-WP-0005-T01: systemd-timesyncd only, UTC, Ubuntu NTP defaults.
Canonical owner is railiance-infra; railiance-hosts is superseded.

Assistant: grok
Assistant-Session: 01a09dc1-b21e-77e1-919e-fcad2f82b267
---
 .../2026-09-14-host-time-inventory.md         | 50 +++++++++++++++++++
 .../RCLK-WP-0005-infrastructure-as-code.md    | 11 +++-
 2 files changed, 59 insertions(+), 2 deletions(-)
 create mode 100644 docs/evidence/2026-09-14-host-time-inventory.md

diff --git a/docs/evidence/2026-09-14-host-time-inventory.md b/docs/evidence/2026-09-14-host-time-inventory.md
new file mode 100644
index 0000000..f8bdc8f
--- /dev/null
+++ b/docs/evidence/2026-09-14-host-time-inventory.md
@@ -0,0 +1,50 @@
+# RCLK-WP-0005-T01 — railiance01 time inventory and IaC ownership
+
+Captured 2026-09-14T09:59:48Z over SSH `railiance01`. Read-only. No clock,
+daemon, or IaC was changed.
+
+## Live host
+
+| Fact | Observed |
+| --- | --- |
+| Node | `239.62.205.92.host.secureserver.net` / 92.205.62.239 |
+| Virtualization | KVM, OpenStack Nova |
+| OS | Ubuntu 24.04.4 LTS |
+| Timezone | `Etc/UTC` |
+| RTC | UTC (`RTC in local TZ: no`) |
+| Synchronized | yes |
+| NTP service | active |
+| Daemon | **systemd-timesyncd only** (chrony/ntp/ntpd inactive) |
+| Config file | `/etc/systemd/timesyncd.conf` — stock comments, `#NTP=` unset |
+| Upstream | compile-time default `ntp.ubuntu.com` (IPv6 `2620:2d:4000:1::3f`) |
+| Stratum | 2 |
+| Offset / delay / jitter | −634 µs / 17.8 ms / 3.4 ms |
+| Poll | 34 min 8 s |
+| timesyncd uptime | since 2026-09-05 03:03:49 UTC |
+| Second daemon | none |
+
+Egress to UDP/123 on Ubuntu NTP is currently working. Listeners were not
+opened by this inspection. No secret was read.
+
+## Canonical IaC owner
+
+| Repo | Role |
+| --- | --- |
+| **railiance-infra** | Canonical S1 substrate. Owns host UTC daemon IaC going forward. |
+| railiance-hosts | **Superseded** (INTENT banner, verified 2026-08-11). Do not start new work or a second timesync tree here. |
+| railiance-clock | Application-clock contract and packaging. Must not install a host NTP daemon or take `CAP_SYS_TIME`. |
+| railiance-bootstrap | Sequences a new estate; does not own ongoing S1 time operation. |
+
+`railiance-plan-host` in infra mentions “Time sync (systemd-timesyncd or
+chrony)” as a checklist line only. No Ansible role, cloud-init NTP stanza, or
+Goss check currently declares the live timesyncd unit. The running daemon is
+**adopted Ubuntu default**, not a reviewed source revision.
+
+## Adoption vs diff
+
+Adopt the existing single daemon (`systemd-timesyncd`) rather than introducing
+chrony. Do not mix daemons. Declaring NTP servers, holdover, and health export
+is **RCLK-WP-0005-T02**, after RCLK-WP-0002 pins UTC/leap/quality. Residual:
+`RAIL-HO-WP-0013`.
+
+RCLK-WP prefix ownership stays `railiance-clock`.
diff --git a/workplans/RCLK-WP-0005-infrastructure-as-code.md b/workplans/RCLK-WP-0005-infrastructure-as-code.md
index 71b5f23..f061e6b 100644
--- a/workplans/RCLK-WP-0005-infrastructure-as-code.md
+++ b/workplans/RCLK-WP-0005-infrastructure-as-code.md
@@ -4,7 +4,7 @@ type: workplan
 title: "Deploy clock infrastructure through owner-managed infrastructure as code"
 domain: infotech
 repo: railiance-clock
-status: ready
+status: active
 owner: codex
 topic_slug: custodian
 created: "2026-09-14"
@@ -26,7 +26,7 @@ Production applies require concrete owner admission, not just this plan's existe
 
 ```task
 id: RCLK-WP-0005-T01
-status: todo
+status: done
 priority: high
 state_hub_task_id: "883743c4-d368-5f94-878b-0e122eab39ee"
 ```
@@ -41,6 +41,13 @@ work records before handing off any execution; no duplicate configuration trees.
 Acceptance: reviewed source-path/owner matrix, live read-only inventory receipt,
 explicit adoption of existing settings or a bounded source diff; no second daemon.
 
+**Done 2026-09-14.** Receipt:
+`docs/evidence/2026-09-14-host-time-inventory.md`. Live: UTC,
+systemd-timesyncd only, synchronized to `ntp.ubuntu.com`, stock config.
+Canonical S1 owner is **railiance-infra**; railiance-hosts is superseded.
+Adopt the existing daemon; do not add chrony. Residual `RAIL-HO-WP-0013`
+declares it in IaC after RCLK-WP-0002.
+
 ## Implement declarative host UTC discipline and verification
 
 ```task