From cac8eabef5a0d0990a7b0de8f5e2c762666ac7f0 Mon Sep 17 00:00:00 2001
From: codex <codex@local>
Date: Fri, 16 Oct 2026 21:05:08 +0200
Subject: [PATCH] Review exact signer native runtime plan and server preflight

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786
---
 ...etkingdom-signer-runtime-storage-review.md | 45 ++++++++++++++++++-
 1 file changed, 44 insertions(+), 1 deletion(-)

diff --git a/workplans/RCLUSTER-WP-0017-netkingdom-signer-runtime-storage-review.md b/workplans/RCLUSTER-WP-0017-netkingdom-signer-runtime-storage-review.md
index 7054d4d..bf474d1 100644
--- a/workplans/RCLUSTER-WP-0017-netkingdom-signer-runtime-storage-review.md
+++ b/workplans/RCLUSTER-WP-0017-netkingdom-signer-runtime-storage-review.md
@@ -108,7 +108,7 @@ occurred and no source review promotes native readiness or spend/risk authority.
 
 ```task
 id: RCLUSTER-WP-0017-T02
-status: todo
+status: progress
 priority: high
 state_hub_task_id: "7f4320c6-8bb5-598e-9b9a-65565091276f"
 ```
@@ -122,6 +122,49 @@ Ready120seconds, recovery decision600seconds, founder abort ownership and
 explicit local-storage/outage/loss disposition. This task prepares review and
 records unresolved gates; it does not grant execute authority.
 
+2026-10-16 T02 advanced on actual sanitized read-only runtime observations and
+seven exact server-side dry-runs at18:53:06–18:53:12UTC, receipt sha256
+7a45f821e57b6ea9a4603db52a603ab230016da2d4145d1b772baa7f4a11840b.
+The node and cluster identities match the intended estate; node Ready is True,
+Memory/Disk/PIDPressure False. All seven R2 resources were admitted and the
+server-defaulted stopped Deployment returned replicas0 and canonical Platform
+projection8ce375f065552c551538f3acc7300c427407057eeff1d0b43755bfdf8a46169c.
+This is real admission proof without persistent change; the actual generation4
+Deployment still has one running old05a replica at deployed Helm revision4.
+Actual stopped state, held window, custody and native signed acceptance are absent.
+
+Owner runtime/storage execution-plan review is approved for exact frozen R2
+manifest5be7a7f438624dcb35b7dbc96e7c9e5a8e2d5d1b1966cb4338aa5aecbe3a8b59,
+P4 manifest9eec861838a8e9138f2c821cff3014998fbe74bb01447642bf50d44e8b3b7cb3,
+chartdc042022f7c30671cf0a7605cf43ef6d96d04242, Platform84c529f239c81e6d3ca337015700b03e3a862f53
+and image09a83b273740133518cc7e7915fb211381e06545d347d2dd1974042525ac981f,
+strictly subject to the mandatory observed execution gates in the review artifact.
+This owner plan review does not fill the five-role completed native scope slot,
+grant founder ADMINISTER authority or review Access Helm/Platform Applications.
+Reviewer: railiance-cluster-owner (agent railiance-cluster, codex), precise role
+cluster-runtime-storage-owner. INTENT basis: Runtime Not Workloads, Healthy by
+Verification, Consistent Baseline and Managed Access.
+
+Observed CPU usage1539m/38%, memory8989Mi/56%; no namespace ResourceQuota,
+LimitRange or PVC. Free node-local filesystem125704314880bytes exceeds proposed
+1Gi by124630573056bytes, without a reservation or hard quota. StorageClass
+local-path remains WaitForFirstConsumer/Delete. Thus stop must tolerate Pending
+PVC; ready requires the actual stopped rollback revision, controlled WFFC binding
+and exact actual PV/claim identity plus separately authorized Retain readback
+before durable acceptance. No guessed PV may be changed. Ready120seconds and
+recovery decision600seconds remain required; founder must disposition outage,
+node-local evidence loss and EUR spend/risk ceilings. Preserve every outbox,
+cursor and receipt under abort; no delete/reset/remint/unsigned fallback.
+Scheduling allocation parsing and immediate-window refresh remain explicit gates;
+source reviews and this dated preflight do not reserve node capacity.
+
+Evidence and complete bounded review:
+`the-custodian/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/`
+`live-preflight.json`, `coordinator-review.json`, `cluster-native-plan-review.json`.
+T02 remains progress until authenticated exclusive-window/exclusion and exact
+native-scope disposition exist. T03 remains todo for actual binding/PV Retain
+and approved runtime result; no successful live result is backfilled here.
+
 ## Verify the approved runtime and storage result
 
 ```task